Compare commits
12 Commits
dbea3f008b
...
0d0b816aaa
Author | SHA1 | Date | |
---|---|---|---|
0d0b816aaa | |||
40b9e8d9c2 | |||
cf9997087a | |||
80c8162de1 | |||
dc8d2b5d4c | |||
7f05e57de2 | |||
8ed0a2400b | |||
![]() |
c31458279d | ||
414543a356 | |||
128569b3c7 | |||
c15e9f313f | |||
b8518d0490 |
@ -1,28 +0,0 @@
|
|||||||
bases:
|
|
||||||
- ../common/templates.yaml
|
|
||||||
|
|
||||||
repositories:
|
|
||||||
- name: gitea
|
|
||||||
url: https://dl.gitea.io/charts/
|
|
||||||
- name: bedag
|
|
||||||
url: https://bedag.github.io/helm-charts/
|
|
||||||
- name: minecraft
|
|
||||||
url: https://itzg.github.io/minecraft-server-charts/
|
|
||||||
|
|
||||||
releases:
|
|
||||||
- name: app-gitea
|
|
||||||
chart: gitea/gitea
|
|
||||||
version: 11.0.1
|
|
||||||
namespace: org-badhouseplants
|
|
||||||
inherit:
|
|
||||||
- template: env-values
|
|
||||||
- template: env-secrets
|
|
||||||
|
|
||||||
- name: minecraft
|
|
||||||
chart: minecraft/minecraft
|
|
||||||
namespace: games
|
|
||||||
version: 4.26.3
|
|
||||||
inherit:
|
|
||||||
- template: common-values-tpl
|
|
||||||
- template: env-values
|
|
||||||
- template: env-secrets
|
|
@ -1,5 +1,5 @@
|
|||||||
bases:
|
bases:
|
||||||
- ../common/templates.yaml
|
- ../common/templates.gotmpl
|
||||||
|
|
||||||
repositories:
|
repositories:
|
||||||
- name: gitea
|
- name: gitea
|
||||||
@ -52,15 +52,6 @@ releases:
|
|||||||
- template: env-values
|
- template: env-values
|
||||||
- template: env-secrets
|
- template: env-secrets
|
||||||
|
|
||||||
- name: app-tandoor-recipes
|
|
||||||
chart: allangers-charts/tandoor-recipes
|
|
||||||
version: 0.2.0
|
|
||||||
namespace: org-allanger
|
|
||||||
inherit:
|
|
||||||
- template: env-values
|
|
||||||
- template: env-secrets
|
|
||||||
- template: ext-database
|
|
||||||
|
|
||||||
- name: app-navidrome
|
- name: app-navidrome
|
||||||
chart: allangers-charts/navidrome
|
chart: allangers-charts/navidrome
|
||||||
namespace: org-badhouseplants
|
namespace: org-badhouseplants
|
||||||
@ -77,10 +68,10 @@ releases:
|
|||||||
- template: env-values
|
- template: env-values
|
||||||
- template: env-secrets
|
- template: env-secrets
|
||||||
|
|
||||||
- name: memos
|
- name: app-memos
|
||||||
chart: allangers-charts/memos
|
chart: allangers-charts/memos
|
||||||
version: 0.4.0
|
version: 0.4.0
|
||||||
namespace: applications
|
namespace: org-allanger
|
||||||
inherit:
|
inherit:
|
||||||
- template: env-values
|
- template: env-values
|
||||||
- template: ext-database
|
- template: ext-database
|
||||||
@ -136,7 +127,7 @@ releases:
|
|||||||
|
|
||||||
- name: renovate-github
|
- name: renovate-github
|
||||||
chart: renovate/renovate
|
chart: renovate/renovate
|
||||||
installed: true
|
installed: false
|
||||||
namespace: pipelines
|
namespace: pipelines
|
||||||
version: 39.264.0
|
version: 39.264.0
|
||||||
inherit:
|
inherit:
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
bases:
|
bases:
|
||||||
- ../common/templates.yaml
|
- ../common/templates.gotmpl
|
||||||
|
|
||||||
releases:
|
releases:
|
||||||
# -- This one must be executed with --take-ownership at least once
|
# -- This one must be executed with --take-ownership at least once
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
bases:
|
bases:
|
||||||
- ../common/templates.yaml
|
- ../common/templates.gotmpl
|
||||||
|
|
||||||
repositories:
|
repositories:
|
||||||
- name: bitnami
|
- name: bitnami
|
||||||
@ -20,18 +20,6 @@ releases:
|
|||||||
- template: env-values
|
- template: env-values
|
||||||
- template: env-secrets
|
- template: env-secrets
|
||||||
|
|
||||||
- name: postgres16
|
|
||||||
labels:
|
|
||||||
bundle: postgres
|
|
||||||
namespace: databases
|
|
||||||
chart: bitnami/postgresql
|
|
||||||
condition: postgres16.enabled
|
|
||||||
version: 15.5.38
|
|
||||||
inherit:
|
|
||||||
- template: common-values-tpl
|
|
||||||
- template: env-values
|
|
||||||
- template: env-secrets
|
|
||||||
|
|
||||||
- name: postgres17
|
- name: postgres17
|
||||||
labels:
|
labels:
|
||||||
bundle: postgres
|
bundle: postgres
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
bases:
|
bases:
|
||||||
- ../common/templates.yaml
|
- ../common/templates.gotmpl
|
||||||
repositories:
|
repositories:
|
||||||
- name: allangers-charts
|
- name: allangers-charts
|
||||||
url: ghcr.io/allanger/allangers-charts
|
url: ghcr.io/allanger/allangers-charts
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
bases:
|
bases:
|
||||||
- ../common/templates.yaml
|
- ../common/templates.gotmpl
|
||||||
|
|
||||||
repositories:
|
repositories:
|
||||||
- name: bedag
|
- name: bedag
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
bases:
|
bases:
|
||||||
- ../common/templates.yaml
|
- ../common/templates.gotmpl
|
||||||
|
|
||||||
repositories:
|
repositories:
|
||||||
- name: woodpecker
|
- name: woodpecker
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
bases:
|
bases:
|
||||||
- ../common/templates.yaml
|
- ../common/templates.gotmpl
|
||||||
|
|
||||||
repositories:
|
repositories:
|
||||||
- name: keel
|
- name: keel
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
bases:
|
bases:
|
||||||
- ../common/templates.yaml
|
- ../common/templates.gotmpl
|
||||||
|
|
||||||
repositories:
|
repositories:
|
||||||
- name: coredns
|
- name: coredns
|
||||||
@ -30,7 +30,7 @@ repositories:
|
|||||||
releases:
|
releases:
|
||||||
- name: coredns
|
- name: coredns
|
||||||
chart: coredns/coredns
|
chart: coredns/coredns
|
||||||
version: 1.41.0
|
version: 1.42.1
|
||||||
namespace: kube-system
|
namespace: kube-system
|
||||||
inherit:
|
inherit:
|
||||||
- template: common-values-tpl
|
- template: common-values-tpl
|
||||||
|
@ -1,24 +0,0 @@
|
|||||||
global:
|
|
||||||
postgresql:
|
|
||||||
auth:
|
|
||||||
postgresPassword: ENC[AES256_GCM,data:+YRWapVv08cZonBsTLtsMHxT7JJp,iv:LJBUmSX1vvmLDBuIdqmi+4UbuLL+yD6PO18kmwlyzpE=,tag:TmG2GQ5/87mIZPLY4uzkBA==,type:str]
|
|
||||||
sops:
|
|
||||||
kms: []
|
|
||||||
gcp_kms: []
|
|
||||||
azure_kv: []
|
|
||||||
hc_vault: []
|
|
||||||
age:
|
|
||||||
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
|
|
||||||
enc: |
|
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJR1hzTUV3TzRFaHNTN3Fj
|
|
||||||
Tkh0TW1VNng0WkZNdXdsOVozMDZ5T25uQmgwCkhSWXViUkNsZnExV0c5UXFsd2R4
|
|
||||||
ZjNYYUFDbnpYYkRQbHdQUDA3cHBxa28KLS0tIFR4MGVWK2o1TFZlQ1FRbkIza3F6
|
|
||||||
UWc5NzVMVkQ4UDNlSzRidWNzSnFWWkkKfnTaKxZoBFCj2l4QfI/BvG0eGOFX/seF
|
|
||||||
DcpofYlg0hQFRSavqRjidLri1rzpOCdKlWh/h0nIRDFA7O55Q8QAnQ==
|
|
||||||
-----END AGE ENCRYPTED FILE-----
|
|
||||||
lastmodified: "2024-10-14T08:08:22Z"
|
|
||||||
mac: ENC[AES256_GCM,data:fi4ewchdGDHm1YyVFD57IxSepsnP8K5kCY5klszKUA+swAkGS5BJb4/tsDQ2kefRgJ+RnbqeYfyaBrzrXQQBdYHsHIg4iR+NGl3ql8TzIze2Kc124BCjBs/eq+xyGRxjXjKr31c9dGGaWriO/jIO0ZBSDn5Uz7JcY6iv5Nu+cGI=,iv:SbZr06PcwTJduuxan4a9koKI7B8ZEZ1dQzwBbGQjO+w=,tag:RpTSWKBhUU4oH2m2g906Dw==,type:str]
|
|
||||||
pgp: []
|
|
||||||
unencrypted_suffix: _unencrypted
|
|
||||||
version: 3.9.1
|
|
@ -1,35 +0,0 @@
|
|||||||
architecture: standalone
|
|
||||||
|
|
||||||
auth:
|
|
||||||
database: postgres
|
|
||||||
|
|
||||||
|
|
||||||
metrics:
|
|
||||||
enabled: false
|
|
||||||
primary:
|
|
||||||
persistence:
|
|
||||||
size: 2Gi
|
|
||||||
resources:
|
|
||||||
limits:
|
|
||||||
ephemeral-storage: 1Gi
|
|
||||||
memory: 512Mi
|
|
||||||
requests:
|
|
||||||
cpu: 512m
|
|
||||||
ephemeral-storage: 50Mi
|
|
||||||
memory: 128Mi
|
|
||||||
podSecurityContext:
|
|
||||||
enabled: true
|
|
||||||
fsGroupChangePolicy: Always
|
|
||||||
sysctls: []
|
|
||||||
supplementalGroups: []
|
|
||||||
containerSecurityContext:
|
|
||||||
enabled: true
|
|
||||||
seLinuxOptions: {}
|
|
||||||
runAsNonRoot: false
|
|
||||||
privileged: false
|
|
||||||
readOnlyRootFilesystem: false
|
|
||||||
allowPrivilegeEscalation: false
|
|
||||||
capabilities:
|
|
||||||
drop: ["ALL"]
|
|
||||||
seccompProfile:
|
|
||||||
type: "RuntimeDefault"
|
|
@ -18,10 +18,6 @@ namespaces:
|
|||||||
defaultRegcred: true
|
defaultRegcred: true
|
||||||
- name: istio-system
|
- name: istio-system
|
||||||
defaultRegcred: true
|
defaultRegcred: true
|
||||||
- name: applications
|
|
||||||
defaultRegcred: true
|
|
||||||
labels:
|
|
||||||
istio-injection: enabled
|
|
||||||
- name: platform
|
- name: platform
|
||||||
defaultRegcred: true
|
defaultRegcred: true
|
||||||
- name: games
|
- name: games
|
||||||
@ -35,5 +31,6 @@ namespaces:
|
|||||||
- name: org-badhouseplants
|
- name: org-badhouseplants
|
||||||
defaultRegcred: true
|
defaultRegcred: true
|
||||||
- name: org-allanger
|
- name: org-allanger
|
||||||
|
defaultRegcred: true
|
||||||
labels:
|
labels:
|
||||||
istio-injection: enabled
|
istio-injection: enabled
|
||||||
|
@ -2,8 +2,8 @@ shortcuts:
|
|||||||
hostname: notes.badhouseplants.net
|
hostname: notes.badhouseplants.net
|
||||||
ext-database:
|
ext-database:
|
||||||
enabled: true
|
enabled: true
|
||||||
name: memos-postgres16
|
name: memos-postgres17
|
||||||
instance: postgres16
|
instance: postgres17
|
||||||
credentials:
|
credentials:
|
||||||
MEMOS_DRIVER: postgres
|
MEMOS_DRIVER: postgres
|
||||||
MEMOS_DSN: "{{ .Protocol }}://{{ .Username }}:{{ .Password }}@{{ .Hostname }}:{{ .Port }}/{{ .Database }}?sslmode=disable"
|
MEMOS_DSN: "{{ .Protocol }}://{{ .Username }}:{{ .Password }}@{{ .Hostname }}:{{ .Port }}/{{ .Database }}?sslmode=disable"
|
||||||
@ -15,7 +15,7 @@ base:
|
|||||||
main: {}
|
main: {}
|
||||||
raw:
|
raw:
|
||||||
- secretRef:
|
- secretRef:
|
||||||
name: memos-postgres16-creds
|
name: memos-postgres17-creds
|
||||||
|
|
||||||
storage:
|
storage:
|
||||||
data:
|
data:
|
@ -1,25 +0,0 @@
|
|||||||
env:
|
|
||||||
secrets:
|
|
||||||
data:
|
|
||||||
SECRET_KEY: ENC[AES256_GCM,data:bLecWaJafPbXT2/dvKt3R2KNfuxxgQ6yLxviYbOf,iv:liuexfgYScH+eg/qSO23SQxE7hKpudgkOH3JRDkaa+A=,tag:DEcAbY6rg7mQnhsnukWtFA==,type:str]
|
|
||||||
SOCIALACCOUNT_PROVIDERS: ENC[AES256_GCM,data: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,iv:RZMNm66PhTWvjJG5jtpJW22TFInHw8LT04qui3fMLgA=,tag:ETMqmFO/8Kve/W55WP21dA==,type:str]
|
|
||||||
sops:
|
|
||||||
kms: []
|
|
||||||
gcp_kms: []
|
|
||||||
azure_kv: []
|
|
||||||
hc_vault: []
|
|
||||||
age:
|
|
||||||
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
|
|
||||||
enc: |
|
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKcTM5RTNIakwwZHNrQXE2
|
|
||||||
U2FsK1gwMDhUTDd1MVorbENtQXdnZjYrM1c4CmNQaG5TcU9wK25qQUg5a29UUXBK
|
|
||||||
WlZHK0M0dHEvZWVyZmJzR0RLU1pGWmMKLS0tIGk4TFArQnJyTWJJa3FJRlJhY0do
|
|
||||||
ZE81bENWM3ZUdlR0N2RKMnJkUnJxSG8Ky2ngwj6ZnToGhnAJChU8NXUG+XPPZc2F
|
|
||||||
fOD35BFO5bUNe+V8MkDLae+GQ1hr55r4WnvFpSWywRIjCFYmUJHTgQ==
|
|
||||||
-----END AGE ENCRYPTED FILE-----
|
|
||||||
lastmodified: "2025-02-22T12:32:43Z"
|
|
||||||
mac: ENC[AES256_GCM,data:khcLV/lPaY6J5QQmX8466jx9bsXn+NwA3TLIUYs9ipKa539OjIWstwyydVxILSBCwEWGEW86c8EzLBwptBBgg6gehfRJAax5TAn0lBd1lAAiAxZhdNpc2tfoaMaUWfWdpwYjdrtnvAlAkN3/16nvx+TIq7WdU/cWsic96PqhU0A=,iv:I81QvtZ7S+mSAzoXhU0YBMN0L4K+SRHW3UtcSLxwK5s=,tag:gAeAIjyJ13A8gfE7ppBeRg==,type:str]
|
|
||||||
pgp: []
|
|
||||||
unencrypted_suffix: _unencrypted
|
|
||||||
version: 3.9.4
|
|
@ -1,57 +0,0 @@
|
|||||||
shortcuts:
|
|
||||||
hostname: tandoor.badhouseplants.net
|
|
||||||
ext-database:
|
|
||||||
enabled: true
|
|
||||||
name: tandoor-postgres17
|
|
||||||
instance: postgres17
|
|
||||||
credentials:
|
|
||||||
POSTGRES_HOST: "{{ .Hostname }}"
|
|
||||||
POSTGRES_PORT: "{{ .Port }}"
|
|
||||||
workload:
|
|
||||||
kind: Deployment
|
|
||||||
strategy:
|
|
||||||
type: RollingUpdate
|
|
||||||
containers:
|
|
||||||
tandoor:
|
|
||||||
securityContext:
|
|
||||||
runAsUser: 1001
|
|
||||||
runAsGroup: 1001
|
|
||||||
fsGroup: 1001
|
|
||||||
envFrom:
|
|
||||||
- main
|
|
||||||
- secrets
|
|
||||||
- secretRef:
|
|
||||||
name: tandoor-postgres17-creds
|
|
||||||
extraVolumes:
|
|
||||||
common:
|
|
||||||
path: /opt/recipes
|
|
||||||
livenessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /
|
|
||||||
port: 8080
|
|
||||||
initialDelaySeconds: 10
|
|
||||||
failureThreshold: 30
|
|
||||||
periodSeconds: 10
|
|
||||||
ingress:
|
|
||||||
main:
|
|
||||||
class: traefik
|
|
||||||
annotations:
|
|
||||||
kubernetes.io/ingress.class: traefik
|
|
||||||
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
|
||||||
kubernetes.io/tls-acme: "true"
|
|
||||||
kubernetes.io/ingress.allow-http: "false"
|
|
||||||
kubernetes.io/ingress.global-static-ip-name: ""
|
|
||||||
cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
|
|
||||||
extraVolumes:
|
|
||||||
common:
|
|
||||||
emptyDir: {}
|
|
||||||
env:
|
|
||||||
main:
|
|
||||||
enabled: true
|
|
||||||
sensitive: false
|
|
||||||
data:
|
|
||||||
DB_ENGINE: django.db.backends.postgresql
|
|
||||||
SOCIAL_PROVIDERS: allauth.socialaccount.providers.openid_connect
|
|
||||||
REMOTE_USER_AUTH: 1
|
|
||||||
SOCIAL_DEFAULT_ACCESS: 1
|
|
||||||
SOCIAL_DEFAULT_GROUP: guest
|
|
@ -1,43 +0,0 @@
|
|||||||
shortcuts:
|
|
||||||
hostname: notes-onpier.badhouseplants.net
|
|
||||||
|
|
||||||
ext-database:
|
|
||||||
enabled: true
|
|
||||||
name: memos-postgres16
|
|
||||||
instance: postgres16
|
|
||||||
credentials:
|
|
||||||
MEMOS_DRIVER: postgres
|
|
||||||
MEMOS_DSN: "{{ .Protocol }}://{{ .Username }}:{{ .Password }}@{{ .Hostname }}:{{ .Port }}/{{ .Database }}?sslmode=disable"
|
|
||||||
|
|
||||||
workload:
|
|
||||||
containers:
|
|
||||||
memos:
|
|
||||||
envFrom:
|
|
||||||
- main
|
|
||||||
- secretRef:
|
|
||||||
name: memos-postgres16-creds
|
|
||||||
ingress:
|
|
||||||
main:
|
|
||||||
annotations:
|
|
||||||
kubernetes.io/ingress.class: traefik
|
|
||||||
kubernetes.io/tls-acme: "true"
|
|
||||||
kubernetes.io/ingress.allow-http: "false"
|
|
||||||
kubernetes.io/ingress.global-static-ip-name: ""
|
|
||||||
cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
|
|
||||||
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
|
||||||
traefik.ingress.kubernetes.io/router.middlewares: org\-onpier-memosauth@kubernetescrd
|
|
||||||
|
|
||||||
ext-secret:
|
|
||||||
enabled: true
|
|
||||||
name: memos-basic-auth
|
|
||||||
data:
|
|
||||||
users: |
|
|
||||||
allanger:$apr1$kNwkQ0S.$9q29sib/xWEp3NDp.tquw/
|
|
||||||
|
|
||||||
middleware:
|
|
||||||
enabled: true
|
|
||||||
middlewares:
|
|
||||||
- name: memosauth
|
|
||||||
spec:
|
|
||||||
basicAuth:
|
|
||||||
secret: memos-basic-auth
|
|
@ -1,19 +1,19 @@
|
|||||||
authentik:
|
authentik:
|
||||||
email:
|
email:
|
||||||
password: ENC[AES256_GCM,data:aP/oiXCzwLsEd0qAp8aAPufQ1Ko=,iv:T5YdegcjWEK4MDdzLhFmsvV56OPl0jkhmtepohujP/s=,tag:EXerXi4m06Ryy7WVD3ZURg==,type:str]
|
password: ENC[AES256_GCM,data:Ai0jLsHymPDXBkTC8+IG0tLeFw4=,iv:Ev0LCJQtHxwiAPwPKih0Yay9TpenoKkNizpNAN85un4=,tag:kWdMGjzyiZAMq+cyahX9hg==,type:str]
|
||||||
secret_key: ENC[AES256_GCM,data:Oh/csFD5+FDfyXUYRVCEPrBE6UXPFZkR5VEep1bkAjs4hltuOaO22Q==,iv:IiBtFjBbsjepC2VmEk6wEe7r14lv48DBX12SpXaUCmc=,tag:ITR6OJiCYMxUoTGnSCPTQQ==,type:str]
|
secret_key: ENC[AES256_GCM,data:jYOrFumK2SatpvhrAtdkznNjOZfELIXVvavu0Kx+njBoOu28lFk+3A==,iv:4RL8UnBvPk5gZCuEyJZ39AFEMukOTu6QsjciNmofYOs=,tag:d87HNop+AlOB31XuKD7iDA==,type:str]
|
||||||
sops:
|
sops:
|
||||||
age:
|
age:
|
||||||
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
|
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsSUNmTVZ0ZC9LaytCUTZy
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1WkpPcy9BM0hiVDF1Q0x2
|
||||||
TTRNR0M0WDVmN0RPVllWTmR0dnMrdzBCOFJnCkMrNGVCc1FnYkZTaE1vUFRCVWI0
|
NTBFRnNjTk1HWktUZ0k2SjdjRE9EU1YyT1FrCk9zZDhzM0FyU2tKMmxjVXArUDdk
|
||||||
WERUTWMwanFZUDFnVExZL2NyVTNWTk0KLS0tIEN2K0wzQm8vUkw4azZPaE9LZGsx
|
eEpFaVdWWm44dG9mazBwNTRIQ0JucGcKLS0tIGhSNmRBNzVHTm5mZlAyTGdZTFpU
|
||||||
UW05cHVjemNBeDFGbHhoVXR4ckUxUXMKgfTTlw0Q3J+pFSW+eEyfK1tkrbEd4ZzR
|
a0N0TGViZnlXOEVFZkxwTWJDL2p1eWcKrhSyt4j7pjIE+GZyttCO9MC145J2V8I4
|
||||||
x0ONWS1GTx+um+r76NYNRI+W93FD5d4/jiiZGPB6rupMSje9DV41MQ==
|
fya4hMVEr5w/i3mibQIsHWszofnMO/pex8oYmsq0zBeBchQbt5xdCA==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
lastmodified: "2025-04-12T15:22:14Z"
|
lastmodified: "2025-05-05T13:18:25Z"
|
||||||
mac: ENC[AES256_GCM,data:xwt0NRuygT/qAlhnfKHLqgVFfEMKMIgiGvjCl7baIplwl94Kxqhh6JMgCogjjtoI2iGrAY3QPamfTDQIOEItB/yqQ7S9NApWIfsXtA8t85YuWwnP3OTCDmpy6dcP1FOV4lGmSvsqr65+OYKALrPTRkA7pV9kGo3roO6BPJbpb+Y=,iv:5eY4EOBM0ZFSjiyKmOJ07YNStOg0+Db3cM27g8+Y//s=,tag:rT1aCz5M0k9AbxKSWhmJ1A==,type:str]
|
mac: ENC[AES256_GCM,data:JHOeGn984F1Yvfn1eUqqVxnQKF7SL6yXXVvM32FvHzLKIFRlOMwAh0Qa2DTB55nRkZA4AazGM0AhyvNJ4ggX8eftpOrTvMOPReaQ//X7VRXcsJnimVuxNanj3E2wJ6J3nuVjTN4pM0FxH8zlr/DqWzIZSBXHNxOWVaJsbhqUXcs=,iv:XTKudFFEgtKfbvG31McmIyorsMwFFrPkb0YNWxTTvrg=,tag:jd3L4TSuDJxRLd33FyBc7Q==,type:str]
|
||||||
unencrypted_suffix: _unencrypted
|
unencrypted_suffix: _unencrypted
|
||||||
version: 3.10.1
|
version: 3.10.2
|
||||||
|
@ -5,8 +5,8 @@
|
|||||||
# ------------------------------------------
|
# ------------------------------------------
|
||||||
ext-database:
|
ext-database:
|
||||||
enabled: true
|
enabled: true
|
||||||
name: authentik-postgres16
|
name: authentik-postgres17
|
||||||
instance: postgres16
|
instance: postgres17
|
||||||
credentials:
|
credentials:
|
||||||
host: "{{ .Hostname }}"
|
host: "{{ .Hostname }}"
|
||||||
username: "{{ .Username }}"
|
username: "{{ .Username }}"
|
||||||
@ -49,7 +49,7 @@ server:
|
|||||||
volumes:
|
volumes:
|
||||||
- name: postgres-creds
|
- name: postgres-creds
|
||||||
secret:
|
secret:
|
||||||
secretName: authentik-postgres16-creds
|
secretName: authentik-postgres17-creds
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: postgres-creds
|
- name: postgres-creds
|
||||||
mountPath: /postgres-creds
|
mountPath: /postgres-creds
|
||||||
@ -99,7 +99,7 @@ worker:
|
|||||||
volumes:
|
volumes:
|
||||||
- name: postgres-creds
|
- name: postgres-creds
|
||||||
secret:
|
secret:
|
||||||
secretName: authentik-postgres16-creds
|
secretName: authentik-postgres17-creds
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: postgres-creds
|
- name: postgres-creds
|
||||||
mountPath: /postgres-creds
|
mountPath: /postgres-creds
|
||||||
|
@ -1,29 +1,20 @@
|
|||||||
dbinstances:
|
dbinstances:
|
||||||
postgres16:
|
|
||||||
secrets:
|
|
||||||
adminUser: ENC[AES256_GCM,data:uuu/xvwJkHk=,iv:Pk+i8bf7AeeG9wKVh1RDJy7Dt3r5b1UKy4SJijlZfq0=,tag:QO3gwYXAG0sBBuHcKfTNQg==,type:str]
|
|
||||||
adminPassword: ENC[AES256_GCM,data:tjWATjuJT+C97D4TLQgk55BZOwVv,iv:1MWYtksmrEBQtOdGvtc6MZyLP4yBKA88eIpQ4mZCULM=,tag:3hOlT5n2Wd81ebxeEgW5tw==,type:str]
|
|
||||||
postgres17:
|
postgres17:
|
||||||
secrets:
|
secrets:
|
||||||
adminUser: ENC[AES256_GCM,data:4w2EItIM++Q=,iv:cQLryeBskm2Y9OlbMFgQEWEBi7z/VxucLWbwZXsRtto=,tag:Ir2Q7KZv/sSDdA1MX/Niqw==,type:str]
|
adminUser: ENC[AES256_GCM,data:fzNOuvTLnLk=,iv:3rZSUx1r6sPhtA6Uj5db1JUvhSNE4nzvuaRSAc3kbmo=,tag:jITuAPaPMeviG7NxptFGXw==,type:str]
|
||||||
adminPassword: ENC[AES256_GCM,data:wHUL2p8CXYwoEFu3ffCCsQO9xn/GqOZ6JPrcHKzy,iv:khoogPPFHSd+4xyp+jf1w0RfOUgrKzAmFjLnisQ8HXU=,tag:GRnkCQ0uOlUt2AiEAceFRQ==,type:str]
|
adminPassword: ENC[AES256_GCM,data:L+x7P+lbezrOYCA0+BbS3g7jJjkkuPgGJ4MuP94D,iv:xDpopUYJmm3JNYNSKQwbAR0qJ3eXZW7nGsXkVbxMna8=,tag:INlZlvAdb5nhI7qC6++DKA==,type:str]
|
||||||
sops:
|
sops:
|
||||||
kms: []
|
|
||||||
gcp_kms: []
|
|
||||||
azure_kv: []
|
|
||||||
hc_vault: []
|
|
||||||
age:
|
age:
|
||||||
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
|
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuL1lwdVNHMm9nZHRld2lO
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1NlY2WVp5UlhRZmxGVm9i
|
||||||
Rm4xVnVHWG9hNDc1cUVyakxzUU1PcFJhalM4CkNicEdUV2lEYWMwaWNqeGcrQ2p1
|
UHM1cVZzR2QrakRiaFNxQUQ3R09GRTNrRHhrClBwUG14WTZQaklIZWZ4RmRkdW8y
|
||||||
Qmw1b1FzRllqYW85bjF0cmRGcW1MbjQKLS0tIENUcG1oOXFNV3REaFU0aUEyd2k4
|
ZEN1R0tTUDdwT3ZrU0VBUGp5UUQwNUEKLS0tIFJNQnFQdFVySVkrdUIyNC9Vc1pK
|
||||||
RDgzRmlKT1ArblpOV1plcFpyMnJXZTQKgm8Eaw591+EHZWofXAADTXRHPOdOvdOM
|
WVVMaDE3dVBvRmJCUUlsMVc1SC9GWGMKEnyXXE58x4Ni0Ze6dXray0Yk2OPJKDqm
|
||||||
jYne1szB/V9UJz+pmLa10tNgruga+P5yP/j+DGcYrTj0pVh5IJLjTA==
|
qZmHnVOnSZxsV4roFWqI+BSgD1mZub07tLhNWKubUJnAMQfIWtJ3vQ==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
lastmodified: "2024-10-30T19:59:46Z"
|
lastmodified: "2025-05-05T13:27:36Z"
|
||||||
mac: ENC[AES256_GCM,data:3KrwiArDx/bPAHbFGgb9BdDVHC+uC1IHp4LZXlYRZzWSKtX1t+ODQVzUW97kigGFG1sx6WXddl/w3XeNOoT9JbS5iPXJQe6KAPleNV50S/oab+U53WeloO8uL68Wrk9v/NwMhCKwE9cCqBBhqk7wCb6N9ivt45mLrUf06L8fok0=,iv:bOWhyIm8FhKtZAZH/78bukkeDp5P4XShSD20mgr4Neo=,tag:RZMx9bi+ZEcLwTzk+Gm8RQ==,type:str]
|
mac: ENC[AES256_GCM,data:bJ5Jt0BUYGAEZTvY7CTiktqeuqjYmAMhEhO67Avw+HaajMcwORavi746X6eCas7+JsafkwllOKs/j3VjJ3tXsk0wti1cCliBHyz31Gxa+pGGRVDcJ3RwntWkkSCQzjft/b+2XCqB7Qa5et693rDs8c2EX9v9OCpztSeIA1ErPsI=,iv:iKo8/eku5K4t/4OKPy/Mz8XPHMuzaSFttdxZaV0X/uU=,tag:yuEhdYXC+yVMv9wKLcd36Q==,type:str]
|
||||||
pgp: []
|
|
||||||
unencrypted_suffix: _unencrypted
|
unencrypted_suffix: _unencrypted
|
||||||
version: 3.9.1
|
version: 3.10.2
|
||||||
|
@ -1,14 +1,4 @@
|
|||||||
dbinstances:
|
dbinstances:
|
||||||
postgres16:
|
|
||||||
monitoring:
|
|
||||||
enabled: false
|
|
||||||
adminSecretRef:
|
|
||||||
Name: postgres16-secret
|
|
||||||
Namespace: databases
|
|
||||||
engine: postgres
|
|
||||||
generic:
|
|
||||||
host: postgres16-postgresql.databases.svc.cluster.local
|
|
||||||
port: 5432
|
|
||||||
postgres17:
|
postgres17:
|
||||||
monitoring:
|
monitoring:
|
||||||
enabled: false
|
enabled: false
|
||||||
|
Loading…
x
Reference in New Issue
Block a user