Encrypt file renovate/renovate-secrets.yaml by Age.

grafana-dashboards/grafana-dashboards-secrets.yaml

@@ -0,0 +1,29 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: grafana-dashboards-secrets
+    namespace: flux-system
+type: Opaque
+stringData:
+    dashboard_8919_admin_passwd: ENC[AES256_GCM,data:g8a/WNuROZhzohBrEVPDJ1qh4Ag=,iv:PN+eOxitVrz5S6XSHPftZwfTZVEKKsD4jMmWthBXyTA=,tag:uT17GRTxdZ0e0aa2c8gmEQ==,type:str]
+    dashboard_8919_consul_token: ENC[AES256_GCM,data:zmxG7ichpmuE2Z0UreWKZ4PwcLInuAam8ZTwsO9ekFz/zPgr,iv:EsTpKRNfVpH+/OukWF5MaUEw9LuvxQvbfzoDoz/ZAjo=,tag:4i/JBHAUx1wdzfbjVYtfgA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1d47q8mlty404pxx378q49hr93aqexca4mkeqtdm00w4gjd09xd0qhxcdcz
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpRjFSdDdTcUk1ZVdCWDJi
+            QzNFTDBGNU1sdDJlMlZ3b2xtY2k2SHRFczBrClZsOEZmeDBrdTVrUnlISFhYbGtP
+            alBaRndJTTEwcmtaVmd5TUVkNFdJWFkKLS0tIEV3UGFNdng1MWd4clBNZWVxeVZo
+            UzhQVTN4YnRKZTlEM3ZMSG96TlJRcncKGKPy7tF9GiABz+x8PtvrpoN5Wi3K2qB8
+            5bKAROFKhcq7s2Iw9K5eZeYt2xETT8zrxKikAS4x6VyBKFKXPDrRbg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-06-26T17:35:48Z"
+    mac: ENC[AES256_GCM,data:d+Kmjc944FkXSRtJGAIM6/LIl4BlHtSMxUued62KkCXIiCoUGBSbiJsPxtg9QCT5KQrXfxsGQ2h5kTdg3cux/we5aAeBePweLQZCXaL/eYllzN0Zqp+6+3yyeNswG22JKNV4VirmopLry4jpvrVsnu3NjIbbg1/sZrWrTESxhog=,iv:/ElJCz8enRcqjv0/4sfr6ntt7x/fp54zc4z7/Ac14M0=,tag:mv70uMtX3nkk9BDtcylkKA==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1

logstash/logstash-secrets.yaml

@@ -0,0 +1,29 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: logstash-secrets
+    namespace: flux-system
+type: Opaque
+stringData:
+    omada_s3_access_key_id: ENC[AES256_GCM,data:wGNUTBhFacfk8Y1re1iRaQIOKLk=,iv:FGhH58Cz5FgnoDiO6LvKfpSD6M8v6xK036uAOMa36yo=,tag:eBCQSH5qDcjrofM1l/S1Ag==,type:str]
+    omada_s3_secret_access_key: ENC[AES256_GCM,data:hQen/w8fh6zDMw/v0Gh3JhwOdf5HIPh97XcPW2/uFZzN7LnS66PkYg==,iv:TMNYNfBPXyy/VIRtFIfdt2kWJ43/7lx2AOz1U75n7KU=,tag:vYxdNBQYRh9KIusQIyUY4g==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1d47q8mlty404pxx378q49hr93aqexca4mkeqtdm00w4gjd09xd0qhxcdcz
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFVW40UzdIcS9EczZNOGdZ
+            UXJtNTJYYnlLYmt1Z0FtME4zVSt6bVVYUTBZCkp5ZFVYK2lQTWY0bVQ0L2dSdUZB
+            ZGp3THIwTWtCeUwyTmZCajBJUFFiUk0KLS0tIGs3WXdtcjR3cS9rOEttWDJYeTB6
+            MitOTFpRNnl5MHFzU3QrWmJHd1VKd00KOq8ZWeMH9E3S5sFPZNdMy+1yaa+ww1My
+            rKUc0cuEJX8JswWQDmsbTqGvqrLcGrMG8ITDIsexkzQhjWqW7NirbA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-10T08:32:14Z"
+    mac: ENC[AES256_GCM,data:ivre811Bl/YS3IOZuFaj0HC7loRuzQmt9DhO8WSF+iAa1Wum6+0hDhEtjZVLntONIgxX2hnpFIDQRKBMYMbKOy2tgJoIbpKiqt40baPcFeFMLeOYuAqaU8FITsLSlNopoq6VAPKOtkTjyZF/FY0F3j4h0ckar2ST5XGI3GMhoXI=,iv:cPPkqKd1KVVKIcccPpd0jvnSN29CgZ7abiBtY2/ReKI=,tag:CIKQlMyX6YeHc9vbjJfw3Q==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1

minio/minio-secrets.yaml

@@ -0,0 +1,29 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: minio-secrets
+    namespace: flux-system
+type: Opaque
+stringData:
+    root_user: ENC[AES256_GCM,data:WrqOMjE=,iv:2BvLUwQxp7G2kinhsVACDJGMd6Z+jb1vfUBM/JM5imE=,tag:7wtOg9UejVqbEE6B3NqJag==,type:str]
+    root_password: ENC[AES256_GCM,data:cujiBHbpq1YfXKAgDzkE1jLzkGA=,iv:zKQhjl0IMEZns8GVceDgFQMBjjKKaxvjzb4VG+RtYCQ=,tag:lFr7xvp+AhOb4MwAvWHzUw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1d47q8mlty404pxx378q49hr93aqexca4mkeqtdm00w4gjd09xd0qhxcdcz
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwcTIxbjZOZHV2U05IaGQz
+            U1pkNEpPQWY2RUJFcXhSYzZDaW1xcXllZVR3Ck5WbU10VFVxNG16RlNka3c2WGhN
+            RFhXMkVLbDhXVWx6QmR1aXZaV2p0ZDgKLS0tIGNtQ2IwNkNiZUpPRnZQRnhSUVNo
+            TWtUSnh3VjNVajdNMHNDMTMyT2NxSGcKzVjKGjcywiW2CymmNGHQHgytqMfF7lC8
+            Q2wUFwfJyxC2klLdXO65ATv/6S+z7ZT4aa4swdUysXMMLHq77u4gcw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-06-25T23:24:54Z"
+    mac: ENC[AES256_GCM,data:FJ2UoVyi1Jr/fYcUyh4O81k01KfYtbA92toGxqL+qFktRshVBynt3qO7MbRU+BYXnHKXxbadqXzKwrXxV+MY0EeBQJpo3vyTVF6h6S9cRwTTDRNmJy/MwibHR2m8gXBnjTq5QgEzwkSaT/Nre36ogeKcSb+ZeGBMhRllcuKP1kU=,iv:Zj4fl/RiomWCEC9xL1SWSal+xViYJXbz0D4WxzQjyJA=,tag:78gDtmSMnM8iuE5Ba1AGFg==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1

mongodb/mongodb-secrets.yaml

@@ -0,0 +1,30 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: mongodb-secrets
+    namespace: flux-system
+type: Opaque
+stringData:
+    root_password: ENC[AES256_GCM,data:f/4ATLurTlY5mk9+C1BfG+3JyELUCFKg,iv:xG8jIE8b07oqNmIygbHBg7E6mBf/L2E5X9ItYxE2iSs=,tag:PzYLkJWqR/hjAyR4k/HBUw==,type:str]
+    edward_password: ENC[AES256_GCM,data:AZghDe2OtO1PBNrGVd8qojMpa6RtSUc7,iv:Qs2BlAw8Co2VCtcvcPus73ehzMBlIQIY9gaxFgWUqJo=,tag:/4OrmlQEda86gR16ladRLg==,type:str]
+    anysync_password: ENC[AES256_GCM,data:rjcZchAKTIkb16zg/kHx+WJ40SII31zr,iv:u8Bb3wuwMGhVkB2VoLAzUJB+3XrdCtjBuaHXi779cec=,tag:sLJcpI2kOnQwaZviRTd5PA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1d47q8mlty404pxx378q49hr93aqexca4mkeqtdm00w4gjd09xd0qhxcdcz
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPZDhnZEhOQVlCdXRiT2I0
+            QWhkdDNMdTBXc0xhNXNSUXhTN0NvZE5CT1hJCmRHeEtKR0JPczFHSWRwR2Z5WVRI
+            ckZ1ZnBMTTFaeUxmZmhidGE0c3pBeVEKLS0tIGpoSDJESjU3Q0xaeTFodS9SMGxr
+            R2JrZnVmenQvbDBwcVJLUjhDR01ULzgKbJ2zpXTrKuHWxd5GGbPRiWX5HMb9R14c
+            R4B3H13Hm/XJQ2eFYmLS2mxyj0a6lMjDbICj72ogf7dAu/D1mpx9Ug==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-07T16:21:53Z"
+    mac: ENC[AES256_GCM,data:AsaimU61UKaRvgDL7oLf57OVfwhtCwMGSQwyCN5jzQ0QYNVYXl1PnUlIh/ejgh+jUj9gxPurlhqMa1p1YfN0SxJPbVsTT7a3wH4APjhhS9Sye3xD1QB6LtNGr1LUB9Xl4Fy8jps0GidZ/b31cAx+EDUrLMjdPo5vp2BwY8OwKwU=,iv:vnRvCXnZtVGXQYQR0GDXtvyEu/ttNz3Xr87RRVXYISo=,tag:4/X6MUfbe0kIa1m49yJ87A==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1

renovate/renovate-secrets.yaml

@@ -0,0 +1,32 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: renovate-secrets
+    namespace: flux-system
+type: Opaque
+stringData:
+    renovate_license_key: ENC[AES256_GCM,data:CVvBolXg4UD68FsdHUVozKH20RLpM6fzeSLdum/fSf4dXLPSlsPz/bkFVMSHsePWAwzPyO4pNteVLpnHLJpGFDtxsIAoQRKPEje8QMD0SK0cW4ug3+JTJMOVzCUnF/GAvQqW7tV8vNsDvYqj46eWLYUpCzBYKhfcgNm0Izced7im15Qm2BJpJjLksW9JA3wk4BII905D/bq30ifoZX+d6OcrIHzLX7eT6haaPkyxFsUvT5HgL/khRiVWrgKZBuu0lCaSVNt+O5Plu+ApjJEIkwBemQdA,iv:S1010l345WOTsyp45JqIXd41MbeyUaGh5XfbGVIRAEM=,tag:IgKuswp2ZKl6OM2lwW82GQ==,type:str]
+    github_app_id: ENC[AES256_GCM,data:QXk8YSWy,iv:jmRC40ZNp82ETw3hbp7DCmXr1ypz2rY78oVKMotEL2k=,tag:bYPtQIK6A0mu2gbs7ktqSQ==,type:str]
+    github_app_webhook_secret: ENC[AES256_GCM,data:ff1BhUzjTld0AAjLIlrFP60mR9Dd7CXQ,iv:v2/guwIIRxQ6kQEI76HvpRezPnNRSZGSlKI3z0h1gRU=,tag:1DnfsS939jFAbKnph3Sivw==,type:str]
+    server_api_secret: ENC[AES256_GCM,data:cMZd45fzGlGmvdJm20Hoe+TI4DLPOdMx,iv:37X3Stzh6bgXX+dFH6Gf9YRDj0X/+EV3J6lQZRmBZV4=,tag:16DuhXaa+NiED1Yq7pWFMQ==,type:str]
+    github_pat: ENC[AES256_GCM,data:32zU+hFvtpyrkgTbZYQhoMg5dvB8VUs+DDVSNzRDBvZD15uxACj56Q==,iv:9S7gw8qJMVTUN1/C4ySO+pjVH47fP/52HhOUdMLptkU=,tag:02YeYrp9Ern6q/ReHkV5Nw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1d47q8mlty404pxx378q49hr93aqexca4mkeqtdm00w4gjd09xd0qhxcdcz
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMZDNXYXJZMjVIZm1qOUpS
+            UkllQ25NbXg5dmNqdUlTdmpxTkd4RStmbmhJCm9yZ1QxU3dsbVpqYm1tQnluRXZx
+            M0cwZGRlOWV5VXZ3VU9rblRqNVpMTEkKLS0tIDlEbnJnTFowZWgwU1NUQm00Yits
+            cVJNRGZ1bW1FN29NaWNzcG53M3lxdk0Kf64l22fjre4hUsFDYf9GEszGjePBT+bL
+            N6mpFCkDnCozn0M3qd9aLKKrIKlX/X7V/gQ+WF9YTcHgr5Ikf74gtA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-07-10T09:11:54Z"
+    mac: ENC[AES256_GCM,data:cPzSodT3Oo0UVyYmVaJaWoNHs0SzlAVNVwYhXp5DceykumHhPgIJXRUqTe1ewwBwq4cFZ2sOlhFzovrj2xWDly44ei+01fkwWs7TG9wz8FwInaWt9nkd611I5SAmVXG0t4dnLv+DHo855r997WBWl8JR5W8VRctcjCMk0/Kxlr0=,iv:RDtGN9lJlbotIsFrbE+pDqkJk9WZeJ1qXVKbm3cCdO8=,tag:/rJsluDHKYupiCSyj+Uaig==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1