kustomization per app
This commit is contained in:
azykov@mail.ru
@@ -4,19 +4,19 @@ metadata:
|
|||||||
name: radicale-secrets
|
name: radicale-secrets
|
||||||
namespace: radicale
|
namespace: radicale
|
||||||
stringData:
|
stringData:
|
||||||
users: ENC[AES256_GCM,data:H1oE1jDfgArBjJlrDhMOMnd3Mrc2Mc+2jFJKz6srZ4NKI8u3K8vf3JmoZFK6XA/8CTUp5Rvpd+O459Spau8XZ4M+H0MqukCEVKWiMkuSS/tNuac2vGI2PufeIz6GR1HlpUWMfrnPr3SUDnp9bE3B1djkZk7w91HJLv/+GomyDffLcQkJF3q/jA==,iv:1iRIQ5g/crLYsJ/2csPxmXkyqG5oJUONY7zWmuHZbBc=,tag:sytxP8qgs/+7S3AZo8aC1A==,type:str]
|
users: ENC[AES256_GCM,data:dFoE2mjx/6RI4ExttguKxUb3VOhbZhE5z9lYe/XVAAmB8LeAPt6ikV+05ZdIPRjJeuC7ay/OV7dl7Xq2n8e/2RRc36aBvrIUE+1mgsWh5gulLm3ij8XmxNFUik/sdwSAr6+8DyYYB6a1/2TmeyzmKPxhzl1sdBm8C1XDe6DsN8vg9dM6m/HCuQ==,iv:2M7ZeAku2t/T33WLz+9cFFxkgKbTF4jf7+Nbu/s+bik=,tag:9cdCQqwcw2Xi/50Gu1TORQ==,type:str]
|
||||||
sops:
|
sops:
|
||||||
age:
|
age:
|
||||||
- recipient: age1nqjekn6qk8uqunyv5cl88nx9g3y8a94h5qr0u53q5dsdsmhr7g2syy6fsd
|
- recipient: age1nqjekn6qk8uqunyv5cl88nx9g3y8a94h5qr0u53q5dsdsmhr7g2syy6fsd
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFTC9nZjd2RjJqUHlBaUwz
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByNDBKcE55a0E5MHdWTnYz
|
||||||
OEl4Vlhud1lVK3gwZ3RWb0s4eUNZWmFqQTBJCjFNQlpTRGNFTUpoTC9idU1nNlA1
|
Qzd1SitRWVduWVMrSDFUUUtkOWZLNFVLdUFzCkdJbW1jc0U4Z0tTSXlPbjY3REZL
|
||||||
UTVWaVJMY2hjMllKVEZSQUtvZGJCVGMKLS0tIEM0dGUrQWlRVzRRb1lvaTBCYjRM
|
Um1iNW4vcDNuRStTZGVYYkxWK0NDOUUKLS0tIG1ORllYNnlDell4TnkvanBGTW13
|
||||||
T0MrSTJGcVk5ZFFjbStsVzM2VlNhYW8KBbevNTC/FymllcC5doSpn5xkfiOSBwMH
|
azVwMUk4Mk9pMkJTL1RwK1A2ajEzcXcKf8O4WrUGYIYVEKGC0K5jj5YzxpKj4C48
|
||||||
TG9dkscqQV86acTtouqexc/3UmpRwZhFqVelY4AbCs5hB0a/v0V1dg==
|
XJZwkghwu1Feek4OplfkZvPJ4TIjUt9IKuHMFA+xh35q0j02BKKXzg==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
lastmodified: "2026-08-26T10:17:44Z"
|
lastmodified: "2026-08-26T10:17:48Z"
|
||||||
mac: ENC[AES256_GCM,data:lE1WLOkSRXqetZG5260aSS7ZbhsuJaX3MxgtpyAKdycq9bm1uSv/S4GHDy7elIbNTlXPtUPwNmT+SrWskc+1hoeRdLHxknZwGr/mLHrBFXQhyvH1uKj0i5pYAFhce74HpW25TZGTue1POsC3VjAateU1qMAJly0fZuqt78PEDcU=,iv:mzw8iijCix0SFV/bjyswEZ3Xh55VvKCvjOjiLkDy0uo=,tag:dJ/j/i62/fDo7oqgxyLCxA==,type:str]
|
mac: ENC[AES256_GCM,data:uF+TeD8ovIkbd9z/OfOiEikvHoJR62z9mAsekVk3KwDMLZ7YdpbyR/GKHX0RXGPbJUAL+C0OVflp027mt0hjfGO6yD4hKvzLhaazNlOHgVJh30yc6/0QVc5BwMYb+U3WKPnZwXCIUkqEZYAVpmIM+UhKk6W7599KjBjfVJtFx5E=,iv:9j913XVhXm26MI6Ba2cfs/VCjSz+P+garnLRtL2HW2c=,tag:uSj6PX1Z02wIRe8AFT9gzg==,type:str]
|
||||||
encrypted_regex: ^(data|stringData)$
|
encrypted_regex: ^(data|stringData)$
|
||||||
version: 3.11.0
|
version: 3.11.0
|
||||||
|
|||||||
@@ -4,20 +4,20 @@ metadata:
|
|||||||
name: vaultwarden-secrets
|
name: vaultwarden-secrets
|
||||||
namespace: vaultwarden
|
namespace: vaultwarden
|
||||||
stringData:
|
stringData:
|
||||||
#ENC[AES256_GCM,data:AffIDcVKgZnTtLbbqx2PFZriPuccC//Lmy+PSx0VNQY1OLAwdE7ESFI1qlSx82PsDlUhCM0b7j/L,iv:OS26G7ChoAeM7xzjeK/oLg2pfMRnFFQi81otUPZq1vM=,tag:8L2tA86nGFR718l3KainTw==,type:comment]
|
#ENC[AES256_GCM,data:jp2kdvwxPjG8rrYikVm8nXnuZeNpQsf88p7Q5L+xFabJSKuDB5wJrYj3LHV4f3XvMxo5dIcl35wM,iv:8B5dc9BKGGbampxf5ks7c7HpwPpj3kmqyiSfoX7jCuo=,tag:7eEiJIKLLOHmXqN1iQI+0w==,type:comment]
|
||||||
ADMIN_TOKEN: ENC[AES256_GCM,data:zEXMwyWmiLXyuAqc3hFkWwBwuXtiiNWi36hlTQgvr3U+TCiJEJIiUPHK4ry8NHS4wZKlJJWZ41vlPyuP/Jr+8beFXlk4oZbPhRvNa/DTk2N1eKUd/ykLPyMkmwa2t119S12OIHqoQkfSkZ0X6VX3e91XqelYLA==,iv:xxoOP4qOrQKG6RfVY0ZelGoY63+oUlTr/V9XoHQykAs=,tag:0cNu4mGVnz9dBZgYoBCa9w==,type:str]
|
ADMIN_TOKEN: ENC[AES256_GCM,data:Si0uO4J8HuJTB1lyFJ8T96YXqaJf06zcYCfpIHbKGHy8NEhzD3Y558GQANUS2myaYMl59kHB5Vn450M3z2jVHlB7A3+5iJJhrWLdu1rqha0DeZiRFfuFf6xoZbZZ3wRZfigps2Fqft+32E68OSn/9GJWdXsD7Q==,iv:HsAe8YGphRS4oN/zcLlNjKq1r9+0TNtgq9hmCpTkePk=,tag:MmivEEtZd5geXjm6+c24Ug==,type:str]
|
||||||
sops:
|
sops:
|
||||||
age:
|
age:
|
||||||
- recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
|
- recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYZmVvbHp2MkcyVlJZQmZB
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLMEgwSUhoNS9MSS9kYzdX
|
||||||
N0k2Rk9lak9PYVVudldJcGc2ZmhkaTl4NDFzCnVWSlRYc04zWHVkbUc1aVhjdnYw
|
OHNiRDA4U1hyK2pQOUw3Nk9MUDhMVnNSZDJZCkJBSzNURlBwSVBXeXMwcldzQkdr
|
||||||
YmorczRsYjdybFg5Y3RpUnV0Y2NKdTgKLS0tIGMxUXFkd0hMandMcFFPQktlOEVD
|
aFlob056U2RvanQ3anVCQm5mdCtFVWcKLS0tIHRmWi9JaUtEd3BCZVBDeTd1NWJQ
|
||||||
YWRyZVM3NGdrb2YwNGRyNUR4SFlMZGsK228mMCi6+cgQu4JEnRjJqcuIrpTPTq5Y
|
VmhEbnNEZVN4eDUzUWFjVEtqejBISkUKSwCxyNlNP/ooQEtgX/aVK53NoVXyd8tH
|
||||||
xHlyFMwo73UMQg5pzGok2yfi3ObhCD0GNtWeTHBu56SsDDaUJXPG6A==
|
r1tny5l6KyWAYClOqYXWwwf8tp5Gro3YOfTYxsQdaWeb02HkW6vjOg==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
lastmodified: "2026-08-26T10:17:45Z"
|
lastmodified: "2026-08-26T10:17:48Z"
|
||||||
mac: ENC[AES256_GCM,data:hKPS2DWW4w8m4s7BWuUUjJKBsvRqHp6lp7qPeDmRyVOW44EqX+pusLDpvkBNAeAcwpz/2FvuPw8vkTc+z4EhGtqUy2k3pbwsC7cKJ6DyM/3kvdtoDrh+yerKUQymgYVW0PhMLjAWeCD//Ja5auhoPJ6O59QAH58xT3eHd/f5cSc=,iv:uC5F+y76Hh8HM7+EzML3G9ACLMREkHcpFEBSfOjMT54=,tag:8edRfJi/JQPAWqZdEAUeqg==,type:str]
|
mac: ENC[AES256_GCM,data:zGMJ2UWeqx/0S8APQ5+sijt68ntvhLF37ER5qxyhKcx4OyZhO/bjYGo7Nwvk4sAhYSq+nixiDWKUW2XaDWE1TTE2xiOtUmRv6Yao72WicRzT1RkaeL3GPUKrVFmX0rIVRQwOuCMxLVNewMmTx3DlHearBxIXVO6BVYOU2EiDIJs=,iv:8UUEnjl5VWKjxCRzvoc1hkpxaxnnaCtqCBPVsS402N8=,tag:WePuujjk5tLl109ssYlH7w==,type:str]
|
||||||
encrypted_regex: ^(data|stringData)$
|
encrypted_regex: ^(data|stringData)$
|
||||||
version: 3.11.0
|
version: 3.11.0
|
||||||
|
|||||||
@@ -4,19 +4,19 @@ metadata:
|
|||||||
name: zigbee2mqtt-secrets
|
name: zigbee2mqtt-secrets
|
||||||
namespace: zigbee2mqtt
|
namespace: zigbee2mqtt
|
||||||
stringData:
|
stringData:
|
||||||
secret.yaml: ENC[AES256_GCM,data:8WWBEvJf1wO/f7hZYC1oL1kNdJ2cScytgL4OyYv1MM3r3JY5ctiyQi3BTTGMPlSeAkZ+K0wR6gj8v4s6+++TWzxkrRE1rv4WrVstxE0xPYg+qg4ZavwjsQ+g/QbXKSRbfYnBuva9gm/gsN2E286wS6JMiNlRiqWPtRYIqQE=,iv:/Ux9xf1cCKxvrh1h+kD5iEv4vTnYzkVuJ4BrMgU427c=,tag:7KcNdy5fpi/VzI11bh2DwA==,type:str]
|
secret.yaml: ENC[AES256_GCM,data:W8OSElMPX5j+lu5kVfn+eouGeN0g3PuCkjTOI+2Coltegt80kBGXy1lzuC7t/B0Wf4iVpM7miGLscgK2uRLBmPWAmzk9KkU8p06G4XqhvtVmFEhL66fFk3d113P3bbb9UDNjgwNrE85BAvCMdM92Vs7lUogi+2d6Xko1pu0=,iv:YioWooOrpokFfV6mHWcTOK2wvXl+0Ys/opyIrYRYb48=,tag:pcTAwqwPbxoZkbClhHEsyg==,type:str]
|
||||||
sops:
|
sops:
|
||||||
age:
|
age:
|
||||||
- recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
|
- recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
|
||||||
enc: |
|
enc: |
|
||||||
-----BEGIN AGE ENCRYPTED FILE-----
|
-----BEGIN AGE ENCRYPTED FILE-----
|
||||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4cEdha2JyYXRrZlFRZlgw
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4OGNFa2VyRFNhK0d0Y0xz
|
||||||
RERhTVBVVjJYYURoaDFZMFJacVZJSFNwVlFnCkcydHRkRlQyMDlPR0wraDZCTnpp
|
S2tyN2V4REFtbER1dHVCRXV2RjNSbEFXZG13CkljL2RTdmhjbDJRR3pUN09sWEkw
|
||||||
cit3em5FYklnWFA5QXUyNEZlZkVvMGsKLS0tIEVLVFA1d0Z4dnoxWlpDMzd6MklH
|
SzVwdGxZeDhNbGpHR09sNXNHYzJXWGsKLS0tIHlWSVJ6OFZVZVl4M2VRWkRkRGhl
|
||||||
TCtFMG8vdFg1cFlrbTFITFdQc0RTTm8K7Okh3TGaLLua7GpqAEMMvk2S6IKrMIGs
|
R01tK2dPMWtrdi9EL0hBSHhsOXh1MGsKPt12B452HLP8R7DdAptL3nJ+/s3QMrSP
|
||||||
XcmPGAHvLEkgDy+TOUp5LKYxhhu2C9zoO/mYvseYeqECKzqtuzX3fA==
|
dM4YfL6YnCFKreP9MhTev00FP9cFDZRwN2fBvklPq/AP/HXAqw9Pjg==
|
||||||
-----END AGE ENCRYPTED FILE-----
|
-----END AGE ENCRYPTED FILE-----
|
||||||
lastmodified: "2026-08-26T10:17:45Z"
|
lastmodified: "2026-08-26T10:17:49Z"
|
||||||
mac: ENC[AES256_GCM,data:8wLKvXRK/oC0YY6/+28m8scESchRQEduzjwz+t/diOLJFYqCK+Vn0iPyW8bog48Pnpk8TUoSoHg50D5D1DWzuLtDgvFSzk3UBljwnwgd4wmQe8vplAxTR9XALCxNaeGeR+x3DtrmAlK0ogAi0eMfaHVPsKGRbcQ1iO1GeDYUIUA=,iv:ve7apVK94QhszfZ+5cid0L+g+oCj0lbmSBMnypzPb+g=,tag:e1TE8oLYiUHqh032pdE9Gw==,type:str]
|
mac: ENC[AES256_GCM,data:b9/Ype3gv8sptpyiR7gF6LTMWxsB8WO+/Y7GY84o0/adkedVDpxE4z03NECcVHbCXqqOy37wLfj2BKAnFejyOHTbGlRmWkVHsQ0jlekhP9gZhAv0pA/JGVftT4AuM/pL9/Ciha1KyeBHSGLDVON5YE9W5i1E+TCH464jD/OMz0M=,iv:mBcS3TXcrSj5FvuNs6RDEHlxO9qimqokYKZFWhqgacY=,tag:uHhUFzGKoTaXz3n10B1RAg==,type:str]
|
||||||
encrypted_regex: ^(data|stringData)$
|
encrypted_regex: ^(data|stringData)$
|
||||||
version: 3.11.0
|
version: 3.11.0
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
kind: Kustomization
|
kind: Kustomization
|
||||||
resources:
|
resources:
|
||||||
- ../../base/apps/vaultwarden
|
- vaultwarden.yaml
|
||||||
- ../../base/apps/zigbee2mqtt
|
- zigbee2mqtt.yaml
|
||||||
- ../../base/apps/radicale
|
- radicale.yaml
|
||||||
|
|||||||
@@ -0,0 +1,20 @@
|
|||||||
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
||||||
|
kind: Kustomization
|
||||||
|
metadata:
|
||||||
|
name: radicale
|
||||||
|
namespace: flux-system
|
||||||
|
spec:
|
||||||
|
interval: 10m
|
||||||
|
sourceRef:
|
||||||
|
kind: GitRepository
|
||||||
|
name: flux-system
|
||||||
|
path: ./clusters/base/apps/radicale
|
||||||
|
prune: true
|
||||||
|
wait: true
|
||||||
|
dependsOn:
|
||||||
|
- name: namespaces
|
||||||
|
- name: infra-apps
|
||||||
|
decryption:
|
||||||
|
provider: sops
|
||||||
|
secretRef:
|
||||||
|
name: sops-age
|
||||||
@@ -0,0 +1,20 @@
|
|||||||
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
||||||
|
kind: Kustomization
|
||||||
|
metadata:
|
||||||
|
name: vaultwarden
|
||||||
|
namespace: flux-system
|
||||||
|
spec:
|
||||||
|
interval: 10m
|
||||||
|
sourceRef:
|
||||||
|
kind: GitRepository
|
||||||
|
name: flux-system
|
||||||
|
path: ./clusters/base/apps/vaultwarden
|
||||||
|
prune: true
|
||||||
|
wait: true
|
||||||
|
dependsOn:
|
||||||
|
- name: namespaces
|
||||||
|
- name: infra-apps
|
||||||
|
decryption:
|
||||||
|
provider: sops
|
||||||
|
secretRef:
|
||||||
|
name: sops-age
|
||||||
@@ -0,0 +1,20 @@
|
|||||||
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
||||||
|
kind: Kustomization
|
||||||
|
metadata:
|
||||||
|
name: zigbee2mqtt
|
||||||
|
namespace: flux-system
|
||||||
|
spec:
|
||||||
|
interval: 10m
|
||||||
|
sourceRef:
|
||||||
|
kind: GitRepository
|
||||||
|
name: flux-system
|
||||||
|
path: ./clusters/base/apps/zigbee2mqtt
|
||||||
|
prune: true
|
||||||
|
wait: true
|
||||||
|
dependsOn:
|
||||||
|
- name: namespaces
|
||||||
|
- name: infra-apps
|
||||||
|
decryption:
|
||||||
|
provider: sops
|
||||||
|
secretRef:
|
||||||
|
name: sops-age
|
||||||
@@ -0,0 +1,20 @@
|
|||||||
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
||||||
|
kind: Kustomization
|
||||||
|
metadata:
|
||||||
|
name: cert-manager-issuers
|
||||||
|
namespace: flux-system
|
||||||
|
spec:
|
||||||
|
interval: 10m
|
||||||
|
sourceRef:
|
||||||
|
kind: GitRepository
|
||||||
|
name: flux-system
|
||||||
|
path: ./clusters/base/infra-apps/cert-manager-issuers
|
||||||
|
prune: true
|
||||||
|
wait: true
|
||||||
|
dependsOn:
|
||||||
|
- name: namespaces
|
||||||
|
- name: infra
|
||||||
|
decryption:
|
||||||
|
provider: sops
|
||||||
|
secretRef:
|
||||||
|
name: sops-age
|
||||||
@@ -1,4 +1,4 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
kind: Kustomization
|
kind: Kustomization
|
||||||
resources:
|
resources:
|
||||||
- ../../base/infra-apps/cert-manager-issuers
|
- cert-manager-issuers.yaml
|
||||||
|
|||||||
Reference in New Issue
Block a user