longhorn backup target

This commit is contained in:
azykov@mail.ru
2026-08-11 22:17:47 +03:00
parent be53f040c7
commit 555a84fa28
12 changed files with 112 additions and 79 deletions
File diff suppressed because one or more lines are too long
+10 -10
View File
@@ -4,21 +4,21 @@ metadata:
name: davical-secrets name: davical-secrets
namespace: pim namespace: pim
stringData: stringData:
PGSQL_ROOT_PASS: ENC[AES256_GCM,data:3SbrhxaWZi91aCb1C3AOMMXTJNIKg4EXtphg+sVEXLOwnB2GN6+//RdlMQJlWiyk,iv:u+wz0nit+sTQwMrXqhlLRbfG9AgjHUfTB93NCOMiDIA=,tag:rcwZ4gzJnXyzFA43euj5mg==,type:str] PGSQL_ROOT_PASS: ENC[AES256_GCM,data:ptHf0p8m4vxRpZxoJnE8NUmKdUO7dsjs8cYFTKjY7nQX5czAIzZ1S6YgZXkqWGHc,iv:xIhpQoU106q4FFIXo3SdVUAMHK1hfQRj+950xU0YxWI=,tag:WzRVh9NqMBTfwf5cvv2xoQ==,type:str]
PASSDAVDB: ENC[AES256_GCM,data:+BLkel5JWlkNjE3Pun5wDPOfBXvG7r/gGHVjC8YFhA+8zg8r3vpo3ITnHfugKBKz,iv:AhtU+5q0jNPJpGI9RaWOwb2VmNttqsQgIbJBEAtmbCQ=,tag:0Zn5uSyYri/57CnGYFq/9A==,type:str] PASSDAVDB: ENC[AES256_GCM,data:Odg+KX0k2eBexnVBn2mMoKpSbx8Ys3quYpo0fF9YkjzEcpax6qu9n26oZX1EuJXC,iv:FmYPqaEVg0ArMefyV/PTlO1FK+uriW+wK13w+M1w00s=,tag:wzXfO60QKJh72E9V8PR7sQ==,type:str]
ADMINDAVICALPASS: ENC[AES256_GCM,data:qnI1IHWFbIsFC9+R7GqTEGYGveQgdGnDCX3bQ3fx/8M=,iv:sur7bTLfIhzRXkpZqCnpAcC0zJABcorUnFON/CCofX0=,tag:xQDqIX2Yh3KQ1gxxJkTM9Q==,type:str] ADMINDAVICALPASS: ENC[AES256_GCM,data:TE7YPulOqkJpGElJxt90FrNHRUaGE/zyH+S5H208vFU=,iv:+Rc4YeZyYhw0U+X6QCBGNrpKZTq147RJ9VqO/jVCnBI=,tag:JP/PJpKzkWOeGBjTXzZVng==,type:str]
sops: sops:
age: age:
- recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g - recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGVGxKM2lBczF1RUpoNjNN YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmQzl6ZmRuWTgrME55b2V5
V1lwWWRaR1AvbmIweFA1OWZONzJBeUpRZkMwCjZFWk9SaXE3Y1FheFp1RDQwT29Z Q0FpNElLUnlERjVDQmdPdGNaWXUreEFrUHlNCmVzNC9Fd01DNDRGb2o1UFNaNVNN
dHRnZ0o4YmZMNjRLSVoxUUtVdDFzbncKLS0tIDJRVVF6d1dXVk8zZWk5T2I2L3py Q2lsYk40VmlyOTV5Uy9YTThlQjJtR2sKLS0tIGsxcm9rTzNoUURLbllOa1RJLzFV
WlFldHRpd0tGQUUrMHdhN2VyUUdQREEKROy10ziP9lTH2BCox1V3ymUj3KdncVM/ WjhYd3g0amlSYWRsWThPdkM5VkRZUWsKhQvmB9YWbGzCTQNIwepSwTKmavLW6x/D
ozCzPGF7dlBFXSVGIaEbv2X/LFq08MtoY4EGNEIz9L1jGg+UiVsVEQ== QfZZgxItSk0aUCi/Riq1KMiooQh2qHgiHYSi0b00J0N7KF2k5uWKlw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-08-26T10:24:38Z" lastmodified: "2026-08-26T10:24:46Z"
mac: ENC[AES256_GCM,data:l+sqZt7/Q696BqM4wJd7dmS0u9tS2fB78BazNX0TdRU+prL3eAIks5CTSLzNeuh6I3Dw1eBGVB2mN5fUAsL04tn9iCMPuR6Lns4njuRdUeT1w6aW9AnE3mkIFOvEb3XIIqflyg5OtZgt+7ObZ1WJTyn3sdyjZ5kIacn7yYYN+Xk=,iv:NLmRYO3KBIC3p2zlWC6Jl3ROeS++agH2XK8FhA0yZ4Y=,tag:dEKs83iENjJtIzzQE9zDuA==,type:str] mac: ENC[AES256_GCM,data:J5HHvt+t3iLeQ7xw/3AFuuYDT+1bDMT9FpGuQbzl/sddD+QHyp3s6XSSvCd/ef88z/a3l8vp1xZkPch4lGxYlmc6PTs5iVQrb1E3rcDZKr3fgtiF95CpUByMXDhkI8sOjq22cTKdsvEoZo8BamBFw0haNP9F0mNkL2U+GOt7liA=,iv:DIadR+8LLQQA9Qpf8FqF/+lAHFHO8R4WjaFHN8iK7Ao=,tag:LxYMIjirYPcy3CYqfKEQjA==,type:str]
encrypted_regex: ^(data|stringData)$ encrypted_regex: ^(data|stringData)$
version: 3.11.0 version: 3.11.0
@@ -4,21 +4,21 @@ metadata:
name: markdown-vault-mcp-secrets name: markdown-vault-mcp-secrets
namespace: mcp namespace: mcp
stringData: stringData:
BEARER_TOKEN: ENC[AES256_GCM,data:Dls9z/zJlgm6gpTTkx2cp5FjmkzHRCdFFASU9DXoT6/u2ospxNiCd/nn0XIb5LuDJvl5illYRtkE02A/cmb+0A==,iv:aPQ8UQzCXZA7gvemqEypqqOE6gfYDszNQtZUUzNCnLg=,tag:KTGCPclgYtF4EENfZPxEpw==,type:str] BEARER_TOKEN: ENC[AES256_GCM,data:z41GX++/l2HS1cTy4ETPvJ4Bjbzrah+To6Omim/Ku8Khpd9EFQYv6lgK+FRWsuLeHsmEWUeEnD6TT+hmT1MqRw==,iv:nvs4dCJhAr0iyiWe2StxMz6bLeBxSKGNaUMVVB7VOJI=,tag:ygOcJ2zL4kIKf0RN02K4sw==,type:str]
OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:Pud6a27KtOltFahrhbxn47bFR1bixfZnxtEsu9dXCuVOWqVM+LQYYG0JzH5Oq25znQbGfDoc2ose+5HUgrAOIg==,iv:csPoWHMMpvoZQY4hI8yrsjav45CDuqsQmCb0ofM40mc=,tag:gjEJcVfADUx0Hy8lBy3U0g==,type:str] OIDC_CLIENT_SECRET: ENC[AES256_GCM,data:Od7TzNl3ZVpURkeFmCobv7jsSttLBoWndXGe+EJQJzE3lMRkMtxRfEjQNluz3Q0n31NH7ZgcWiJHbdFUQNiiAg==,iv:T2n9IatbQvnP3ASh9yBtUYkKigKCjzZ28Bps8eCT85A=,tag:JmKzpYZx7m8wsyQJaW6vqQ==,type:str]
OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:tSjc1lZjEOQvsbPmtshH2G6rPwnUKFdm59qC3USdW8qWKWvZGqb7HKIkbBdFI9EAgDNRaC5/tbfruGv+0ttmwQ==,iv:aVmcDz+nIooJI8/5pioDttB0gPKL/j5dBoKS3MthJmY=,tag:ETA3eDCSHUlQhkgKKOD+HQ==,type:str] OIDC_JWT_SIGNING_KEY: ENC[AES256_GCM,data:KMXnr7ZCZHrUjAITNKfMEUGTUykJyEp8IhqyCEE7+HG/rHO+QIs9eEVUGB0ZfikDVyO+93GZfDAx2yT1hAgmvw==,iv:Om2u1lmX7cnAWX6fdWz5wEwdRIBZMTunnvhUIr393S8=,tag:8UqZwrVZFXcwAYyerMW5Ng==,type:str]
sops: sops:
age: age:
- recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg - recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZaU9NbVBuR2EvTU1WQW1E YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqWW1FNWgyU0NxMlVTbFI1
RzNnVjVjUDJRaUNhWnc5Mm1JMU8rSWdsS2pNCmNHRjlxT2N6WXJPQWJ5aXhGYldz dVpUOHlkT3F5QktNNlozMUNTZnV2aHZmZndrCnZVNG4wOCtSVEdmcWpSMW16QVk2
REJxMXh3Q1picitxMkxzQ29ZWjFxSDQKLS0tIFdPTTVsN1FjUE02VGVHRGhCTjFL V1kyWUVhc0tGYklpaDZoNkkvZWtxM0EKLS0tIGJ5VXh4REpsR2Y1RWFYUGI0UzhC
azV3VThuMGZBdVBPNzFJQW1LKy9pZ3MK4sRADQlvi9IJmIFBChqF2lchp6X7ni0M d09NUE5rUC9VQmlqZDUvQmJGVUNSQk0KpABRTBAxeXhkO6cFxWmYrK2cZ7yh7Q+N
GGy+KEXT3kh549h2oX77GbGclc7/2Y5fOY+XCfhKKM7V9YqMG6INhA== c6+Evja5u9NGo62Ry+RssPyGIDvIFW6BAhvNwiwZoo8U4XF0B2Y6oA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-08-26T10:24:39Z" lastmodified: "2026-08-26T10:24:47Z"
mac: ENC[AES256_GCM,data:JfBcwe5zgdZOVb8ilFOw59WGM0mtbAFTg708rH192HJm+6tG48qxND2FJwjSw6N/edL8m0txyqI15YVWm9hdGZ9tEKZw4m5gpC14DjOmrgDanyAsJA1sMwqIFnoA3Js44KeilL9quMVWGbNvAxiv1d+UWJd/b5LG6kiIXfTDNK8=,iv:D0dvYEIPlqFSn3GPNzVGUVM2vP6jKYm/Zs7CooWrJX4=,tag:OiF26RAtrtxcpPg70I0fSQ==,type:str] mac: ENC[AES256_GCM,data:MuhRO+E9rJCuqQMaUoFUD8h6p1bu1EQNsZxdFqZratV9m88ZEy6WVCwwX7kfok1V6gR6APov0ih0PAgFsR8dgNf3WrBpBFqx3IxdUxcAd96Oq1JDHF7TzZYHvvMWZJUO13aLhwp0iWmPtG/qPs2fYCGGdJCFeWzppryx0Ya7vjY=,iv:eNQxHN6r9th7fUQYKcRG86sJvq+AWx9rOez7DmKUoV4=,tag:qiMS/u6YX0qQsPl8thTNrQ==,type:str]
encrypted_regex: ^(data|stringData)$ encrypted_regex: ^(data|stringData)$
version: 3.11.0 version: 3.11.0
+8 -8
View File
@@ -4,19 +4,19 @@ metadata:
name: mosquitto-passwd name: mosquitto-passwd
namespace: mqtt namespace: mqtt
stringData: stringData:
passwd: ENC[AES256_GCM,data:8bI0S6jNWiafP/wR48U1jEapC0GON3R20eZ7NVFOKwMIvsTy4XnHD3J/Zx/nwS5eYL7HHMQfoShARlJpIMfKV/Z26c4tTbFExMIFvbzVFjvB3MTYkGNnYWwS9kDxkqCy2fjA4oiL3bYbCJswC9aHn/JVvTrw838e6bRgVFpX8iVBXmFKxJ3e/BJVoO1a3VGKbJd0GA2wqDDpAfNLpypaDkO09VnvgybRT4qiD5Fqh9MiAGoaktiClheiJog8Hg==,iv:mJxIk5ko+ARDY2bis3adZMqCw9mjIaleV/10bOCQQHI=,tag:wamDSCTYQe1mQMgjmIshCg==,type:str] passwd: ENC[AES256_GCM,data:BwWV7kWdjz8/luBLXoabcq1Bx904sBfeFtJJ1IkL1k5D9HUYSUCrahstvbmKn96Q1Jv52xBiytU4eFOpbu/fu2BOIYDefSCXyqLqUsLVxsGtcgVtkwGRM7ESHydPgaIGcTnKbkeVrXb68/jkzVgRzzXJkpseJ2r6x3FLSe5Ycjq8Hs+dLgKO44P/eqjqWZTHwEj3QYuBYYZvSDj0j1ehrI5v7EJiCYLp9PTrKdYwWgrDp0jCCBhetXFoH0fL1w==,iv:mjMLgl+uNNFyReEYbsgieXlY45yFl7zDSp2QiTN257U=,tag:GVMygXMb3bAu87TpjkSMaw==,type:str]
sops: sops:
age: age:
- recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h - recipient: age1u236u5mzkzj72y4mfxx68gfqw0u0j6tdgkudnm5pdfpe7apq4u6s89jr2h
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBteVpXOGp6RTdmcUhNTllI YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPNEJoK250Uy8rZEx6M3d2
Um5uMVVMTUhyWUQycjJrTnhUVkUrR1k4L0ZzClNhQVJpa0l2Y1Y3cHVhbDh0MnBN U0ZiYXp0UWtBZ2pEckVWbFhpVFlhTlRWVWp3CklGcWVZWVIzVytiREZBYjJCRm5X
amRGbFRKWnF6eC9OZUVjdnJYR3BuemsKLS0tIE1SY2dsTXNCbDZtQ3pWOEtKZWxE RTFiZitySFFIY2ZmVTMzYy9jemZZQU0KLS0tIDl1RkFmSytYdWtsbzYwTCs0N0ds
dVo5Wlhza0hYYkJzeEltWVBkT3JPMFEKksY/3Xq47INPsm/E/6v5h6o6sWo2h0hl NWVNZ0V5dUlyMDRyRmxZYW1mUSsxUUUKd64DjtHUWRAMNYcLQtNHcjuXnmARJYFG
rYV2eT3WoW+skiTmjJprNcztBRGkeuNYjUTONLU1YPEzbKc3thsXkA== iBfXRPJUI/Et4p/UmuYFe12oKr/Pgu8vmEF2vFEt2y+fuMQrxiq/gg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-08-26T10:24:40Z" lastmodified: "2026-08-26T10:24:47Z"
mac: ENC[AES256_GCM,data:H1VIjyPKj67+wPJRom5hHfac/JnnDh5DlngIzHcZz3sweoIheTdHB6f2is0LoYusCw7dkT5FWo7TVMFPVfAQswi4ABekV6FYNFc1ityczPvY6saZ7QB93jpbuw6CGe7i6BSc3sBqe5/HTm7N018i6m/jgVf85rQje/ncoZVLjHA=,iv:QE4IwhLJgZYwPV8pjsvz5aKQEYOPfbOIWPhXgLtJgtI=,tag:ojw5dWWI67wcJa5anXI5jg==,type:str] mac: ENC[AES256_GCM,data:Ip2LGh4tz+RWtVm1z6h++SMI9ARzf64zQIiONk+WGEjDQkeNmAeJkh4GgmbruOfRFm3dadPONe/huYVXo1aPmsb6cJ5e3/mnzh8iO9nlFjxtu7aQ/AiLIVjOmmwNQ4AGrYbNV8eaAD3CptmysMLO9MfX14k/RQoJxHv8X4aMwDU=,iv:3dqV24sge4hpsA0mlYcRAk07jUZ1WF319DYvb+XwCgQ=,tag:djfqovCeydPxkLg7516u/w==,type:str]
encrypted_regex: ^(data|stringData)$ encrypted_regex: ^(data|stringData)$
version: 3.11.0 version: 3.11.0
@@ -4,20 +4,20 @@ metadata:
name: vaultwarden-secrets name: vaultwarden-secrets
namespace: vaultwarden namespace: vaultwarden
stringData: stringData:
#ENC[AES256_GCM,data:qEwbD0WOBGKbHEadKbVrQFT3eEguv1z5zLE0phWR0UTqZFAzghZ7ukJ5sSxTnIIimEuJj7yjxCp8,iv:Vee/6zlg8VWR9DTzGV+h1+bIZQThXPdKiHg4bcnaywY=,tag:H9Tz93LXdb3O9P8WfBDA6w==,type:comment] #ENC[AES256_GCM,data:7VWBsIQ30lugVsemqCMHNjtvu9RIzqGnStLs12hQUvN6arWTW74TxqMlK0Ef1FuJRg2t0Mi8tr8K,iv:POE3o92CZeLEM5++8sc+4evwsjZVPIIii5O0yfysOpc=,tag:M9AHiT71bp/09GOjg9xCqg==,type:comment]
ADMIN_TOKEN: ENC[AES256_GCM,data:MteKaMZ+U8Z9OUSrmHG4h8X6XyFFrkiDK7A3fuYOEfUFEFJ5+W5/RgcnZN9OFpA339/tV2huijyBQ5MvgNd0oFhmDnAjVAClawmsfi9CXVtGkoU37orLSWOeM+eg4jMsfQeY35ij+mBso9X5877o6kzW0XAIYw==,iv:s75cMko66BeYhcXybLuMKpqy01rVFyca59ehUdv2Nco=,tag:bOB7ATkD0IhkPIduAvej3Q==,type:str] ADMIN_TOKEN: ENC[AES256_GCM,data:CcsMpoKgsBLYm3687nem9BqUxNb38E/PUKoy8S0Gt0DBuIpQSNoC8MY/V2lmqpD4iECdHOA0zKO+g++9Ndsm2QYZcr16XAfB4BrVjHmAGLfoYL3NRiXldWYGor7DqjiKP2fR4iSvLpTlJm2FPOG/pwu2r4gJZw==,iv:b0Cc2ir7nk9BYQl+1Mpb/u0EzJxxUia+aEIMQeSLQMg=,tag:Fp+QMy+BkqIfNpFIVcdaVA==,type:str]
sops: sops:
age: age:
- recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5 - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0bDdtOTNhblJyNittY3pG YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuZzd4VFFTMm0rZ0xjemw1
Yk9jUmdDZDg1Q0Q3dXd0enpCbkt3M01DQW13CklaamlEdTVpY3lJdmUza2pNQkt0 c0I1NlFhak83V2o2M3BOTzIwRlFMSVJUYkJJCmxSWXAwRVBkUlpLNUhrUzhNYlBY
c0pkT01BZTFGYlJqWmVZeG1peDZQcFEKLS0tIDZueGxLMWNJU2xmMnAzbXRlMkdG ZThxV0xPQ2tkVysya1pWallydzNtdWsKLS0tIDFQakI4aUhzTFYwQ3lpT0xlTlZD
aHExUWVOOStNTjU1MVB3OTVlWCtCUFUKyb4jikFMzgme15g8ydIhGZCrsYf0BOq0 U1R5NjJuRHFLWmdNR1FxbTZhQ0RpYlEK/kuk11HQlIXEEHzVLP6j/g6QUj6r476W
+1mKdnbGlbbqMbnUyglvEQIWBZDijge3Hb1oRd5NvwNHEVtdteYznw== orqdtU5nUZBN3iipvLEiMSMPTCli8nNJUNHbd2kD3dxJ5W+jctVyTA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-08-26T10:24:40Z" lastmodified: "2026-08-26T10:24:48Z"
mac: ENC[AES256_GCM,data:XLA4LwzuPbCaMvEXEBzhqOmUzGp4kl0bo/bVDo4yjppHYJ6Wfk3m9CmgtywhKIMeFmlU7/bl8bFWGHFoMok2TyA9vqio2lsnuhvg/85fs/iRhsFqkzWCmD0OUMMVFuaEEji9AD43MyYmtYatG5IaE15SIavooLZaGhxC7U91F1A=,iv:EkMKOnZnGH2I/L8tYuJzxgNR66+wUtPlQhVlpYdr3Vg=,tag:eby0Wp6X7+S5e7UguC9IMA==,type:str] mac: ENC[AES256_GCM,data:Rbz5nzgiF5licsn0IJtOSU6WacJsPP9LsFct2dt7G7T9KNVZVe8qLhdsbd6gjYp8xXF+LPO7k02Vsn03sDtSHGCMJtDwmNz9JKjHchrTJApuVOpYbthy9/iHHrzJhwjQFuQuya/OkWYxtQneKSoYqxX8V/XU6gYyODU+c+1dRBg=,iv:5HiZjbJQrf7rBRGor4svQ6NUwtyqOlbkGklcR6OHajQ=,tag:GgeRWIl5VTyboIsFamw3sA==,type:str]
encrypted_regex: ^(data|stringData)$ encrypted_regex: ^(data|stringData)$
version: 3.11.0 version: 3.11.0
+9 -9
View File
@@ -4,20 +4,20 @@ metadata:
name: webdav-secrets name: webdav-secrets
namespace: webdav namespace: webdav
stringData: stringData:
WEBDAV_USERNAME: ENC[AES256_GCM,data:zhpwpHI=,iv:OFBaRvpePxvrabbQjjuWRob0gM5y1nYfV7np2TVk8YY=,tag:d7I29iRd1d+9UEL21aKOYQ==,type:str] WEBDAV_USERNAME: ENC[AES256_GCM,data:xDAS2fc=,iv:KnDY7PaUHGZVZdTWRhHBB2zpjSklDr39vuffxEuovLU=,tag:glQcsAHnlF79vA6L0hKT8Q==,type:str]
WEBDAV_PASSWORD: ENC[AES256_GCM,data:qVv7IvzTGGHddlc5mKzeVch0HHHJMJimv3EMtFRBQZG42CbcKfEk27VzgciRbFUN,iv:jPV5hQ+cKWkoNl9p1XoptfFQkeDu0gKCGs2zxggqBw8=,tag:zVh7e2eDjLvK68TSyBH8Lg==,type:str] WEBDAV_PASSWORD: ENC[AES256_GCM,data:MhtL1OJ1f3fnJ3u3BcKbYps3clFWjjurdsx4owuE4sngHI9a9kWvt+gE+WtVN73y,iv:5++jqxgr19vUp6bcIWDOUDFeXPjhujkq4WPlEYY4iAY=,tag:NtxiDSJhvQbMlqnSOoXIVA==,type:str]
sops: sops:
age: age:
- recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays - recipient: age1y8t9v56yuvskznddqfsd4yddzzch0yf2dutvvt8rrx6rjh5f9g0s3qeays
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkcGpEZEFQOHlVWTJ2Ky9o YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFQSs2QWNLbVVvUVV4Ykp5
dktKNno4ZUJkeFZWRUZ6VmhMa0M3dmlOQUNvCjFMQncrUE00WTd5amlpNU5tcWxq eUJ4cWM5TWdwMks1K3VQTm5icU1RMnFSdFEwCjFpVFgvejlTTEU1UGRuRTdZUWlQ
MzV0MTBwSVBhRytJbUp1UVA3NjZHV0EKLS0tIEI4dmYxUmdGWHFFUUcwdnlYRUV2 MVJSdjhDSjZJZVEyOE9IeVZ3dTRwcEkKLS0tIGFCMExvNis1REg0OTV3Qi90bVpK
UC9pRU1BenFKdU1qVlN1ZnkzVEUwdnMKafY8OyN3X4WTy5bvQwqXZysoeZj0EUrl SXdRU3V6Y3RldVhhOWp6dU90MVd4MVEKU3WybidH84Rgoz3i0K34gLK8tX7SIFOz
8cOM38/JU+ryoMttpNdFohUYAvk0BBPIufNG4VKgNM/tZSAQtbyBJw== V5axoJY8VY7TImNJgSlty2+nkUwVNIjjjFQuD40xhJQy5MofPgz7CQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-08-26T10:24:41Z" lastmodified: "2026-08-26T10:24:49Z"
mac: ENC[AES256_GCM,data:syZa9/EfUESO2ZomxNnxpjAiRLP9dplP+BeKckShAT9eoRNThNl6gSw8tTJpe+hvOWAvXdUg0nznDsWAPcOHGLu9FRMGlqnLrEkr80w3MzmK2w75+oQ3pcrUX2zWfgQJ3GoqgCvyI9P+9NUgz7W5VWio/ujAMNbBsmE3PJ3bNQY=,iv:T0U/ZaxKnD0wJBOoYgc+Zfo1CDEcQcAJaaJYHIVIyCQ=,tag:2Za2nMP6yJPHnGDk4gKKRw==,type:str] mac: ENC[AES256_GCM,data:t75GLvaAS0S7tDZmh5w7CaQIg1Wm/VSC8AZjvIkWpEZFDlDeDuBBjcJbH0oaEoxqbzInu7vksIrejsB3EZk2X3MUsdpJMJID8kw6IsX8PNS4QkcwCDexMXaTFRRubCMEZ786BK9VNmJnGPW8MkO9o3wfIJQI1pOkd2yNQ7AKM4E=,iv:il6QT3L4Rbrt8yT66sXCA25iRtNF0GeC8ajP5atfKeM=,tag:iI2tGimtsMUAktBzdCeJIg==,type:str]
encrypted_regex: ^(data|stringData)$ encrypted_regex: ^(data|stringData)$
version: 3.11.0 version: 3.11.0
@@ -4,19 +4,19 @@ metadata:
name: zigbee2mqtt-secrets name: zigbee2mqtt-secrets
namespace: zigbee2mqtt namespace: zigbee2mqtt
stringData: stringData:
secret.yaml: ENC[AES256_GCM,data:42t6DguWcK3Xy1HTAfjShdBXrhzbMOtma3QCd1VpH2nGtVz4abqmPUAvo8avyQW3wRunFKNcn7FytX5zre4Iy/5rmVjr70/6LVCTK5eDvplMVBQXB/dcWqvps9pCSL88lcC7ZGQoDLrGKRFsozndUhTKHi4sBIAD1JfzxHI=,iv:N7VW5qyFZY2aMj4eGVnbdsAYn1TVDFCcEQ74pLBEj3Q=,tag:b7iISu0nSP7cp8b+MJsvUg==,type:str] secret.yaml: ENC[AES256_GCM,data:LmOv9rXElIpOszZDhcizXzTJgivyf6D60ugndpK/LdvUzIN+EYUozIwAoZhzLX0PHsIRLeOF7JjBaftf30gx3nr9ON6cnk6sTg36sDT6YFgmsvJYXPmUbvJzPtzlnIpMOobAv81kiLpUIiDExgLZWjMfjc7iMhu0348aQh0=,iv:rJDREJU9cnZZiojtwrRsCGUYq1NwBZOWBrNVWjMpWe0=,tag:0qQQYHVyuAQ7Y+hKHSFMXg==,type:str]
sops: sops:
age: age:
- recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29 - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0ZXZoQmpUR1dHRXVLeFhE YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKcmhxVGdWaGVFNGxOZmFp
Ry9jVjMxQXJaTEV0bGpBUkgrald3ZzZYdXhzCmtzcktaMkQ2ZGhGSnVYYzF3Nk5I a0hFQ29nMVowNWJ0bURTNmlPQ282U1p1OFE0CjFqWlJqc04vSmpSRElEUEZnR3dh
RENMTFhkZlJrMEYzL1krY1ZZUE9Fa3cKLS0tIEQ1RWNwWjhTVmZ2QUMxdVlRS2Nk QzNzQkJuVmUyQkFZWXpjUUhJTzlZZzgKLS0tIFRmYmcrWVNGcjBBaHQ2SURBdjIw
cEMvajdzMDVSa2tpUytlRG9mbHFVOGcKdhGVW/IYKclOeEHJP81AG/onyESCt74S Nm5WZGpVY25lZjdJOHh5MWJ2bCtOQ1UKcrTlEJ35uIL1nfMtOeAoeCbnRc4Q0r97
Jjaa6i0xZfz7v4xDX++zHAdFwU5hrJlmDADxJSItPzM9xtL63w9fIQ== ATB0YMQ1J/QcpsRt8DEbCh+ekTHCBUVCGqEbE5XHPEHFu4GT7ghvPQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-08-26T10:24:42Z" lastmodified: "2026-08-26T10:24:50Z"
mac: ENC[AES256_GCM,data:pzNq4ncG3jrnSrCbXN0hRpehl7JndJe97je8yTf7zRljCM2LPXiSpfAG0RcMhHp4B7PfkM/GQiZycWrqdnDT7nhQbkecHGaSRV/p2cz8GzTvaDHz7aJT9um83Ikc4AJOLvlhh9HDLDL9FtA17jmGVX9TPpclPvr1osz/85yPQGo=,iv:nmjFm4YKEwPOE4EweTWpOsmu3oJUq3ZRs33VPgSOAz8=,tag:G4WxXA253tODG5hGuJx6JA==,type:str] mac: ENC[AES256_GCM,data:AwZvTyNh4pjpcG4ZPnmEo3hbi8GTmd3N+PYXwij406w+axIyZH94sg1ithwQohUnhXYgC2ctD/qMDEIe7qx/M5dhtQletc7XKw0zG0nibviGoXGcEStENWNoz9NPVIcV4wlTMKqpk1I3E7oisbb81jkAsBxSbOkCh1lrJzo9lmU=,iv:7RruUnAMOYVXY42qQTlxpe4Cha49JDaW2ROTCVkuj1Q=,tag:o+4IX2f4PHN59Vst5P1Wjw==,type:str]
encrypted_regex: ^(data|stringData)$ encrypted_regex: ^(data|stringData)$
version: 3.11.0 version: 3.11.0
@@ -29,8 +29,12 @@ spec:
defaultDataPath: /var/lib/longhorn defaultDataPath: /var/lib/longhorn
guaranteedEngineManagerCPU: 12 guaranteedEngineManagerCPU: 12
guaranteedReplicaManagerCPU: 12 guaranteedReplicaManagerCPU: 12
# если backup target ещё не настроен — оставь пустым, донастроишь позже через UI/CR # points at the in-cluster rclone proxy (clusters/base/infra/longhorn/s3-backup-proxy),
backupTarget: "" # which itself encrypts and forwards to the real Wasabi bucket. "longhorn-backups" is
# a virtual bucket the proxy creates on demand under the crypt remote - already exists.
# region is a dummy value; the real endpoint comes from AWS_ENDPOINTS in the secret below.
backupTarget: "s3://longhorn-backups@us-east-1/"
backupTargetCredentialSecret: longhorn-backup-target-secret
# чтобы не разъезжались реплики при 3 нодах # чтобы не разъезжались реплики при 3 нодах
replicaSoftAntiAffinity: false replicaSoftAntiAffinity: false
persistence: persistence:
@@ -44,4 +48,4 @@ spec:
resizerReplicaCount: 3 resizerReplicaCount: 3
snapshotterReplicaCount: 3 snapshotterReplicaCount: 3
ingress: ingress:
enabled: false # у тебя уже есть Caddy/Traefik, заведёшь свой Ingress/IngressRoute отдельно enabled: false # exposed via Traefik explicitly
@@ -2,5 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization kind: Kustomization
resources: resources:
- helmrepository.yaml - helmrepository.yaml
- secret.enc.yaml
- helmrelease.yaml - helmrelease.yaml
- ingress.yaml - ingress.yaml
@@ -0,0 +1,24 @@
apiVersion: v1
kind: Secret
metadata:
name: longhorn-backup-target-secret
namespace: longhorn-system
stringData:
AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:vli6H1YZQviV4ygwEKOhUltZ+5o=,iv:P6xcqbIVME4xMEOiWtXGm1z6S8ceF+uoTHDI6sqG1y8=,tag:IAnsJBEndhf6AVhXN6E1Vg==,type:str]
AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:8UXxo+WALaBj1TCC8YfAyq/sJhShIKkfEtI0wHGTuyt1aMdMdqXQRw==,iv:9Gqy3LnX988o+eMwhMxvWw+u9yZ1QDh7pPMX0qs6yL4=,tag:VTWbe2A5vRu5bLeQt2KE6Q==,type:str]
AWS_ENDPOINTS: ENC[AES256_GCM,data:Co4mTd6AY+woOmd71Uo/6wmniWIG6Wa6q54UL6XLIsto/6Z79N+gKvV5AaaQ5mXdWi78zaJYJT7lbi2AOg==,iv:DaDMi/CUBcRyoBiau03PXBzdoO4UVV05puhKvHibDFg=,tag:WSMC+QDIn2rFj9lcVc5uLQ==,type:str]
sops:
age:
- recipient: age18hhmdmupj90zjgjpxk3z5cf3lx36hcznnmqsp0fpyg50823pudrqjupydt
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDbW1GRUJad1B1cUJtZXp1
TGxsaytYMW9hcE1hR1BlcnVoTjIrdWQ2YmdNCkhuemIwd3hsL1UrWGxRaFo1NHRQ
ZVBzR2pFeUlYQ0dTN3E3RG5taitXWGsKLS0tIFNIRDJhZUpwYjV6UXpDcmZUS09n
VzhUZkQ1KzdTUnlLRlp6TzJWb2lGdjQK34QBtclIRUTO4dyNHFmPJ0EO9a4fLuXm
jQ7DOac/g5S3wByq3xmV65PwalJum1Mty4i+HqphvDsGupyNY6xX+Q==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-08-26T10:24:50Z"
mac: ENC[AES256_GCM,data:6Kn5AD4MuU6+JhtYyOXsEKzmFKRxfMAA83LChO0MeZbhGwI/J7EBeSYMYtZMetua9pmjvZakBQoPlE6Hdjq5cwBG8K3v7K54ZDKb/NK6dfEZMY2hZ5GMe+4NWNDLWPRphu6V7wLNwvhZNrh/J9+LDpnIVdMls2WPzhncmI/pENg=,iv:OLYZWQ0Dl28tUCHkt9XInP67OajX3IaqsGpmE5XNpGQ=,tag:XQzBoYNKZC7yRdhOUUoIqA==,type:str]
encrypted_regex: ^(data|stringData)$
version: 3.11.0
@@ -4,24 +4,24 @@ metadata:
name: s3-backup-proxy-secrets name: s3-backup-proxy-secrets
namespace: longhorn-system namespace: longhorn-system
stringData: stringData:
WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:rgc0xjmQKckyC6iT5fBP4h8g5uU=,iv:MFuYH2N5Ek+UnQT0B/VEERvHGRywbNLLriQ8ghaZVoE=,tag:iCO6vu3S1vpZRnmPRLZ+Og==,type:str] WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:g09zyM0cods6snZEw89RPFo5nHU=,iv:Ay6LYQEMbh0L80W3nMUyrlrow4HEfz2V0pjLZmO61Xk=,tag:5S7V9nT/Os+yKqmRqdd8RQ==,type:str]
WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:XUyJjhl8nzzUhHOIISSIFPiWjV9/SxR2U9S92jwG9sZCqPSZY7h33Q==,iv:Z0YDFHAheLzYO8XWA378nrr/4y4IfDRByoPa607Py2A=,tag:Pu6cvQ71jBbqh/jpxjU62Q==,type:str] WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:hRla0zAYSET9pnVFFMCixIjzPx9V+SSaFmjbRgR0+XgrJZ2/syFO+w==,iv:3EAloXiOzqAkttdrctRQu6GP8mtJK9+CwbrWnoew+Ms=,tag:xBnbE+e3W/Bg5Cq7eAytbg==,type:str]
CRYPT_PASSWORD: ENC[AES256_GCM,data:PSW/dxh8y1BDswEAy1VGwKkmuqr+yXxITkkFq2iL9W+neieuZd4Z2X8LHw==,iv:30ozLFfNQI9NzEdvDhFTJl+X00UiiaFRL+oGqB2eDHk=,tag:f0fgKn8hPZZIsE2KUMi+1A==,type:str] CRYPT_PASSWORD: ENC[AES256_GCM,data:rcGyfY/Sc0stKopzjmt/jyj1lrc0u9A7eULMgd6100ZGp0RxizHLx07lew==,iv:Pyhof8NB42fVZKfp4E5X5s1lV9VN4dxWAk7/YQn8zus=,tag:koAdJNPr9Cdqd7+oPfz2Mw==,type:str]
CRYPT_PASSWORD2: ENC[AES256_GCM,data:c/MIyhK4yg5wYaB2aZ2b3UYm0T+JJDtMYrDruipP0ZmdmO/sz33EtMNPTg==,iv:YodQc8tXVUBU2Y95lazG3MoawIyAYAPxyGAEP/z9dpY=,tag:AyMDKO1iK1c3l0kMuuxcfQ==,type:str] CRYPT_PASSWORD2: ENC[AES256_GCM,data:8zGR2BE4S0iZcecdnLfNFZWRFFV8QITEJX3zmNDWmxwM58nsLft8AOWaZQ==,iv:9ceK5agzww4oLflAjrdrX6bdP+om4n2BSjZb4cyEVyo=,tag:qg4PIzK1/xLLSjrdJRMgGQ==,type:str]
PROXY_ACCESS_KEY: ENC[AES256_GCM,data:PVKKx8YBkonrcDMFcEx0KT+UJ+g=,iv:inuyggvzMGgHi6ND8FLC4yT7Tyis98Qkg6XJf1p0/x8=,tag:eU//31BKXe+p+L6G1MxQQw==,type:str] PROXY_ACCESS_KEY: ENC[AES256_GCM,data:7jn/yVlcSyr4Yg9G60ufzNI4e5Y=,iv:xvlOl6iG06qWL8YYbgqZ7GeY67MfCVGxBw9YFvmPGrg=,tag:qMJpRalU7nm1c5kKK32aUw==,type:str]
PROXY_SECRET_KEY: ENC[AES256_GCM,data:7sWaULr5rjlAj6mUiXjAmE+RgYFRvmTpbqtuG6KfQGrSSgkqkIzD7Q==,iv:pVc3Mec6JkpV8GlHWdZW3t4zM3AnLaFjFFAZRm4HzbQ=,tag:+O645+nh6F3REnplyzFMPg==,type:str] PROXY_SECRET_KEY: ENC[AES256_GCM,data:vpyIpvVUJAxmp2NNih9+fNLzybs+O1IJpQ2sxsh3tWRdDRQ0gAoF0A==,iv:/aRx91r1sAg2EavKUW/xlSMLe2RTRlPqpZcow2ZdFyk=,tag:afX7oB6jtOSZopobXXlNgQ==,type:str]
sops: sops:
age: age:
- recipient: age15vc3geq4lsec69rnxczluvwgcexeqae02zxzjpswsuatthaasu7qzath48 - recipient: age15vc3geq4lsec69rnxczluvwgcexeqae02zxzjpswsuatthaasu7qzath48
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1MFk4SG8xUmpYd2dPU1Nq YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRDhINUFWQmpqU3FZYjI4
RWpOMWQrSkRXTjZzSkZVOWJIdGdJZ3hSNnlVClhBaWc2NjJkaFFheTZxL2IwRWw4 aGt6RHgwZGhBczVnSDd4WUlKYUFZYWwzdGhZClhSeGZzN3FacUZLNytYMmlZbzZQ
SGp0eWR1RDI0ckx3MWNLY0M2dG14T2sKLS0tIGczVXg1ZnZRTXIvNHZjaWVmQk95 NlJHRlFLYzhGeXVQSHhnd1JMVzM3Z2sKLS0tIGFWdGluVllpMDhQWVBNVGpCeTZu
SXE1RGJyOVFhQ0NnUkkwNkFkNEI5Yk0KrqnQ3qUem0Vk1Wepr4oTcrVRNm2K5h8s OXZFeUI0S1RwQ1pOWkNwRkVjTkJBTk0KkJRTInD67EBbUIpeJqknygJJ5wI+uq59
IAo92Tq7NA3w73z5ihFOcsUMO3JG0qZRJSkmamfc2omi5WlkY/ZLnw== EX64TjZ3rlCbwqwb9fhXMP2urPAfL4FZn5urGjA+E1cxsITezQoZAw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-08-26T10:24:43Z" lastmodified: "2026-08-26T10:24:51Z"
mac: ENC[AES256_GCM,data:UTajx+N1T/heelIZSaJdBr732PACcJAS4c0ghu79wHkWXtfUuRLtpd/4lCCFbToaBlX7fHsQKb/DDX5pUNhBwGCuRMBXSHKf8HSDvOUIVlMeBH+HbiDSdUvrhJX5KDD+5DLgmLcPis8sLG5nBSM1n6rkC84KQcyG3aZpJgJRPSE=,iv:DkUkP+v/1EMo2WhpVRGsgAFPEALKuH7G2BSG1qRfvBM=,tag:NMhFppGT1bvqiWChIIDeHg==,type:str] mac: ENC[AES256_GCM,data:d3edCfrD+Tz6WtlqA6VSSlI2IPbmmptvgokm8V4uoCzLJ6BKiFURcNX876rnCvxe30TT04hsh38C4jlfX1ordMv5yhN/7k/wvA5AAvAs08cilXYxwsJ4tbkd3YF5fY8jkYa8AfsH9b2b0Dj8rjKv4AyJ/s5KI8qNVw0WpyWDpnA=,iv:wP7IMRE/MHKf2pdo3Gqb0OR530fsPw6K2uJUNgmCJos=,tag:YvxS6xlRgjSoUTL/d3zCFg==,type:str]
encrypted_regex: ^(data|stringData)$ encrypted_regex: ^(data|stringData)$
version: 3.11.0 version: 3.11.0
@@ -12,3 +12,7 @@ spec:
prune: true prune: true
wait: true wait: true
retryInterval: 5s retryInterval: 5s
decryption:
provider: sops
secretRef:
name: sops-age