separate keys per app

clusters/base/infra/longhorn/longhorn-system/secret.enc.yaml

@@ -4,21 +4,21 @@ metadata:
     name: longhorn-backup-target-secret
     namespace: longhorn-system
 stringData:
-    AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:iOcapA6BKzviIBFvjRcA1dV46oo=,iv:Wk91ScSO7+0X1O3uYr6S5DGzCCOTrDq3HN13hbeWpKw=,tag:Zswokxm+FMtqsOWXCeuphQ==,type:str]
-    AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:rOVE2/0UfAk3kPxcwRQYbi9WgebCHnucFFdFRlSkiwxeb7rBKZ86Qw==,iv:i8Va5cEAPs7jqHpoqLVw02JSQwZV3oJTsLJO9Ek2Sak=,tag:YwgQZvBzZsviKbBhMaaKKA==,type:str]
-    AWS_ENDPOINTS: ENC[AES256_GCM,data:/EBiNr15q5kowjAGg153sqm28TYnQuO1WLoqkbHFHtFjeoNYoM1Ko3ffcYWF0wQNBEqAXb0f7n9hL/eXyg==,iv:FPrqkcut8onzQgmajp+rRNGMFNwjNLQoR+74EV8wbmM=,tag:nx+cMvWqcBLj7paT7gHm1w==,type:str]
+    AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:QPvQnrkMSKK4Whj7DaMONoDW7LQ=,iv:K1x/VDp4VZUnC7u86wpEfVBDW7T9cI4CZojMZMCaS+A=,tag:eFAAnCMCVjNBHnFAhzFS3w==,type:str]
+    AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:zFjxH1uqnYRrxM4Yrll9Na+mDj16aLtiJC2ZlNO+2r70JcXJqnTASQ==,iv:B7eV80h4APk3QCuoDR9EFpKs5dkMF8GjQ2v9lSF/ev8=,tag:xLbWN0Gy2idB9j2G8HZYKQ==,type:str]
+    AWS_ENDPOINTS: ENC[AES256_GCM,data:HWVPThBb5GLpiRqAuSLvmAat0XiUu5R5CMv2Fv6jdieZ11lUmbS2MBD6lx0vQDSIzC36hd6Tu0hgqtknQA==,iv:XLqWSNHgj8O0uQPeBbnN05Za8G9VW6F802CCPoUoq9A=,tag:dsKXCq21hDlJy4KTyQTp/w==,type:str]
 sops:
     age:
         - recipient: age18hhmdmupj90zjgjpxk3z5cf3lx36hcznnmqsp0fpyg50823pudrqjupydt
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtV21jcCt4T1lwTmFkV1J2
-            MTJIL3VIM1VwdDVwU2dUR1djTUxNK0RxQUhnClQ2WlpFWVVyQXQ1eUl0L3RsUzFw
-            ejdPQ2ZoUlZJZWNPSjR4V052ZHZCV0kKLS0tIGVGbFQ5OU4xdGZ4NUNMVFdKRFhh
-            R09Yb3lSSjNQMWowaU5BYkNmcE93ZjQKHk1a2Y8k+2M7rAqNiF7EHtuX1WgxXTg2
-            JcTXe2qusMYPSqwvMJLwzKzZ27Np1zk5E98DbCLEfeaj+HhZGnrWaQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqRndobTFybElvakN3c013
+            T3d6ekVUM0V4OVNEMjl1ak5XTzNPS0xKRmtVCjBXMjVybEs0bFZKN3ByWmFpWm9K
+            TVVLVVBPYmE2NnJMT3Q3dVJRa250aXcKLS0tIEVKeXBGQ0x4ZDlIWENMa3k3S3Zz
+            YUdxZXoycXBPbm5raWxFZ3owc2xkQmsKNzw+5kn73FZhApzfN/RBj4yAd7GLl5/X
+            wyXVy0te83ZDeVQvqhXLkUPsbF8CYewC6xibZSdSY/WBh2ojedJXrQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:31:17Z"
-    mac: ENC[AES256_GCM,data:EtHEGJA/K5HiZDKe2SWjm5x+5Py2RtLfvmVZhOfjHafCVtxIx5QloxTxr8bIdH2tBsHcND6QSSE13hR73lfKcrmQ1Bm1HlABtputlszmsu/ZNkCEAscRjbf3kf5ditxMBLK1WDBmF7RRtsuVBHXu4SsYIXAojh+k+JzbDD56JmM=,iv:R6+NBN14ZYoRBpze4MxbYG9uKsXf6ZXMj0MOmu6yK18=,tag:u10RF4ZGhUahijb4IGCe3g==,type:str]
+    lastmodified: "2026-08-11T19:04:53Z"
+    mac: ENC[AES256_GCM,data:SO2tMq3UA0JcsTZyH3oNhmCsWZ2OhxEmJSn1b/3sH78cZvWalXUsdQqD1GBArFgS+oCSaSgarl2Ve06iNJtM8k6oq0fDkm0dxsLou+67qHlle4CbkP1KPFEQid2Nx8o/5b6cjI2zHz3bYmQTQh9DD7mE8roqo6lX3rYY35MpPJw=,iv:Ad13teWF+lZfzOY/PIALI3/Wohn/0BBoSuE0mtiH8/Y=,tag:sQVQfH0mFFMLnF4zbRC2VQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/infra/longhorn/s3-backup-proxy/secret.enc.yaml

@@ -4,24 +4,24 @@ metadata:
     name: s3-backup-proxy-secrets
     namespace: longhorn-system
 stringData:
-    WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:kyC+I0ONI9rA8vn5cDvJAmq7Jc4=,iv:buchhL9pym/eK3/8GkSnffhXL/F7ua7ntR/0sd1RW6g=,tag:NIdZtj0UGbK3dMxaJxhf5A==,type:str]
-    WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:hxI2ZHcL+p+DJ/citZgf8n4EzaRJoulzdTO0aqIkAndUG+huC7jXmw==,iv:Th/tFpEnkEbyIYkuZYJToTWlzmc7XWJuvFyHRyvF/LY=,tag:++aIcShe5F8XLrWuukzLuw==,type:str]
-    CRYPT_PASSWORD: ENC[AES256_GCM,data:nIIfDcJIErQ9r/dqP3FEmul6kvnjTKyN0lFdvxhZeE8B0loGLQqVY7GN6Q==,iv:VuyZY7UJ23fZg4VSS4cMXyz37zCR+sFTofWD0XNzJWI=,tag:LmpVBMh2GOQHRIjRsRXFrw==,type:str]
-    CRYPT_PASSWORD2: ENC[AES256_GCM,data:qR22z+qSiwJJRikrYQs3FVXJ1qZBKEWhD68kJmLxK7wgqlQht/IjZ5DmaA==,iv:WFlD9EdcIEh+Ue+Oj46zbOuRCJ/WVYaohF1b928Ky8g=,tag:f3VHN4aeaSxDcn9+WyH+UA==,type:str]
-    PROXY_ACCESS_KEY: ENC[AES256_GCM,data:hwviUpa1L7h25Rx7Lbk+gKtjoJI=,iv:1W3Xxt7FnR1EM5szuUz5a7iu627EGlVt/lMMIgTEsCY=,tag:JcQwQw6nwhj1vD6mrCODsA==,type:str]
-    PROXY_SECRET_KEY: ENC[AES256_GCM,data:3botHi04CbgdaMREJI8Il4I3lUeD+XNBNo3AjgSMRLKWS+o5wDXV1w==,iv:Okaj0P7u7nx9H+3HOQ548Jct/embmOwjKFufLK9pHiI=,tag:ED5LSpbcIBn0T7W0PiesaA==,type:str]
+    WASABI_ACCESS_KEY_ID: ENC[AES256_GCM,data:YP9bOIarPh6DJVo0vevVN2T3c3A=,iv:bTKwVx/Ij+GMCisO4WEDCJz8rsHe8PtSET/h4+P2dyM=,tag:fdXr+wAx/SvKNwlYlmKvRw==,type:str]
+    WASABI_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:Aa0ZYxiVipW2g4mGzyhCspVF67m7hnouMg4Tcr6kSinY+ULpHtEDBA==,iv:txr1ual5z7dXi/27T3FOMsccQtSPObHpg+7IfxvfWuw=,tag:MW7fl0iRB/6flbN+iA+2QA==,type:str]
+    CRYPT_PASSWORD: ENC[AES256_GCM,data:x8kMqkX4OzduFbW1BGc2EcFxaVm4ah4BBgLNxzQfIHeuL3UuJXt+Cj8isg==,iv:xoFXHqUDK/yamkDaSaQaMIkC7p+q/4qtsrYNwKT7944=,tag:92nej0/10KVTsugwFzdB0w==,type:str]
+    CRYPT_PASSWORD2: ENC[AES256_GCM,data:TdcfVmkgd36Hq80XaLRM8lY2dUq95h4v4ONCy/O7DOMoRwVxDUktgCRgNA==,iv:9EluJOnjKjCo2272sIeJ58iFu54DKfbkX785ZySj3C0=,tag:WUMKDLASA9grCilKNLVmZA==,type:str]
+    PROXY_ACCESS_KEY: ENC[AES256_GCM,data:A1ZF8ejApPiH3nISLvrO7+vWTzM=,iv:fSFwYL/6zxtK4wkz+G3WItzq6P92eGviQ7WaVquDYuk=,tag:n9fjuW/cXU7QWe5IUkXf/w==,type:str]
+    PROXY_SECRET_KEY: ENC[AES256_GCM,data:iU6GHL09tzxgyxcl6wKlDNhaO6YVYS/8yy/qCPbSxE3RlHk0Yw9EnQ==,iv:i0R6SzOJlEDsyEhxLrLMVaJu7ZAzNsnnmdyrxbv6ys0=,tag:h290ZIcFevBQeImcfqQbjg==,type:str]
 sops:
     age:
         - recipient: age15vc3geq4lsec69rnxczluvwgcexeqae02zxzjpswsuatthaasu7qzath48
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpSGt1K0dPc0c1c2pKS2JL
-            TnpnSmk4aHUzS3cyVDRKS2ZseTZtNzZFTndjCjdaTDNweTNBd0Zjb0JZSi9kdVA0
-            YUhEd1RrVUhtczNDUmxCVm5mbkpFdW8KLS0tIEJPK2pUVGwweHdGR01jMWMra1I1
-            SkVBYXBDVU5QQklJWTlUZEtNZlZzYVUKLJk93Tq+2xGcR2z7V5fUuOCnYDomxiKZ
-            Ed/bTZQcsalLMSAJzNHrMGFYQX94Bp2jrVYbu9qapluT3vAD4YuxLg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxR0hwMUhqVHFJSVBUckZW
+            cTdCeUx0bC8zdjB5dmhRNDJrc1ZOTnY4WmxVCjJNZEUrMEFEYmNGUWQxbHRZL3Bj
+            S3dnOGhENlJkV2oxR1RhSmdCWXczVWsKLS0tIHIxSnVSdGtKaE52UHNtaWVnRUNW
+            Unc4QUJ3YmF3N2xVVDg2VjBrZW80QmsKZ5HiOTiYRCrfWJf2Qpxyc4D+1wNWxHzK
+            hCe6G9ANAX/EAlGwmOIn3k7cFbN1VRt50TV/UCj+FsJBuifUYVMvTQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:31:18Z"
-    mac: ENC[AES256_GCM,data:v7tRWrNjeP4IzRs7ZOvZN9wJlTlHmOet9HnR+mdJL8NnhLylXVZglMRNMrtAE7ETw9b12ceI8aHbVUPy7O1IFNvJ04x1MXjyaDuuHsFfZg1K4ifTWLKR3Y/mHXOHP1Vz3eHJnNVa7nDhH1IO1FbAg+U1zPkvdQRy1COhiE7rcq0=,iv:JHbuNzICGiF7H5tQRE85zqlf4KWVdyXU7lDjWBYaOjw=,tag:Gy8PaSRWzIQMaQy4qhRypw==,type:str]
+    lastmodified: "2026-08-11T18:28:22Z"
+    mac: ENC[AES256_GCM,data:eICyFKuJAyCE8ZbdpWc4rOHRxtnrFhdxTeznIWXie5CrHRyo+n21CPg5L/VQUy2LF1rXINIDJRNqQWcLXJEXDKWGpqyaL/YcW+OawpbCq0DMJAe/DsvBdy5ySwGFdRlwU5x7ivVjsHKnsr8UgcbHdE/ZVRq93nZOfZlUepjb1u0=,iv:l+SFwIobBbxeZNUmwK6U9W5YpLh4t5GOtnRIH10Z7W4=,tag:6Zs+tneNcF1d5i43ns6Rmw==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0