no

argocd-deployment/Untitled-1.yaml

@@ -0,0 +1,72 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cloudflared
+  namespace: cloudflared
+  annotations:
+    reloader.stakater.com/auto: "true"
+spec:
+  selector:
+    matchLabels:
+      app: cloudflared
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        app: cloudflared
+    spec:
+      containers:
+        - name: cloudflared
+          image: docker.io/cloudflare/cloudflared:2024.5.0
+          args:
+            - tunnel
+            - --config
+            - /etc/cloudflared/config/config.yaml
+            - run
+            - $(TunnelID)
+          env:
+            # https://github.com/cloudflare/cloudflared/blob/master/cmd/cloudflared/tunnel/cmd.go
+            # https://github.com/cloudflare/cloudflared/blob/master/cmd/cloudflared/tunnel/subcommands.go
+            - name: TunnelID
+              valueFrom:
+                secretKeyRef:
+                  name: cloudflared
+                  key: TunnelID
+            - name: NO_AUTOUPDATE
+              value: "true"
+            - name: TUNNEL_ORIGIN_SERVER_NAME
+              value: cloudflared-test.<path:stringreplacesecret#domain>
+            - name: TUNNEL_CRED_FILE
+              value: /etc/cloudflared/creds/credentials.json
+            - name: TUNNEL_METRICS
+              value: 0.0.0.0:2000
+            - name: TUNNEL_TRANSPORT_PROTOCOL
+              value: quic
+            - name: TUNNEL_ORIGIN_ENABLE_HTTP2
+              value: "true"
+            - name: TUNNEL_POST_QUANTUM
+              value: "true"
+          livenessProbe:
+            httpGet:
+              path: /ready
+              port: 2000
+            failureThreshold: 1
+            initialDelaySeconds: 10
+            periodSeconds: 10
+          volumeMounts:
+            - name: config
+              mountPath: /etc/cloudflared/config
+              readOnly: true
+            - name: creds
+              mountPath: /etc/cloudflared/creds
+              readOnly: true
+      volumes:
+        - name: creds
+          secret:
+            secretName: cloudflared
+        - name: config
+          configMap:
+            name: cloudflared
+            items:
+              - key: config.yaml
+                path: config.yaml

simplysyncedllc-com/prod/secrets.yaml

@@ -1,27 +1,27 @@
 apiVersion: v1
 kind: Secret
 metadata:
-    labelsname: cf-secrets
+  labelsname: cf-secrets
-    namespace: kx3dex-radio
+  namespace: kx3dex-radio
 data:
-    token: ENC[AES256_GCM,data:4WzeRqXqV5bvXMrHph1+4O3y1Tlh1eaha6ho7+bVaT2zOkqMAB68ZsaYDeZDE5XDSMBT9CBufOz6jqAvXYHJtllmylTS2aWiepQGuUgOCwiNaYPh2vKVXDL1CFTBg8liWhR1B6qV6SttQxJhqQnIsZX28IC85nfX4brp9OyjfzguazhgCljnZtLCJikX0/d7dBLrSONJGqLkWcKmhy1ZWic7QH73aoW7irzhGPfoF/IGKCkZuwRAJw==,iv:hBH9rXXTAwCGFE5kBRF59tlsAe0K8UXG//qSPqUOZo0=,tag:GWJ3dtoTlPeb2PS58a5TCg==,type:str]
+  token: ENC[AES256_GCM,data:4WzeRqXqV5bvXMrHph1+4O3y1Tlh1eaha6ho7+bVaT2zOkqMAB68ZsaYDeZDE5XDSMBT9CBufOz6jqAvXYHJtllmylTS2aWiepQGuUgOCwiNaYPh2vKVXDL1CFTBg8liWhR1B6qV6SttQxJhqQnIsZX28IC85nfX4brp9OyjfzguazhgCljnZtLCJikX0/d7dBLrSONJGqLkWcKmhy1ZWic7QH73aoW7irzhGPfoF/IGKCkZuwRAJw==,iv:hBH9rXXTAwCGFE5kBRF59tlsAe0K8UXG//qSPqUOZo0=,tag:GWJ3dtoTlPeb2PS58a5TCg==,type:str]
 sops:
-    kms: []
+  kms: []
-    gcp_kms: []
+  gcp_kms: []
-    azure_kv: []
+  azure_kv: []
-    hc_vault: []
+  hc_vault: []
-    age:
+  age:
-        - recipient: age13t6wwv7jwhzfwu5tp5rg0cm8dytd67hp003exk0e0vkuun6cq5wqu83x5n
+  - recipient: age13t6wwv7jwhzfwu5tp5rg0cm8dytd67hp003exk0e0vkuun6cq5wqu83x5n
-          enc: |
+    enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
+      -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEVFVHSnEwRndzS3F3S2pq
+      YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEVFVHSnEwRndzS3F3S2pq
-            V1U1VGtsV3R6dHovN0xTbHhlSVRCNnBvdTFRClVReXpQdC84NXpXdCtTeVlhMnVC
+      V1U1VGtsV3R6dHovN0xTbHhlSVRCNnBvdTFRClVReXpQdC84NXpXdCtTeVlhMnVC
-            c3ZXOVFGUjNQM3gzNlV2Z3RUL2pybEkKLS0tIEZVemdhVUNMVDZPVUtiQnFWVloy
+      c3ZXOVFGUjNQM3gzNlV2Z3RUL2pybEkKLS0tIEZVemdhVUNMVDZPVUtiQnFWVloy
-            VWNLUExoV0JHRmdNdFk2V3NRQzBQS2MKpcLbt0YD+9mZTfbGhaId8rai3Sk9YWMQ
+      VWNLUExoV0JHRmdNdFk2V3NRQzBQS2MKpcLbt0YD+9mZTfbGhaId8rai3Sk9YWMQ
-            nUhkJOQIq6SNh1SEar2VmgkA+NlmrR1o70lGUW8OhhJxSvWzo2s53g==
+      nUhkJOQIq6SNh1SEar2VmgkA+NlmrR1o70lGUW8OhhJxSvWzo2s53g==
-            -----END AGE ENCRYPTED FILE-----
+      -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-05-14T16:29:55Z"
+  lastmodified: "2024-05-14T16:29:55Z"
-    mac: ENC[AES256_GCM,data:RlLwRaTKPKnnEjqR2iu3yvyczrAPqBcFfWA6LFzs068lTpiWb6NFSBQ0cya63caFgz11L4fMA0iocIlNOtrSoKtjfIM5agWkxfgfa05svfnqNfDwyiWiYIpk772nMy1XtX7kbNL/R8behjCo50Mf25ishCSlp1WUCtI1claZHLw=,iv:kqU8h27+V5t6lDqaGldm3+EHERS+XvK33KFzcJCCPDA=,tag:DqzGn2sdBEOsxQ+4NfjFRw==,type:str]
+  mac: ENC[AES256_GCM,data:RlLwRaTKPKnnEjqR2iu3yvyczrAPqBcFfWA6LFzs068lTpiWb6NFSBQ0cya63caFgz11L4fMA0iocIlNOtrSoKtjfIM5agWkxfgfa05svfnqNfDwyiWiYIpk772nMy1XtX7kbNL/R8behjCo50Mf25ishCSlp1WUCtI1claZHLw=,iv:kqU8h27+V5t6lDqaGldm3+EHERS+XvK33KFzcJCCPDA=,tag:DqzGn2sdBEOsxQ+4NfjFRw==,type:str]
-    pgp: []
+  pgp: []
-    encrypted_regex: ^(token)$
+  encrypted_regex: ^(token)$
-    version: 3.8.1
+  version: 3.8.1