From 2bcf3d0c5dd6ae0e9975b93ff149afdc5b9c05c4 Mon Sep 17 00:00:00 2001 From: Robert Burgess Date: Mon, 12 Aug 2024 15:48:28 -0400 Subject: [PATCH] update --- .sops.yaml | 2 +- infrastructure/cloudflare/kustomization.yaml | 2 - infrastructure/cloudflare/secrets.yaml | 46 ++++++++++---------- 3 files changed, 24 insertions(+), 26 deletions(-) diff --git a/.sops.yaml b/.sops.yaml index 3321260..7f6e25e 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -1,3 +1,3 @@ creation_rules: -- encrypted_regex: "^(token)$" +- encrypted_regex: "^(stringData|token)$" age: age1t4epxq5lzcnyj4xjav9jgnvnyaucyk243y4np9h78fx3k8lc55lqv6uu4z diff --git a/infrastructure/cloudflare/kustomization.yaml b/infrastructure/cloudflare/kustomization.yaml index 28a6929..e6be385 100644 --- a/infrastructure/cloudflare/kustomization.yaml +++ b/infrastructure/cloudflare/kustomization.yaml @@ -4,6 +4,4 @@ metadata: name: cloudflare namespace: cloudflare resources: -- namespace.yaml -- secrets.yaml - deployment.yaml diff --git a/infrastructure/cloudflare/secrets.yaml b/infrastructure/cloudflare/secrets.yaml index fb4a9b5..b2cfc7e 100644 --- a/infrastructure/cloudflare/secrets.yaml +++ b/infrastructure/cloudflare/secrets.yaml @@ -1,27 +1,27 @@ apiVersion: v1 kind: Secret metadata: - name: cloudflare-token - namespace: cloudflare -data: - token: ENC[AES256_GCM,data:MeAb854uwBi7ELRZwwJCbuuOAr1HD+JhfdEALu+twexHO+y7935+ZSVGOuhRDnSnihZ2dnI9GayPRqzvfecLUvu5Av7aPDlwMePCJJxhCBbdp0Igj3cZKotC67rH5/qOgtEYpkbqbcb6P0yCytgfaAthqyVcnm/3m6dVDi5H/fveN0Js/5ZmvgyZs0KWsKYXpybGhzr5mdwqza8cbdTVgNpcHbX6B1c9sCun079AWY7zpu2nnv+wbQ==,iv:XGfXGLOUdDPAuEavfs4R+WzRRuL8x4DI0qh44FN2rNQ=,tag:Ugrtirdj6Tdw/DaRZ4nq2A==,type:str] + labelsname: cloudflare-token + namespace: cloudflare +stringData: + token: ENC[AES256_GCM,data:1f71SZqUzsg8omXkFf+lk6HRWY5dFoSRcXSPl5nmbTd9sxtSq/tBrM0XwcjSp2Drf6s5GHTypg2MM8hdo0VqjM+Iu/q2y1Ve23PaItBSTdhdeQR/0tWulXY3rdrD9rltw1Pg08O/2VFHFpeBaSNrjPYBzuwgBMupuIOHKgFHWdUnRoi4NZuTxDR+xG7r5hCB04Rs4S4n06QDyvUkx43A3qFtcW32cXmlifY2A/J73Anrq+01zSRpWQ==,iv:yQHQwf/5yVx8UadNVfl9jBcO9he9ZcEE7Ytc+MwtuOs=,tag:YHmVqKX6tpsnQ63wTGhO8g==,type:str] sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1t4epxq5lzcnyj4xjav9jgnvnyaucyk243y4np9h78fx3k8lc55lqv6uu4z - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4bHhOQmg0Qy9EMWhUUGwx - dExua2xUcldqaG93R3pxQnNaQ1J3OHFFV2xJCkJHWWc5amtEL2tqY3ZBZzZPdWdB - bkszNkZmWStZVUpHOUJZZERSMVBoOVEKLS0tIDNWSHJ1blFHVUt1RjZCQXRzRllr - Z0xjdWp6Vlh0dGI0NjhzN1laQis5eTgKwC8SVX+zcbZSKEnYI2HXROghqLcy9e0n - ndGw43qhaqJBra2RBfPHk6zRfOaVDpiZI07Hw3yIrDQXVjKNV+dHuQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-08-12T17:25:22Z" - mac: ENC[AES256_GCM,data:ohnXisrS5DQB9/mDA8fiWI0Ha6Iv6/eoovKbhBaoxd3X3S+F7mbCCHe3cXl0XvIUMf80GfZ/4A0Ok7D8NSbQrWNYmXA6A2A6R7U6eStGBWhJfTM6GdAFUl+FEnrHx6hANsv2Iib4rd4x9tHmvNqVvXHo9zeJI/g5ITyJkNig7Ew=,iv:hrjf4xHI8inCME4aUqwj1DPZaJHKJuIdNkGXBJ+//B8=,tag:oj4qRncLxpnrUWhRLeqBfA==,type:str] - pgp: [] - encrypted_regex: ^(token)$ - version: 3.9.0 + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1t4epxq5lzcnyj4xjav9jgnvnyaucyk243y4np9h78fx3k8lc55lqv6uu4z + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkK2xFSzh4aHhPN3BuaVRT + dVNKcXFoWWtUbTI1Yzk4czNGQk1ET0FQWTJBCkRkTWJHVDVmZ2JTSUtVeWFwMUhz + OXE0SmIyNnlrL2QwU0tHWHBoKzBMWHMKLS0tIGFrVlIxR0MrcUVtQ21XQkcxSjJw + R3ZQOG1LbGIvWHg5YlFPWGNNYnVUL1kKjSmnrCNxUP5Zn2nZ06M8jwI4TQ2kJABt + qNjr+kgH8mnBYQMvtFih9kysrUHGeZ3FUoaIB7SiDHNC/VFc5y4LJQ== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2024-08-12T19:48:07Z" + mac: ENC[AES256_GCM,data:lyPJsrbM1D4JwHcTGhgnecy6JcrN/q+J72N9Uqux8VJwuXMbgypGFYU/SAwcaoVXL/UXC6gHtFvoc+MGUgJtuuGLvG0BJ5R1yUAdX2/9d83dJrGBJrlYGfikXskPyPBwfga721QYkosm5EXMXBaJ4lfpcZiTOIfzrFDUt1NCFN8=,iv:9R6IkO1ii3hkrsY3mkhj/19i+hyFswsdSTS04XRvSC4=,tag:YelczpXkQF7pcZ6Fpptrow==,type:str] + pgp: [] + encrypted_regex: ^(token)$ + version: 3.9.0