moving to dormant project

2026-04-24 16:19:16 +01:00
parent 254b23ff7a
commit 1d06290bdc
15 changed files with 18 additions and 444 deletions
@@ -7,6 +7,4 @@ resources:
  # - ../../base
  # - ingressroute.yaml
  - storage/persistentvolumeclaim.yaml
-
-# generators:
-  # - secret-generator.yaml
+  - secret.sealed.secret.yaml
@@ -1,10 +0,0 @@
-apiVersion: viaduct.ai/v1
-kind: ksops
-metadata:
-  name: authentik-secret-generator
-  annotations:
-    config.kubernetes.io/function: |
-      exec:
-        path: ksops
-files:
-  - ./secret.secret.yaml
@@ -0,0 +1,15 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: authentik-secrets
+  namespace: security
+spec:
+  encryptedData:
+    db_password: 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
+    secret_key: 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
+  template:
+    metadata:
+      name: authentik-secrets
+      namespace: security
+    type: Opaque
@@ -1,24 +0,0 @@
-apiVersion: ENC[AES256_GCM,data:nhU=,iv:+igd9RTOMy7mwVDjx05WQIdytoCrWLjcnP2Wq8xBS1s=,tag:61hSvgd/g88pjdhPW6OQsg==,type:str]
-kind: ENC[AES256_GCM,data:T9Wrg72s,iv:1+cSHl0Dwwc1ddnw4dQI26r8/aEfMAPpsmz6BxxetrQ=,tag:y8HSeCa9gl7i+rW1Qpzc0Q==,type:str]
-metadata:
-    name: ENC[AES256_GCM,data:VNJIfO/EtW0Pd3xVKG2R1VM=,iv:53UVCYVV07Qdlbq7j9qghT/DHqv+98muUFpapoD7VBs=,tag:hKBPwm7dudPUlRCgp4D9/g==,type:str]
-    namespace: ENC[AES256_GCM,data:/STezL4E9q4=,iv:mImCvy0lheb1px4+VEm7Z2c6qgQFerRnciPUy+arG2o=,tag:ZJxPwZ7pO6j+8xgHSDK/Og==,type:str]
-type: ENC[AES256_GCM,data:ypwwk80m,iv:gbfQojFcmmGCtALVkCcICc4Z4dDXQK8clTGIMkOMOkY=,tag:Y0AskWriaazAlDkNN6Ufuw==,type:str]
-stringData:
-    db_password: ENC[AES256_GCM,data:vx+4cvOPHycDmgp3fhTqsRC6ZjdviJy3svt5Kuhtzg48l8DNlxQpTvLgtdGYZmGS,iv:k84Nwxnuyc3D9ceXuMPhSTwzRrCucyUpJ/b7lrUTBlI=,tag:JOMAcJN9frgVkpeV8pm39A==,type:str]
-    secret_key: ENC[AES256_GCM,data:ZhH2xkHf/wLXiooCBP+9ZctsGSOMW1de4xz8IGPS0z1GSTReM9h7sSHhw1vJl7iHsr8ne4ehXQYvLd/QcvLVShS2WVDSt1wXcKejnHgRTBk=,iv:xFSp0TRzBl0c4hx6UPv2CdFx9fMQ/oAes8JpWf1Zj7U=,tag:j8jrfilCe2gfyQr1kls4WQ==,type:str]
-sops:
-    age:
-        - recipient: age1s0gzgh8c00tgnkgxrqyz2nu0k56xvc9ev3jdenkmu90egux9xfmsxvvj43
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSdWlWdTRWOWhTNnFocWlI
-            QTlLNmJtUkZLSUNOdi9yQmNVQkVkQi94WFc4Cno2NjJCeURlc3FZd0hTK0IzUXJq
-            STZtU0pBZ25SaFJqMFZNaE41a1p0SkEKLS0tIFg2VlphajFlSjdtSFM1NTVZdjZm
-            SmVrN2pFQ0MzVS9aUUtrVnFUaUd6TzAKksOI8fvGkE8/Qmk8yT7jvvakFWSLDYKa
-            7/pcTR0msB9P8zowsfe4pL+BJIObctXpyTRPCyyJg7/vOHqhuUv9Wg==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-19T23:31:55Z"
-    mac: ENC[AES256_GCM,data:sRk5KdZXohSwRWs6jP/jUA1OMBgnxKQu82Wp2w/4q1K0XXe1KRSDyiIIklgdK6JAW5U0291EzKLg8KgTks3YsibteA4L7eFbwFDTXOn7OJwjhKlzTZXqxEjmGHmsKLa7v8Y8nKuJqn2CUrfUuLzyvUaQN2tXfigq/DPC0HyROQs=,iv:zzWBrUcOumbaDArX9xRPzz3J98fA9wAgC1cKafejWT8=,tag:DL9o2cA5Uslq6WWGzlt8QA==,type:str]
-    unencrypted_suffix: _unencrypted
-    version: 3.12.2
@@ -1,32 +0,0 @@
-# Optional static PV example for NFS-backed storage.
-# This file is not referenced from kustomization.yaml by default because the
-# default storage flow uses dynamic provisioning via the Longhorn PVC.
-#
-# To use this file:
-#   1. Add storage/persistentvolume-nfs.yaml to resources in this overlay.
-#   2. Update persistentvolumeclaim.yaml to set:
-#        storageClassName: nfs-shared
-#        volumeName: app-data
-#        accessModes: [ReadWriteMany]
-#   3. Replace the placeholder NFS server and export path below.
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: app-data
-spec:
-  capacity:
-    storage: 10Gi
-  accessModes:
-    - ReadWriteMany
-  persistentVolumeReclaimPolicy: Retain
-  claimRef:
-    apiVersion: v1
-    kind: PersistentVolumeClaim
-    name: app-data
-    namespace: security
-  storageClassName: nfs-shared
-  mountOptions:
-    - nfsvers=4.1
-  nfs:
-    server: nfs.example.internal
-    path: /exports/app-data