From 74239c9152cacc9a672001b031a69bd1a7198dbc Mon Sep 17 00:00:00 2001
From: Peter Kurfer <peter@icb4dc0.de>
Date: Wed, 17 Apr 2024 21:16:38 +0200
Subject: [PATCH] chore: migrate external-dns to git-age

---
 external-dns/.gitattributes                   |  1 +
 .../config/external-dns-secrets.enc.yaml      | 36 -------------------
 external-dns/kustomization.yaml               |  1 +
 external-dns/resources/secret.yaml            |  7 ++++
 4 files changed, 9 insertions(+), 36 deletions(-)
 create mode 100644 external-dns/.gitattributes
 delete mode 100644 external-dns/config/external-dns-secrets.enc.yaml
 create mode 100644 external-dns/resources/secret.yaml

diff --git a/external-dns/.gitattributes b/external-dns/.gitattributes
new file mode 100644
index 0000000..72303bc
--- /dev/null
+++ b/external-dns/.gitattributes
@@ -0,0 +1 @@
+**/secret.yaml filter=age diff=age merge=age -text
diff --git a/external-dns/config/external-dns-secrets.enc.yaml b/external-dns/config/external-dns-secrets.enc.yaml
deleted file mode 100644
index 3d9e8fb..0000000
--- a/external-dns/config/external-dns-secrets.enc.yaml
+++ /dev/null
@@ -1,36 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name: external-dns-secrets
-type: Opaque
-stringData:
-    CF_API_TOKEN: ENC[AES256_GCM,data:zN3eidkDiRiSRx5neWjBh6H//IcDEi00Up3kKpghzUHAHHin+np3cQ==,iv:yWWzvUJyi6Go3lhtPzvlvzFJKQ9+DU4BbjxO2R43It0=,tag:hXS+HtGKmPFsGsqgQg444w==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age18e0w4jn03n66qwg8h3rjstz7g5zx2vhvz28aterkfkfetrxtpuysftp6we
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQYjg0Rnd1L0tXeThlZVNu
-            OE1qY0VWVXE2R1VzUnU5UGhFR1hpZEdaTEVNCkN5TEtBQkMrcnJINUcwcC9ZbmpQ
-            ZXVCSVUxNzdyN0lSZlI2QVpzUXUzbFkKLS0tIGVja1kxWGpnS2NuTnhobmMwazBl
-            d1V2K3NTMkVNSjlORkdqWnlucDVpcEEKpWV8NyV+CCuzNpEO+68fPQN7y6udc7VS
-            qw59UYYFlZSo6tV9U3okupDFoNQibMKYqo67yNOuhQNot/ka72PAjw==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1yssdnqk90tn6zzggmwt70krndw04yfk9hwzdac3wsgfxmttngd7q89qzjr
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtL2tKRXdzZ3ExdFRSdDJi
-            TUMvOVNORzdkVkk5TW9ISkpkZy9nbC84M1VRCkJyMzV1bzBCbnBoT2dLQzJXcGJS
-            cVdHaElpd3A3ZnBNRDYrS1JKK3ZaaGcKLS0tIG9nWXRpTjNLc3hIYWovSHNDWGFX
-            K1pycWpFQ0t1ZDlJQnh1YVJ5WFVRNDgKy8P9W8EBGrsd36lcMpaAsAAp93RLnOHQ
-            BroVhhdcfxhS/9H9crSZAw6nSROLjySvgJc46jj255FwE2j0biLQCw==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-02-13T18:56:54Z"
-    mac: ENC[AES256_GCM,data:feslQ6tRE3ngW9WBsdQGtVCBKw7TCPdrsfbjEkRCoEybgs6eyVh6c9tjq1JmocKQ7a5KHzIvr9dM2x4Kia/6hpocaztWVP3RO+Rw5CWqOmsl6WyWjzFFuktKU8vEqwOLIvgs4v6V+4fnhBUEHtLsSxbCCG9hbsibYguWiPnnFaE=,iv:JOvnroj06nBENOwhqdnF0AQ8qP4lxdhnx+QGg1Q0qNY=,tag:Pmj7zfwHUoOf9MUYp8RPyw==,type:str]
-    pgp: []
-    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
-    version: 3.8.1
diff --git a/external-dns/kustomization.yaml b/external-dns/kustomization.yaml
index c6fbf66..5b5547f 100644
--- a/external-dns/kustomization.yaml
+++ b/external-dns/kustomization.yaml
@@ -18,6 +18,7 @@ resources:
   - resources/rbac/service_account.yaml
   - resources/rbac/cluster_role.yaml
   - resources/rbac/cluster_role_binding.yaml
+  - resources/secret.yaml
   - resources/deployment.yaml
 
 generators:
diff --git a/external-dns/resources/secret.yaml b/external-dns/resources/secret.yaml
new file mode 100644
index 0000000..877a4c4
--- /dev/null
+++ b/external-dns/resources/secret.yaml
@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> X25519 s9Ioi6khzpHlKEioGpBrxxhPrh2+dUY7xEgWRjPOtmM
+RX5bRQOsPb0FOyAsZ3vyiYEDcYqOPjIhQz1/X9Gk3sI
+--- 2V1OLS+KZsH5zoblYOIVi5Rh3Ao43+JZsARr9pxk41c
+OÀï1<€Kƒ]
++:ÕŸCèZ¬šp)‹-aqj|A0`¦-=ØÃùiÌLËsÕ§kæðËÜ,|PäÕâavÍï‹¢ ¼u.vx<iêB|“­€\J•ü‘„·SâR¨ö¡GÝÝ;E²¯è<wçu¾Ü%R? àƒâÿßÔæ˜ÿàM€³áYOon{CÍb¦ª5dÔ9"o§nå™el’5‘O©8=$Dª™yДhèØÜ	áˆQq
+Ýý®:
\ No newline at end of file