chore(s3-csi): switch to git-age
All checks were successful
Renovate / renovate (push) Successful in 32s

This commit is contained in:
Peter 2024-04-27 18:09:44 +02:00
parent a91561f513
commit eb8036898d
Signed by: prskr
GPG key ID: F56BED6903BC5E37
6 changed files with 27 additions and 55 deletions

1
s3-csi/.gitattributes vendored Normal file
View file

@ -0,0 +1 @@
secret.*.yaml filter=age diff=age merge=age -text

View file

@ -1,38 +0,0 @@
apiVersion: v1
kind: Secret
metadata:
name: csi-s3-secret
type: Opaque
stringData:
accessKeyID: ENC[AES256_GCM,data:xXtMVs8lcYBuaii8oYdVt91NzkwOkWavznEEZF8l07c=,iv:s8CWIw0Oz5yoF/SycISaoypeD9j+IWn67KK49unUjSo=,tag:7z/2XEtcoMEU+aBR8c0nDA==,type:str]
secretAccessKey: ENC[AES256_GCM,data:NeruTGq0aF5gsKas2ORCHB9R4ierD+f+8ccfmLzotL01Hpu8vWBtJF3uZoIPshPbbNOxYqGcEvr3EGj3f8+3Pg==,iv:Ml0i1Ocp2QOjhjw5/hfv4NMzulYXBZHv8KDdvEH22X4=,tag:yEdx4u4ErGIafG6JVOAADQ==,type:str]
endpoint: ENC[AES256_GCM,data:H8qcNELbxrl1y7jTDUusGxhHnXbanExwNEwT16XUB/BnCb3upAjzAhXmxcrVKUVk5IfsAlCmX+I/Tg+mOFAgUcg=,iv:AafzfoVDdtuw2iIMl5/obp0QWIoFN6Kmk5D1X/20Sig=,tag:NtX31/hzS/+ACTsNbC8rIg==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age:
- recipient: age18e0w4jn03n66qwg8h3rjstz7g5zx2vhvz28aterkfkfetrxtpuysftp6we
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEK0dvNXlwVElnekNuK2VV
R2U3cDRUQWVudmNQT1BqbGpTNysrR3RtVWg4CnljSldwM1o4OGJGQ2JiVUJEN0Jv
K3NJVHU3c2NCbEordkdVeG13NDQ2MGMKLS0tIEVPQXhOUUttZVZka3FFOUoxM05n
ODdkb2ErNFlsWXliZVZSYlZldmtUTzQKJLVrS1v4EhnoObtEpezdAz7Osm65ej1D
ygohQ1nMl5gQJsHpC7jTQUgAD6VHFter1PDCInL6TBK/ZIu9SQZYWw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1yssdnqk90tn6zzggmwt70krndw04yfk9hwzdac3wsgfxmttngd7q89qzjr
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMVDFndXN5cnRHZ1NQY09k
UnkyK2hMbjZ5amtMSjVNOTJWYmgvWmJKUGhBCjZhbElNRVFFdWl6SlcyNnk3TDU0
ZURHZ1hQcGlvZjFCalJaNmRLaWV3RDgKLS0tIGFpUTB6RHdCdnlVOVRPdEh1bzRk
N1BoeU5MY1hFMy9VVkhEeUFrK3JVOUUKunVPI8E7F8BOoaPd4LidbITubBsbPzn5
L3vShqSiwVJW7Nq8i4k0MA3geCHTk0zEj+Tj8Ncbkj37UjAhdawi4A==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-11-19T13:40:05Z"
mac: ENC[AES256_GCM,data:JZa+bnqgii3JxeiImFyZhojQqpPOb3R6dzcc+XaNMA1tEa5E5Q8apqFpipUbfWYNawKw/iR8a4GvsfriLnIXLcTaKmz8FrdoXeLUZyzWWVjHFApWqKndmB63bp3mNupwsfauhNjvNOMVEAXGMQ8iCMIhdYx43PTnktSRkDPmKd4=,iv:NZxfwRwzy7S9vkc6rfZVTBzy8YAgyCUzMzmRP2B5xSk=,tag:Yg1rteLHY735pnPxPSpe6g==,type:str]
pgp: []
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
version: 3.8.1

View file

@ -1,7 +1,7 @@
images:
registrar: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.1
provisioner: registry.k8s.io/sig-storage/csi-provisioner:v3.6.2
csi: code.icb4dc0.de/infrastructure/csi-s3:0.38.3
registrar: registrar
provisioner: provisioner
csi: csi
storageClass:
create: true

View file

@ -3,6 +3,20 @@ kind: Kustomization
namespace: kube-system
resources:
- resources/secret.s3.yaml
images:
- name: registrar
newName: registry.k8s.io/sig-storage/csi-node-driver-registrar
newTag: v2.9.1
- name: provisioner
newName: registry.k8s.io/sig-storage/csi-provisioner
newTag: v3.6.2
- name: csi
newName: code.icb4dc0.de/infrastructure/csi-s3
newTag: 0.38.3
helmCharts:
- name: csi-s3
repo: https://yandex-cloud.github.io/k8s-csi-s3/charts/
@ -10,6 +24,3 @@ helmCharts:
namespace: kube-system
version: "0.38.3"
valuesFile: config/values.csi-s3.yaml
generators:
- ./secret-generator.yaml

View file

@ -0,0 +1,8 @@
age-encryption.org/v1
-> X25519 yxTOU/kOTO6uAPaUvbBbM5hyraTLyNuWGUB7Y6ADen4
2PA3eHxEF5ywm1YEtZebAMsv8wdFol3rdoe0HI+M9Pk
-> X25519 IBtaBQHvk2aryL8wvAW5GcD6gYmdw9nNBzd25m1ICy8
f+XnEwXTPgZyCnXU5X00rpMsSyXV50WJznvQQbFH+sw
--- qvk+5h4FlxUX01/mB35HYS8tPxNhwA66N0mMWKyn2sk
ð•ðU¹|ADAH·S!NµÃA¥$iÎÛV‡SŒ<úoÓÜ<C393>°ó”_­2ñ‰Ê kdßšÈûyÞ§ºôu[Cs)ŒXXo‡G‰l ‡æe€J‰žZ.Ë¿Z, _Y"!»P“ÀI©dH¥ò±\»ÁºÊ&šë!vðµêeX«<x-u+›¢• VZXÛ÷èàÌï¶pe울ÛV{—ò®8o_ºgñ?• !c$0TûvËA «2Ô5Wd"Ê0®äQeÇt4dš•<C5A1>]F`S í“ŸrBƒìhù<68>=`eãñq#¼\);<3B>ŒÓ;yaò/R
ͺQ¶Q ø¬M´·Ýº¢çPáWì¾-휕 ¸Éõ8såÎmï¶òIµâ“ÕêãÁÅZ@À ï²d*~J<>?lI$ó+?<3F>a*(`h

View file

@ -1,10 +0,0 @@
apiVersion: viaduct.ai/v1
kind: ksops
metadata:
name: vikunja-secret-generator
annotations:
config.kubernetes.io/function: |
exec:
path: ksops
files:
- ./resources/api/config.enc.yaml