From a6847fc7849453d29ccbc41077c7f1fb7472d693 Mon Sep 17 00:00:00 2001 From: Mathis Date: Mon, 11 Dec 2023 22:46:03 +0000 Subject: [PATCH] Update website regcred --- apps/namesny-com/deployment.yaml | 2 +- apps/namesny-com/kustomization.yaml | 11 +++++--- apps/namesny-com/registry-secret.enc.yaml | 31 +++++++++++++++++++++++ apps/namesny-com/secret-generator.yaml | 10 ++++++++ 4 files changed, 49 insertions(+), 5 deletions(-) create mode 100644 apps/namesny-com/registry-secret.enc.yaml create mode 100644 apps/namesny-com/secret-generator.yaml diff --git a/apps/namesny-com/deployment.yaml b/apps/namesny-com/deployment.yaml index 90e2296..68856cb 100755 --- a/apps/namesny-com/deployment.yaml +++ b/apps/namesny-com/deployment.yaml @@ -19,6 +19,6 @@ spec: - name: gitea-regcred containers: - name: namesny-com - image: git.namesny.com/mathis/namesny-com:2023-11-22 + image: git.namesny.com/mathis/namesny-com:2023-12-06 ports: - containerPort: 80 diff --git a/apps/namesny-com/kustomization.yaml b/apps/namesny-com/kustomization.yaml index 7b2f7d7..ccd1b76 100755 --- a/apps/namesny-com/kustomization.yaml +++ b/apps/namesny-com/kustomization.yaml @@ -2,8 +2,11 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization namespace: namesny-com +generators: +- secret-generator.yaml + resources: - - namespace.yaml - - deployment.yaml - - service.yaml - - ingress.yaml +- namespace.yaml +- deployment.yaml +- service.yaml +- ingress.yaml diff --git a/apps/namesny-com/registry-secret.enc.yaml b/apps/namesny-com/registry-secret.enc.yaml new file mode 100644 index 0000000..4e35a1a --- /dev/null +++ b/apps/namesny-com/registry-secret.enc.yaml @@ -0,0 +1,31 @@ +apiVersion: v1 +data: + .dockerconfigjson: ENC[AES256_GCM,data:HuDqZ6fSgOQFl4qi6/IIa60czGHazLXFISKqLO7dB+yZMtN/0CinoxaUw/sncgVDy3ijmAGWuc8a6p+cDoe2laWp/e4t4X+6RVZXikxIoSbOOY9Pi+l0JBL+20ny/KyU31/GtehIlTTYuddf9Mfs3qtRXZ6wT+1RtvoP2uKazljUry+5l6B+uTrKd+n3Tf+oHfV1UecqZGsbp/CiOAlWnLxzlCUIvU46GWUy7n4h7wwPBkQK0IfMALnBKNJVPzK06hkADVsZI4S4NqyJaL2H5c4VTP4uhP/H3Qux/ia5A2FEyOkDR5SggnUghU8lKfjgfmR8o8yB6rm8ZcEdMqmrbCb/5jcCdvZcQhEaE0oWFsbKyhud,iv:ho6zvdCYJUmQfx2G5FS2uXl5sLqNpcv6+3RNAa84AKk=,tag:wLBXH0eas4SDHPbtKXLa+A==,type:str] +kind: Secret +metadata: + creationTimestamp: "2023-11-22T21:43:51Z" + name: gitea-regcred + namespace: namesny-com + resourceVersion: "55550" + uid: 35b93975-93c9-4592-a4c4-224ca4bf2cb1 +type: kubernetes.io/dockerconfigjson +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age14dgmts59tc2gv2xu9305auvu854n3pfl8vkheqzzqyrygyeequ0sjhl92v + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCWTBJU2NxMktMRG9JQzR6 + ZmpocVd3VXBDanpRZnJSZ3U5WWpQa2VmNUJ3CjVGcjNSTTcwNnpHdUJ2Q3JUSC9o + Y3A5ZEcvV2YzTzRpbUh3QTh5UlFnZTgKLS0tIFZmeUxsdzg5TzhtaHVwY1E1Ukkr + NGFuUGZ5UjJWMEJtbGljZlo1ay8wZjAKaoYlWxXoKKS8wRIQhffh/S9C77x0u4Cz + XYM3QiSY42helNa5/wB2M/50lGvOeS3NzUOlD1a6Fv9vYeu345xk9w== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2023-12-11T21:29:00Z" + mac: ENC[AES256_GCM,data:INgNlxLTAIqloQ1R2nFGcpFPhK/JWuuM+8Y6mrPZRflLr7GjdcXpHyDFAeIhJC0UXKDPUzjeCU5ygoGbaSaTUYU6iwKGhVmy8C6FOjx/OBUwWndR1o1qAoM2a3obgwgQitfN7vgniqNvlyTwUajLKGSMHzakAJvwoiViLl0fnY0=,iv:xhgEPh272t+lqt4Bl/HYmpl7J8+qNiVphHloRHsU0vg=,tag:ex87li3IFMFV67zrAd6a6g==,type:str] + pgp: [] + unencrypted_regex: ^(apiVersion|metadata|kind|type)$ + version: 3.8.1 diff --git a/apps/namesny-com/secret-generator.yaml b/apps/namesny-com/secret-generator.yaml new file mode 100644 index 0000000..e52caba --- /dev/null +++ b/apps/namesny-com/secret-generator.yaml @@ -0,0 +1,10 @@ +apiVersion: viaduct.ai/v1 +kind: ksops +metadata: + name: namesny-com-secret-generator + annotations: + config.kubernetes.io/function: | + exec: + path: ksops +files: +- ./registry-secret.enc.yaml