refactor: migrate sops gpg keys

2025-09-17 18:24:14 +02:00 · 2021-07-17 23:27:27 +02:00
parent c582a67397
commit 9bf58e15f3
9 changed files with 411 additions and 277 deletions
--- a/cluster/core/infrastructure/cert-manager/secret.enc.yaml
+++ b/cluster/core/infrastructure/cert-manager/secret.enc.yaml
@@ -1,36 +1,59 @@
 kind: Secret
 apiVersion: v1
 metadata:
-  name: ovh-credentials
-  namespace: cert-manager
+    name: ovh-credentials
+    namespace: cert-manager
 data:
-  applicationSecret: ENC[AES256_GCM,data:DSYSki4dpDJn2E1lRyRo1G6/atfacDPn6LyfM4hKQhKau/jDIjztarH280o=,iv:la3Vt+2U5gO3DqXb/NsVzDOsgckNw9SCTsv/jGtOZ4w=,tag:qjk4qYl/eqhbBd+ayxRKZw==,type:str]
+    applicationSecret: ENC[AES256_GCM,data:f1u+x+OzQv+F3jkL4SFkBCJCH1YA9Gsoepsjfg66mYUOYHfYzTGdy2/rf44=,iv:hLOC7N61CmByPNBkiHOYpFtDtXvfhS3w8UEm8ABlGOA=,tag:5UVSdMpFhxxtiXwXHGs4OA==,type:str]
 type: Opaque
 sops:
-  kms: []
-  gcp_kms: []
-  azure_kv: []
-  hc_vault: []
-  lastmodified: "2021-04-14T13:49:54Z"
-  mac: ENC[AES256_GCM,data:v5c+yR/9uKX9ncNZNS92mVTYmKnusJdZ2O8osR5RjiHPx3GKeDsIkd5/gPxsFD3BWS2LDyVKBVPBxGMkCiIawDrUgmUjVDYuyXIDbn+ui9lfCEYwCCjxz5KkOotkPij6nXRQ9t0UsBmf/RhG1TN7rKVPwBEwt00kZYDh8BEMbZI=,iv:ZH3iFdaW0Q1f5qwkVZjTxI5xdX2aIjO9Dx6NdNxzlww=,tag:10W+kZE/ZAR4bqebPs6Gfg==,type:str]
-  pgp:
-    - created_at: "2021-04-14T13:49:54Z"
-      enc: |
-        -----BEGIN PGP MESSAGE-----
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2021-07-17T21:25:22Z"
+    mac: ENC[AES256_GCM,data:TDHO63rlcYeHRm2eiY7bpLzMtldHUfqgl4uabYtVjZT9q+T+PHmZMBY7hm1hsKQbjv6DVVEgO0ZRikMRHRWPUmAhDPu6oqjIAOXYBDnWlP6+HmJgccAAT7JlJJyeuKE5ohohmZjUaTS2K9XzrX+Qs5P44ClJ5BpUojzHeiRRius=,iv:/Njr0K0CjTa7WOQjGkNGIXNpkK42TD19Ss/Cc3CDHa8=,tag:SM7uCuPNC5jHRsYdfKQR/g==,type:str]
+    pgp:
+        - created_at: "2021-07-17T21:25:22Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----

-        hQGMA/JorPHm1g9XAQv+OfbvF0TxlCEbp7Kb45tSpIt0UzX/ae9KBGPCKAxgXAjd
-        czsjIX0NH1n4YINNKuHIunm18FoAJUOtRyWWaJDwW8R0z/O24yq/E7bfXn4RNVsE
-        lFwRKtF3zPtQNFTLITPqzmINEeZsFobcV2l+gfXW6lieHWo937YYSxNYLyWrso1t
-        snNyjdAKWlckv9xr7ZLK8UftQrdwa7D1Ig+W/6xxor5z6IiaJUPeHGDuTJ7nSsWz
-        3LaqeGeW6a5zgL8JzMzhd9xHSGqaS2vGEGeNyMIFf466qUspQDLSXq8/a0YYFWb/
-        CsmySgm3RqYu6o+WvLEAnsIKKRISHsCUMnArshmCpnvJ6q1hIPxyJg/dX4hzBFau
-        MS2Ma3WD3WD2edS3uSVApJ9RDc2lLJDXQ4qEDgOeok1StOE4ANfTyP1QYS4yYHue
-        VZVZyCvsrsxbC2GQWQK0RRki/WY2p+V7lCa/ropDa6WcHCq2agfbQ769J3erMYii
-        b1efKs2vpf0HLrnnK+IF0lwBSCjz9ffqGq7+OP5Aj6uXV+E6R4kUzgn2KvIiLrot
-        U87wpXcyYL9J5hyzVWKS0S//kKbCqapPFia9vuxPMh4GgF+i1xshCTqqHzJfKzK4
-        G/YLCKCae2PnX/rkRA==
-        =Sv3h
-        -----END PGP MESSAGE-----
-      fp: C8F8A49D04A1AB639F8EA21CDBA4B1DCB1FA5BDD
-  encrypted_regex: ^(data|stringData)$
-  version: 3.6.1
+            hQIMA6nQR2zACjUjAQ/9GG5pSYEjWoVimLQ95TgQskBhjgGkdFncWoJ1c69wMTW3
+            C4nFAUgrxIYfOAmnsj38tOAHEIO4nbMsGKAsyJkH1H4RKtgl8FHVpkgbLs/k2I5x
+            ktsLt8X/CJEBd9iPatEdnGwq1+FADRsKjdioH87NCuONmBMRRSapyeTPYMR2/5RI
+            VdAnLqrVPXpHpU0HliyRXuy6RrysmCG96Xo4O/rjADJVxzVU3nBp0L0RyGRgdawD
+            OMLau2krM5WEx45utos+KvTmcHhe5rDkktpWblwTuj28HYqXG0FXp8NigasK2S/w
+            AdVEWBEdXNNYkiQJYvgJoCnQRC1KxDREAXRZLpfJ1lGgnzGO/q08EwGtFU4yyWMX
+            FAEBr47QUlWUACgHUVOm1jIcLMidgKHS4ORfNCQNA6pYLsNSgHaOjzTX8MgiLL1x
+            o5aj5AhAwkaj7XWvcDtHZW5o3knf+ntvfxIlYn379UfQjglp1filyJKtuVk2i8LR
+            RyK4j7TjOidSaM2XwKqZsVacSzNTvPuwl/atFXj+14UqRHzOgaYTzFzKHsO/kEl7
+            myrdW+0Uk9VTVm86FpPkaFrWsGlYvTemeJK/02I90N+llP1X3t48pNLtkcFV0Vue
+            EyOOVRRmYemzIDou+ZgB8f94Hl4MMST4Vonezt647Yf8215HedA1fTBn0fDL3pPS
+            XgHF24UjrdRDCM9S39/d2RE06ACkl1XBzE5SywpoPAWNdu3qWLF+29Eig+6k7gqn
+            AyJQtra9SzoruriC3Pwhq26uAgzyhhAePb1nyMgIBgjzkDg4zGrqgq9qgz5P61I=
+            =G+xw
+            -----END PGP MESSAGE-----
+          fp: 19B850FBA7685A526CF11E5F9BBE834259976EE8
+        - created_at: "2021-07-17T21:25:22Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA98IrODHuiZ9ARAAz+meIMba8DmMxU8sXGOO7aKWtIOQb7h/kP2X3aNAu4YT
+            rf1SxyqpYlpzejNMMfM3253HRlq053xCEKitQT3ixKacx/mmAsRuhuDVfXXTH17p
+            djiz4GtbgMoSn+iLv/UxMLgrxMAvkbrW/vEG2zcWnxyGd+KxqIJmxPAnShhb3QQT
+            y1i3q1aUFwen5xSgnQAVu9wpnpYaSqjeOnTD6ugnHG8Xo8WnKHcxBcBx/B2hN9QF
+            BgfvvxxqXLq31cga44FDT1Ox/IVUDcXGaxoDTKEkuWfKVB1Hb8vaNmRo+PDP1Zg8
+            tpbthWA4j/ctTJ25760j/R7BC+mcTLTqY22PCVhj47UE9Kus0IqrVS9JjRAfJadi
+            BbyVuSaTRXRm6hakH1xoGRK4smZBeOCX4oWqBn1rcwawQHB70HkTsTbS1LEHWzR7
+            nzmpHEzOnI1fWsYP6A6D8D9UpiuV9ByX8vUH1SCbKDB1ftPr3zEJEN4uog/HTgTh
+            GOLpzPqAO5gQFe9srK83CUgAVhoSlYSkgrFUYHNy8p0kDK+3lCC7lMGmrBQHWx7T
+            Df8aVwdrok1/cOztDfz2uuervWw54ZMgHjjrD6KBK20ZT7QN5fOZb/E80djWtlmY
+            NFD+lMBXBM+/hzHHiJx1SzOqjkpK2R9dGN++zi/pW/h9s5BZQr4/TZij4klyfuzS
+            XgFIhn0ph+1EapqOqRHnjeVxaDIx5m4K/Y+Vn2wZgCxn1GQ3gLBA3W93YMluAwY0
+            wTci6t2GZMxG4Pd3mcZeQGoxcd8MYkWOMegQY66MFUPB/R2FNLifeJuOR3KCIbA=
+            =Vnjd
+            -----END PGP MESSAGE-----
+          fp: 5749D0AE39445C1CCA6006DF8913091C690BDD69
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1