shpaq/auricom-home-cluster
1
0
Fork 0
mirror of https://github.com/auricom/home-cluster.git synced 2025-09-17 18:24:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

chore: bump external secret apiversion

Browse Source
This commit is contained in:
auricom
2025-04-15 23:09:59 +02:00
parent 7ad9789d31
commit c933a43a42
52 changed files with 116 additions and 201 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
kubernetes/apps/actions-runner-system/actions-runner-controller/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: actions-runner-controller-auth name: actions-runner-controller-auth

4
kubernetes/apps/cert-manager/cert-manager/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: cloudflare name: cloudflare

4
kubernetes/apps/database/crunchy-postgres-operator/cluster/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: crunchy-postgres name: crunchy-postgres

2
kubernetes/apps/database/crunchy-postgres-operator/clustersecretstore/clustersecretstore.yaml
View File

@@ -1,5 +1,5 @@
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ClusterSecretStore kind: ClusterSecretStore
metadata: metadata:
name: crunchy-pgo-secrets name: crunchy-pgo-secrets

4
kubernetes/apps/database/crunchy-postgres-operator/pgadmin/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: pgadmin name: pgadmin

4
kubernetes/apps/database/emqx/app/emqx/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: emqx name: emqx

6
kubernetes/apps/default/authelia/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: authelia name: authelia
@@ -47,7 +47,7 @@ spec:
- extract: - extract:
key: generic key: generic
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: authelia-db name: authelia-db

6
kubernetes/apps/default/bazarr/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: bazarr name: bazarr
@@ -20,7 +20,7 @@ spec:
- extract: - extract:
key: bazarr key: bazarr
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: bazarr-db name: bazarr-db

4
kubernetes/apps/default/flood/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: flood name: flood

4
kubernetes/apps/default/freshrss/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: freshrss name: freshrss

4
kubernetes/apps/default/frigate/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: frigate name: frigate

6
kubernetes/apps/default/ghostfolio/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: ghostfolio name: ghostfolio
@@ -19,7 +19,7 @@ spec:
- extract: - extract:
key: ghostfolio key: ghostfolio
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: ghostfolio-db name: ghostfolio-db

4
kubernetes/apps/default/home-assistant/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: home-assistant name: home-assistant

6
kubernetes/apps/default/homelab/github-notifier/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: homelab-github-notifier name: homelab-github-notifier
@@ -24,7 +24,7 @@ spec:
- extract: - extract:
key: pushover-notifier key: pushover-notifier
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: homelab-github-notifier-db name: homelab-github-notifier-db

4
kubernetes/apps/default/homelab/music-transcode/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: homelab-nas-music-transcode name: homelab-nas-music-transcode

4
kubernetes/apps/default/homelab/opnsense/backup/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: homelab-opnsense-backup name: homelab-opnsense-backup

4
kubernetes/apps/default/homepage/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: homepage name: homepage

4
kubernetes/apps/default/jellyseerr/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: jellyseerr name: jellyseerr

2
kubernetes/apps/default/joplin/app/externalsecret.yaml
View File

@@ -1,5 +1,5 @@
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: joplin name: joplin

4
kubernetes/apps/default/komf/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: komf name: komf

6
kubernetes/apps/default/lidarr/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: lidarr name: lidarr
@@ -23,7 +23,7 @@ spec:
- extract: - extract:
key: lidarr key: lidarr
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: lidarr-db name: lidarr-db

4
kubernetes/apps/default/linkding/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: linkding name: linkding

6
kubernetes/apps/default/lldap/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: lldap name: lldap
@@ -22,7 +22,7 @@ spec:
- extract: - extract:
key: lldap key: lldap
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: lldap-db name: lldap-db

4
kubernetes/apps/default/lychee/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: lychee name: lychee

8
kubernetes/apps/default/outline/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: outline name: outline
@@ -25,8 +25,8 @@ spec:
- extract: - extract:
key: outline key: outline
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: outline-db name: outline-db

8
kubernetes/apps/default/paperless/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: paperless name: paperless
@@ -20,8 +20,8 @@ spec:
- extract: - extract:
key: paperless key: paperless
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: paperless-db name: paperless-db

6
kubernetes/apps/default/prowlarr/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: prowlarr name: prowlarr
@@ -21,7 +21,7 @@ spec:
- extract: - extract:
key: prowlarr key: prowlarr
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: prowlarr-db name: prowlarr-db

6
kubernetes/apps/default/radarr/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: radarr name: radarr
@@ -22,7 +22,7 @@ spec:
- extract: - extract:
key: radarr key: radarr
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: radarr-db name: radarr-db

4
kubernetes/apps/default/recyclarr/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: recyclarr name: recyclarr

4
kubernetes/apps/default/sabnzbd/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: sabnzbd name: sabnzbd

4
kubernetes/apps/default/sharry/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: sharry name: sharry

4
kubernetes/apps/default/smtp-relay/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: smtp-relay name: smtp-relay

6
kubernetes/apps/default/sonarr/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: sonarr name: sonarr
@@ -22,7 +22,7 @@ spec:
- extract: - extract:
key: sonarr key: sonarr
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: sonarr-db name: sonarr-db

8
kubernetes/apps/default/tandoor/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: tandoor name: tandoor
@@ -19,8 +19,8 @@ spec:
- extract: - extract:
key: tandoor key: tandoor
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: tandoor-db name: tandoor-db

8
kubernetes/apps/default/vaultwarden/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: vaultwarden name: vaultwarden
@@ -18,8 +18,8 @@ spec:
- extract: - extract:
key: vaultwarden key: vaultwarden
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: vaultwarden-db name: vaultwarden-db

8
kubernetes/apps/default/vikunja/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: vikunja name: vikunja
@@ -18,8 +18,8 @@ spec:
- extract: - extract:
key: vikunja key: vikunja
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: vikunja-db name: vikunja-db

4
kubernetes/apps/default/zigbee2mqtt/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: zigbee2mqtt name: zigbee2mqtt

2
kubernetes/apps/external-secrets/external-secrets/ks.yaml
View File

@@ -48,7 +48,7 @@ spec:
labels: labels:
app.kubernetes.io/name: *app app.kubernetes.io/name: *app
healthCheckExprs: healthCheckExprs:
- apiVersion: external-secrets.io/v1beta1 - apiVersion: external-secrets.io/v1
kind: ClusterSecretStore kind: ClusterSecretStore
failed: status.conditions.filter(e, e.type == 'Ready').all(e, e.status == 'False') failed: status.conditions.filter(e, e.type == 'Ready').all(e, e.status == 'False')
current: status.conditions.filter(e, e.type == 'Ready').all(e, e.status == 'True') current: status.conditions.filter(e, e.type == 'Ready').all(e, e.status == 'True')

2
kubernetes/apps/external-secrets/external-secrets/stores/onepassword/clustersecretstore.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/clustersecretstore_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/clustersecretstore_v1beta1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ClusterSecretStore kind: ClusterSecretStore
metadata: metadata:
name: onepassword-connect name: onepassword-connect

4
kubernetes/apps/flux-system/alerts/github-status/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: github-status-token name: github-status-token

4
kubernetes/apps/flux-system/flux-instance/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: github-webhook-token name: github-webhook-token

4
kubernetes/apps/network/cloudflared/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: cloudflared-tunnel name: cloudflared-tunnel

4
kubernetes/apps/network/external-dns/cloudflare/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: external-dns name: external-dns

4
kubernetes/apps/observability/gatus/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: gatus name: gatus

4
kubernetes/apps/observability/grafana/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.zinn.ca/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.zinn.ca/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: grafana-secrets name: grafana-secrets

4
kubernetes/apps/observability/kube-prometheus-stack/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: kube-prometheus-stack name: kube-prometheus-stack

4
kubernetes/apps/observability/scrutiny/app/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: scrutiny name: scrutiny

78
kubernetes/bootstrap/apps/helmfile.yaml
View File

@@ -16,87 +16,9 @@ repositories:
url: https://postfinance.github.io/kubelet-csr-approver url: https://postfinance.github.io/kubelet-csr-approver
releases: releases:
- name: kube-prometheus-stack-crds
namespace: observability
chart: oci://ghcr.io/prometheus-community/charts/prometheus-operator-crds
version: 19.0.0
- name: cilium
namespace: kube-system
atomic: true
chart: oci://ghcr.io/home-operations/charts-mirror/cilium
version: 1.17.3
values: ["../../apps/kube-system/cilium/app/helm-values.yaml"]
hooks:
- # Wait for cilium CRDs to be available
events: ['postsync']
command: bash
args:
- -c
- until kubectl get crd ciliumbgppeeringpolicies.cilium.io ciliuml2announcementpolicies.cilium.io ciliumloadbalancerippools.cilium.io &>/dev/null; do sleep 10; done
showlogs: true
needs: ["observability/kube-prometheus-stack-crds"]
- name: coredns
namespace: kube-system
atomic: true
chart: oci://ghcr.io/coredns/charts/coredns
version: 1.39.2
values: ["../../apps/kube-system/coredns/app/helm-values.yaml"]
needs: ["kube-system/cilium"]
- name: kubelet-csr-approver
namespace: kube-system
atomic: true
chart: postfinance/kubelet-csr-approver
version: 1.2.6
values: ["../../apps/kube-system/kubelet-csr-approver/app/helm-values.yaml"]
needs: ["kube-system/coredns"]
- name: spegel
namespace: kube-system
atomic: true
chart: oci://ghcr.io/spegel-org/helm-charts/spegel
version: 0.1.1
values: ["../../apps/kube-system/spegel/app/helm-values.yaml"]
needs: ["kube-system/kubelet-csr-approver"]
- name: cert-manager
namespace: cert-manager
atomic: true
chart: oci://ghcr.io/home-operations/charts-mirror/cert-manager
version: v1.17.1
values: ['../../apps/cert-manager/cert-manager/app/helm/values.yaml']
needs: ['kube-system/spegel']
- name: external-secrets
namespace: external-secrets
atomic: true
chart: oci://ghcr.io/external-secrets/charts/external-secrets
version: 0.15.1
values: ['../../apps/external-secrets/external-secrets/app/helm/values.yaml']
needs: ['cert-manager/cert-manager']
- name: onepassword-connect - name: onepassword-connect
namespace: external-secrets namespace: external-secrets
atomic: true atomic: true
chart: oci://ghcr.io/bjw-s/helm/app-template chart: oci://ghcr.io/bjw-s/helm/app-template
version: 3.7.3 version: 3.7.3
values: ['../../apps/external-secrets/external-secrets/stores/onepassword/helm/values.yaml'] values: ['../../apps/external-secrets/external-secrets/stores/onepassword/helm/values.yaml']
needs: ['external-secrets/external-secrets']
- name: flux-operator
namespace: flux-system
atomic: true
chart: oci://ghcr.io/controlplaneio-fluxcd/charts/flux-operator
version: 0.18.0
values: ['../../apps/flux-system/flux-operator/app/helm/values.yaml']
needs: ['external-secrets/external-secrets']
- name: flux-instance
namespace: flux-system
atomic: true
chart: oci://ghcr.io/controlplaneio-fluxcd/charts/flux-instance
version: 0.18.0
values: ['../../apps/flux-system/flux-instance/app/helm/values.yaml']
needs: ['flux-system/flux-operator']

4
kubernetes/components/common/alerts/github-status/externalsecret.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: github-status-token name: github-status-token

12
kubernetes/components/common/vars/cluster-secrets.sops.yaml
View File

@@ -3,7 +3,6 @@ apiVersion: v1
kind: Secret kind: Secret
metadata: metadata:
name: cluster-secrets name: cluster-secrets
namespace: flux-system
stringData: stringData:
SECRET_CLUSTER_CERTIFICATE_DEFAULT: ENC[AES256_GCM,data:8HotHVJva77fd9S+j2BB,iv:fqCDD0NuK9ySCsGGT3G4QsfViM2L9oPp9ZLgwXf0tLI=,tag:rX1quD8RTjvzV75fmwmC6w==,type:str] SECRET_CLUSTER_CERTIFICATE_DEFAULT: ENC[AES256_GCM,data:8HotHVJva77fd9S+j2BB,iv:fqCDD0NuK9ySCsGGT3G4QsfViM2L9oPp9ZLgwXf0tLI=,tag:rX1quD8RTjvzV75fmwmC6w==,type:str]
SECRET_CLUSTER_DOMAIN_EMAIL: ENC[AES256_GCM,data:j1yBajAlXKQeDuvbV2IyJp8IT3wA,iv:pxPgYZEZ6pvcr6trM1gkL5MZORewARaiVfwRTyWxny0=,tag:y31EGp46NgF/Pf3hQ2Iavw==,type:str] SECRET_CLUSTER_DOMAIN_EMAIL: ENC[AES256_GCM,data:j1yBajAlXKQeDuvbV2IyJp8IT3wA,iv:pxPgYZEZ6pvcr6trM1gkL5MZORewARaiVfwRTyWxny0=,tag:y31EGp46NgF/Pf3hQ2Iavw==,type:str]
@@ -18,10 +17,6 @@ stringData:
SECRET_KUBE_PROMETHEUS_STACK_GRAFANA_ADMIN_PASSWORD: ENC[AES256_GCM,data:L7LS6+tuwPCyb5HN4zg=,iv:JM2KTtDN/VrKicjp5qwqusWiJKHRZnfTtsZE2hkLq6Q=,tag:XGF3L5P6JxVBrlGuKosdZA==,type:str] SECRET_KUBE_PROMETHEUS_STACK_GRAFANA_ADMIN_PASSWORD: ENC[AES256_GCM,data:L7LS6+tuwPCyb5HN4zg=,iv:JM2KTtDN/VrKicjp5qwqusWiJKHRZnfTtsZE2hkLq6Q=,tag:XGF3L5P6JxVBrlGuKosdZA==,type:str]
type: Opaque type: Opaque
sops: sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age: age:
- recipient: age1hhurqwmfvl9m3vh3hk8urulfzcdsrep2ax2neazqt435yhpamu3qj20asg - recipient: age1hhurqwmfvl9m3vh3hk8urulfzcdsrep2ax2neazqt435yhpamu3qj20asg
enc: | enc: |
@@ -32,8 +27,7 @@ sops:
WG82VkdBMlNnRzBySFQzMk41cEtXSlEKBqOmq9UpO61C85+pj0ibdT31y4pmFsbm WG82VkdBMlNnRzBySFQzMk41cEtXSlEKBqOmq9UpO61C85+pj0ibdT31y4pmFsbm
pTi4N0vv81kcf4ilqBU5h1gudNCb42Q2iL0eGNR4e3JzH4iaNsvnEg== pTi4N0vv81kcf4ilqBU5h1gudNCb42Q2iL0eGNR4e3JzH4iaNsvnEg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-01-03T20:27:58Z" lastmodified: "2025-04-15T20:57:26Z"
mac: ENC[AES256_GCM,data:QgFNCP1l74XISc2/6byMOzk4brz0SkbfjLxgoLRaBx08BHULaJRHiNqRRyhaKF5ZjxsOxVYiFpHrWgfu/mi/InwA6nBttwNSM/+bzKabRC6vdgrLIIXxJKGKu7BlmtILF4uZRqKqcOIK+nrZS8YWdlOY0Vyzunh4kMQoyIvugRk=,iv:0HYH18NEag1KqIXwoiMPHkFiW1jaQkK1LJ5XhENPalw=,tag:RO8oMhTRBLOzf31DgV38CQ==,type:str] mac: ENC[AES256_GCM,data:/qQpLkJIhVBnkDVNsls1xfw1Iyy6ijyrmU9LQqhO+Qa6lQ4CKejX6wiLuPJNtQ+rTtmp3KUG4uCF3JvWNnyNOLGtSjM3X7bDS11NY2sfWkBebBQy/s59B7Jb30937lqFP39hP5GhvegN6kP5+iLIltgKKjH0cXXyf+FT/Q+6kOs=,iv:r6HfAGPr09e4xuaDQBE3zXt3n7k88dHZfQXKa2LMiYY=,tag:nxzFsjI9QhhsnTO7Oed8QQ==,type:str]
pgp: []
encrypted_regex: ^(data|stringData)$ encrypted_regex: ^(data|stringData)$
version: 3.9.3 version: 3.10.2

1
kubernetes/components/common/vars/cluster-settings.yaml
View File

@@ -2,7 +2,6 @@
apiVersion: v1 apiVersion: v1
kind: ConfigMap kind: ConfigMap
metadata: metadata:
namespace: flux-system
name: cluster-settings name: cluster-settings
data: data:
CILIUM_BGP_SVC_RANGE: 192.168.169.0/24 CILIUM_BGP_SVC_RANGE: 192.168.169.0/24

4
kubernetes/components/volsync/minio.yaml
View File

@@ -1,6 +1,6 @@
--- ---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1.json
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: "${APP}-volsync" name: "${APP}-volsync"