🩹 bootstrap

kubernetes/apps/default/drone/kubernetes-secrets/kustomization.yaml

@@ -5,3 +5,4 @@ kind: Kustomization
 namespace: default
 resources:
   - ./helmrelease.yaml
+  - ./secret.sops.yaml

kubernetes/apps/default/drone/kubernetes-secrets/secret.sops.yaml

@@ -0,0 +1,35 @@
+# yamllint disable
+apiVersion: v1
+kind: Secret
+metadata:
+    name: drone
+    namespace: default
+type: Opaque
+stringData:
+    DRONE_DATABASE_DATASOURCE: ENC[AES256_GCM,data:+9NZ76uh+GIJCyXz/4KT9TUhnHRkZ7OCHPEJ9w3zwgxqFhbtf6qRoTbPszumvFkn71xgmBhkul8ZWx6A5/gIhbwfTi3+829VLzBivXdFv0nC9/KYPcEGmsXVMFQ=,iv:NhUdL1/fVhfpsIQYgYGxqhO1zt/4QvgooNb9VVbXrWM=,tag:yWWvV7IwwtlcMYefty3ytw==,type:str]
+    DRONE_GITEA_CLIENT_ID: ENC[AES256_GCM,data:hdXlmw5xNXx+ejn73qt0FFyOzTuA3IP4ktVv/Y8SpDBxgHiA,iv:VYSzQYRp+z7RaYpXFNQ5x6WXuMCiN4s8HiKA5KIyzzc=,tag:/PYkbjoq3YLVf9zct7QiOQ==,type:str]
+    DRONE_GITEA_CLIENT_SECRET: ENC[AES256_GCM,data:c++RGOWPOY6lifgFJC1zqm/M2+vo7aM7Wo6woO5MJUTwa+lBm59+uPnwBpgqOOkJKSntFBcMVDY=,iv:ZRazYwK6jfFvkMwpBotqp1Ol/018ZBNf7apidx0lMdY=,tag:53kf/zdjGjtv0ImLsI5oQA==,type:str]
+    DRONE_RPC_SECRET: ENC[AES256_GCM,data:O+YljkHzgFe4HSgSRkosuTTFpaOPSyAjeVpC39BKSIU=,iv:H8SO0S8TL060mnKCOBPWexUNdYwUmyVPdetuoto6uck=,tag:XU8JCsippp0Gadptpuwuog==,type:str]
+    DRONE_SECRET_PLUGIN_TOKEN: ENC[AES256_GCM,data:rRP1/jdkyHkwTmB8j5svo0xg6YFw64f9EVcoMzyzHbk=,iv:LYMgl50+edTnk0Im7uzLZW0THemraadOpOLkyvL/5Og=,tag:nIkuWVAK1NvawHksQar0tQ==,type:str]
+    POSTGRES_USER: ENC[AES256_GCM,data:IG2irMs=,iv:JouooVVdstNAmb4FberAJyiztIgvzL1hmLtnEk9U/FU=,tag:YTOuutIco2NohhvCDhn0Gw==,type:str]
+    POSTGRES_PASS: ENC[AES256_GCM,data:qiHiSB+YLlgLCVvY5Vs=,iv:jDOqLd0lRYZCBJrAsnyz/QAu8F/zgTQRfX5lkcNzQO8=,tag:+VCCujZOsTOrxZda4TLcLA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1hhurqwmfvl9m3vh3hk8urulfzcdsrep2ax2neazqt435yhpamu3qj20asg
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBVWZVaFFvMVJRRWR1eUU3
+            QzI5cjNscE83czk0TG9Ra1JvVmExa0hWbWt3Ck1YY1htcXhDamwxY1pVcE0wS2U3
+            WWNQbTJFK1dFdEhkMk8vbG9pQlJzN1kKLS0tIDBUTUZhMUF2VVJhbFNpQ1FTNWZC
+            ZUZsSDdUYXFVb3JROEFnaC8yRU1zZ0UK1klzjeo3oaS6n1Apy0nY746ax2Uxxddg
+            Mn61QDtkPf8FLNBC3tFTe3pWzhWseD/89WaW3f3GScJxy34SFUZxLQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-11-27T13:34:21Z"
+    mac: ENC[AES256_GCM,data:dWcCWWjAhu3y8uxJ/CXFrq549v3QwOJ8KW0PVzKYzCJPBebAlTl707ItPEivbr0Hv8oZBKdMdprxAW1GGPX+GcpWMp55F9Q5AVXPMDacNciu0RCx29lcHu7XoR2kYZRcHX9SceV+Pr7JD0Ms7CbvFc/dXpq7o2SpnnUfI2vCYCk=,iv:avYarYn6G7nHsSkfV4rg2TM2AXR2qjjhou+Bk/vGWCE=,tag:YY85MDuCvFUUCW2JitbpiA==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.3