Initialise new kubernetes cluster

.sops.yaml

 creation_rules:
-  - path_regex: (clusters|apps)/okd4/.*.yaml
+  - path_regex: (clusters|apps)/k8s01/.*.yaml
     encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|hosts?|tang)$
     pgp: >-
-      9D02A9AD73EF7F3D5F657AC2B392F6EB325E8C50,
       286791FB6648539775DB31B8FCB98C2A3EC6F601

clusters/k8s01/.sops.pub.asc

+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=anp/
+-----END PGP PUBLIC KEY BLOCK-----

clusters/k8s01/apps.yaml

+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: apps
+  namespace: flux-system
+spec:
+  dependsOn:
+    - name: infrastructure
+  interval: 10m0s
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./apps/okd4
+  prune: true
+  validation: client
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-pgp

clusters/k8s01/flux-system/gotk-sync.yaml

+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: GitRepository
+metadata:
+  name: flux-system
+  namespace: flux-system
+spec:
+  interval: 5m0s
+  ref:
+    branch: main
+  secretRef:
+    name: flux-system
+  url: ssh://git@git.shivering-isles.com:2222/shivering-isles/infrastructure-gitops
+  verify:
+    mode: head
+    secretRef:
+      name: pgp-public-keys
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: flux-system
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./clusters/k8s01
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  validation: client
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-pgp

clusters/k8s01/flux-system/gpg-keys.yaml

+apiVersion: v1
+kind: Secret
+metadata:
+  name: pgp-public-keys
+  namespace: flux-system
+type: Opaque
+data:
+  sheogorath.asc: LS0tLS1CRUdJTiBQR1AgUFVCTElDIEtFWSBCTE9DSy0tLS0tCgptUUlOQkYxdnFEVUJFQUM2RGF0K01hcXlkWkhIeEl3Y0h5Yk1TMFBBaklXZkR3WTcxZnM4SHBrRG95SS9EM2dRCmZmWU9pWGE0ZUpMS2ttb1Z6REpTcHQyWUhNdWdEU1pPWHFiaGFUcnB5NUdaeGw0bmxCaWxCc2FkYmpvWGQ3Z1oKbTVhdlRWeXJhTlFNRU5Yb1c3ZTh4RlRCMGNuY1YwbHYyemttekU5K0xUNDhXbnJoWm43MXdRRm9tNTFabVlZdgpmeXd5MzVHNzc4ME1pR0FQdy9vYUdFZSsxbjk1UW5yL1lFUDAwQjRLcTJUU09MOW9UY2N2RjZQKzVmN3FrNDBTCk1rRUN2eWJjbmlOMHNUdXpUSFk4eHU2TU4wcW1OZGRlWFBLNXkrOHFZcVRpUVl0VnQxRndyTUN3QTRRTGRvSnkKQThzVnppNmpkb1VSb1FsSkxxcWJyNjV4Mm5VaFltTzBDYXZBR2V4R3AvaldtU3FIUXg4R3ZuQWR2akNtQ3pFYQp0ajFENERxSUhpTk12SXlsVW90SEZpR0hwVGZ1bDVGb2FEbFhxbmc5QUd6QzNzK3A5aytkOC90L2wwN3BBdnAvCnB1WDVGdnh3Y0xwd1lJZmpKOEFnSjF4SzI5MlJSbVpxbERwOGpEcWlqZU1QOUo2dE9rZ1FXMGdSTGg5RmFBNVYKVG5zT1M4ampmYXU0ZmxmTys4NDcvcWM3MFJTSC9QSDBUbDJ2ZmlyQmF5MUN3cUJMUkNrSzZYaHRCL1VJQjdUeApEUXRzbjlvVUV6Z2NOeVV2aXlwRUhvbUlBcWg2djN2ajd4UVQwcDMrUVY0TWd1Y3Z6M2Z1ZUgrSlJQS3cxMUN5CmMrMjI0SzlmQnRIY1Q3N3pzcWpRcllSa1Uvblo5clRrbkhuVzdWMXZ5UEl2S3BIOEsrSDhFWTJxV1FBUkFRQUIKdEN0VGFHVnZaMjl5WVhSb0lEeHphR1Z2WjI5eVlYUm9RSE5vYVhabGNtbHVaeTFwYzJ4bGN5NWpiMjAraVFKTwpCQk1CQ0FBNEZpRUVLR2VSKzJaSVU1ZDEyekc0L0xtTUtqN0c5Z0VGQWwxdnFEVUNHd0VGQ3drSUJ3SUdGUW9KCkNBc0NCQllDQXdFQ0hnRUNGNEFBQ2drUS9MbU1LajdHOWdHZUZBLytLei9BQkRZTS9NZFlrWmlqMTdabVprdDMKQW9ncEw3SlorNmJEL2RrSXgzMVdhdXhaQjhTSTZBZFQyTjRqL2dVYlZ4NHlLM20raFZadXJBd1F1Y3F6WWRnNwprZzgxRWdMSVJvakwwRXZuVnB5WU9INmJWdUVYall6R2ZmM2F1aGpCek1SRyt0b29kUXhDenY2YzFyM3dBL3UxCmYzUTQ0ZnJUU2t6R1k4L2tjUU54ckRzVW55ejVvZk9LaG9DdGFMRmN4ckFrb0hLaTV1TmJZajNzV3R0UnFkQ0UKendacEd4YVhpdm5FL2IzR2c0K3J3Ymc2TVVyaHJwUDdnd1pLN2xCN3FONU1aWWpsYm1ZM0hkK05DR2NxT2pobQoySXFqWFFPWi9GVHFhd0RmdGhsNHh2dHNHVmxSL0I1Tzk3R2lRYzhzYmtxNk1RRVZ2MkJTaHlmd2FuWjVTUHA4Ci9qU1oxekp1ckprZDh1ckNMZUpYeUpjdzkwT0ErRFJ6bjhGUXA2WDQvSUI0dnl6ZTBIVUFzTHAyLzdURkNFbGsKY3hrcVdHMHk0Z2lGeHhvM0c5WVpoNHVRbVFaMWgvNXV4dXFRM1V4Nlk0Qk5GKzFxYy9UWXRXSVh2Y2NXTEJicAp2RTVIRGdhZTRKQjFaTkcwUUg0ZklyRlRTNDhkUng0bEZZS2l1OVJIeXFNNFJvUE9xUTFpZkU3RDBDcEpaaGN3CjNOYjk5ZTYwM2pUU3VPaFVsVHJHOTdtY0kzdndRVnIwVmltdzVBZkFTeWNsdFhQeGQ5WFRKcCsxU0V3Qit4WmkKYjl6ck5TdGtxbWJXTEUwUkdyQzJ5bFl1Q2xZNHl4NFMvTU1xQ3c0bGR3ekNCL0N6OVVLeXdVd25GL1pDb1ByMQoyWVRGeU00NU8yMzYwb0xsV1ZPSkFqTUVFQUVJQUIwV0lRUUI1YlBLd01Kb0ZrZ3ErMGdmQmN3Mk5jM2YvUVVDClhXK3BQd0FLQ1JBZkJjdzJOYzNmL2JhWEQvNC94cWZuNmdJUnZ6dWZsOTFFZHVKbFVldG9rbEsrV0F2elN5MHAKZnVRTEVTakZ0TjkyUzVid3N4ZFZGN25NVjNEbGVEQnFwNDFMRHZVaDZSbUkxT1NHa1F6WC9TZEtDL2tVNDFkZgpoRktjbmk2OUh4U21ETzRIVGpSNXBYdzZmN1QwVENmeWZBYkF5WGhuWDQ5T2pRVjR4NFpCSVdoTWs5aEJET0xJClRzQzlXTFhJSGpCcEFLclZobCtRM0ZmWkJHbDZZZWpUTlRPWXpGcGc2NEVxTDJIaHUvYVBpV2RieWRJeW9ZT0IKOENoN2pCZ0tMdEFrZnByR1R5Wm9DM2hSTFZmT2kyN1UwcHp4MUZOV1V4bXN5cGxld1RqS0dLbWN1aGpJWDRFTwpUZ2xmWlJUdjh0WmI2eDdRNzZyaGw2bGJCakdFcGJFQmd4WlVwL2c3RURFZG5GWXVtWmUzL09lUktCem5QWVc0CnMwZ1NoR1lEWGplODZXMWM3MHY0RDJ3d3lDVUR3SWYyQ2hqdm5Yc3NHWXlzRERUVW4wamRNQXdMYUlRWXpWWUcKaWpMR0I5V0hVdEpmTG9RRjJzclI3ZC90Qk5YZkxlVjFMSEllREpEdEF5SGFXOC92cEJWeHllOEtVWGZHYnFSbQpwQm5BMmR6cFhOL1huS2pOV2JtbjhZaXhXd05zT2RMQVBkV1FnU0lKWkV3VnVzby9nQlVLN25sdFZ2ZXFuWHNtCmpxYnEwb0JNT0REcGI3cW5VNzkzT2JSbVc2S3VrMWJ2L1pQN0pWaklnUmdXdWttcU5oa0hncjNQU2txYThLTVIKcFVKN1hsaHZlQTNHcWt1eUlWeWh0VGJERjdjOUlyN2htcGtBZEppT1VPTVVubWpla1I5QUE0OHBuOUVhcDlyQQpLNWZoMTdrQ0RRUmRiNnBKQVJBQXpEYU5NalBWY2tVSjR0eVdGTitjOWl2ZnpQZTg3ZGUrZHZPUmE2aUlGa1JyCkJWZ2k5ZjRJU3lyWnpNTTlmZzdURHVuSW5RdWs5eGtCZjFtQjZaSFFBMjRFaHRPd1ptWEN1elhZNTRVMUNMcTcKNXBUU2NoQUlOOUg1dUxIZVYvamlSWHJEVjQvSjRjNzgwVXNLdnB6ZWZQaDl4T3lvSTV4ZjRIZm5CdnJYT0Q3RwpocEk0R3lFaFVWeWpkaFVoVEhtVUt1YUR6Z3J1emhRWGJLN1o4a2VTWG5ITkNHRTgvbldiTzZ6Z2tIQ0NVY2F5ClNmVCsrVU9iamU5TTBoNTR6a1VmTzRISzNmQVBLNWtwZ0tYWXMzQkVDcWdJanFGSElLQzR1SUtVeXRZRVYzN0sKN1dmY1NnRGo0UmJ5U1E0b3VHMjZjSEYrQ1ZkSUF0WjkrTDFuYWVQRVUveDVnc0NlYllyaEFwVFFYQkJKa3pEdApyMWN2OFlMaHhUTCtVODFyb0JvMHR0RjhuL1RDMFdtcFFOT0Z1Vklxa29LN2hPNHdScWVMbWtZQlNFSnRsbHo2CmxremRJdUUxV0xLRm4zeUFadS9Qb3Rzd3RZOUU0dTZvZklucXBWUUhsWHFhUTVteXVpa25VOFVtY3JIOGhkOEUKTFd5L3lCN2FIWkQrMjFaZy9nOUo2VTBpYjAwZFBlNDVFTVl5Q2x1OTZrQ3AvOXRVTFRoYlRaZ1NxdU5xMGg4Kwpxc2lIWUlxVTFlM0kxdGc2Ym4wOE0xZ0JRbGgrS2R5aUl5ZGZhVUpSVmtjNjRVaC80QjlhVHRSUERxQmdYNmsxClhQUjMybStyVWpJNHVqdnlSSytaWHVNbEFOMkloOUh0MzRrYVFud2ZWanE2cllMNVkvK2FlS2I4T3hvRmFROEEKRVFFQUFZa0VjZ1FZQVFnQUpnSWJBaFloQkNobmtmdG1TRk9YZGRzeHVQeTVqQ28reHZZQkJRSmhNQm92QlFrRgpvYU5tQWtEQmRDQUVHUUVJQUIwV0lRUmVwL2dadm4vWkE1cHJ2WG5Kc2NnSE43bk9HQVVDWFcrcVNRQUtDUkRKCnNjZ0hON25PR0NBVUQvMGZEMDlJTHBGQXNmcW9iWkpqaDNGcHMzRys0VThzckoyemUrL2hQb1ZvNk5ybDB3M1oKemE1WUFpMnlzMzdSYzFIKzFMUmlyRlVwalNKQXA4K0tOZ3kzWG41UlNBSkRIQlN2ZjQraTdoZ1NTeEhYMnhhTQpqZmh3RzNkOUpCZ0c5eUk5K0o5MzBTcHV6eHlTVmRNOWFRRXdOSVZNU3E2dUZuOExpYnlYOWo2RzA2NmFTb1loCkxPWi94NEw1cmJFRVArYzNtditCcExHL0FrNmVNeFdkblhIa1NsOEM2dXZtS1FzSzZaSk1FUytkZ2F2UXA0aHcKVGF0dFV5dlhYRU9lcTVSVWo2b0tlUThUTnlNVkdSQ054MkgrRlFnRW9kalMxQjN1bWN6Z25DWENUVW5tNkR2ZgpKb1YxNzY1dEZteDBqQk1rTWx0YUszYVhPYkRuMzh6OUF2VmhNb0Faa2hndkZ0Q2lReFQ5VkhUdGoxby8yNldFCnIyaFlpUUV3WG1WWWw1NEFwUGptODhuUWYveXlPYVBha3RwWUtTSE5zTk5PK1owQ0p4ZFgwck1kMlVkQ280L1EKY1MyREYwR21mK3VoNFo3ckN0V2lVWWZ3QllrYkYySGk5aHJZNUNNenlVK2FYaDh1eEhjMGwrUnYvQ3diVmF4UApiVEhxNFdJbmpzUmhwbFY3eEFuckNXYkg5UVB0SHRudFp3SVVQcjF3ckRRM1FyUzRtNGs0T3l5Ylh1eE5TLzg1CnFzWnE4YXdxTXFPQlJqZTVwMFdFT0pnQVJqS0pPdjgwMll0SGYzL250cWlyVkk4YnV6c2dmSWRmZzBaV2ZNSGQKTk5XbEZNeXlwancyWnF2aWJSRlZOd2YwN1QyZlVUMUVTcUJGVTQxd08wd2M5U1FIaXUzTUFwZS9EZ2tRL0xtTQpLajdHOWdFcGFoQUFoaDhqVEFBdmFTbmpubG9ieE5ia3dKemx6S08rclpXMTNJK25hRTZCYVlBcitheDlwOS9HClc2S21COTFORThXVzNHQWN2Wm9uOHpuMUY3dDRXbjdlMEMyOWg5WHllK2JSckRJU2NuL2UxbzJ4RllDV1ovUzEKaXFvUkp5L01QSk1FaUNuV3Jwb04xUys4Y2FTcmEvamlUWTFJcDQ5eTRVQ1Z1eTgzNzJ2UEF4dzE1ZThPY1BNVQpiWGZjcDFlRUtWZGxzUDJXTWovaGMxRnM0cXJSK2pYZitTbFFDdmhIZnJXNTVSak9aWnpPakFxRDNoOGYwRExICmxwaU9pMWUyUHFjRDdrY3FCTFM3bVZROEFSbmI5dzFGbnBOM1RLeGlOcVJhM1AyN3ZvcG9XL3BkUlcyaFRjS1YKTVZaL1RLVXpUeEl6bVo1K0FwZjBialhlSk80cEZxeFN5S0FkdXNwNEZuSnJuS08rOC9DR0xLdEJZb3l3WDdxMgpSdk1va2RVRWNoWXU0YUw3WHY0NGNsLzBFWENrd3hCcVV2bUFXclliU29oaDZOWHJCNHhCc2dHVEEyb0VMTWY2ClJXeDliank1V0ZwY25zWTNnS29mazE4S1pEWDBjcUZWRjFOc2JaRms2TjRYSUIycEFFaGJBcmttZXpMVUl6Ky8KdTdQM1Q2cW5GS3FUdG9Ob1FRS2U2UGlVYXF0TDFEcHNhVUZkN2xPTmRLelBGQkFEVUNGTTlIMTAzZ2NZOW95OApNUVBJeEY4bDBGalZ4ZlVzRlltSlpFQzFWWmNJdzd1Y0oxUkFsdm9Cc3NaRUxsb3dWdTE4d3hEazhQSjV5N1k1CmZReVVpaVVmNUpmRTdER2JOUzJ3dlZHZ2dvcUl3YzU0dFZNL3Z4QzFjRzQrY1QxNmdabmt2QW01QWcwRVhXK3YKRkFFUUFMN29ZcExJeTJMZ3pjd2I1V3B5ZXZkNEVXN0NwT0NKcUdaMFRaUFhMV0U4anFZbytGcmRWTG1mVTgzQQpBcDE4d21xNVViNmxyczNpZ3I1eEZ6Z2draFd1YUl4aEZabGhHSG56LzdDK2Uyb3JKdUFQekI2aklkcExLeFFVCmdJUkV5NEtnclhhMlNYdisycTZTVUZ5cVFUUVBpR1FkVmN4eTd5RmRJZGZpSDBUbEd0ZUE1eFNPMmxkVlV3MkgKNEg5S3JvNDV3SDl5VHczSTBabG5ZMmdNWlYwVVU4VlVaUDFXUWY3Mk45dU1UKzFEZ3Jxcm9KWWxUbWxjeTl3eAp6UURtMVpRNjFKYTZ4NzRHcDJsWGJvRFg4N3JINklveURXVnVaekpDd3NlVk5RZEVJcGR3OFF0cEEyRG1RZ2hzCmIzMzJZWEFZV3FZVjh4Q3pCQUxxVi9wM3F2dFBjSGVnV3BHa2FVTWV1SFZaN016Ulh0c0huZy9hWjhURXVvVlgKV3VleXhBWFEvbCtMeHNkOXZNT3ZEd2VsTzluUWh6OFBEeFRST3VJeFBmTFlQbmpVOEhEWnZzZWt0OUY4VlhRcwpZTHIzTTcveEdIc2VSV1FmL3JvbWd5c1F3NTRxUUtnYVNpTzQ3R2dsVlJoYmFJL1JYVlMzQU52R2dEVVpFbDN5CkxFcjFLQm9KK1ZVQS9xVDZqNFhkdVphQTV4Q1UyNDI0U3A2Y3RGL1dwQnVKeGpwcFJMbnptL2FiV2lhV0hseFMKclRUNTk1aG9QeU5sek9BamV3U2IvZkIwcXpWT3NaRUE0L0hRdVBhYjYycW10aXI2eDNiemMyYWJoWTM2T3crUwpIdlRlTExPN2puQTBsdEIrN1JzZUlFMklYb3JFSkxIMlNzRFc1dVlDUjBITi82bmZBQkVCQUFHSkFqd0VHQUVJCkFDWUNHd3dXSVFRb1o1SDdaa2hUbDNYYk1iajh1WXdxUHNiMkFRVUNZVEFhUmdVSkJhR2VzZ0FLQ1JEOHVZd3EKUHNiMkFRWklFQUNUWEs5Nm1HV3dxZkJDMU9GK1dkdEx1VlRsd25OT2Z2NW5lV0s0RXZsenFhdlFoOE53bDdETQpnc0Q3ZER6eXNBTjZXb3hxZHVpelJic3VRUVB6dTZUZ205eWxLUU5MQ29LbjBleHNTTTArMkNaejVEakJ6dUVwCldkS2xuRDdSb01OT1NiWlJaTktoUGRyRGNyN2U2SThKa2JlVVduNVoyWjRSUzJKUHJVRHVmbEErWjMzdHE0QUcKcldJeXBYdXRhTjVaWkxPOXM5ZW00NEVvbkpDUFg1ZCsyNkpGUnJlYklBZzBGWmU5c3d5QUVyM0dCb1J2dEI5Twppd2pXd0NMbEtuRSs4SGI0VFlTUU50Rmk1NEx0ZStyYnFiSEZTbmx5MnRSNUREQ3BaMS9uY2VwOGlVVTF5d25HCjNHWGNXcCtBKzlMcXNZaDNRMDhtVWVLZWtQdW05U0RoU0d0YmJtLzVGMTFqYU5kOEROSkhBbjBiaGZ2Q29UdlgKRHVBRjRCeGoxbXZZQkFpVEdJZWdBOXNIZUpVZ1k3b3VUSDJ3VmkwOXBhTEQ0Sk1nbzJvK04wVkEyWm9VR0g2egoxUXNoaEs2ZVk4NkZ5U2FrbEVIalRmZUtzL245YkhYbk9ua21ad29aTUxLOVdadHpmVTRoNFNORFJTanh5RzNNCmxjb2tIOWpNVVRmQk4rdER6TXdZVTFpU3JqSHBJWWZOdlQ4L0lvQUlUTE41MjVnbXdiS2tyZGY1a01CSllRRVoKK0o5UE92Mmc4VDRMM3BlaE5PQzBrUEYwWUpSWUMxd2hiZmJDUFJPT1hjVGszWmJJVk1HVkJEZXNHekk3QUpxTwo5WjVKM3BhUk5lamdSV1J6MENOTjNmQU5kOUc5MUFWNXY0dzlidG9id0ZSZXZTbG1nTnAzR2c9PQo9SU92WgotLS0tLUVORCBQR1AgUFVCTElDIEtFWSBCTE9DSy0tLS0tCg==

clusters/k8s01/flux-system/kustomization.yaml

+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- gotk-components.yaml
+- gotk-sync.yaml
+- gpg-keys.yaml
+- receiver.yaml
+- webhook-secret.yaml

clusters/k8s01/flux-system/receiver.yaml

+apiVersion: notification.toolkit.fluxcd.io/v1beta1
+kind: Receiver
+metadata:
+  name: gitlab-receiver
+  namespace: flux-system
+spec:
+  events:
+  - Push Hook
+  - Tag Push Hook
+  resources:
+  - kind: GitRepository
+    name: flux-system
+  secretRef:
+    name: gitlab-webhook-token
+  type: gitlab

clusters/k8s01/flux-system/webhook-secret.yaml

+apiVersion: v1
+kind: Secret
+metadata:
+    name: gitlab-webhook-token
+    namespace: flux-system
+type: Opaque
+data:
+    token: ENC[AES256_GCM,data:OH3a73YY8Oii3q/gyzllsk2BX8phUMXe8nZNXjUT7CZk6UlWtXY3/c0rAZon3FBDaH1hKDhtsWVVdVcZ07kNOOtlc0ezdHkN5cD/fEfdPR8U+XttLsr+DQ==,iv:2wqK2ufJTV5MdRmDBKx+f+PxVGwoNox/MTJk4RXIml8=,tag:y/fvRyAYXdPKOCjBOsx3BA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2021-08-13T22:24:25Z"
+    mac: ENC[AES256_GCM,data:wbKWI4Qdjg8FYA56ASgchwZWT+yi6HT9ix1kwpH6wQ8hkVLTvNa2/tPQCILGcG/6DWGWtgQbKLp8wqp15MpRy5t/FqH2xTBXr6dY/5iDbvAgUA17QQI1w6xFIJoxdanthGFtrlZZTPz8YC9bAXpCN3Y1Icj4ZWgkzeqrn/QPd8Q=,iv:pm29MkED8RzetecXrrAOJtRQZmolKCLW1L5tF2hB+F0=,tag:VQym4XS8vbzWTaxydHYKJg==,type:str]
+    pgp:
+        - created_at: "2021-08-13T22:23:22Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA1u//sli4/n1ARAAyPUuDlqcn8uoyARE0anQfduu8UdylmAUBixoc7HqZy8t
+            E8psRdURyyMrqCinFQKiJIYaK5BAB80WNx5dw0tYz6HRmiojQVtyxcwle8edtiZO
+            jnw22USDiIfqNrYQd1lxE4pFKLKOwq897oXiLcwK4tdItCrlFWrklNetDZhEEfdB
+            /1Oz28lnHBsxmQyxYu8gsgQ2MekYMek1FTBP9ht/xWFH1GoASU27jeOxtUPre9QT
+            3Wf9NmgCPf0BW09S3DprUdjcphZ0qLp8xYkZ8FNyVWXAJ+EjoTO/AXbsNqAN8BF+
+            G8HGbV9QtXAUDT8zhF8nf7BVeKdTc5jhPaFlXOc9UwzdZfAuFwOw4Js34uIHC2lz
+            nVrn9qKlfsr3D9ab7Q7OoRnftXpbsnthCV5kkHWdnb5JbMkVxep001TVSbJoh97P
+            aTR4xCOcHvrDx9LR7ydXX0vMzki2k7zzJvcDtn9GwGAljz2M8epAi4BxEIPjyY52
+            yQMEErjFBUs48flB8sL/JIuBlxX5DlxekNuXBdTaoeYTN+AKgXEaH02FPgL8K3SY
+            mkc9bDEtTGo6PLpVaF/8qk1BRaoQ4yOrjASqrlzzbb8oZywSu39JvvwBesyBsXUs
+            RtRbop9hb5MYJ51010FBRMXuqbr2j9C4vMGgv4HtpOpKm0rmDFIB2uUoqfg6Pe7S
+            XgFd+cr4u3bHPsPnOgYxqhfG6aIj4cJyFmiBSH1yjcFUYBW+5i4pMeMYB+RQ/W2+
+            hfPYxkboXoZXwJbJYMhwh56UvaH8jcV1idzthoRNPngHG3WbYNwVarGHRScwhyU=
+            =tTg4
+            -----END PGP MESSAGE-----
+          fp: 9D02A9AD73EF7F3D5F657AC2B392F6EB325E8C50
+        - created_at: "2021-08-13T22:23:22Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7kpg2bgzVHcARAAjUgfdKLRkCovt4OvijlWqmOwemHvD5btBERoGvAR0Icu
+            xHcvUGdPtoMQ0JsZ71HT5Bt2efcmrYbBsUPSbXbbrWzqCx+JvO93oeBxY3AaVbzz
+            NmHOBY/VyTyzxIOxtW/Ob7VDAuDD4bv0NhtHJBcyqh9gdNXtZxTCbnyXvk6rbH7Q
+            k9HIw/A68QfR5rHppHmByBzc5OfuEvcGBInZgUUATUvYkEn2TfB4LLZ++L0jX8C6
+            2lqqURTOTZ2TVq8qijUXa+hNt4kYpHojySyUeNWTwCgAxAeMw++DGKciA5WzKTAY
+            bLALBcYMAh8lydJ//ISi3pyMvVsCjlN3BpM4VA/+0v5fkEtFd7GDMhuB1/CYza9n
+            YTo0tE9mZapoDmlIs6q7mDiD7xs4iNBeGpTU3vcDgImFZjNzHFWddN8s3ujzPZlD
+            7tDCcXh7mPFlWq0EUSy7DWbgbj945OuEKEplV/h0lVf93D67KpJEkaH/TnnYjXCQ
+            t51r+wAg8naC9Dfj3QHZt9xrmk3j3uMQBM6rzGMRvXqdwjSOH1uqULxTTVZzJryP
+            2LftqLxZrD5zdG8Gs0lYe+iwmHVhIOOfY1weLN3Y4yKbhk8aHUKFxhoTN/bPDBgk
+            sLBL4uqNSL1tku/ShZ+UOK1Rh82Q0wpUit+8OXi5biNGwkcEIwhpPpfm8yorL4bS
+            5gFWiuXXESNKa0ArSBrrLp5bncIMfIQ7wGohlKMVSf7NRzDFk49u+KC/10NBFaVP
+            0yRB+wxhQBMr8fxVAJsThqTkJr6FK6FD70/La76QSdJlmuJS19f5AA==
+            =l6ls
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1

clusters/k8s01/infrastructure.yaml

+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: infrastructure
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./infrastructure
+  prune: true
+  validation: client