diff --git a/apps/k8s01/iot/shelly.yaml b/apps/k8s01/iot/shelly.yaml index 1e3f66914ab8363f6fdd5e15e95a3c5baaa02622..58c44abf67fb20b8eaffc634a3c7cb3b57edd6fb 100644 --- a/apps/k8s01/iot/shelly.yaml +++ b/apps/k8s01/iot/shelly.yaml @@ -16,8 +16,8 @@ sops: azure_kv: [] hc_vault: [] age: [] - lastmodified: "2022-10-11T13:24:08Z" - mac: ENC[AES256_GCM,data:no/gQrdX6toC6fLWLlLxLp08GFwzXALqjk+EHAMoq1xdmRg4c/7NSYJ/SdQxDsAbsmAj9qXg3KPJEYjBTzv6qDQZ65K8yB1aoGSfqBdt2Gb/KHhgcfXsrIXc3DGKGNpbjI0okmKBz8cVyh/HBXl9tgncY8P2simeZoPVsb0P/Hw=,iv:m7hpcYEblRfr2MoHaAMfxByM1sgvwje3rVv146VWaps=,tag:fB7JSIaAV6TyUm3xG0OikQ==,type:str] + lastmodified: "2022-10-11T18:57:37Z" + mac: ENC[AES256_GCM,data:w4WeiJ3kzrGYBLilZzesG1MM18uxJsNfpGIubTqJMprD2zuVn32AQErI38r4O71yD3H+hrCr1uDbo7yW9NkLdLYFxvqIWuPqyzYQ6ZaC1VkzXvDGeCtySVU6dzgZEKWb/I+jC7O1rtNDn9w+Yq+TMEZjRjVlE91cmvtqChRwBMQ=,iv:2eB5mexKs6swhgUb15tpHcHHEnPWWICjtUgrlwoHXdo=,tag:S5w2Yjsd172ySDFUVz2VZw==,type:str] pgp: - created_at: "2022-09-13T20:16:18Z" enc: |- @@ -105,8 +105,162 @@ sops: azure_kv: [] hc_vault: [] age: [] - lastmodified: "2022-10-11T13:24:08Z" - mac: ENC[AES256_GCM,data:no/gQrdX6toC6fLWLlLxLp08GFwzXALqjk+EHAMoq1xdmRg4c/7NSYJ/SdQxDsAbsmAj9qXg3KPJEYjBTzv6qDQZ65K8yB1aoGSfqBdt2Gb/KHhgcfXsrIXc3DGKGNpbjI0okmKBz8cVyh/HBXl9tgncY8P2simeZoPVsb0P/Hw=,iv:m7hpcYEblRfr2MoHaAMfxByM1sgvwje3rVv146VWaps=,tag:fB7JSIaAV6TyUm3xG0OikQ==,type:str] + lastmodified: "2022-10-11T18:57:37Z" + mac: ENC[AES256_GCM,data:w4WeiJ3kzrGYBLilZzesG1MM18uxJsNfpGIubTqJMprD2zuVn32AQErI38r4O71yD3H+hrCr1uDbo7yW9NkLdLYFxvqIWuPqyzYQ6ZaC1VkzXvDGeCtySVU6dzgZEKWb/I+jC7O1rtNDn9w+Yq+TMEZjRjVlE91cmvtqChRwBMQ=,iv:2eB5mexKs6swhgUb15tpHcHHEnPWWICjtUgrlwoHXdo=,tag:S5w2Yjsd172ySDFUVz2VZw==,type:str] + pgp: + - created_at: "2022-09-13T20:16:18Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + wcFMA7kpg2bgzVHcARAAoueYiNdU74lz+DKGnzIoohlWRe50KGl7LNC1znJvv+s9 + 7fHsooW6HH19EQS7W6+1rJSpgqVxMYcJ6pX9rBsdgCLGk6uplH/vbL1a6WvJxq5F + knxvjxVtseQtquXBeVQDd3AnqM9+N5l137Bu8nVJr0CyUG/O3bdjV+rMyX8Rst9E + umKqughRRiJEw+vC/4GIDDxB1p7eqVY98j8Ndg8arezY+iWUlRrZjBUvnlwLXh2w + 1mLLc6A12hBU4fS2bXCajxEttwt8Iu91NZ6hT8suwPVkyt4Jvd+7xBBjVVjEu5ay + XOz75JFHv6NSA8dBS/JGf50QWDVN/5plODefNLZ8+hmLJLXxhVYjJtZ/Ui7gDNw5 + o8FPt0npit+Y6cSu4fwtGRbfAgCucFRa8TRphFlEJc+pyj57IWhrsQ41oE1BDs5Z + 9nycKz/gAui1gcWK5WyUohHJySjEQ7ylxltqhKNCeoS6IdJwvl8tJPBTm9PXkDOa + bLYquP7k8Kcs1HrjrMTDbB31oS+vbD1OEbzoe940844WT7xgMN0XyjgwoURlyDzG + 0F8WQSgxXflg0iKcmh7LlO9Amon4RtvIzCM6+W+6TTjsSwof0gotBkcIiZ4/33p2 + QuczC/zAXeNtCJllGtI4rodWQswfSfwr7o2GmkJLpTBLWchFwZKO9jObGF3Msn/S + UQEVtwrW0gXMCs8fhEd3nmGXB5egbY0i8IYosLMq13MzpaPMs9HdklG+C6PTzWun + A7nKh0USoxOfc/sWGg9C4DGxRbgOKIdp3fpLIEEy4BS5Ig== + =cQ+Y + -----END PGP MESSAGE----- + fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601 + - created_at: "2022-09-13T20:16:18Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMA4oYbIHZIrAPARAAlCWi5/GXzpM4EAEY94T9reZ/7J6z1U7WI02dkn0qvWiZ + YkjlZ/Cjw45pAworxxnvhDxAiD2LiQH8XpxhgNpmv0lirnwDwnmULxkA03R6iFao + /sa+68kXm3/CAA44yHErWg/iqigk8++b0PG29BrJgNmH1SRIKyV2nNT5QNPBPazT + iuXzNJEsM8WCPHO2oI0A8ESzBldxI6qPlyPw/HnXUfGB7/k4UvxF5/AsAwb0G+WC + c1D3T8xctRHH1/GcZf3TcTS8QVKgmIVJfIFCVvS9Gbmql2Lw7OENwWvCUjnirXpV + WtdogWMN29goWPVNGYnCb5nKfmrfSQHUMUqtCPFyNFrrkTbSW0wB5wdGh2/LyKyf + qT6gp0zLx2NOocEs7FCvhuEsWaeHbTYpW0klqwDg9CdKiDXGSvrBEa9a8lY0bLf0 + yzp+UzK+m+rPBA7wMsl7EvWKQdzb48kHYkFBagHcqeyDS6nwKtNtzE5NpMn+7afN + ibSDFwEbPY8sgzt5nDKLTSXYqehi6y2ef47nNe3wU6EyLqs7IiZSNEMjfeCuLQwa + 0VQ3sEWMibI6whwEMn+brLwjBk9ECgNzPZlfTJba3Wx2oX85/QmsGKdazrHBzRxI + DITDiW+gNEEStcv2FUPb/sYSNW6G3ZgiftSmsHphJvWdqYeckcVYgzlRK3nEDp7U + aAEJAhBuUESqrXlLqY3nubH8Esx+RqWMfJ18JnovuQta2ELLC2tv6Gq8Gv81NAab + vo2OImfMvO/PWSriyatax3PgcI49tCEeUQChqQ0j6uvnHKqJ7xySXLem18dlTtXI + AnX0OhNKJ0np + =I/wJ + -----END PGP MESSAGE----- + fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07 + encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$ + version: 3.7.3 +--- +apiVersion: v1 +kind: Service +metadata: + name: shelly02 + namespace: iot +spec: + type: ExternalName + externalName: ENC[AES256_GCM,data:d1kZ+DqpXF8Vkewa8nBqt3sHewYlhWhNG/4=,iv:m+MUs6rrirV8EWsB+LA9+Xu1YfSJxFrPBHJujET8Soc=,tag:d0uDityUF2a/dy5HPpXdiQ==,type:str] + ports: + - port: 80 + name: http + protocol: TCP +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2022-10-11T18:57:37Z" + mac: ENC[AES256_GCM,data:w4WeiJ3kzrGYBLilZzesG1MM18uxJsNfpGIubTqJMprD2zuVn32AQErI38r4O71yD3H+hrCr1uDbo7yW9NkLdLYFxvqIWuPqyzYQ6ZaC1VkzXvDGeCtySVU6dzgZEKWb/I+jC7O1rtNDn9w+Yq+TMEZjRjVlE91cmvtqChRwBMQ=,iv:2eB5mexKs6swhgUb15tpHcHHEnPWWICjtUgrlwoHXdo=,tag:S5w2Yjsd172ySDFUVz2VZw==,type:str] + pgp: + - created_at: "2022-09-13T20:16:18Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + wcFMA7kpg2bgzVHcARAAoueYiNdU74lz+DKGnzIoohlWRe50KGl7LNC1znJvv+s9 + 7fHsooW6HH19EQS7W6+1rJSpgqVxMYcJ6pX9rBsdgCLGk6uplH/vbL1a6WvJxq5F + knxvjxVtseQtquXBeVQDd3AnqM9+N5l137Bu8nVJr0CyUG/O3bdjV+rMyX8Rst9E + umKqughRRiJEw+vC/4GIDDxB1p7eqVY98j8Ndg8arezY+iWUlRrZjBUvnlwLXh2w + 1mLLc6A12hBU4fS2bXCajxEttwt8Iu91NZ6hT8suwPVkyt4Jvd+7xBBjVVjEu5ay + XOz75JFHv6NSA8dBS/JGf50QWDVN/5plODefNLZ8+hmLJLXxhVYjJtZ/Ui7gDNw5 + o8FPt0npit+Y6cSu4fwtGRbfAgCucFRa8TRphFlEJc+pyj57IWhrsQ41oE1BDs5Z + 9nycKz/gAui1gcWK5WyUohHJySjEQ7ylxltqhKNCeoS6IdJwvl8tJPBTm9PXkDOa + bLYquP7k8Kcs1HrjrMTDbB31oS+vbD1OEbzoe940844WT7xgMN0XyjgwoURlyDzG + 0F8WQSgxXflg0iKcmh7LlO9Amon4RtvIzCM6+W+6TTjsSwof0gotBkcIiZ4/33p2 + QuczC/zAXeNtCJllGtI4rodWQswfSfwr7o2GmkJLpTBLWchFwZKO9jObGF3Msn/S + UQEVtwrW0gXMCs8fhEd3nmGXB5egbY0i8IYosLMq13MzpaPMs9HdklG+C6PTzWun + A7nKh0USoxOfc/sWGg9C4DGxRbgOKIdp3fpLIEEy4BS5Ig== + =cQ+Y + -----END PGP MESSAGE----- + fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601 + - created_at: "2022-09-13T20:16:18Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMA4oYbIHZIrAPARAAlCWi5/GXzpM4EAEY94T9reZ/7J6z1U7WI02dkn0qvWiZ + YkjlZ/Cjw45pAworxxnvhDxAiD2LiQH8XpxhgNpmv0lirnwDwnmULxkA03R6iFao + /sa+68kXm3/CAA44yHErWg/iqigk8++b0PG29BrJgNmH1SRIKyV2nNT5QNPBPazT + iuXzNJEsM8WCPHO2oI0A8ESzBldxI6qPlyPw/HnXUfGB7/k4UvxF5/AsAwb0G+WC + c1D3T8xctRHH1/GcZf3TcTS8QVKgmIVJfIFCVvS9Gbmql2Lw7OENwWvCUjnirXpV + WtdogWMN29goWPVNGYnCb5nKfmrfSQHUMUqtCPFyNFrrkTbSW0wB5wdGh2/LyKyf + qT6gp0zLx2NOocEs7FCvhuEsWaeHbTYpW0klqwDg9CdKiDXGSvrBEa9a8lY0bLf0 + yzp+UzK+m+rPBA7wMsl7EvWKQdzb48kHYkFBagHcqeyDS6nwKtNtzE5NpMn+7afN + ibSDFwEbPY8sgzt5nDKLTSXYqehi6y2ef47nNe3wU6EyLqs7IiZSNEMjfeCuLQwa + 0VQ3sEWMibI6whwEMn+brLwjBk9ECgNzPZlfTJba3Wx2oX85/QmsGKdazrHBzRxI + DITDiW+gNEEStcv2FUPb/sYSNW6G3ZgiftSmsHphJvWdqYeckcVYgzlRK3nEDp7U + aAEJAhBuUESqrXlLqY3nubH8Esx+RqWMfJ18JnovuQta2ELLC2tv6Gq8Gv81NAab + vo2OImfMvO/PWSriyatax3PgcI49tCEeUQChqQ0j6uvnHKqJ7xySXLem18dlTtXI + AnX0OhNKJ0np + =I/wJ + -----END PGP MESSAGE----- + fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07 + encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$ + version: 3.7.3 +--- +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: shelly02 + namespace: iot + annotations: + forecastle.stakater.com/expose: "true" + forecastle.stakater.com/appName: Shelly02 + forecastle.stakater.com/group: IoT + nginx.ingress.kubernetes.io/auth-response-headers: Authorization + nginx.ingress.kubernetes.io/auth-url: ENC[AES256_GCM,data:LtmYhpd4lLnuyYH9mF8aHNzChLTmrwgtCw==,iv:Dl/5jLP9WVl6oZ26TvUbWPNI6U50hOI6YAKFx4rU65Y=,tag:MUA/yQ+SrJ8F2meqqwlQEQ==,type:str] + nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri + nginx.ingress.kubernetes.io/configuration-snippet: | + auth_request_set $name_upstream_1 $upstream_cookie_name_1; + + access_by_lua_block { + if ngx.var.name_upstream_1 ~= "" then + ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)") + end + } +spec: + rules: + - host: ENC[AES256_GCM,data:UsrvSRvxxOh916pFlCvXu+c1vf3+7uWn/neX7koz7cA=,iv:LwYhAqCc/lTnzyuf0eWK6DGDM+VDpGkHQ8KQJtyylms=,tag:A7uXbSok1RY3wSQrRO8Pjg==,type:str] + http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: shelly02 + port: + number: 80 + tls: + - hosts: + - ENC[AES256_GCM,data:taVcZRTqP1/BEmM54/AHdMCxxDifGsHtlnSQHuUAiyY=,iv:hEPphp5ockKiqkVS4bzfhzPeQ7BpMk/4g/MkROxZn0I=,tag:LwlT5FVJLmkb0zoYA52b4w==,type:str] + secretName: ingress-iot-tls +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2022-10-11T18:57:37Z" + mac: ENC[AES256_GCM,data:w4WeiJ3kzrGYBLilZzesG1MM18uxJsNfpGIubTqJMprD2zuVn32AQErI38r4O71yD3H+hrCr1uDbo7yW9NkLdLYFxvqIWuPqyzYQ6ZaC1VkzXvDGeCtySVU6dzgZEKWb/I+jC7O1rtNDn9w+Yq+TMEZjRjVlE91cmvtqChRwBMQ=,iv:2eB5mexKs6swhgUb15tpHcHHEnPWWICjtUgrlwoHXdo=,tag:S5w2Yjsd172ySDFUVz2VZw==,type:str] pgp: - created_at: "2022-09-13T20:16:18Z" enc: |-