diff --git a/apps/k8s01/forecastle/forecastle-values.yaml b/apps/k8s01/forecastle/forecastle-values.yaml
index 5996fada6d6094e5ba04f5f4268fd16bd1a4c11b..ccbc2ae61a31e1e4e0fd0fc289ef1e373f6fd22f 100644
--- a/apps/k8s01/forecastle/forecastle-values.yaml
+++ b/apps/k8s01/forecastle/forecastle-values.yaml
@@ -5,15 +5,15 @@ metadata:
namespace: forecastle
type: Opaque
stringData:
- values-overrides.yaml: ENC[AES256_GCM,data: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,iv:xTq71sKF8wDlMGl7a7/hLpT4eJwvQ5ThL/Q/pRu26TQ=,tag:DZwJImgVJ4+NLEGO1BjHBQ==,type:str]
+ values-overrides.yaml: ENC[AES256_GCM,data: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,iv:QzXWHjnI/0keVuPL1hhXqIUCv+BUG3xPDWKI3qOT3os=,tag:YsNkBzWBK3m8H917qcB2qA==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2023-05-22T11:10:21Z"
- mac: ENC[AES256_GCM,data:Wwela5mdSgy59/rAzpGCO/eyafKCKqCw6GGEqE7+atdDT7/Ypds0lAcsXcDGoc+/P4EFnPg3j8oJdIHSjpiEPgOVBOZJTVrm/A3bwo8OlvStkabYYDya/HS/GsKw+UfakYSlCvYWidsqR1/35qj8qtZtT8xEoxbyFARuK1t2oQM=,iv:oUXVSIpHnuPvMQKY3DvRAY7/dDyDVwDoecdpS/q44Mw=,tag:kyKw2fvMB2jlfM/ko8pmDQ==,type:str]
+ lastmodified: "2023-09-26T17:14:32Z"
+ mac: ENC[AES256_GCM,data:ZDcgM5YE4froB1IFDuacKYbSBBfreat+GhZVVJhaEm25Ch5kfTpAqhrTf/ZA14CkAHvtjdQ8vKpa4D68wd8sZBz7GNW2JJANwC/S2iQd8ikUEyhUDUaYW5shZEAmHeYfUF/t12rbsHBYp/y+SxqkC0MdKYkIQah3eGEQ44ENmY0=,iv:Docger2iRrFzu9Vie731cGx6dJpdpFeHZjBslQADsDw=,tag:VAAHBWZyqXiMTVbE7Whvcw==,type:str]
pgp:
- created_at: "2022-03-22T22:26:35Z"
enc: |-
diff --git a/apps/k8s01/iot/rainer.yaml b/apps/k8s01/iot/rainer.yaml
index edcde2661ebba4d85358bdde9e42014c2fd929fe..0def1e859718959f8b1efd039bd53950b3319ba5 100644
--- a/apps/k8s01/iot/rainer.yaml
+++ b/apps/k8s01/iot/rainer.yaml
@@ -16,8 +16,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2023-09-15T21:21:35Z"
- mac: ENC[AES256_GCM,data:aU5WTdd2SidauXo2xcFb4EGO0bU943VB+j42FTeG79+EiFDnaErv3fWvBQchJzmymVM0ANwELbduNYvg2NVhvU9TCxCNC/GHhDV7N+BHmvTYBU31OBAjg07Vxfq6rhMjXKiPOz+K8Pi1zoHYiN73QT4S8YPPyLIZxe/+lqTCz88=,iv:pwfrkj+1dvDgv3UsiQL37tWvIHfDSAOrfefkXaDe56k=,tag:6ZHVoVzo8Il2Io9EkH4Vgg==,type:str]
+ lastmodified: "2023-09-26T17:15:09Z"
+ mac: ENC[AES256_GCM,data:IdfFssO5lZ57juV71dluQqgagtIM6rZM7IMggk74XDyk/r0B8nrm15Cljvz8Ia+2fp89Awkoz1GMwE8NOUYDWmRZd0xGUWnp1Mte1bHE1H67cK2GkDue8NNLnq647JcTRD+czc/aNNKFZ93baAdiKv6VA1Yz6n8zX7m2ydjZ/1A=,iv:KZhpYwbgClv8KVQ3CpqOhbX16f9PaQSsDPaP4oeOQ2Y=,tag:tpSI0xYxJXkryFB4gSbPSA==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
@@ -78,14 +78,6 @@ metadata:
nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-url: ENC[AES256_GCM,data:jKiHDoG05AspEOjtaHqDMJSR7JJWWxtIdg==,iv:Dl/5jLP9WVl6oZ26TvUbWPNI6U50hOI6YAKFx4rU65Y=,tag:u3D0MZQR/yVynTH1cu4KwQ==,type:str]
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
- nginx.ingress.kubernetes.io/configuration-snippet: |
- auth_request_set $name_upstream_1 $upstream_cookie_name_1;
-
- access_by_lua_block {
- if ngx.var.name_upstream_1 ~= "" then
- ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
- end
- }
spec:
rules:
- host: ENC[AES256_GCM,data:3G7+SR2q+HdMPliQoNGpSh58WMyV59+S1L/mP8qdF80=,iv:zH6hLjLhtaCL95lxSSGJVMr+QyDHEhvb1FlBU/lbRys=,tag:svh+JpKtlULUll8uvvxCtg==,type:str]
@@ -108,8 +100,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2023-09-15T21:21:35Z"
- mac: ENC[AES256_GCM,data:aU5WTdd2SidauXo2xcFb4EGO0bU943VB+j42FTeG79+EiFDnaErv3fWvBQchJzmymVM0ANwELbduNYvg2NVhvU9TCxCNC/GHhDV7N+BHmvTYBU31OBAjg07Vxfq6rhMjXKiPOz+K8Pi1zoHYiN73QT4S8YPPyLIZxe/+lqTCz88=,iv:pwfrkj+1dvDgv3UsiQL37tWvIHfDSAOrfefkXaDe56k=,tag:6ZHVoVzo8Il2Io9EkH4Vgg==,type:str]
+ lastmodified: "2023-09-26T17:15:09Z"
+ mac: ENC[AES256_GCM,data:IdfFssO5lZ57juV71dluQqgagtIM6rZM7IMggk74XDyk/r0B8nrm15Cljvz8Ia+2fp89Awkoz1GMwE8NOUYDWmRZd0xGUWnp1Mte1bHE1H67cK2GkDue8NNLnq647JcTRD+czc/aNNKFZ93baAdiKv6VA1Yz6n8zX7m2ydjZ/1A=,iv:KZhpYwbgClv8KVQ3CpqOhbX16f9PaQSsDPaP4oeOQ2Y=,tag:tpSI0xYxJXkryFB4gSbPSA==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
diff --git a/apps/k8s01/iot/shelly.yaml b/apps/k8s01/iot/shelly.yaml
index 5722eebf085db3779d8251afa1498601aa597904..ee143c767f570f1056816a73a525a561b8a88933 100644
--- a/apps/k8s01/iot/shelly.yaml
+++ b/apps/k8s01/iot/shelly.yaml
@@ -16,8 +16,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-11-15T21:22:15Z"
- mac: ENC[AES256_GCM,data:rLpvp0iv8yz+7R3zC9vfjU1otqTo7gAKZNxVX4l3nm/rBMZv6ndaId1Z+eiNjMt1tOJg1vaPndbkdFKFWEAveYy3p1wbwCD1Z/SR4LkHV1fevuwQsGGSSfCaWz/SV2ZJrYjFGpmz3nzJXAIGRR2L4I8i5QXlLRn/PPJfRHInwDU=,iv:2OwV1/QmqK6Q4QFlJ81EZkG/XZSmHC/lE9yr9NZjkUE=,tag:SNcrT+Nq2VUlW3Bjjwa1YA==,type:str]
+ lastmodified: "2023-09-26T17:17:21Z"
+ mac: ENC[AES256_GCM,data:HX6eXVyznlbxOhi7mwxFNr2rQCxBD1hpmAS/1IztxVnKDW6ifiKaVL0YxSKkFlQ7v2AM543bDT9fS6NN3kdIw+3LIK3/u3yYwoyFXN/SMDwhHJW26fK40C2RGlMTi17hTzguXLMlvmscnUyr2ggmwfvQyxxR8+gYfcL/G3p0ATM=,iv:EWja7fLva8oV54D5dvrWwUCcxZHrzmMnVeTJbDoxFA8=,tag:lTViVx3dlqjvcWvtmjPqIQ==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
@@ -73,18 +73,10 @@ metadata:
forecastle.stakater.com/appName: Shelly01
forecastle.stakater.com/group: IoT
forecastle.stakater.com/network-restricted: "true"
- nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.48/32
+ nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.0/24
nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-url: ENC[AES256_GCM,data:LtmYhpd4lLnuyYH9mF8aHNzChLTmrwgtCw==,iv:Dl/5jLP9WVl6oZ26TvUbWPNI6U50hOI6YAKFx4rU65Y=,tag:MUA/yQ+SrJ8F2meqqwlQEQ==,type:str]
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
- nginx.ingress.kubernetes.io/configuration-snippet: |
- auth_request_set $name_upstream_1 $upstream_cookie_name_1;
-
- access_by_lua_block {
- if ngx.var.name_upstream_1 ~= "" then
- ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
- end
- }
spec:
rules:
- host: ENC[AES256_GCM,data:WLRfTaemCevolULjn9I4egrdYXWoIkax7CRYNBUqfL4=,iv:b1ieQDnKhv/f7vh2VCfE6QeBcUOvN9Muejbfx0fKdL4=,tag:Hb+Tvi29/eL/KsLMUX7FEg==,type:str]
@@ -107,8 +99,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-11-15T21:22:15Z"
- mac: ENC[AES256_GCM,data:rLpvp0iv8yz+7R3zC9vfjU1otqTo7gAKZNxVX4l3nm/rBMZv6ndaId1Z+eiNjMt1tOJg1vaPndbkdFKFWEAveYy3p1wbwCD1Z/SR4LkHV1fevuwQsGGSSfCaWz/SV2ZJrYjFGpmz3nzJXAIGRR2L4I8i5QXlLRn/PPJfRHInwDU=,iv:2OwV1/QmqK6Q4QFlJ81EZkG/XZSmHC/lE9yr9NZjkUE=,tag:SNcrT+Nq2VUlW3Bjjwa1YA==,type:str]
+ lastmodified: "2023-09-26T17:17:21Z"
+ mac: ENC[AES256_GCM,data:HX6eXVyznlbxOhi7mwxFNr2rQCxBD1hpmAS/1IztxVnKDW6ifiKaVL0YxSKkFlQ7v2AM543bDT9fS6NN3kdIw+3LIK3/u3yYwoyFXN/SMDwhHJW26fK40C2RGlMTi17hTzguXLMlvmscnUyr2ggmwfvQyxxR8+gYfcL/G3p0ATM=,iv:EWja7fLva8oV54D5dvrWwUCcxZHrzmMnVeTJbDoxFA8=,tag:lTViVx3dlqjvcWvtmjPqIQ==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
@@ -172,8 +164,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-11-15T21:22:15Z"
- mac: ENC[AES256_GCM,data:rLpvp0iv8yz+7R3zC9vfjU1otqTo7gAKZNxVX4l3nm/rBMZv6ndaId1Z+eiNjMt1tOJg1vaPndbkdFKFWEAveYy3p1wbwCD1Z/SR4LkHV1fevuwQsGGSSfCaWz/SV2ZJrYjFGpmz3nzJXAIGRR2L4I8i5QXlLRn/PPJfRHInwDU=,iv:2OwV1/QmqK6Q4QFlJ81EZkG/XZSmHC/lE9yr9NZjkUE=,tag:SNcrT+Nq2VUlW3Bjjwa1YA==,type:str]
+ lastmodified: "2023-09-26T17:17:21Z"
+ mac: ENC[AES256_GCM,data:HX6eXVyznlbxOhi7mwxFNr2rQCxBD1hpmAS/1IztxVnKDW6ifiKaVL0YxSKkFlQ7v2AM543bDT9fS6NN3kdIw+3LIK3/u3yYwoyFXN/SMDwhHJW26fK40C2RGlMTi17hTzguXLMlvmscnUyr2ggmwfvQyxxR8+gYfcL/G3p0ATM=,iv:EWja7fLva8oV54D5dvrWwUCcxZHrzmMnVeTJbDoxFA8=,tag:lTViVx3dlqjvcWvtmjPqIQ==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
@@ -229,18 +221,10 @@ metadata:
forecastle.stakater.com/appName: Shelly02
forecastle.stakater.com/group: IoT
forecastle.stakater.com/network-restricted: "true"
- nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.48/32
+ nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.0/24
nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-url: ENC[AES256_GCM,data:LtmYhpd4lLnuyYH9mF8aHNzChLTmrwgtCw==,iv:Dl/5jLP9WVl6oZ26TvUbWPNI6U50hOI6YAKFx4rU65Y=,tag:MUA/yQ+SrJ8F2meqqwlQEQ==,type:str]
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
- nginx.ingress.kubernetes.io/configuration-snippet: |
- auth_request_set $name_upstream_1 $upstream_cookie_name_1;
-
- access_by_lua_block {
- if ngx.var.name_upstream_1 ~= "" then
- ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
- end
- }
spec:
rules:
- host: ENC[AES256_GCM,data:UsrvSRvxxOh916pFlCvXu+c1vf3+7uWn/neX7koz7cA=,iv:LwYhAqCc/lTnzyuf0eWK6DGDM+VDpGkHQ8KQJtyylms=,tag:A7uXbSok1RY3wSQrRO8Pjg==,type:str]
@@ -263,8 +247,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-11-15T21:22:15Z"
- mac: ENC[AES256_GCM,data:rLpvp0iv8yz+7R3zC9vfjU1otqTo7gAKZNxVX4l3nm/rBMZv6ndaId1Z+eiNjMt1tOJg1vaPndbkdFKFWEAveYy3p1wbwCD1Z/SR4LkHV1fevuwQsGGSSfCaWz/SV2ZJrYjFGpmz3nzJXAIGRR2L4I8i5QXlLRn/PPJfRHInwDU=,iv:2OwV1/QmqK6Q4QFlJ81EZkG/XZSmHC/lE9yr9NZjkUE=,tag:SNcrT+Nq2VUlW3Bjjwa1YA==,type:str]
+ lastmodified: "2023-09-26T17:17:21Z"
+ mac: ENC[AES256_GCM,data:HX6eXVyznlbxOhi7mwxFNr2rQCxBD1hpmAS/1IztxVnKDW6ifiKaVL0YxSKkFlQ7v2AM543bDT9fS6NN3kdIw+3LIK3/u3yYwoyFXN/SMDwhHJW26fK40C2RGlMTi17hTzguXLMlvmscnUyr2ggmwfvQyxxR8+gYfcL/G3p0ATM=,iv:EWja7fLva8oV54D5dvrWwUCcxZHrzmMnVeTJbDoxFA8=,tag:lTViVx3dlqjvcWvtmjPqIQ==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
@@ -328,8 +312,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-11-15T21:22:15Z"
- mac: ENC[AES256_GCM,data:rLpvp0iv8yz+7R3zC9vfjU1otqTo7gAKZNxVX4l3nm/rBMZv6ndaId1Z+eiNjMt1tOJg1vaPndbkdFKFWEAveYy3p1wbwCD1Z/SR4LkHV1fevuwQsGGSSfCaWz/SV2ZJrYjFGpmz3nzJXAIGRR2L4I8i5QXlLRn/PPJfRHInwDU=,iv:2OwV1/QmqK6Q4QFlJ81EZkG/XZSmHC/lE9yr9NZjkUE=,tag:SNcrT+Nq2VUlW3Bjjwa1YA==,type:str]
+ lastmodified: "2023-09-26T17:17:21Z"
+ mac: ENC[AES256_GCM,data:HX6eXVyznlbxOhi7mwxFNr2rQCxBD1hpmAS/1IztxVnKDW6ifiKaVL0YxSKkFlQ7v2AM543bDT9fS6NN3kdIw+3LIK3/u3yYwoyFXN/SMDwhHJW26fK40C2RGlMTi17hTzguXLMlvmscnUyr2ggmwfvQyxxR8+gYfcL/G3p0ATM=,iv:EWja7fLva8oV54D5dvrWwUCcxZHrzmMnVeTJbDoxFA8=,tag:lTViVx3dlqjvcWvtmjPqIQ==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
@@ -385,18 +369,10 @@ metadata:
forecastle.stakater.com/appName: Shelly03
forecastle.stakater.com/group: IoT
forecastle.stakater.com/network-restricted: "true"
- nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.48/32
+ nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.0/24
nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-url: ENC[AES256_GCM,data:LtmYhpd4lLnuyYH9mF8aHNzChLTmrwgtCw==,iv:Dl/5jLP9WVl6oZ26TvUbWPNI6U50hOI6YAKFx4rU65Y=,tag:MUA/yQ+SrJ8F2meqqwlQEQ==,type:str]
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
- nginx.ingress.kubernetes.io/configuration-snippet: |
- auth_request_set $name_upstream_1 $upstream_cookie_name_1;
-
- access_by_lua_block {
- if ngx.var.name_upstream_1 ~= "" then
- ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
- end
- }
spec:
rules:
- host: ENC[AES256_GCM,data:p/xRNccIALlca8OhT5v0zuGBfmy+756nIe+i45gMt4k=,iv:YGfsPpwpUg09kWGqcumP3A+fXGp8agzJ1QvqHihD1o0=,tag:NRNVo+A1AIrW7bkPT44xPA==,type:str]
@@ -419,8 +395,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-11-15T21:22:15Z"
- mac: ENC[AES256_GCM,data:rLpvp0iv8yz+7R3zC9vfjU1otqTo7gAKZNxVX4l3nm/rBMZv6ndaId1Z+eiNjMt1tOJg1vaPndbkdFKFWEAveYy3p1wbwCD1Z/SR4LkHV1fevuwQsGGSSfCaWz/SV2ZJrYjFGpmz3nzJXAIGRR2L4I8i5QXlLRn/PPJfRHInwDU=,iv:2OwV1/QmqK6Q4QFlJ81EZkG/XZSmHC/lE9yr9NZjkUE=,tag:SNcrT+Nq2VUlW3Bjjwa1YA==,type:str]
+ lastmodified: "2023-09-26T17:17:21Z"
+ mac: ENC[AES256_GCM,data:HX6eXVyznlbxOhi7mwxFNr2rQCxBD1hpmAS/1IztxVnKDW6ifiKaVL0YxSKkFlQ7v2AM543bDT9fS6NN3kdIw+3LIK3/u3yYwoyFXN/SMDwhHJW26fK40C2RGlMTi17hTzguXLMlvmscnUyr2ggmwfvQyxxR8+gYfcL/G3p0ATM=,iv:EWja7fLva8oV54D5dvrWwUCcxZHrzmMnVeTJbDoxFA8=,tag:lTViVx3dlqjvcWvtmjPqIQ==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
@@ -484,8 +460,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-11-15T21:22:15Z"
- mac: ENC[AES256_GCM,data:rLpvp0iv8yz+7R3zC9vfjU1otqTo7gAKZNxVX4l3nm/rBMZv6ndaId1Z+eiNjMt1tOJg1vaPndbkdFKFWEAveYy3p1wbwCD1Z/SR4LkHV1fevuwQsGGSSfCaWz/SV2ZJrYjFGpmz3nzJXAIGRR2L4I8i5QXlLRn/PPJfRHInwDU=,iv:2OwV1/QmqK6Q4QFlJ81EZkG/XZSmHC/lE9yr9NZjkUE=,tag:SNcrT+Nq2VUlW3Bjjwa1YA==,type:str]
+ lastmodified: "2023-09-26T17:17:21Z"
+ mac: ENC[AES256_GCM,data:HX6eXVyznlbxOhi7mwxFNr2rQCxBD1hpmAS/1IztxVnKDW6ifiKaVL0YxSKkFlQ7v2AM543bDT9fS6NN3kdIw+3LIK3/u3yYwoyFXN/SMDwhHJW26fK40C2RGlMTi17hTzguXLMlvmscnUyr2ggmwfvQyxxR8+gYfcL/G3p0ATM=,iv:EWja7fLva8oV54D5dvrWwUCcxZHrzmMnVeTJbDoxFA8=,tag:lTViVx3dlqjvcWvtmjPqIQ==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
@@ -541,18 +517,10 @@ metadata:
forecastle.stakater.com/appName: Shelly04
forecastle.stakater.com/group: IoT
forecastle.stakater.com/network-restricted: "true"
- nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.48/32
+ nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.0/24
nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-url: ENC[AES256_GCM,data:LtmYhpd4lLnuyYH9mF8aHNzChLTmrwgtCw==,iv:Dl/5jLP9WVl6oZ26TvUbWPNI6U50hOI6YAKFx4rU65Y=,tag:MUA/yQ+SrJ8F2meqqwlQEQ==,type:str]
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
- nginx.ingress.kubernetes.io/configuration-snippet: |
- auth_request_set $name_upstream_1 $upstream_cookie_name_1;
-
- access_by_lua_block {
- if ngx.var.name_upstream_1 ~= "" then
- ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
- end
- }
spec:
rules:
- host: ENC[AES256_GCM,data:Sn0wxRvKQ9cr5nyCEyBg5oDuh6CmZuuWqY4SVfchilg=,iv:GbPWSO79oy9zDqCE4HkAVvz9Ka2bU/Kobi2GkQmIBlE=,tag:U8JMFrqoU3dXwbNQCLO4pw==,type:str]
@@ -575,8 +543,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-11-15T21:22:15Z"
- mac: ENC[AES256_GCM,data:rLpvp0iv8yz+7R3zC9vfjU1otqTo7gAKZNxVX4l3nm/rBMZv6ndaId1Z+eiNjMt1tOJg1vaPndbkdFKFWEAveYy3p1wbwCD1Z/SR4LkHV1fevuwQsGGSSfCaWz/SV2ZJrYjFGpmz3nzJXAIGRR2L4I8i5QXlLRn/PPJfRHInwDU=,iv:2OwV1/QmqK6Q4QFlJ81EZkG/XZSmHC/lE9yr9NZjkUE=,tag:SNcrT+Nq2VUlW3Bjjwa1YA==,type:str]
+ lastmodified: "2023-09-26T17:17:21Z"
+ mac: ENC[AES256_GCM,data:HX6eXVyznlbxOhi7mwxFNr2rQCxBD1hpmAS/1IztxVnKDW6ifiKaVL0YxSKkFlQ7v2AM543bDT9fS6NN3kdIw+3LIK3/u3yYwoyFXN/SMDwhHJW26fK40C2RGlMTi17hTzguXLMlvmscnUyr2ggmwfvQyxxR8+gYfcL/G3p0ATM=,iv:EWja7fLva8oV54D5dvrWwUCcxZHrzmMnVeTJbDoxFA8=,tag:lTViVx3dlqjvcWvtmjPqIQ==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
@@ -640,8 +608,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-11-15T21:22:15Z"
- mac: ENC[AES256_GCM,data:rLpvp0iv8yz+7R3zC9vfjU1otqTo7gAKZNxVX4l3nm/rBMZv6ndaId1Z+eiNjMt1tOJg1vaPndbkdFKFWEAveYy3p1wbwCD1Z/SR4LkHV1fevuwQsGGSSfCaWz/SV2ZJrYjFGpmz3nzJXAIGRR2L4I8i5QXlLRn/PPJfRHInwDU=,iv:2OwV1/QmqK6Q4QFlJ81EZkG/XZSmHC/lE9yr9NZjkUE=,tag:SNcrT+Nq2VUlW3Bjjwa1YA==,type:str]
+ lastmodified: "2023-09-26T17:17:21Z"
+ mac: ENC[AES256_GCM,data:HX6eXVyznlbxOhi7mwxFNr2rQCxBD1hpmAS/1IztxVnKDW6ifiKaVL0YxSKkFlQ7v2AM543bDT9fS6NN3kdIw+3LIK3/u3yYwoyFXN/SMDwhHJW26fK40C2RGlMTi17hTzguXLMlvmscnUyr2ggmwfvQyxxR8+gYfcL/G3p0ATM=,iv:EWja7fLva8oV54D5dvrWwUCcxZHrzmMnVeTJbDoxFA8=,tag:lTViVx3dlqjvcWvtmjPqIQ==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
@@ -697,18 +665,10 @@ metadata:
forecastle.stakater.com/appName: Humidity & Temprature 01
forecastle.stakater.com/group: IoT
forecastle.stakater.com/network-restricted: "true"
- nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.48/32
+ nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.0/24
nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-url: ENC[AES256_GCM,data:LtmYhpd4lLnuyYH9mF8aHNzChLTmrwgtCw==,iv:Dl/5jLP9WVl6oZ26TvUbWPNI6U50hOI6YAKFx4rU65Y=,tag:MUA/yQ+SrJ8F2meqqwlQEQ==,type:str]
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
- nginx.ingress.kubernetes.io/configuration-snippet: |
- auth_request_set $name_upstream_1 $upstream_cookie_name_1;
-
- access_by_lua_block {
- if ngx.var.name_upstream_1 ~= "" then
- ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
- end
- }
spec:
rules:
- host: ENC[AES256_GCM,data:dys6Cxmfwb0PVxULV3qUKlsISkcJ6VKh8ea86A==,iv:KywdcfWqytxLZ+YiudSilQbmVXyw0RtwTxh1Y72ePPQ=,tag:aU8iKSzG5CJhVGS0iNEQuw==,type:str]
@@ -731,8 +691,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-11-15T21:22:15Z"
- mac: ENC[AES256_GCM,data:rLpvp0iv8yz+7R3zC9vfjU1otqTo7gAKZNxVX4l3nm/rBMZv6ndaId1Z+eiNjMt1tOJg1vaPndbkdFKFWEAveYy3p1wbwCD1Z/SR4LkHV1fevuwQsGGSSfCaWz/SV2ZJrYjFGpmz3nzJXAIGRR2L4I8i5QXlLRn/PPJfRHInwDU=,iv:2OwV1/QmqK6Q4QFlJ81EZkG/XZSmHC/lE9yr9NZjkUE=,tag:SNcrT+Nq2VUlW3Bjjwa1YA==,type:str]
+ lastmodified: "2023-09-26T17:17:21Z"
+ mac: ENC[AES256_GCM,data:HX6eXVyznlbxOhi7mwxFNr2rQCxBD1hpmAS/1IztxVnKDW6ifiKaVL0YxSKkFlQ7v2AM543bDT9fS6NN3kdIw+3LIK3/u3yYwoyFXN/SMDwhHJW26fK40C2RGlMTi17hTzguXLMlvmscnUyr2ggmwfvQyxxR8+gYfcL/G3p0ATM=,iv:EWja7fLva8oV54D5dvrWwUCcxZHrzmMnVeTJbDoxFA8=,tag:lTViVx3dlqjvcWvtmjPqIQ==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
@@ -796,8 +756,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-11-15T21:22:15Z"
- mac: ENC[AES256_GCM,data:rLpvp0iv8yz+7R3zC9vfjU1otqTo7gAKZNxVX4l3nm/rBMZv6ndaId1Z+eiNjMt1tOJg1vaPndbkdFKFWEAveYy3p1wbwCD1Z/SR4LkHV1fevuwQsGGSSfCaWz/SV2ZJrYjFGpmz3nzJXAIGRR2L4I8i5QXlLRn/PPJfRHInwDU=,iv:2OwV1/QmqK6Q4QFlJ81EZkG/XZSmHC/lE9yr9NZjkUE=,tag:SNcrT+Nq2VUlW3Bjjwa1YA==,type:str]
+ lastmodified: "2023-09-26T17:17:21Z"
+ mac: ENC[AES256_GCM,data:HX6eXVyznlbxOhi7mwxFNr2rQCxBD1hpmAS/1IztxVnKDW6ifiKaVL0YxSKkFlQ7v2AM543bDT9fS6NN3kdIw+3LIK3/u3yYwoyFXN/SMDwhHJW26fK40C2RGlMTi17hTzguXLMlvmscnUyr2ggmwfvQyxxR8+gYfcL/G3p0ATM=,iv:EWja7fLva8oV54D5dvrWwUCcxZHrzmMnVeTJbDoxFA8=,tag:lTViVx3dlqjvcWvtmjPqIQ==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
@@ -853,18 +813,10 @@ metadata:
forecastle.stakater.com/appName: Humidity & Temprature 02
forecastle.stakater.com/group: IoT
forecastle.stakater.com/network-restricted: "true"
- nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.48/32
+ nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.0/24
nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-url: ENC[AES256_GCM,data:LtmYhpd4lLnuyYH9mF8aHNzChLTmrwgtCw==,iv:Dl/5jLP9WVl6oZ26TvUbWPNI6U50hOI6YAKFx4rU65Y=,tag:MUA/yQ+SrJ8F2meqqwlQEQ==,type:str]
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
- nginx.ingress.kubernetes.io/configuration-snippet: |
- auth_request_set $name_upstream_1 $upstream_cookie_name_1;
-
- access_by_lua_block {
- if ngx.var.name_upstream_1 ~= "" then
- ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
- end
- }
spec:
rules:
- host: ENC[AES256_GCM,data:AFaV2uMokW2I/uqaYlz5VWGEIByXuOMZHxLvJw==,iv:RKMMco7G0yWYQ1DJTljRbCix1bIqPi/MhwOA1K79lIA=,tag:WJaAj26+fn7gY6dAVa5pqQ==,type:str]
@@ -887,8 +839,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-11-15T21:22:15Z"
- mac: ENC[AES256_GCM,data:rLpvp0iv8yz+7R3zC9vfjU1otqTo7gAKZNxVX4l3nm/rBMZv6ndaId1Z+eiNjMt1tOJg1vaPndbkdFKFWEAveYy3p1wbwCD1Z/SR4LkHV1fevuwQsGGSSfCaWz/SV2ZJrYjFGpmz3nzJXAIGRR2L4I8i5QXlLRn/PPJfRHInwDU=,iv:2OwV1/QmqK6Q4QFlJ81EZkG/XZSmHC/lE9yr9NZjkUE=,tag:SNcrT+Nq2VUlW3Bjjwa1YA==,type:str]
+ lastmodified: "2023-09-26T17:17:21Z"
+ mac: ENC[AES256_GCM,data:HX6eXVyznlbxOhi7mwxFNr2rQCxBD1hpmAS/1IztxVnKDW6ifiKaVL0YxSKkFlQ7v2AM543bDT9fS6NN3kdIw+3LIK3/u3yYwoyFXN/SMDwhHJW26fK40C2RGlMTi17hTzguXLMlvmscnUyr2ggmwfvQyxxR8+gYfcL/G3p0ATM=,iv:EWja7fLva8oV54D5dvrWwUCcxZHrzmMnVeTJbDoxFA8=,tag:lTViVx3dlqjvcWvtmjPqIQ==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
@@ -948,8 +900,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-11-15T21:22:15Z"
- mac: ENC[AES256_GCM,data:rLpvp0iv8yz+7R3zC9vfjU1otqTo7gAKZNxVX4l3nm/rBMZv6ndaId1Z+eiNjMt1tOJg1vaPndbkdFKFWEAveYy3p1wbwCD1Z/SR4LkHV1fevuwQsGGSSfCaWz/SV2ZJrYjFGpmz3nzJXAIGRR2L4I8i5QXlLRn/PPJfRHInwDU=,iv:2OwV1/QmqK6Q4QFlJ81EZkG/XZSmHC/lE9yr9NZjkUE=,tag:SNcrT+Nq2VUlW3Bjjwa1YA==,type:str]
+ lastmodified: "2023-09-26T17:17:21Z"
+ mac: ENC[AES256_GCM,data:HX6eXVyznlbxOhi7mwxFNr2rQCxBD1hpmAS/1IztxVnKDW6ifiKaVL0YxSKkFlQ7v2AM543bDT9fS6NN3kdIw+3LIK3/u3yYwoyFXN/SMDwhHJW26fK40C2RGlMTi17hTzguXLMlvmscnUyr2ggmwfvQyxxR8+gYfcL/G3p0ATM=,iv:EWja7fLva8oV54D5dvrWwUCcxZHrzmMnVeTJbDoxFA8=,tag:lTViVx3dlqjvcWvtmjPqIQ==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
diff --git a/apps/k8s01/nextcloud/oauth2.yaml b/apps/k8s01/nextcloud/oauth2.yaml
index eebbd7621d84d6cd1e5a0abe2fe777456f4360cc..f8197d6c7f178c3e13eb99b7fbd378dbb326186c 100644
--- a/apps/k8s01/nextcloud/oauth2.yaml
+++ b/apps/k8s01/nextcloud/oauth2.yaml
@@ -12,8 +12,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2023-09-11T17:38:16Z"
- mac: ENC[AES256_GCM,data:O5xLqcBAs1+1oI9LFZ7i23aO17+MAmMK8lYBqM813b/tafHC2sig2ScYlh6zch8Qim/Rwqpsjtgt/ftSr3lF1LGfx3iuHxxHHoxJ7qE5/o68ZX1PfFqmcrFiZN5jsGOSagpsDQif++eW9i7XeY4VjRDow3V6dr/okjgDYgQiklM=,iv:7hKM3WTeM0Lwk+iOCuLv4kHjcromRNb4S2QY9GzUNpg=,tag:z6mG9yQxoUmLLtIMJz8xag==,type:str]
+ lastmodified: "2023-09-26T17:20:14Z"
+ mac: ENC[AES256_GCM,data:6rg9m0ZbZhaMbq+J9DeRezkbWU8+TwkekbYeaTsYZzuGUjDZWMOwQMiZtwMYX2oDrjFqHCckIMPLXi44lO6vyXTbuRd75kVSXe/QpI9FVHaVfgejKFX/OZAbyr9vC0vVIz4teog0kMY/kaVbB4eCptabplCZiL+pGXpBkgnKGGk=,iv:lLn9Jxz1NWaEPn5GZp+DIysh+Im0x4iSyQ4gzV0ILv0=,tag:mDa3dis4zh0n8SJHyObR6g==,type:str]
pgp:
- created_at: "2022-01-22T04:06:16Z"
enc: |-
@@ -92,6 +92,7 @@ spec:
whitelist-domain: ENC[AES256_GCM,data:chLUoWOlZsaMUbIfj8i0UTaFyztPHzwCbQ==,iv:m3zDPNaTU03cw/iILqjgl+2E7Bmg9LLKbjXLma4b/yk=,tag:tQMO48l/tRp3F403CFKW/g==,type:str]
silence-ping-logging: "true"
scope: openid email profile
+ oidc-groups-claim: memberof
replicaCount: 2
securityContext:
enabled: true
@@ -125,8 +126,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2023-09-11T17:38:16Z"
- mac: ENC[AES256_GCM,data:O5xLqcBAs1+1oI9LFZ7i23aO17+MAmMK8lYBqM813b/tafHC2sig2ScYlh6zch8Qim/Rwqpsjtgt/ftSr3lF1LGfx3iuHxxHHoxJ7qE5/o68ZX1PfFqmcrFiZN5jsGOSagpsDQif++eW9i7XeY4VjRDow3V6dr/okjgDYgQiklM=,iv:7hKM3WTeM0Lwk+iOCuLv4kHjcromRNb4S2QY9GzUNpg=,tag:z6mG9yQxoUmLLtIMJz8xag==,type:str]
+ lastmodified: "2023-09-26T17:20:14Z"
+ mac: ENC[AES256_GCM,data:6rg9m0ZbZhaMbq+J9DeRezkbWU8+TwkekbYeaTsYZzuGUjDZWMOwQMiZtwMYX2oDrjFqHCckIMPLXi44lO6vyXTbuRd75kVSXe/QpI9FVHaVfgejKFX/OZAbyr9vC0vVIz4teog0kMY/kaVbB4eCptabplCZiL+pGXpBkgnKGGk=,iv:lLn9Jxz1NWaEPn5GZp+DIysh+Im0x4iSyQ4gzV0ILv0=,tag:mDa3dis4zh0n8SJHyObR6g==,type:str]
pgp:
- created_at: "2022-01-22T04:06:16Z"
enc: |-
@@ -192,8 +193,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2023-09-11T17:38:16Z"
- mac: ENC[AES256_GCM,data:O5xLqcBAs1+1oI9LFZ7i23aO17+MAmMK8lYBqM813b/tafHC2sig2ScYlh6zch8Qim/Rwqpsjtgt/ftSr3lF1LGfx3iuHxxHHoxJ7qE5/o68ZX1PfFqmcrFiZN5jsGOSagpsDQif++eW9i7XeY4VjRDow3V6dr/okjgDYgQiklM=,iv:7hKM3WTeM0Lwk+iOCuLv4kHjcromRNb4S2QY9GzUNpg=,tag:z6mG9yQxoUmLLtIMJz8xag==,type:str]
+ lastmodified: "2023-09-26T17:20:14Z"
+ mac: ENC[AES256_GCM,data:6rg9m0ZbZhaMbq+J9DeRezkbWU8+TwkekbYeaTsYZzuGUjDZWMOwQMiZtwMYX2oDrjFqHCckIMPLXi44lO6vyXTbuRd75kVSXe/QpI9FVHaVfgejKFX/OZAbyr9vC0vVIz4teog0kMY/kaVbB4eCptabplCZiL+pGXpBkgnKGGk=,iv:lLn9Jxz1NWaEPn5GZp+DIysh+Im0x4iSyQ4gzV0ILv0=,tag:mDa3dis4zh0n8SJHyObR6g==,type:str]
pgp:
- created_at: "2022-01-22T04:06:16Z"
enc: |-
@@ -248,14 +249,6 @@ metadata:
nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-url: ENC[AES256_GCM,data:U6C+T95mb7P2S8jPx8IsoygPNKjNkZ8ttg==,iv:8Ceg8qs9qGV6E4sUrAAM8qyVcuONb+BnEm3Xs72uRdg=,tag:uDllr/f4zQBl6Jc8c3dqKw==,type:str]
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
- nginx.ingress.kubernetes.io/configuration-snippet: |
- auth_request_set $name_upstream_1 $upstream_cookie_name_1;
-
- access_by_lua_block {
- if ngx.var.name_upstream_1 ~= "" then
- ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
- end
- }
spec:
rules:
- host: ENC[AES256_GCM,data:qS3kjpBps0dyZ2t+NoZOlTFo7Wtc8AsmcQ==,iv:qEdgZbU/3zU9Au194gVgRStPQHI0HOlx4Ag9qWN4Sfw=,tag:F766VpUeFYpMMTROEWnlWA==,type:str]
@@ -278,8 +271,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2023-09-11T17:38:16Z"
- mac: ENC[AES256_GCM,data:O5xLqcBAs1+1oI9LFZ7i23aO17+MAmMK8lYBqM813b/tafHC2sig2ScYlh6zch8Qim/Rwqpsjtgt/ftSr3lF1LGfx3iuHxxHHoxJ7qE5/o68ZX1PfFqmcrFiZN5jsGOSagpsDQif++eW9i7XeY4VjRDow3V6dr/okjgDYgQiklM=,iv:7hKM3WTeM0Lwk+iOCuLv4kHjcromRNb4S2QY9GzUNpg=,tag:z6mG9yQxoUmLLtIMJz8xag==,type:str]
+ lastmodified: "2023-09-26T17:20:14Z"
+ mac: ENC[AES256_GCM,data:6rg9m0ZbZhaMbq+J9DeRezkbWU8+TwkekbYeaTsYZzuGUjDZWMOwQMiZtwMYX2oDrjFqHCckIMPLXi44lO6vyXTbuRd75kVSXe/QpI9FVHaVfgejKFX/OZAbyr9vC0vVIz4teog0kMY/kaVbB4eCptabplCZiL+pGXpBkgnKGGk=,iv:lLn9Jxz1NWaEPn5GZp+DIysh+Im0x4iSyQ4gzV0ILv0=,tag:mDa3dis4zh0n8SJHyObR6g==,type:str]
pgp:
- created_at: "2022-01-22T04:06:16Z"
enc: |-
diff --git a/clusters/k8s01/longhorn/ingress.yaml b/clusters/k8s01/longhorn/ingress.yaml
index 76c1284b5da651b833e897cbb9706ad4f47dc4cb..188927c1a6a0de2475e29ff99163d197063c30e4 100644
--- a/clusters/k8s01/longhorn/ingress.yaml
+++ b/clusters/k8s01/longhorn/ingress.yaml
@@ -7,15 +7,6 @@ metadata:
nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-url: https://$host/oauth2/auth
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
- nginx.ingress.kubernetes.io/configuration-snippet: |
- auth_request_set $name_upstream_1 $upstream_cookie_name_1;
-
- access_by_lua_block {
- if ngx.var.name_upstream_1 ~= "" then
- ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
- end
- }
- nginx.ingress.kubernetes.io/modsecurity-transaction-id: $request_id
spec:
rules:
- host: ENC[AES256_GCM,data:eBQRvj0E4eODWDYTXe+1iu3p+koCwHhVcxw=,iv:DR0LwShFLl9pS13VgTuCuag8qo3uKug26g9eV2AAkLE=,tag:c7MwWxEsVuV0EvckG+nKqQ==,type:str]
@@ -38,8 +29,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2023-09-26T16:41:54Z"
- mac: ENC[AES256_GCM,data:kNEYTTpU40jMIM943lng/JtBGCsQbMXL4CNXdGh8yYtQcVPstgLrwaRejvJk4VvIOZxqFax+JxwiW+T++8u56df6ms8qmMXq/CsGBkKji4J0tLsjQI9aLZ+EDL/pnFtd9R1Q8DLBEF9ARiGLc97V/JykXUPAVWMrLqDUxGg8z5g=,iv:CA8H35S5rgSo0iBuxGHV7kK1A276bIJQfX7AR+lkhI4=,tag:8WX4Zs3X/E3rUBWGejwwBA==,type:str]
+ lastmodified: "2023-09-26T17:04:34Z"
+ mac: ENC[AES256_GCM,data:Wa7b5GXKwhwNvRXTeaiLTE7i52zFJsyxXYgA/LJfiK9l88fdrmERZnx+a2yylTnvdqtJWLnoHfrLVb21D8cXJ413N/pLT/XSHSSjPYtz4uoMjI6XJCjv7ArP49HDw9TFztBgmo5+Xo80pjQa0Oh5+mfFFg610WgcbnQ41+HJqg4=,iv:8lES8eAmB/3DxmCQs0Kq5BTEd7AEze/yAbfS7Si3gt4=,tag:ezKlvvw7Q1iHYHtmFhWCkg==,type:str]
pgp:
- created_at: "2022-01-22T02:43:51Z"
enc: |-
diff --git a/clusters/k8s01/monitoring/ingress.yaml b/clusters/k8s01/monitoring/ingress.yaml
index d44a4fe9eaeecdc78e6fa631121bfa6e7caf9567..17681e5e95df0f3b1f728f320429c403c1d45906 100644
--- a/clusters/k8s01/monitoring/ingress.yaml
+++ b/clusters/k8s01/monitoring/ingress.yaml
@@ -7,14 +7,6 @@ metadata:
nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-url: https://$host/oauth2/auth
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
- nginx.ingress.kubernetes.io/configuration-snippet: |
- auth_request_set $name_upstream_1 $upstream_cookie_name_1;
-
- access_by_lua_block {
- if ngx.var.name_upstream_1 ~= "" then
- ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
- end
- }
spec:
rules:
- host: ENC[AES256_GCM,data:k1mCBDKYvRLLC489r7yvk9PRDsQh5IgUpOaOfdhpQCwUNN8=,iv:AuBQnC2duZJM5/aYASq6gcovFPhECGk9EWjMaBgeRzQ=,tag:VdMb/Rn54dWpbDjxbEjPvA==,type:str]
@@ -59,8 +51,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-03-07T02:13:03Z"
- mac: ENC[AES256_GCM,data:3dMGEI4G5r35RGeKQPTNAMQqbnH/CXuY+OygTTUuUtaYCP5zsFSQ7sP53HKUae2hQJrZgEha/cwaeILClHoZNobrcUNqnQ3oPeu/naVmbFQvGOVJY9o54RtOIShUDAJXDhRy7ovh0n9G+GqCDDgu8rIyDUYDjTYMNjfbjDsany4=,iv:tSeHoQNLbgGliyTnukfG27qleOay6JqvXDBPY1OXKp8=,tag:5uEfeDXN9heT8nSgpbSqbw==,type:str]
+ lastmodified: "2023-09-26T17:18:26Z"
+ mac: ENC[AES256_GCM,data:LODVzZafw93GFgm6vnJVei29LeGYQ57jeorgFf1DQ1GDYJuC5hOE7HVOo1KOJZ3ERFjvVVdFiGox7LGZxflISowkbuSwtQS1iD5W9M+lcBoEudtZISKg1sYOMFTlExmbXraWHsHZkjTZcpCutjpTwAYD7OL5jcIBWfqGHwGjTxQ=,iv:ZswCqxaJtTIFdhFBUuy1NZlouXSMi/+xQfCb09i32Js=,tag:JJP40ZLEiEBgCm0JpErYJw==,type:str]
pgp:
- created_at: "2022-01-22T02:43:51Z"
enc: |-
@@ -104,4 +96,4 @@ sops:
-----END PGP MESSAGE-----
fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|hosts?|tang|externalURL)$
- version: 3.7.1
+ version: 3.7.3
diff --git a/shared/applications/oauth2-proxy.yaml b/shared/applications/oauth2-proxy.yaml
index 7d8ea6e6203db5e9395f562e5def47878355c805..c9befff8b5343518fc0693aa75f0bd01b777300d 100644
--- a/shared/applications/oauth2-proxy.yaml
+++ b/shared/applications/oauth2-proxy.yaml
@@ -11,8 +11,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2023-09-15T23:59:17Z"
- mac: ENC[AES256_GCM,data:s8jv3Rp45hW2JZkIIZjwiyTHzVLSXrHSfjt5O+7VgidkSXeAMssZVMgrQtI6cX2Umw9df2hIHemjWRwaCOXRzEDk8brJe3lGbnCIe6a+9wxGmMujKuhdW/Fzv0EWq6Gyib8UaXbJXFEuSBCm3oxMizmRIK6lL5kTvjj0MfOGDA0=,iv:WX3kcICIx+Re3nwk0fit0nuZxBGNGLFayLQRToSEqSQ=,tag:CRXzb0tcDK6CJ4WJWmslKA==,type:str]
+ lastmodified: "2023-09-26T17:09:45Z"
+ mac: ENC[AES256_GCM,data:E4EWnerH9nZLudvptnVArKv9DXLQvp4QNG1DOrROUi6KcYzs5TMFLeckOa9diXdC0gpIoDDbBbbE3wlTH+XWQ32c9kqPmwy3xdcm2M4xq7GPuSfEZcNT12j4KwnQQBplYTksTwMmQuKQeOhvMwaYaco2m3THuUruKXJ/+9BK7YE=,iv:U8spxfvwTMHi99K7U1xPBZMxeV+twpyzRIjwaTkGnH0=,tag:qXBw8toB0Fl5MfNOO/hkCw==,type:str]
pgp:
- created_at: "2023-09-15T23:29:01Z"
enc: |-
@@ -96,8 +96,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2023-09-15T23:59:17Z"
- mac: ENC[AES256_GCM,data:s8jv3Rp45hW2JZkIIZjwiyTHzVLSXrHSfjt5O+7VgidkSXeAMssZVMgrQtI6cX2Umw9df2hIHemjWRwaCOXRzEDk8brJe3lGbnCIe6a+9wxGmMujKuhdW/Fzv0EWq6Gyib8UaXbJXFEuSBCm3oxMizmRIK6lL5kTvjj0MfOGDA0=,iv:WX3kcICIx+Re3nwk0fit0nuZxBGNGLFayLQRToSEqSQ=,tag:CRXzb0tcDK6CJ4WJWmslKA==,type:str]
+ lastmodified: "2023-09-26T17:09:45Z"
+ mac: ENC[AES256_GCM,data:E4EWnerH9nZLudvptnVArKv9DXLQvp4QNG1DOrROUi6KcYzs5TMFLeckOa9diXdC0gpIoDDbBbbE3wlTH+XWQ32c9kqPmwy3xdcm2M4xq7GPuSfEZcNT12j4KwnQQBplYTksTwMmQuKQeOhvMwaYaco2m3THuUruKXJ/+9BK7YE=,iv:U8spxfvwTMHi99K7U1xPBZMxeV+twpyzRIjwaTkGnH0=,tag:qXBw8toB0Fl5MfNOO/hkCw==,type:str]
pgp:
- created_at: "2023-09-15T23:29:01Z"
enc: |-
@@ -152,6 +152,7 @@ data:
extraArgs:
silence-ping-logging: "true"
scope: openid email profile
+ oidc-groups-claim: memberof
replicaCount: 2
securityContext:
enabled: true
@@ -177,8 +178,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2023-09-15T23:59:17Z"
- mac: ENC[AES256_GCM,data:s8jv3Rp45hW2JZkIIZjwiyTHzVLSXrHSfjt5O+7VgidkSXeAMssZVMgrQtI6cX2Umw9df2hIHemjWRwaCOXRzEDk8brJe3lGbnCIe6a+9wxGmMujKuhdW/Fzv0EWq6Gyib8UaXbJXFEuSBCm3oxMizmRIK6lL5kTvjj0MfOGDA0=,iv:WX3kcICIx+Re3nwk0fit0nuZxBGNGLFayLQRToSEqSQ=,tag:CRXzb0tcDK6CJ4WJWmslKA==,type:str]
+ lastmodified: "2023-09-26T17:09:45Z"
+ mac: ENC[AES256_GCM,data:E4EWnerH9nZLudvptnVArKv9DXLQvp4QNG1DOrROUi6KcYzs5TMFLeckOa9diXdC0gpIoDDbBbbE3wlTH+XWQ32c9kqPmwy3xdcm2M4xq7GPuSfEZcNT12j4KwnQQBplYTksTwMmQuKQeOhvMwaYaco2m3THuUruKXJ/+9BK7YE=,iv:U8spxfvwTMHi99K7U1xPBZMxeV+twpyzRIjwaTkGnH0=,tag:qXBw8toB0Fl5MfNOO/hkCw==,type:str]
pgp:
- created_at: "2023-09-15T23:29:01Z"
enc: |-
@@ -243,8 +244,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2023-09-15T23:59:17Z"
- mac: ENC[AES256_GCM,data:s8jv3Rp45hW2JZkIIZjwiyTHzVLSXrHSfjt5O+7VgidkSXeAMssZVMgrQtI6cX2Umw9df2hIHemjWRwaCOXRzEDk8brJe3lGbnCIe6a+9wxGmMujKuhdW/Fzv0EWq6Gyib8UaXbJXFEuSBCm3oxMizmRIK6lL5kTvjj0MfOGDA0=,iv:WX3kcICIx+Re3nwk0fit0nuZxBGNGLFayLQRToSEqSQ=,tag:CRXzb0tcDK6CJ4WJWmslKA==,type:str]
+ lastmodified: "2023-09-26T17:09:45Z"
+ mac: ENC[AES256_GCM,data:E4EWnerH9nZLudvptnVArKv9DXLQvp4QNG1DOrROUi6KcYzs5TMFLeckOa9diXdC0gpIoDDbBbbE3wlTH+XWQ32c9kqPmwy3xdcm2M4xq7GPuSfEZcNT12j4KwnQQBplYTksTwMmQuKQeOhvMwaYaco2m3THuUruKXJ/+9BK7YE=,iv:U8spxfvwTMHi99K7U1xPBZMxeV+twpyzRIjwaTkGnH0=,tag:qXBw8toB0Fl5MfNOO/hkCw==,type:str]
pgp:
- created_at: "2023-09-15T23:29:01Z"
enc: |-
@@ -302,8 +303,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2023-09-15T23:59:17Z"
- mac: ENC[AES256_GCM,data:s8jv3Rp45hW2JZkIIZjwiyTHzVLSXrHSfjt5O+7VgidkSXeAMssZVMgrQtI6cX2Umw9df2hIHemjWRwaCOXRzEDk8brJe3lGbnCIe6a+9wxGmMujKuhdW/Fzv0EWq6Gyib8UaXbJXFEuSBCm3oxMizmRIK6lL5kTvjj0MfOGDA0=,iv:WX3kcICIx+Re3nwk0fit0nuZxBGNGLFayLQRToSEqSQ=,tag:CRXzb0tcDK6CJ4WJWmslKA==,type:str]
+ lastmodified: "2023-09-26T17:09:45Z"
+ mac: ENC[AES256_GCM,data:E4EWnerH9nZLudvptnVArKv9DXLQvp4QNG1DOrROUi6KcYzs5TMFLeckOa9diXdC0gpIoDDbBbbE3wlTH+XWQ32c9kqPmwy3xdcm2M4xq7GPuSfEZcNT12j4KwnQQBplYTksTwMmQuKQeOhvMwaYaco2m3THuUruKXJ/+9BK7YE=,iv:U8spxfvwTMHi99K7U1xPBZMxeV+twpyzRIjwaTkGnH0=,tag:qXBw8toB0Fl5MfNOO/hkCw==,type:str]
pgp:
- created_at: "2023-09-15T23:29:01Z"
enc: |-