fix(iot): Remove `.*-url` from sops regex

This patch removes the no longer needed encryption regex from the sops
configuration. This regex was introduced when using the values field to
set certain URLs in the oauth2-proxy config. Since this was replaced
with secret-based config overwrites as part of the helmrelease, the
regex can safely be dropped.

.sops.yaml

@@ -10,7 +10,7 @@ creation_rules:
       286791FB6648539775DB31B8FCB98C2A3EC6F601,
       B137EE1549DFAF960DD1E2B15147025FB9F09E07
   - path_regex: (clusters|apps)/k8s01/.*.yaml
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     pgp: >-
       286791FB6648539775DB31B8FCB98C2A3EC6F601,
       B137EE1549DFAF960DD1E2B15147025FB9F09E07

apps/k8s01/iot/rainer.yaml

@@ -60,7 +60,7 @@ sops:
             =5l9E
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3
 ---
 apiVersion: networking.k8s.io/v1
@@ -139,5 +139,5 @@ sops:
             =5l9E
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3

apps/k8s01/iot/shelly-ht-monitor.yaml

@@ -57,7 +57,7 @@ sops:
             =xvSe
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3
 ---
 apiVersion: networking.k8s.io/v1
@@ -137,5 +137,5 @@ sops:
             =xvSe
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3

apps/k8s01/iot/shelly.yaml

@@ -60,7 +60,7 @@ sops:
             =I/wJ
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3
 ---
 apiVersion: networking.k8s.io/v1
@@ -138,7 +138,7 @@ sops:
             =I/wJ
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3
 ---
 apiVersion: v1
@@ -203,7 +203,7 @@ sops:
             =I/wJ
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3
 ---
 apiVersion: networking.k8s.io/v1
@@ -281,7 +281,7 @@ sops:
             =I/wJ
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3
 ---
 apiVersion: v1
@@ -346,7 +346,7 @@ sops:
             =I/wJ
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3
 ---
 apiVersion: networking.k8s.io/v1
@@ -424,7 +424,7 @@ sops:
             =I/wJ
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3
 ---
 apiVersion: v1
@@ -489,7 +489,7 @@ sops:
             =I/wJ
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3
 ---
 apiVersion: networking.k8s.io/v1
@@ -567,7 +567,7 @@ sops:
             =I/wJ
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3
 ---
 apiVersion: v1
@@ -632,7 +632,7 @@ sops:
             =I/wJ
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3
 ---
 apiVersion: networking.k8s.io/v1
@@ -710,7 +710,7 @@ sops:
             =I/wJ
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3
 ---
 apiVersion: v1
@@ -775,7 +775,7 @@ sops:
             =I/wJ
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3
 ---
 apiVersion: networking.k8s.io/v1
@@ -853,7 +853,7 @@ sops:
             =I/wJ
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3
 ---
 apiVersion: v1
@@ -914,5 +914,5 @@ sops:
             =I/wJ
             -----END PGP MESSAGE-----
           fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07
-    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*-url|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|.*(H|h)osts?|tang|externalURL|.*-secret|.*Secrets?|.*-domain|password|subjects|node|apiURL|.*(S|s)erverNames?|.*SecretKey|externalName)$
     version: 3.7.3