pad: Deploy SI-Pad on OpenShift

apps/okd4/shivering-isles/pad/cert.yaml

+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+    name: pad-tls
+    namespace: pad
+spec:
+    dnsNames:
+        - ENC[AES256_GCM,data:wV1uzstN+5ZkvI0Fh2PBBHjYzSCxU9g=,iv:KDP4i/Gm83fFm9mDX8Sv8hHYu4K6iGrApiuANIyfyqM=,tag:lZTBp50nCVp9JkgIiEFm9Q==,type:str]
+    issuerRef:
+        name: letsencrypt
+        kind: ClusterIssuer
+    secretName: pad-tls
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2021-08-23T09:55:56Z"
+    mac: ENC[AES256_GCM,data:x+p8zAq9sxbfJzxLCIK3Fl52brGoBzrEStXZjQQjfZYbZzae5SH+McFO5OEKbpKMtpTtsRnN6UDCVmzKQsyR5ChK5kr/HN+e5fKQhCKwyH41dEb8TW/uy539Y2nWervP6ulBaX5Vlx6JjTTW6ozUjhgWQkzHFeLZ5cnU8RTycR8=,iv:/HPPM6uZuBIO8znx2cTe/NASQR63PTwYhEZSyQg+yTc=,tag:M8zvthksF8aEyxYeE8IZVg==,type:str]
+    pgp:
+        - created_at: "2021-08-13T23:57:46Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA1u//sli4/n1AQ/+P9a2Xo942rbnqz5KlvwrcAVHyO40a+GD1mlIxNBY1ppc
+            o9YLeBCIMl2WQjldBjemXIyflnjxvUgyPTT1xMC8Zqadbmb2+lavkBO5kNIdxByH
+            RCQJB3Bsqg1P9Hqvb4TLyAMZWt1KN48+NNQ/CAMkudw+3WLbgad1XEM+9RM5dkU0
+            5bAmZN5mBf5svgsclKSF3W5tyzLiKZuw5gXbJE9sWRfzreOKJYmrIVUXpg6TwQSJ
+            ofZNiVfi1dMyb/RGwmUMzizPKSU50a7rCvg3eDtWKVVK4xgiiW6k+Mt6N3vG2k9O
+            nzpPyqnTGJ/fqj4ipr+n/eoz+amfADKAx64pE5YgqliTlqUslFjVTdEVpjcf/jFB
+            PZ+GsGKjBrHZVRJ4u1ZI15vWnbDKbWVYsg87v1dFBLecefWYjBf4gU20LSwpOYGL
+            UKw7pEADAGlG+vfCnW0apAJLpTvIry7s5K6xFqjKuM3S+UZK76o9bJPlGibC1WRH
+            ZPGQExC/G/bsmXLI5uTajyo2H/S1A+xlRuEu3YTTgfUgv4C+g7eQZsr/WioddNAk
+            V2i8aemMK9/upuaT8gKt0zX7qj6FVD2MUjAGkotvyX5AiRmYlUaMhZ0FNShXcnYt
+            H0lpiEKPpgY9Ud+CFoEt6A62cNYZPmWjK6v6KVq+Y/35q5Jvj+47HECu4T2c1onS
+            XgEwkPoYObLClI9gk55d7uNAkeani8AB9/Yf6rTVOGRzhMT5UNu5x+hXRnKg2Dm1
+            kF5Bj7K9PDsgR7wSzvEoCqCs8v4+rIOr9Zkn8+TOxsnnUYBj3dNwVBjqflZ1Jh0=
+            =F1um
+            -----END PGP MESSAGE-----
+          fp: 9D02A9AD73EF7F3D5F657AC2B392F6EB325E8C50
+        - created_at: "2021-08-13T23:57:46Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7kpg2bgzVHcARAAoCIDfkytMm8oZXj+nxfSYMp6wQvvcDCOXuP6PHDKq5Gg
+            sT2jw2QgCKEChSRiysvGV7T7yOu5C4Hqk+QGdEiYscwrzf2ngD40z8q2gDyJEhXT
+            uyeqh0RtO6LKtAseB4JuQbjbnMO78REhyp4wagO2bUaSD6Z+tM0+sfACWB8+Z83m
+            Spx+jg4RBOdPc94xtcIX1nLxhxDqRl0vF2igaUZfWCpkfcEINkFyrkh2fwaeq/Kq
+            62gYPoXwUHTpF/l0x2pQAW52VJSslX+Cjscn4zk0LFG6w5rQTIAZutSwIOfNT0qZ
+            /JlHe9ptc4JTxrXQXSsAVmxjABKzeo1Io5jpqBYu8J1R58HVeEsda8Cll5UsUhIQ
+            CV69cSPCk72LJqVa6fMyH2GfbJ0EbBwAY3oFygRdW6hOLemJqd7Zq4uQMb1fJjw7
+            3FkA3xv4gsTepsDPFtKA9YnsOX175P2tUmd5bw1Hdnqw4XQtgAsN7NH6NWKv2afT
+            xIJAi8UAwBJJl9BMDaeph4gV00dOBGtoYHo/iqEibgjSgVRYbozX1/daB20117V1
+            C3km/LP/+8xbPAF4kDcNf1n1ezS6xY0gKeS5z284VV/uvo+Ww2dXNxpHvDXFUTYR
+            ZhyHYxW3d1YZVEdNHgIkPQmu/3mMnEvNFyTS8Sb7fW+leNHOd60UFpE8RE9eGODS
+            5gEPngNxBZum2+G4gFclNfi9IoRlegoRewncMXWbpanAkhISMknBXGiyw8sxLjUt
+            cu1SGvdKYdfUwpWu+X0jr8vkO80RVv3FyRTQzHk/iIQJeOI6mJcMAA==
+            =z2t5
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?)$
+    version: 3.7.1

apps/okd4/shivering-isles/pad/kustomization.yaml

+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- setup.yaml
+- secret.yaml
+- release.yaml
+- cert.yaml

apps/okd4/shivering-isles/pad/release.yaml

+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: GitRepository
+metadata:
+    name: hedgedoc-helm
+    namespace: pad
+spec:
+    interval: 1h
+    ref:
+        branch: main
+    url: https://git.shivering-isles.com/hedgedoc/helm-v2.git
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2021-08-23T10:25:19Z"
+    mac: ENC[AES256_GCM,data:tFDGZRjMZi2nuTRSMPX/onGXfJDqojpRVoKlfLGm+KrQyPyAfb3AexeOCimQ7dQ5nv1Z9UgfX6JMNVONIN+rjJjK4eFfgix05iV3rVKRHkSYK1xmJgRq0pYudj2w2ZUE/J4C8dcg2bveNXmdAXk7fs0bXWrKH81XS7KNHKo4ASk=,iv:YH7cJalS40Dy//aTHPC1GjcUp71OD0AcLnaA0G5fC9k=,tag:U3D+LQuXuviFIiCxIeaadg==,type:str]
+    pgp:
+        - created_at: "2021-08-15T21:22:17Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA1u//sli4/n1AQ/+O9+KoGr6+an0cDQZDrSX75jW6iDqRrVmaFtdYNeMx5e7
+            rJFUXzgsQ/XMaQq+BPkdRXcJ1Zv6bbZZbc5uxjXMvcTe6Zai2hib7OzGicWm1+rG
+            8zO77xK/xKP6/XA3qU8FKhtida8pDbB354Wr2vBzjdWSgfviP6j4w0EBjsGCGfWO
+            q3aSDUeldJHH73Eg8obxciYpfZ6DcxoLHICJ6dUrroqE8FmtGexrgOZVDOlvigZX
+            gmlG06xPvU68351u0G6Hu7STZQ99sCEbWm8n+/Vtx8OTpukjveB9NwEC+45MWSVS
+            Go62cVPdTBioe28Oltl99CcgXXzn3ugpv0qOVhPIvWkcGrIH/D8t40D9WVg2DFu2
+            BAZ0RIxWMRLS+OJXAGoHf7OfP/RyMP5qpiCAkB96G3pWezyQ1li6XQKNKDdueO8v
+            fyI/GyuosWmlUb3yop4qdv88YQo5buX1Vzyao4D6EMycZmCTIHTqhp24SMrdDxWr
+            thWsUl8RHTL4oLhELQO5xIwn0cqfTh/CFu2jLlXYxLknfzxsgJjTF937/WsE5zh1
+            J0ALTTDjS+I1mCRIR6W25SIvU7XdIW+8G781PIAd8ig3QKnXdhHcKYUEXvF7DhoH
+            mSYjoKh65JD5s/A3P8B26AzpuR8W4KNCHRZWIKHir/tOiGBnJ5ASE5ffQlXtg0/S
+            XAHJznXjPVmyASoTFRB8bJmo23l4ClEEiPoS5qqQny49D+BJ9nShvAFR7urAS5rh
+            Kr/EGz/nK2qsvGimwvwDf7DF/+u2AFFcu37hsiSUl8gQp3RmLG1yh17wf9x9
+            =0at8
+            -----END PGP MESSAGE-----
+          fp: 9D02A9AD73EF7F3D5F657AC2B392F6EB325E8C50
+        - created_at: "2021-08-15T21:22:17Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7kpg2bgzVHcARAAIyOWF4qC/AnhBg4eUSVPQEXFoM5zyo0N1Jyj+p6JHjU9
+            mkLT1NqJSlm+Nhg1BKaK1RfUkb6t27VXNQIoaYqnlG83LitZ9W/FZYHQZawj2Wde
+            DAvtL1rXeVFCrezyEmEAdgNEeHee0RTUKWX7mABSsrhtTrhRwJdfdegEfLB4xUiq
+            QJXfQsXDIoQMpyqqbouMHJ3sPXsWIF8BXe2sEusJVEaYq092KyXAcSgle44d3Y/f
+            Cf1ShI77HYB6hGdLaVl1HixbbkGG1ab/H7vvZoJxThMSdPBS96hiEUpeOxj9bQhA
+            rjgrqytJ3k+Wm1iZc8yi2jSrpzjd8/dzQqoW//FgZmTyAKqkNVcooUgie3AAsPU0
+            P01z18LDiUR/oueSCU3Uy9WMXKlLo+7dTCqfDQbovjjDqULEDZdZQQbzRZDzJopd
+            xzwZUbE8AQnLf8+Kaoqy2ZFNQAdZBq2mB9qKeeWYoCeEMJxRSwOhH4rvTpnBDaSe
+            2DwbJpQqi1nY09eJ8htnZ96abMxU+/L0x5lnriE0AqYuAuHM4rAKpY6I8F6Lbm5R
+            eE2UlQtWuURo0Ynf1sh2tTfWFYSJsC3Layaq8C+75paX1bGL5PIwfvx6qFS6EHN2
+            TLkYNa98wtPfelPqbqxZADeqOgFvc2axo0D/azO3g8cAWTAH/pQIfxAXANuF7IXS
+            5gHBf8rYICE+4mLI8uPClLafPARDBR0MP5G1YyCOq/7N0LA7oZD2AXbWSHUIqXP1
+            JsoXUy39AzLgvmv8c0RGtUPk2FjDcsmPQXZUtcaunJS2QOLjIBtQAA==
+            =lRJf
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|hosts?)$
+    version: 3.7.1
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+    name: hedgedoc
+    namespace: pad
+spec:
+    serviceAccountName: pad-reconciler
+    chart:
+        spec:
+            chart: ./
+            sourceRef:
+                name: hedgedoc-helm
+                kind: GitRepository
+    interval: 10m
+    values:
+        ingress:
+            enabled: true
+            hosts:
+                - host: ENC[AES256_GCM,data:VpqElgcXyzxi6gEPQoS74uZRlOucqzo=,iv:U/IGvJNDuJ7W918apJapNn2kb4wc1fosAUnYh5aux9o=,tag:0XbNvgnNOY+pQ+x5021udw==,type:str]
+                  paths:
+                    - path: ENC[AES256_GCM,data:kg==,iv:qx/ymlD3zrQvQa5E3bMOAlbqCGzTbHuLAamqRIy17UA=,tag:q3e25kgNSA2DqWCtnA3JZA==,type:str]
+                      pathType: ENC[AES256_GCM,data:n7syW/VoaVTu6SuSzpnAjBowKaOFcA==,iv:Y3NAAEo4b1SqIYg/3vMGZtIxJQcZLka5CM9/yC1beX4=,tag:LiD+gpEp7kUad8M2m9l7AA==,type:str]
+            tls:
+                - secretName: pad-tls
+                  hosts:
+                    - ENC[AES256_GCM,data:uSyarY4HmspyKIrUWq66eQM518x4IN8=,iv:MxvkFWKqkhVLq0eLW/Tgtaa2xfg8tt6ihMpWQmI2FzY=,tag:+2kgkPNbaXYBIYMi2aesqA==,type:str]
+            annotations:
+                haproxy.router.openshift.io/hsts_header: max-age=31536000
+        replicaCount: 1
+        env:
+            open:
+                CMD_URL_ADDPORT: "false"
+                CMD_PROTOCOL_USESSL: "true"
+                CMD_LOG_LEVEL: error
+                CMD_DB_HOST: hedgedoc-database.pad.svc.cluster.local
+                CMD_DB_DATABASE: hedgedoc
+                CMD_ALLOW_FREE_URL: "false"
+                CMD_EMAIL: "false"
+                CMD_USECDN: "false"
+                CMD_IMAGE_UPLOAD_TYPE: minio
+                CMD_MINIO_PORT: 443
+                CMD_MINIO_SECURE: "true"
+                CMD_OAUTH2_USER_PROFILE_USERNAME_ATTR: preferred_username
+                CMD_OAUTH2_USER_PROFILE_DISPLAY_NAME_ATTR: name
+                CMD_OAUTH2_USER_PROFILE_EMAIL_ATTR: email
+                CMD_OAUTH2_PROVIDERNAME: SI-Auth
+            secret: {}
+            existingSecret:
+                - name: hedgedoc.hedgedoc-database.credentials.postgresql.acid.zalan.do
+                  mappings:
+                    CMD_DB_USERNAME: username
+                    CMD_DB_PASSWORD: password
+                - name: hedgedoc-config
+                  mappings:
+                    CMD_DB_URL: CMD_DB_URL
+                    CMD_DOMAIN: CMD_DOMAIN
+                    CMD_GITHUB_CLIENTID: CMD_GITHUB_CLIENTID
+                    CMD_GITHUB_CLIENTSECRET: CMD_GITHUB_CLIENTSECRET
+                    CMD_TWITTER_CONSUMERKEY: CMD_TWITTER_CONSUMERKEY
+                    CMD_TWITTER_CONSUMERSECRET: CMD_TWITTER_CONSUMERSECRET
+                    CMD_MINIO_ACCESS_KEY: CMD_MINIO_ACCESS_KEY
+                    CMD_MINIO_SECRET_KEY: CMD_MINIO_SECRET_KEY
+                    CMD_MINIO_ENDPOINT: CMD_MINIO_ENDPOINT
+                    CMD_S3_BUCKET: CMD_S3_BUCKET
+                    CMD_OAUTH2_CLIENT_ID: CMD_OAUTH2_CLIENT_ID
+                    CMD_OAUTH2_CLIENT_SECRET: CMD_OAUTH2_CLIENT_SECRET
+                    CMD_OAUTH2_AUTHORIZATION_URL: CMD_OAUTH2_AUTHORIZATION_URL
+                    CMD_OAUTH2_USER_PROFILE_URL: CMD_OAUTH2_USER_PROFILE_URL
+        caBundle:
+            enabled: true
+            annotations:
+                service.beta.openshift.io/inject-cabundle: "true"
+        postgresql:
+            enabled: true
+            numberOfInstances: 2
+            tls:
+                secretName: hedgedoc-database-tls
+            size: 1Gi
+        monitoring:
+            enabled: true
+        resources:
+            limits:
+                cpu: 256m
+                memory: 384Mi
+            requests:
+                cpu: 64m
+                memory: 128Mi
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2021-08-23T10:25:19Z"
+    mac: ENC[AES256_GCM,data:tFDGZRjMZi2nuTRSMPX/onGXfJDqojpRVoKlfLGm+KrQyPyAfb3AexeOCimQ7dQ5nv1Z9UgfX6JMNVONIN+rjJjK4eFfgix05iV3rVKRHkSYK1xmJgRq0pYudj2w2ZUE/J4C8dcg2bveNXmdAXk7fs0bXWrKH81XS7KNHKo4ASk=,iv:YH7cJalS40Dy//aTHPC1GjcUp71OD0AcLnaA0G5fC9k=,tag:U3D+LQuXuviFIiCxIeaadg==,type:str]
+    pgp:
+        - created_at: "2021-08-15T21:22:17Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA1u//sli4/n1AQ/+O9+KoGr6+an0cDQZDrSX75jW6iDqRrVmaFtdYNeMx5e7
+            rJFUXzgsQ/XMaQq+BPkdRXcJ1Zv6bbZZbc5uxjXMvcTe6Zai2hib7OzGicWm1+rG
+            8zO77xK/xKP6/XA3qU8FKhtida8pDbB354Wr2vBzjdWSgfviP6j4w0EBjsGCGfWO
+            q3aSDUeldJHH73Eg8obxciYpfZ6DcxoLHICJ6dUrroqE8FmtGexrgOZVDOlvigZX
+            gmlG06xPvU68351u0G6Hu7STZQ99sCEbWm8n+/Vtx8OTpukjveB9NwEC+45MWSVS
+            Go62cVPdTBioe28Oltl99CcgXXzn3ugpv0qOVhPIvWkcGrIH/D8t40D9WVg2DFu2
+            BAZ0RIxWMRLS+OJXAGoHf7OfP/RyMP5qpiCAkB96G3pWezyQ1li6XQKNKDdueO8v
+            fyI/GyuosWmlUb3yop4qdv88YQo5buX1Vzyao4D6EMycZmCTIHTqhp24SMrdDxWr
+            thWsUl8RHTL4oLhELQO5xIwn0cqfTh/CFu2jLlXYxLknfzxsgJjTF937/WsE5zh1
+            J0ALTTDjS+I1mCRIR6W25SIvU7XdIW+8G781PIAd8ig3QKnXdhHcKYUEXvF7DhoH
+            mSYjoKh65JD5s/A3P8B26AzpuR8W4KNCHRZWIKHir/tOiGBnJ5ASE5ffQlXtg0/S
+            XAHJznXjPVmyASoTFRB8bJmo23l4ClEEiPoS5qqQny49D+BJ9nShvAFR7urAS5rh
+            Kr/EGz/nK2qsvGimwvwDf7DF/+u2AFFcu37hsiSUl8gQp3RmLG1yh17wf9x9
+            =0at8
+            -----END PGP MESSAGE-----
+          fp: 9D02A9AD73EF7F3D5F657AC2B392F6EB325E8C50
+        - created_at: "2021-08-15T21:22:17Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7kpg2bgzVHcARAAIyOWF4qC/AnhBg4eUSVPQEXFoM5zyo0N1Jyj+p6JHjU9
+            mkLT1NqJSlm+Nhg1BKaK1RfUkb6t27VXNQIoaYqnlG83LitZ9W/FZYHQZawj2Wde
+            DAvtL1rXeVFCrezyEmEAdgNEeHee0RTUKWX7mABSsrhtTrhRwJdfdegEfLB4xUiq
+            QJXfQsXDIoQMpyqqbouMHJ3sPXsWIF8BXe2sEusJVEaYq092KyXAcSgle44d3Y/f
+            Cf1ShI77HYB6hGdLaVl1HixbbkGG1ab/H7vvZoJxThMSdPBS96hiEUpeOxj9bQhA
+            rjgrqytJ3k+Wm1iZc8yi2jSrpzjd8/dzQqoW//FgZmTyAKqkNVcooUgie3AAsPU0
+            P01z18LDiUR/oueSCU3Uy9WMXKlLo+7dTCqfDQbovjjDqULEDZdZQQbzRZDzJopd
+            xzwZUbE8AQnLf8+Kaoqy2ZFNQAdZBq2mB9qKeeWYoCeEMJxRSwOhH4rvTpnBDaSe
+            2DwbJpQqi1nY09eJ8htnZ96abMxU+/L0x5lnriE0AqYuAuHM4rAKpY6I8F6Lbm5R
+            eE2UlQtWuURo0Ynf1sh2tTfWFYSJsC3Layaq8C+75paX1bGL5PIwfvx6qFS6EHN2
+            TLkYNa98wtPfelPqbqxZADeqOgFvc2axo0D/azO3g8cAWTAH/pQIfxAXANuF7IXS
+            5gHBf8rYICE+4mLI8uPClLafPARDBR0MP5G1YyCOq/7N0LA7oZD2AXbWSHUIqXP1
+            JsoXUy39AzLgvmv8c0RGtUPk2FjDcsmPQXZUtcaunJS2QOLjIBtQAA==
+            =lRJf
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+    encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|hosts?)$
+    version: 3.7.1

apps/okd4/shivering-isles/pad/secret.yaml

+apiVersion: v1
+kind: Secret
+metadata:
+    name: hedgedoc-config
+    namespace: pad
+type: Opaque
+data:
+    CMD_DB_URL: ENC[AES256_GCM,data:XDuzPsXcJt7+kgdu4wIV7gLs10iLuW9D4LAfDagriuEqAp4rKZIpZOYW68/n5o3Jri7ypqCXycbworQ34WqOzR16afCvld7ypnxMpJbn1NP96+KdZy+269KpF3ZM1KpUF5VeJkwyVhBOZ1R8bjiIxjzbMkschvJVse+1LNMmiUUxvB10xjdeO0Ny4szp1wGAC2Av0ncx5cm1O6p7qWFfn06nNjXdUdYV6Yo9XW8Km3ph4VkKGZN60awXPCnYvabozxTwpY4MMQ==,iv:TIJ2AGvF09QlUbDUP09Wa+S1u1DOlyNIDzGS2KbhOT0=,tag:tuB946Io7z40FNO6xyOKhA==,type:str]
+    CMD_DOMAIN: ENC[AES256_GCM,data:RdwWcHm7weFxJXROnvBkCckbYKIJSW5G0vkp1r5m3gPrrZxfS+r29jwPw+oHAUBa,iv:rs0UIBpXYPCn0BFkHY2PCst6Jb1KK3nQHDF7lHaf+T8=,tag:Vmo4d/m8/khST1ornOC8Wg==,type:str]
+    CMD_GITHUB_CLIENTID: ENC[AES256_GCM,data:tJgDGHWa1N709fb+6y8Ag3bSWWan0dLV9S/lSuy/5jz/krxb8HmDslP7eA9vtd8iwC2wX+OszYU=,iv:WTGvfUCwFkuHmfXnjJv5yYFex9woWrD4muvLL53sEzY=,tag:l1GAgZx7oKen0XyOzpaW2Q==,type:str]
+    CMD_GITHUB_CLIENTSECRET: ENC[AES256_GCM,data:ovFqIPTbFX2ghnkWmDPaVrbkoGEiakQKlsnp0n312i4FHA9sABRWmZlFo0MkVcQF7aT/PcK+UIZSN7lT8M7huBOEQrC/dpTkDTM9SbBzzbgn9zHwOmpXJaIX,iv:nopuaGC3eQfJ/AdLjgga/T0MwPYgGNtAVlTTbgzLluE=,tag:sGxABlH/AIrkirPKm3Y6RQ==,type:str]
+    CMD_TWITTER_CONSUMERKEY: ENC[AES256_GCM,data:iyZawxuk9egPXg+H2Xi591f+c6sezdBbqJmyOlne99LIifUHl5vGqxkyT8Ljf9T9SgJI00L9Q7vgUkFAWFnsIf90b+jzunTJNUk1WQ==,iv:UAs/1Krc/o44N2yNuRc3cRUhJthZn0bCBjb2lSroZTI=,tag:yo1wNw+Cp6FJEkTqR/iFfQ==,type:str]
+    CMD_TWITTER_CONSUMERSECRET: ENC[AES256_GCM,data:awCKc1J5v7lXlZ4dvvYEUmQGbpwBinICXIoJc+bGoEUXKlOKC7B0wLKkzpVuR/gy8Pe0sSFh5HAFLdtd/zEeADiE4vUG+Sa53td/kEEG7N36qNZSeLE1fU/hJNHmZGVit6TiHNQsYj7WeuRIjZsn6sk7,iv:PJXCH9UXr5r38+qKi+vFvFBv8isXCpxCadt16wh5pXk=,tag:PWKtgp+TvUiufxnBn2B3Yg==,type:str]
+    CMD_MINIO_ACCESS_KEY: ENC[AES256_GCM,data:zuLjploxebm0Uh91r72C4ElsmVpKgFGA8QUMBcTAGoySAGQUjunsgt3izfSgXzKojAeP1I+v4MoIJOXIaNQrjjugmAswYz+p,iv:tK4QSV3tSCq3ob4zSz8cHtok3fTuKu5yaMR9BcZ2PC0=,tag:h6rm1BTwaleySyDfbWYu4g==,type:str]
+    CMD_MINIO_SECRET_KEY: ENC[AES256_GCM,data:Y7Y/sjb+JEwX9zAPjL5JgID88z01AjyzrehecUSCmPOcj3RdTa2N69gxy6cxSEKx2OASuH0x6X4vIEzYlaLkrMhF2EHsTA5fRc3pOy9/cW8GgL3G1dJapg+rgbdPV5YxGTTTYgPfuJFJLh1YAq/ZA+qjoEe42zF/OFk8z5zNem4HIQ==,iv:F8uTGJ/ZmSwpu3mUuufkB7I4zOnR6XgWE9EkS6nwfkE=,tag:G4vfiWXZ3loQACUyVpAewQ==,type:str]
+    CMD_MINIO_ENDPOINT: ENC[AES256_GCM,data:uPyFAz5eJosQ0Wfd7GdtIFKiUElnJV2xsNvspl5v2RTjKLv21RsjxN9Y0EGes7qHP5ewNqZiK0pNzWMGYhb/1JNXSSs=,iv:EGJb1yE2yk9L+1pzpaTu/E4vOYwXHyCt7yh5yzJyBMo=,tag:jZ7c6JoIhSpBdyJpYK6kRw==,type:str]
+    CMD_S3_BUCKET: ENC[AES256_GCM,data:4t40XAtcJPpqCW7vSKK4NoKxHNA3A3folKGwXYo5dtx2yqNx,iv:t0ZDjy9N6e0Ztf021TyzR7wTqojvpNtjIWh1lsECVQM=,tag:KBydpKd1LdmFGQb+r7OwGQ==,type:str]
+    CMD_OAUTH2_CLIENT_ID: ENC[AES256_GCM,data:1OLIOOFvjE83Ruscgj+3kgau5vg/YtG93NnIvF/ytA6JE1VgoIDbkHVMg/8=,iv:gp+CT9jxXum1/Mjc3wOVB2tR5QoYvqZcKhSnmp7P3+g=,tag:rKvzJVVh0/t6bAPJqFSpaA==,type:str]
+    CMD_OAUTH2_CLIENT_SECRET: ENC[AES256_GCM,data:OJD1KwiZnRjNnvG8ZvKC4Rktm9cTe4AnIZZYP0OTmgvhzvcFUKK6oX5FL9qmqSr/7ZQA8qx9oy4moPnOJkWTpSDKSwApczemC+00UbQivsLvO7Svoc+jIUvIOUhjgg==,iv:oynBDn7sh+peQBa7h2zpl0qW2AuveAetwBQ0cKV2MD0=,tag:cZzk901cVrne5nCQwU0SFA==,type:str]
+    CMD_OAUTH2_AUTHORIZATION_URL: ENC[AES256_GCM,data:1RZLdMoJfpKOaa1oEH2/hggfvTWk86oq/OHNN1Oc3dfhIzjYAvOhXPAp9pHJo2toeenLd1VwcY9zIQSpQmvQZya1Sd09Ijo9k/OLLGEB/Y6L0p2+Lmcnwflm1jmrbBSO92nTYkqrY5Mud3pPralNGNsdKpEVt4Ip6vWrNZw+C3A+UYE0Xv1PG4u/XzEAx3RDokkYiE95vyPAuPmiZT8JI/VP/tAwooGi4T/I,iv:6QyUOeyFH+8eeQ70XuKI/IkrxjY1xEkICRdxJzdRWKg=,tag:ptYfh2w1Nyf4dn6cmOiCWQ==,type:str]
+    CMD_OAUTH2_USER_PROFILE_URL: ENC[AES256_GCM,data:DG7JWOpC73XRGkGC+3eRFtmXOvubiE3+Oj+RANmuYkF+M9dU69DSKjZvps0HpILeyqUeX964UYRUrsrhjZupE1FiUziUocNwWcnM1zKE8lRFjkoEHYdDZOELwhXwTaTCxHXSwtOe+KPnAYKvu+vYz7PjhXNZX8Xo82B+svEw33PaIngeBCmpRN4sqY9EPNawCURU6L0k7P9F0Ig6OQ9hmZVQX0p7q85MeUI4iwQbqg==,iv:+JIBWR2BARSNKUIkHsK8B2b0PyTZDbWiNf5eJaskdbE=,tag:AfM4Hprf726KBWyKgsdFcQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2021-08-23T10:24:51Z"
+    mac: ENC[AES256_GCM,data:a5lhQFUtauS4cTzFifL8+ydItEkE+TQ3s5T2HM9HIlnkDY+Apmfk3ibwePmegpbCgLJbwqe+I/YRlTbuGTvsiz5yCNdPhEFDx/Mz88u3twB47hstxAWwizgcnQRe5o00MLhzFqls/cxtM7PUi7nb6cfXOwiDzcnxswcVcLDOcFY=,iv:P645cb6oDa4lIamlzHKNiEFbxOpq6HZ9lqUmN46vz3c=,tag:LT8bbNtuWtISn1XH+HlnWw==,type:str]
+    pgp:
+        - created_at: "2021-08-13T23:42:09Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA1u//sli4/n1ARAAr3Y+LDoHcRSvotgmcWFF34p0OtC4ytAKmyOsK5D9voaf
+            6o96qWD01VA6jQ6Cp4UXhEAdTezfKllGUjMwLHbS30bCtwo8gRznRAPStY3u2rcZ
+            ZgV2QKJBEM0bm3vtO1UT94IbMas4GwvdO8qxltFn0yBy0TQI5E9+js+b2/Cyyy3L
+            wnXT93p4HLBkhMGD43eYxZWW4i+vHrEx6efOahpyIuJqpNo+IiNhCT5TQzqkmfBZ
+            BQImX+EOeMMzvZO3WPUgvxeph+qb7pLOlXP8b0AK1qrZ2/jq1/aF4RwU+Kx/8By4
+            Wmq47P/++IL/I4rLAGKry5xr7eFHH6ltfjfJd48aqiNb0jeKi/TlmAew4RcTMlrF
+            Tfo/lCjQPet7OKHY6Fh7n2vniKej6IeEkaakIbexAhugI14i5/63HjBt8Us/951+
+            1j+QT5jN3BcrvJORCkDetJ2YVaSqPdCnf+9jkOqocLDR31pSvBBvqVAO7DNWYwjk
+            fX9G/HUa3k2SYHd6OP0dWji7qQzjmNWQN2lGvTrCkV6IIyC9h5wEfXZ/1VnP9QSb
+            QDlh6ln5RlKVe+HrhtO4luG8vMXBY78sZ1PC8KPBcS7kz7v0CB7FOMuh06nzby+D
+            nv9nvBwGXIQ3zI3gGYHX3XHmRmPpuXjuEoc5ru70mo8uAz7JgBSnRO5/0xpH9jPS
+            XgGsoCtK7Sh60yN4BVBiTiABHReMSXEjBjuwTtZt89lHST5EswZ4VdhJHcIXPqqj
+            QSipFXeX99C6EoYvFxYq7QOrp4rwt5j7YXP/+9nVDpXMFohN3Zrc2FNAExkc2N0=
+            =OHq8
+            -----END PGP MESSAGE-----
+          fp: 9D02A9AD73EF7F3D5F657AC2B392F6EB325E8C50
+        - created_at: "2021-08-13T23:42:09Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA7kpg2bgzVHcARAAsydPjUm/G6Vd6b61e3b+NOu4YWp4IMRirA6Shxp2PBM7
+            Ch+K6WXvE6KRwHcJMG66rDj0W9p0kA6tQhC1HkzU/3U+cUnITT/SFOtlywOH+29c
+            7xVEmOcwcvlFYO99fJIb0KslyzRHj3FLYp75VBLGDbVMIgaUqjZwRwO6g9N0MyS3
+            UE2+BXXHzvHSep2ylMd+y6afe+jcEDISF6G8s7xgjdyvdhWfQv5Bbib9laKAnCqr
+            4qKTspa/ePVT+frwwcict85F6EcB5SY37uUwEZ1P+jJDU2S58PfLvdVCKejEzKyh
+            B7N/86jUucYdqOVZsewN99Unrrvq+f7q8EulQ08XcmZ8J7DDOXHqNgUcw/Sfgp4v
+            aVGSeQNUGuHFc7q32K8+7zkbo9FrpIV4RhztKrmKUZy5QrkFxm8NVol1DVzPtlBj
+            GH1Pqcoa7UWeyvBd1/c729Xfu48iP1z70RCu54a6qr01xloJBQBIU6OlsfxpvVif
+            /Dx660riAtr4RKhPQ7sHNO49ibjXqMsche6hB7LR7lt8oPxB8yru270qf/URnvsK
+            b+AmATezCJo6QVLfNH9o6ZY5K+HTy3cJyl0PMtctvNyhaK9ch84/MpHUfckHLbrl
+            Is22TNqkSZoZSeyDzfALU8Z0k4neGRgroyLpc1voNVYBwlnu7RuPuU0SCXx5CKfS
+            5gFntAmaLLls7msGCX1vzSgeQYkVG/j9Vn4L087Os/mW9TbRvvu6p/JuyRTzPgbb
+            J0wF2YgidKqRIAOtMUbupiLkoA0L3xfXhmIOYVcURJ6aneL1vPJOAA==
+            =10Xq
+            -----END PGP MESSAGE-----
+          fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1

apps/okd4/shivering-isles/pad/setup.yaml

+apiVersion: v1
+kind: Namespace
+metadata:
+  name: pad
+  annotations:
+    openshift.io/requester: sheogorath
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: pad-reconciler
+  namespace: pad
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: pad-reconciler
+  namespace: pad
+rules:
+  - apiGroups: ["*"]
+    resources: ["*"]
+    verbs: ["*"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: pad-reconciler
+  namespace: pad
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: pad-reconciler
+subjects:
+  - kind: ServiceAccount
+    name: pad-reconciler
+    namespace: pad