diff --git a/clusters/k8s01/longhorn/oauth2.yaml b/clusters/k8s01/longhorn/oauth2.yaml index e1140ff3414deb6b8e207293d28dc8d1dffb9257..a5ebb0dd20eaa74db2d1db07113a616b283514e9 100644 --- a/clusters/k8s01/longhorn/oauth2.yaml +++ b/clusters/k8s01/longhorn/oauth2.yaml @@ -12,8 +12,8 @@ sops: azure_kv: [] hc_vault: [] age: [] - lastmodified: "2022-01-28T21:50:17Z" - mac: ENC[AES256_GCM,data:0TIrIS8fJsW9sZvh728LkbYU2z8LBCgKccImJIrrVK4gQM+ACXGK5y/T5XxvZR+OXGKLOaqj4tXUFsXVi1Fdgoma6dB5IrmVO+XE+GW9e4HJNIA6I4r8zKImk3rUcEvMsSEZtLXMN1BvQk+ok//rIq782DQwrUKLQy4Z1ZhmzxE=,iv:alB3ySQ+SXvFoVujVVetfOX+Jyjfr6Gj6Crpok/4Rhc=,tag:RnzW9EUv2OR/0xWaC32vqg==,type:str] + lastmodified: "2022-01-28T21:53:04Z" + mac: ENC[AES256_GCM,data:JDkpOT350wCl8ILGivmxV9MwfYJkYx2COgL4T0TJjXxytv+RxNsqnzPsq8TrxNmZ/0R7OILd+MrKWTBxQDhZCJcIcXLilONMmPa3Y/x28V4AOIQbFzO0EVwcjSPWnFDkJlTeH13QWEZ3Zr5hzFzsQzqYYCpaDWvHwigmJJ5mkvw=,iv:fi9T3Pvdft67vGevQQmqpCBQ5IHhquXzQseImqmajvs=,tag:iBOzhzfvGl7IPz6vrRVYmg==,type:str] pgp: - created_at: "2022-01-22T04:06:16Z" enc: |- @@ -123,8 +123,74 @@ sops: azure_kv: [] hc_vault: [] age: [] - lastmodified: "2022-01-28T21:50:17Z" - mac: ENC[AES256_GCM,data:0TIrIS8fJsW9sZvh728LkbYU2z8LBCgKccImJIrrVK4gQM+ACXGK5y/T5XxvZR+OXGKLOaqj4tXUFsXVi1Fdgoma6dB5IrmVO+XE+GW9e4HJNIA6I4r8zKImk3rUcEvMsSEZtLXMN1BvQk+ok//rIq782DQwrUKLQy4Z1ZhmzxE=,iv:alB3ySQ+SXvFoVujVVetfOX+Jyjfr6Gj6Crpok/4Rhc=,tag:RnzW9EUv2OR/0xWaC32vqg==,type:str] + lastmodified: "2022-01-28T21:53:04Z" + mac: ENC[AES256_GCM,data:JDkpOT350wCl8ILGivmxV9MwfYJkYx2COgL4T0TJjXxytv+RxNsqnzPsq8TrxNmZ/0R7OILd+MrKWTBxQDhZCJcIcXLilONMmPa3Y/x28V4AOIQbFzO0EVwcjSPWnFDkJlTeH13QWEZ3Zr5hzFzsQzqYYCpaDWvHwigmJJ5mkvw=,iv:fi9T3Pvdft67vGevQQmqpCBQ5IHhquXzQseImqmajvs=,tag:iBOzhzfvGl7IPz6vrRVYmg==,type:str] + pgp: + - created_at: "2022-01-22T04:06:16Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + wcFMA7kpg2bgzVHcARAAgt+09YMPbbkGkg+/VgMgvxC4YDoQxlcklv3OfrS29yHF + 27d8LBexyRYUTqkKhxyFJl+1dOqoE+o2uZjg9J/WSNR4MIBMm4Whn9rly4hoyk1W + BSKqZxt/POdP7ZtZ1Ke3hrZiV4UlDDAagToxrSWG4suXr45i0wUGICbNakrlEB9P + 7Ub7nM6aIWjyRJpqPhtJaaq1EWsj/+2NagXOMi0cWjj4wzEy+KZMC3lMVM3db/zw + KDxsZWfK2/gRc7qqQWrmKB5bqQPhKVwUExrzKofExaSozXq9c694mmThVyR2SFc9 + OvNLlqLpeRfBpoY9F19Wz0YhQRUxfPdYgV0ZqngxIYzx2+2DqCz1fkW/hIcMLyj9 + LBNUTHXcRP9O3ZWWx0flnjcE8Cyz4qmMq9hf0iEWtZb1cO0v5Z6+lYo9ThQvcPCp + DMuZ2l65Sfto56y84j8FPshOS6Heo97mwbO/BmOZYnQ4RtGFc9KlFtLBMyRZfqEo + b6O77YyzCcKYOdgrXjEORxvUq2ftHxTQFBdYUHO2Rpf0tyrZwUYnIWBXnB5fOp/y + HjWzl8ZpQxhJQubiqteEovYdtv+1ionPBLZkzzx3EDbNvSroQijENSkQhyl7QbMj + XURIII47j0yda/kZ4mupPz4isY4kEi/AtwCI+tumI0c7gH7iew/kjoQcgyTVMOLS + 5gFZuhZ6ixAXhDms0RKfYq6iKAzXxslg0qcYAOcjwqq5u+cQJTfSrLjivxNs2cIo + M/5BCddS+GzLSTCNYStLfOfkFGlrOccM7I8Fzy3PYhtc9eLwlSI/AA== + =c/3x + -----END PGP MESSAGE----- + fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601 + - created_at: "2022-01-22T04:06:16Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMA4oYbIHZIrAPARAAyGLyK65vBqTfe/5iFAuaaWg9sWRTAfnGnDEgxAPdp4EQ + yKOT9AyRLes5yRtSz8ugRVjvQd/B9bj+VE7MosFarpjw5ckzRKjSHpanzPqGGWjI + 2Ce9gbSljx7AhmXujK+TRhf4PbliopQWdStNWZ08p17UG2G0UiNPgun0ocHxUqVN + 46iUl51aL5ElZUmA3bfcwpYu6lCiDCEvlrX+7ZSsKEYcg1VQ+oi0XTxfEugSFX1N + 4QjkSHfFYWCqt5IOB2+G5HCZfwD3n3a9tTjpehnTfC61Dn3r4tAVunD3dDaVvqNK + GOJJvvykUOGrszIInJbXd3Bvp/HGm5jp5eLiMo1GQeG7XxIuiIDV41AkAEEv5nYW + fpkeW/a+2NI/TzM3PsOOxEmghuG4k5lnpYwrEcp/s3OmYwDRLvSQRD9rIjw33VnU + WhgfsjwqlqLbyUTwssn8ztEUvoVXQ/lmsFJ2xrzBuWV4tSOUMX+jpA1bhJ1QCcOd + vR/fMH2ZMppho7bnUUVjFGtRZWLAh4OPdCZ4fTkWpUbrFE9HBP1rcPxe7DqzDlbl + tb5yfNLvHGWh/Myqm7CP04qIlWGyDT4UonAWFmPLt6mWXf6DrlOl8n+iAZbX7d+c + w8y/mAapNcTZZHG/+M5hq0anS9mZ65yR3X2znn8ErNot8alJBcOdulM2aDrwk9HU + aAEJAhDKMKsgECqiT3WYb8AVOHFk0O/CCKDFBTt+S+Bbjeb2vqBE8uRNMECpZPU9 + NSZGFfj97fyI1At7TgVko8Ae/2w0xdb80g/81/kVuTNTm/0z60RqOooENSxfGRJ9 + PNNoVr/LwxMQ + =e2fo + -----END PGP MESSAGE----- + fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07 + encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|hosts?|tang|externalURL|.*-secret|.*-url|.*Secret|.*-domain)$ + version: 3.7.1 +--- +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: allow-ingress-to-oauth2 +spec: + podSelector: + matchLabels: + app: oauth2-proxy + ingress: + - from: + - namespaceSelector: + matchLabels: + ingress.shivering-isles.com/network-access-required: "true" +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2022-01-28T21:53:04Z" + mac: ENC[AES256_GCM,data:JDkpOT350wCl8ILGivmxV9MwfYJkYx2COgL4T0TJjXxytv+RxNsqnzPsq8TrxNmZ/0R7OILd+MrKWTBxQDhZCJcIcXLilONMmPa3Y/x28V4AOIQbFzO0EVwcjSPWnFDkJlTeH13QWEZ3Zr5hzFzsQzqYYCpaDWvHwigmJJ5mkvw=,iv:fi9T3Pvdft67vGevQQmqpCBQ5IHhquXzQseImqmajvs=,tag:iBOzhzfvGl7IPz6vrRVYmg==,type:str] pgp: - created_at: "2022-01-22T04:06:16Z" enc: |-