From 5b07259446c2c66c994a2252ea3feb7755ab4053 Mon Sep 17 00:00:00 2001
From: admin <gittea@mail.com>
Date: Sat, 2 May 2026 11:41:56 +0200
Subject: [PATCH] feat: move pgadmin credentials to sops secret

---
 clusters/homelab/apps/pgadmin/deployment.yaml |  4 ---
 .../homelab/apps/pgadmin/kustomization.yaml   |  1 +
 .../homelab/apps/pgadmin/secret.sops.yaml     | 26 +++++++++----------
 3 files changed, 14 insertions(+), 17 deletions(-)

diff --git a/clusters/homelab/apps/pgadmin/deployment.yaml b/clusters/homelab/apps/pgadmin/deployment.yaml
index 0bded07..3abcdfb 100644
--- a/clusters/homelab/apps/pgadmin/deployment.yaml
+++ b/clusters/homelab/apps/pgadmin/deployment.yaml
@@ -21,10 +21,6 @@ spec:
           ports:
             - containerPort: 80
           env:
-            - name: PGADMIN_DEFAULT_EMAIL
-              value: "admin@yourdomain.com"
-            - name: PGADMIN_DEFAULT_PASSWORD
-              value: "ibims187"
             - name: PGADMIN_SERVER_JSON_FILE
               value: /pgadmin4/servers.json
             
diff --git a/clusters/homelab/apps/pgadmin/kustomization.yaml b/clusters/homelab/apps/pgadmin/kustomization.yaml
index 56d7bf0..20da502 100644
--- a/clusters/homelab/apps/pgadmin/kustomization.yaml
+++ b/clusters/homelab/apps/pgadmin/kustomization.yaml
@@ -7,3 +7,4 @@ resources:
   - pvc.yaml
   - deployment.yaml
   - service.yaml
+  - secret.sops.yaml
diff --git a/clusters/homelab/apps/pgadmin/secret.sops.yaml b/clusters/homelab/apps/pgadmin/secret.sops.yaml
index 0d5a07e..dc21322 100644
--- a/clusters/homelab/apps/pgadmin/secret.sops.yaml
+++ b/clusters/homelab/apps/pgadmin/secret.sops.yaml
@@ -1,11 +1,11 @@
-apiVersion: ENC[AES256_GCM,data:6Zc=,iv:L1JDd0Uc8p+9RgMbJGH1speD/NRrQM3Z33Xei40yXgc=,tag:hgqIpfXbF9MN5AUD7P2Njg==,type:str]
-kind: ENC[AES256_GCM,data:PaIiWmN2,iv:M1PtATHWad6VlO9AOW/ZO6HMtSQRPEYMie38gNTInEE=,tag:P6+BO+gbw6g7zoUpZvVHUw==,type:str]
+apiVersion: ENC[AES256_GCM,data:ajc=,iv:KDcOmQp/AW6VLabPTn3wPN3iu2ZJHdlYkZA96gpAXLI=,tag:fb25AvL7etTWyJeJ+whdtQ==,type:str]
+kind: ENC[AES256_GCM,data:+wO2JplC,iv:qlhkoes2tBBg6TzdNWjG8rtjF3fDnbtOsVrIW3kzRoM=,tag:ETNH/9DO3yrSrPWq0s68RA==,type:str]
 metadata:
-    name: ENC[AES256_GCM,data:VTuHQwnR0T8FGjjjlmg=,iv:zFAEAAgqbb1ErxuipIXRlJc0IhhRM14O6B+BDBaXHKk=,tag:qhg/uSVNvClcOjcncgQWxA==,type:str]
-    namespace: ENC[AES256_GCM,data:TdldWQ4WGA==,iv:gzp3TOJXR5vm4ERUpZ9SIXnRYwDU1T3RYQqB0rPsL2U=,tag:/Y9ky+CQc0500TJsHrcbZw==,type:str]
+    name: ENC[AES256_GCM,data:RX3GSGag0cqHZEeyB0Q=,iv:k2eu8Zz+7e4tLNIeBtcvxmndRZzy2lMvnQ8NAdBCiiU=,tag:aYTO5w523xeMX6H+kd16pQ==,type:str]
+    namespace: ENC[AES256_GCM,data:q2+Fq+K5Qw==,iv:WAhvMfA+nq2CWjURuZZUCA+U4Pdk91eBrhjeiqUlgFA=,tag:FlxFG6z/OrlMO3dvvXj8pw==,type:str]
 stringData:
-    PGADMIN_DEFAULT_EMAIL: ENC[AES256_GCM,data:hjxTHgl3I/vTzARKpUZGN9ffzr8=,iv:kChdHONQcK9i34yEU7tztiTeBw5/sjwIegFzzULQIiw=,tag:sKMuHnjDGFraTgZcFyiREw==,type:str]
-    PGADMIN_DEFAULT_PASSWORD: ENC[AES256_GCM,data:TXd97IID0MY=,iv:DQ5xRaGas6HcJRgzyFibgYyuHJpHHnHN7GxTjotlBv0=,tag:fjopg3cIHhO/4ectJKOi/g==,type:str]
+    PGADMIN_DEFAULT_EMAIL: ENC[AES256_GCM,data:xpO0ORGq4QzSfLI0klBh66OhR2Y=,iv:Nf71SISHQCQ4MQqvrxz4FUjQYIowek6hxbWOEfBDmlo=,tag:qutlgJ461wITA3eEUgeluw==,type:str]
+    PGADMIN_DEFAULT_PASSWORD: ENC[AES256_GCM,data:csYoMX8TGSs=,iv:eeIUglMuxW4It/jj2mn/svpvX9ZAh4O3QMk3tn0uES4=,tag:qMNTlYbgj9UL3sk9zSpKOQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -15,14 +15,14 @@ sops:
         - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLblB6Y2Y2OUlSQ0NWWHhL
-            Z2VBL1RQbENKVkVDaW9vOEptcTl6cjJidDJZCnZwTXRMTHY3djdJdGRNd0RRK3Rs
-            N3ZZTEtvbGlrZWtKaDJlajVVSy9tRUkKLS0tIEpBYmdtak1KTE52UnFaRFhIcVh5
-            S2hmZ0gzaFd3QWI2NTRLcFdmRWpMbm8KicLQQxVD4+E9QNQgpAbFeYkh97b1Rcf+
-            /dI17ACKIRDdkAUuBpYfHrrB8PhQY9pPSvGEaQHZNqp7SlWppwn0sg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXb2xvVTJxSlU3UFRFdGVT
+            QjBCSUVuY0tzNU40RDRQY1JNNWhkU2xyU1NvCmFseC9Fd2xIMVZ0YlJkamFyVjdz
+            c0VYTkRuek9zamxCMmZuUjBvWGtHWTgKLS0tIGNwYm1XcVZ3dStGZlF1RWJ4Rlp2
+            N0tKaUUwMkNlOFUxNkRNdGhadHB5ajAKrc0FGIrcuNiD/YXS3JCzeN0YwrXQyJR9
+            W9gTXCMlV3GR6f+eriaE3uMSmpevt2tzWsc6nbP4q/8Up+SEdw6Q/w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-30T11:21:48Z"
-    mac: ENC[AES256_GCM,data:bcadxrKy/htzi09kPtMTGBItOkNDNxs3GWzUYSWLkshWqFUVHyRWxqd8nEfWwv3vHnwm5t2okAlf/P/fZqANoQy8Lzmf7pyI5JEf1CDI4X0Hv32QttHs7fFiZqGcN+IsP5YlyLwuQhhTrgZuTixv1xtG91XOQV491t1d/UdY37I=,iv:d9/Mjwh5Wexv75asRoGSuJrAUT5/Ka7TwXb9VkJpGzc=,tag:OULyt6IieB4hE4+oqnoNew==,type:str]
+    lastmodified: "2026-05-02T09:39:17Z"
+    mac: ENC[AES256_GCM,data:A0Zn52p/lYm6aH4dv4BvpS52BGfwnx5zwu8xZhI3sJFBCaC17bCCzO/b73hEPGsbYuvrvHEEIGS56gYtf+JqNvG8TypUhKwxWOSQ2FTGeYbMQm+5uBKcwbFmRkZrkLp3xraqikk1EmFNOSu0niE5eA/Ye6ftSCNlRMyNiaUuU6E=,iv:Q16Ttoi0p+cFkbvZM6JzlYSDyBUYHNgBBk7ZXmxqkr4=,tag:devAZHx2jFg0wC9NrOgJbg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.4