fix: re-encrypt all secrets with encrypted_regex

2026-05-02 17:27:57 +02:00
parent d161b63951
commit dafa2cae75
18 changed files with 243 additions and 241 deletions
@@ -1,3 +1,5 @@
 creation_rules:
  - path_regex: .*\.sops\.yaml$
    encrypted_regex: '^(data|stringData)$'
    age: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
@@ -1,11 +1,11 @@
-apiVersion: ENC[AES256_GCM,data:bBc=,iv:2uC2W3v/ukx8ywtBXMJsZH6mVDc/EKUzuB6c2DJw2Ek=,tag:6AmF0PKY8qk9JGKdMh9rAQ==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:Afeveqjf,iv:p71Ckk4gJsOUH/FfGo8dtm2QfsRaMDE9gPntUqs67x8=,tag:jPMuvgELtkIoeRv+ML/sJA==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:6/qB0+8z+VOvYvfh3OLYPnpjfz4FCA==,iv:g5ObGpS79q3MB3iEyXiOuOtZe4DB8exdPpoeuTu4+ag=,tag:dv5wECCCdE7PkJPCuLm8hw==,type:str]
+    name: minio-cnpg-credentials
-    namespace: ENC[AES256_GCM,data:0mq47nY=,iv:RNXXj7BQVQrx+drIh3wi0X4JwFjgUyy1bC95jZdvzOg=,tag:1QibgU+vuXTMqL5wfXC2FQ==,type:str]
+    namespace: davis
 stringData:
-    ACCESS_KEY_ID: ENC[AES256_GCM,data:5Qyouwe/SYduMBYkfeDmGl6xyDc=,iv:HFGnaGbZKDfodULpQ23uicMo2tpeeNT8OR+lkgiHh78=,tag:QpOyRCWE50gl2LlNw7ljew==,type:str]
+    ACCESS_KEY_ID: ENC[AES256_GCM,data:RSqyPT1w82PcbZxHRxFu2F3ce/U=,iv:6hQQeCAQO7SKMkM3bxnmw+UuoqqWJQgjbUxocmuc81Y=,tag:saQXBOPUKgYRiTUhEjp9Xw==,type:str]
-    ACCESS_SECRET_KEY: ENC[AES256_GCM,data:Gkgmc9WfBxvE7qDqh1cXbJkdTSUzGSDOWWIpdiObG7Sc0OR5gBsZdA==,iv:aOt4HgtzEq3WfPd/p0IJv8xK3gZwig1NgXPgb8Iu5SE=,tag:iotGoO37jTwQM9Ggsz93JQ==,type:str]
+    ACCESS_SECRET_KEY: ENC[AES256_GCM,data:oExuVWb9mt2zrR+bW9me4aCfCJQvLbNEnWVvg+mfaSZij9kcJo12Ag==,iv:EXrAAD5qWuGP1bQUqhJrO1kGJBXIJfgBn/AHabmvP0k=,tag:WHtIb24sly+iirVPv2O6vw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -15,14 +15,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJR2RpVGJPaUpncDRRMHNJ
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxS0Y4cEdLSGprK2hTMzV6
-            b012TTRGR3c3R3dqOERVSytGQWRSV3Bwd0JNCnlzYkxRaXd6WXg0bk1hUXlRMlNp
+            YmhRdFZkWVBMdEJHVWh6M1YwUVpjS0tHdnlvCmFMM2dZWm9QUFZnM0QvcHVvalV1
-            L3FJTjExaGZRVG1kaElZYlkrVVlPQ0kKLS0tIGV0TjlsWkkxcVhJK2o0cnhvbkZ1
+            WCs1QjBsWkNVU0s0YjBCT1lQMm1XVGcKLS0tIHNQZTllQXMwRWxEYWRmM09za2JP
-            TW83ZVVjalpaZEVVNkU1TEhyS25lbTQK/V6y5Y6E+sEPryKXTJAA4j5Uw0kJs55E
+            T0FYQ01oS2p4SzVSYkpKb2NmcVplNlUKcHY5LlXbWb6y9xH8ZDfQCQ+gIqV8mSWN
-            gdVLhPxsf7VXkgMunMJdQnQoXN8uGbUQXkQhLC+r943JJMOfJqzDrg==
+            udeDRxYSn8nm5aOk1xPpFEYQjXP/ERl++DuXtUdoMVSdIwPtRO9fIw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-22T09:04:40Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:PM2SjFzjhSZ7nD8g3MjfiYw2MpyhM5JVd0Uc6yLzhx5tGe9BSv0zV6BE7nTXZ9wDDqKoEDDpMWyHfh9zrXZ8CukqJBHSl/ULyN3WNmTZ5UwpDtpVloBA5KLp+YbVemlJzWb9aAg/6vXRn+0xOIcBhOGpC7fntw+Wm70bOhdlOhs=,iv:nHC3ubPWZn20wLsaXHBh4SypGp10Ot9PxzK23UyInrc=,tag:Va2BmQxQNlrSNtjvGXoSTQ==,type:str]
+    mac: ENC[AES256_GCM,data:xN17D0ox6omwjFDlfTVQ+V2+g5nA6ovuzqDPUVwvoDXoMKGhF6uR6G7ZyEFma2/kcCSAOE7tNWUS/tzW1a33UMxQFbFb3XWSB/RrKuxApgAfcfCkeWBQJhWYU5NqA9fWum7+tbQfy/lL3B204nvYR49trozgTmAOLvVFcnsPccc=,iv:/E00Zdk+kOf/MU7TB79PlXArmQ5nqYRGqCM9p6tLGfo=,tag:QjXsXL+ulgGYMufd0qBZ4g==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,13 +1,13 @@
-apiVersion: ENC[AES256_GCM,data:o2U=,iv:+95NyE+T6sQykvRtd96UOfjBPxMLrPzQAV2WtD/S7a4=,tag:zn2x59gAXlclp8t5q0utcQ==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:XJT/EqB8,iv:4MBf0lKUWlrgtVmjFG6vau9NeCf1RDc4Ck41ApeW6Zc=,tag:AFLtvsP2p44CbD/K9Xiisw==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:aoPvyszUeC7nDjsr,iv:KfOt9OMXHn1T7O4oEUUrLQ3l3Uyvaf07FzuUcnDUMC0=,tag:UQbXGHgNZMeY0/pfjQpyUQ==,type:str]
+    name: davis-config
-    namespace: ENC[AES256_GCM,data:tcBqol0=,iv:RzzwtqUWIG8cqwjPIDwcaRcK4iAekBGSSol3T5vPltE=,tag:jYjBX0OkS9iitLP+zZ1JcA==,type:str]
+    namespace: davis
 stringData:
-    APP_ENV: ENC[AES256_GCM,data:bLA9smgzQW71lA==,iv:c4LTqfKQPSDEfxYA9nbDqTEUXf0yIOOiKDkJJKkpIs8=,tag:eczIHWoh5mXxLDTKE4ws4Q==,type:str]
+    APP_ENV: ENC[AES256_GCM,data:GRs6+v7goDrKYw==,iv:b+XvNClcMhzpDwlIE+ZfHKKIyEEFUgXiN/63FDqFHo8=,tag:NmdBlwHUZZwvzIfeX6C3nA==,type:str]
-    DATABASE_DRIVER: ENC[AES256_GCM,data:3+6YyPOGIARDhg==,iv:RbYe2qPN1138QyVstle0DHIRAoEX6QQnuQ5y2gkAMlc=,tag:nXLLowH5fmY76leT9rN2qQ==,type:str]
+    DATABASE_DRIVER: ENC[AES256_GCM,data:3AljlGr9dJfafQ==,iv:/cHoZfyJQvnVB/KUTfJV5hcfmaeQrTuThk6lG2rnkSc=,tag:2aqR0UcexJTJ0olE1BCWQw==,type:str]
-    ADMIN_LOGIN: ENC[AES256_GCM,data:l9QGSnk=,iv:MqpNoLkpfZzoFNLBXWXHtrmsQvHCgDu+sOZ/6RYGiJk=,tag:aMD3fFGTyqqLqGxDe6wsnA==,type:str]
+    ADMIN_LOGIN: ENC[AES256_GCM,data:XwndueU=,iv:Cyq/uF/nxu1Z/Rh8inXMdnBlpjabcuXQtZzfekJbZOc=,tag:Bp/MkTyhdGDahvd1ecSs5A==,type:str]
-    ADMIN_PASSWORD: ENC[AES256_GCM,data:8l3+w0REMpA=,iv:LXCoa+fLokIHXcsi979GKA003ke1U2IeN5JDw4n7AnU=,tag:avKceDXABHW1N+2KKZ3uOg==,type:str]
+    ADMIN_PASSWORD: ENC[AES256_GCM,data:joWTKvP4Pp8=,iv:zRudV1dyQcDqb74rfyHxYn2TV24G7kiVrEMoE7416Jg=,tag:zMZ+pOzl/E3IEgoGEe79MQ==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -17,14 +17,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3ZFYrOHczd0JhM2dsT3Rk
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtdlp1NjhFQmZONnJwWUdp
-            QktaK1o4dnVnakh6YjVWNWRyKzhSSXd5RnpNCngrZjBHR2p3REtwajVoM0M1Tmg3
+            R3FKZzNMZWVXRlF4TVA0U21XYzROTDRJaHlrCmVwVXNPU1Q4bE5hdGN5b3k4NTZj
-            TzQ4eHBOU2REVTVLMmxEK0tzMWF3cmsKLS0tIFNUVG0vNTg0SFJDUCtRWjF2RnpP
+            Q2dPeGxHNldRN0NUcGk2bGwrSm1YdWsKLS0tICt0YVpLQWtkajg1dVp0TzZDOXl4
-            YVFmNU5CMHZkRzlHOGZzUVBXYlZnRE0KMKh5h7nPWiBKXC0QApxIAvpvY/mMwNRC
+            M3JZYWN5bUpnQllpZDVxc1hoRm5Tb2sKmjy/E9iCZ5B8rviU1DovYWU2sHi8Pq7P
-            ahN/fLtQwwtDBtepIGnC7x8Ad5vWBumL7S22oJLCHXqXxmffutKzQA==
+            uZPohWu7E78Ii1aleRY0LE7p+L2Bs4Z7zcs+K4aqmpWaA7ccrQcsLA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-22T09:05:17Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:p4oSaUiAYp5723/1B+XtREMWCl0TV11CVErMDP7AILXEj9OuAsUWLbeLL6jAWgDIKrJgCZisCLBpuJDWb32fGmJZrPhSEkBV3L0sfn25P9Cg77uj9iPHkRiOXgD7ySNBpI06vETenydPFK+ib93JOTbOVYEe4an3yo05LYkjX/A=,iv:o8L+sNSjszzCajroXva1DDi2TZ5J/11HlA5PAqQz/bg=,tag:rSMO9DOw/Mybi6CI73ZmHg==,type:str]
+    mac: ENC[AES256_GCM,data:oQc9Zx89huUGBBZxLGKiNcs/zbEwRWSXKRU6YEO/nlj2Iwy1T0ESkwAVsUPCbeHmqf/vQZaaX/o+SIrUGoeu22ZTiyH0nEWcrht7FUi0ACM+F9aG7wImSvI3W8tNu1T288liru0eA2UlB7fAFYmHtkxOLZFVod4NptVCx1UDI7s=,iv:wf8ErY5AiWvBXPGszTTnKE75gwbYgvYTtarTy4i/ELY=,tag:72Qmwn8zV8U1tuaDosDMAw==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,11 +1,11 @@
-apiVersion: ENC[AES256_GCM,data:2p4=,iv:VdS8PLDYol3LxobQmlTPSVyGtFv/EoVo6FSaIaLnssg=,tag:rq13bsTqlWQiBlY0IgSKiQ==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:Fd0Dx0/E,iv:RPcOgyQxFfILL1//xV1SYha00EC3C01I0A3PamGgXTs=,tag:rK3EDx6sEu/9qccYuU1Jeg==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:2mLn8PxtSTpecd8l2OkF7x6aeEXGVg==,iv:3Gt2RqF6PYAydWPrVeZWW61l+mhr8dXjVPqh+7dkUoQ=,tag:DjmDxiXeve2asVXEXqxP/g==,type:str]
+    name: minio-cnpg-credentials
-    namespace: ENC[AES256_GCM,data:V9TvA7vTAw==,iv:tpEi4ZZZ9jxDd0wga4H0VRM2eOzOYWh8PDKuOh3phYc=,tag:4+Gry7gQYWIQZ/HsY/YcMg==,type:str]
+    namespace: forgejo
 stringData:
-    ACCESS_KEY_ID: ENC[AES256_GCM,data:HeYU/tld3AoWH9XjHfG0tAUXpTQ=,iv:PNVIOXeKzv099TMVfDPRRSLqMU9wdZwuJmnQNlniFXk=,tag:yMNnmUSyIlroSxqoBSQOzg==,type:str]
+    ACCESS_KEY_ID: ENC[AES256_GCM,data:MvHJJIUYAy/96sA37DDyP/xCWXs=,iv:M3013QNvCmK/VOjj6MVjQw9hGWP74H1F1XjvKLTYuDQ=,tag:EgOtoprrGhuBolUv60KLoA==,type:str]
-    ACCESS_SECRET_KEY: ENC[AES256_GCM,data:rp88Jhd+Xi0GR5GKp91cHMkOyogdvEfOoyh44Z1zRNFrSqo/p8i1Gg==,iv:i1TP6zMm2OB/JpgYU2LKTOmTEg8/3TG20yJM7Qh8WFE=,tag:eoyTeF7pEq1NTGwf7gG8wA==,type:str]
+    ACCESS_SECRET_KEY: ENC[AES256_GCM,data:P13Gw/X3jM+rkL6HefF5pf+BUN8QeOieecfFofq6eNtMmjnivGNw8A==,iv:M4sVQ5eTTZ3n73SAlRKzlmezGBOueqW5750ywQdK9lM=,tag:gXof0VYB2uo+e1fxkSJSIQ==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -15,14 +15,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJUy9RYXJsOWJIU1Y4a0tD
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIWStKTlNMZVRhcWRXRy8w
-            K0JnNzNrRlVHVGczOU8wL01NZ2VlU2lISERRCnBSRk9ZUEJjQUc3K0VkcGhHZVpS
+            YVN4MU96cWdBUDBodHhHYldkd2FNQURpa2xjCkJxd1N4YVJpMCtQME9UeUFHOXhi
-            SUZFaUNJQktoYldtMWJCZFhKYXFFcUEKLS0tIDFnbW9VbGNaUVRINTFnNUx2M2dL
+            U2ZSN202eCtkZUVwSTNPWXp2cmVPalUKLS0tIHo0NmNqcGgyaWlvd1FrQlJmaHNV
-            ckNZYmdFUHNuUmRTbUxGdTRDNlFGWmcKubkEAbOdhZeH1vRyjc8ckAuTlHKBlUWa
+            NWVtZlpPUEVNRC9NWVc4cG5WazN5SHcKyf+9Ew0QBK6KylYzTFTL1D0Ci+/ySTnK
-            y3deNWwzpIVA+M8OKJ4sUcHZanOw5hfSu2PbOLaQTxXw73/rMN09wg==
+            /SPEMioaeLAPUsNCyDhao8DAtygrxKcilqhTmh4lcrvzdnFsD1f9tw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-17T20:58:26Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:7jXyVJTXwwsLdw4ddzgpcx3dSv3yI0gZgPSx0d++x2x2Is95KVrRjyf+aPKl2kX/DeYJIlHwZoNt+O7eoefV/cd1FsnNb9o8KH8xyA7Q8x2GBxkYzqqhb7yuZUFMD3mPyTgWjz8pl3t9Z9gNa9LVjx3BG8uffxcnyYXcMHonRR4=,iv:vjPsARVSzZxpq5W20gE/VEb1FDV7vIiU+UUgyESSoaQ=,tag:enorL4ems+E+bZq3LijU6g==,type:str]
+    mac: ENC[AES256_GCM,data:m59q3WtSdYPRiGThJ816kuGaTEssrBjM7NwbsplQbGW1sek0iN3axwK/xsDgPZYwz4T1ZvbOFUUlnsEiBOWPbFI902nunt5KzoEPrL2EDgBL+83JmyCp07zd7b45TO2R5dkDIYeoNN67UgW9ZEV6N75RJO5jTdAk1LW2NvZZ5hA=,iv:OhJ0vtfVJpxjfm4hbYK1M+yNPz+VO5AduQBzX7sxsYQ=,tag:YrryLWVPh7uUNBSYt+pB8A==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,11 +1,11 @@
-apiVersion: ENC[AES256_GCM,data:Z+E=,iv:s5oNyI0XlSXsFLErru+nedf1XkwjzLa0EXPdIKKImTU=,tag:jOYganJRY5wxHeziVIWviQ==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:3nGNMh6N,iv:zChp2+PgDYY8JOXoSKFXOVcdmxdGligjVmKLVQhw1H4=,tag:bp0jUjxecmEKHad95x4KpA==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:BDX6UJqWFAvx7El2CKjty91X1hVHhA==,iv:thunhaXcbmrF6ouK8japy/lqpdKR1JBYJqPM+OnF51M=,tag:74hjHNaKy2fe+nbnnNqU3w==,type:str]
+    name: minio-cnpg-credentials
-    namespace: ENC[AES256_GCM,data:A/6+2tK5,iv:Igr/xTqQpy1bMpqL/y1lC5x/Hv698Odx1ovYu9LiTB8=,tag:h/JcM6Ebbv7zFqOJFiaSOw==,type:str]
+    namespace: garmin
 stringData:
-    ACCESS_KEY_ID: ENC[AES256_GCM,data://2GXrleuzafPvyvnKx9igySGo4=,iv:HDrjUwReYFlKz4wWNxl7mfBoOZTx//uMse4sfARWiZ4=,tag:xqL0KaMlXIAGJhxKODkWIQ==,type:str]
+    ACCESS_KEY_ID: ENC[AES256_GCM,data:QB+KQv8jAdEBA/s3URl875nllNc=,iv:yiWRBc1qH+MEb67PKTcEbaHV+/BBplG2iddJ2uWuu8o=,tag:dCWnp+z6eG4WQY0pVgve7Q==,type:str]
-    ACCESS_SECRET_KEY: ENC[AES256_GCM,data:fqpGihux4bW2WweC3tDaPPpONAR4vEpQuELm7okcn61k6t52CPwENg==,iv:473qln0DWKxmtapYp6HyEfo9Egwzu2MK6O9QSFAnM7w=,tag:/EcT9aZQo1kObRujfouwJQ==,type:str]
+    ACCESS_SECRET_KEY: ENC[AES256_GCM,data:c+C06s8Pf3lBu9YrP+KBYKU6RruPa6nHbKUtV2MJ6vY3o8jQzx342g==,iv:P8S+f0+5L9enp5ghTyUa3mQXAj/GV0Y9vKsPLuP30E4=,tag:hFyytZCYXCgaZY7Tsxynng==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -15,14 +15,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmWWlnNDE2TVJ5dmdMSmFG
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxczR4U0xwMVZqR2dpT1Rx
-            cVl5ZW9wSmV4cnRsSlpjeTRSMVRKdnZ2Z2pJCnhpcUh2UmNQUFFSejdjTThCSEpU
+            TGN0T09ieWV2TjhJN09DbTl4NmRIa1FvZzM0Ckh0d21MK3FlMENPM3VhbHhETTFD
-            M0Z5bXI3OFBBcldxUEZvbU93WmIvUmMKLS0tIEV4Z3VIeG43QWRJb1J2OExvTUUy
+            SUhaQ0kyaXZ6MHB5VmdBOXRmdGdoRlkKLS0tIDA3TEJpSDdGQlMxZk9tYzZBWlJN
-            N2E2UlNoOGNQeWdrOWtrOEFPTUpBbDQKfjjKmMUNtUArbjWrXA157oz4sSAOtxSz
+            ODdYTXpVUHB5Uk5UdU9zVms2dEduOHMKGh2QiiWM/KBgtjZjYKyeuVSQPkhDswZl
-            waAp6jBFxFhfeqofsyxGm+tuMPBraOMjPt7gapqZvScbzPFcdFnCgQ==
+            afeqv6pDImzZ8QpGL4R1DJlTXHPZ2E1ZSKsdP8/L+z3P9qpFwlnuPA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-18T12:00:34Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:Sk2j/XuenQ8OkJffVZ0OcuSRoDM8vs6umWsrrE5jSETryRkKAX9HFOi7oLQxJThDFAWbOj1XIjvO9r6fF9pOCWQ2fRh4qe6WOUOZy62OqaxvWIDN1awhXCPw6XHUhnWZSpxjtQO0a/eKmh0milqPDTtvfRw9U4eA+YXLJWHTIwY=,iv:62tgxegzUO+27jU+Tx4gzPAav/mEsD3dWVtfnICmGjA=,tag:dIn00ZjZXoLiROeF+SUcSw==,type:str]
+    mac: ENC[AES256_GCM,data:etbfVdbZHCQ3Aq1uHTe5I52SpawlG0Eu5cCLrb3qQkx2apgWCe4CyA3C2NEIgagA1Bks/ZMLG1bzDrj6hsxMTzAqYl5GlZxxLB0Lvg8qmoZQmDQ7Kc4CvlgnXUziLTwLb+a+1E58gEWGImcYh2OkiZSUvuDloc6XgnvONi0snyM=,iv:Y1PhVsNyUCLuLZ+AN+SCelBfLPeuJiUulovolxrZ66U=,tag:uUw7cuHLB/+LZBtiPGzumw==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,11 +1,11 @@
-apiVersion: ENC[AES256_GCM,data:sII=,iv:g+wQL/f/TAshn5D0Fco0eF20w1P2eOJ0zsxtgjYM/Lc=,tag:a+0S4IugN1++7htvKFg0Jw==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:+s59fX/0,iv:+Z2Jf2Kl64lDEgdO9oHToZbxyJxG3IEpk6vYM3mPpL0=,tag:7NTh5IFYMO54axRxa7C8PQ==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:h6atn6druXA6N4Xv+RJKP27n,iv:DGQ69bfvNKMU7L0y0ghbnz2AiLOAqdHcJyDfllh5f7o=,tag:fKJnlQEpigb+A+8nQulI8A==,type:str]
+    name: garmin-credentials
-    namespace: ENC[AES256_GCM,data:U5sCmJud,iv:FEyWcZY4bH84kzauYzfvHYW9k/cmQf2Wu0TSuofBG/4=,tag:WuWAxZUX8goCMeAZYBLtAw==,type:str]
+    namespace: garmin
 stringData:
-    GARMIN_EMAIL: ENC[AES256_GCM,data:vS7QCpsJniELtietOQaIXX+jZUlDnllq,iv:TW4fQKMeqDZSADm5mqbL+rPrKJPk31r+PK05wiw6b90=,tag:dyKWXCCFF0o4y57ls7+bvw==,type:str]
+    GARMIN_EMAIL: ENC[AES256_GCM,data:WGVFN850BD+rOrDAu00GYvt0Yi3hbdpS,iv:BhXzBZyqrEh1tfg9sldvNrAwYnGZf9vxOFtnTHw3pR0=,tag:idoShsnZjuaOD4TwvEhRpw==,type:str]
-    GARMIN_PASSWORD: ENC[AES256_GCM,data:/HT3FhgU3dxxdplh,iv:MUTXoxBKvbPMX3cYpO5Px/mTwOCRfXmbyZVdvYAYrEM=,tag:5DhXU9NoSpQAJ1wqzHsKVQ==,type:str]
+    GARMIN_PASSWORD: ENC[AES256_GCM,data:l8oywZZBXyQY2S1b,iv:TZzJe3fL4q3kEzHEmzETfvMPHPgQXx054Xry6CitgAg=,tag:b1Hc6TsD/F9pujtHuNOnCw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -15,14 +15,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXVmtUdzEvZ0w2MTJmV2d0
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArU2FnbGx4ZzkzcGwyQ25H
-            bW9UVEd4VG5UOVI1SG5FeXE0TUpuL0YvZUhBCmVRb3dQdEw2WEhMaHYwM00zWVB5
+            T09iUWhYYlE4dmtKN1pMeHA1UG1IN1ZTU1JBCjZ3NE9RdE9raUtEWXBTR0FXQ3ZQ
-            UzByUUFhNWJVb0RaOGJIQ2R3REhZSDQKLS0tIDE1Y1J4S0ZrWnlLMUg3Y001UHRJ
+            VGk0YTQrYXFwcjc5UUppMFRhWHJSWEEKLS0tIG9HZU00Rzlmd1pDV1NpYkdheHFx
-            VndGaTNkSFViMmp4ZWFGcjJRd2pnZE0KN+OSWclMuPTebmqIPHJcKpyftIOIpNya
+            YUJ1VndCZVhxOUdhMmhCZmdKbzNGMUEKw9D0Kmti6njSISOUR2uL5H2/n61hsWQr
-            N+Hj2Te0wbHQD57LHeW0G0yZxUksBwq2td+Bl0DVO8dj7jG+DS/y5A==
+            B3/+PjhCUBue3ujCCvUcPwADuvxE6SkiWa5/QjhYzqwq2J+M3p7Zbw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-18T11:57:27Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:WR8sjzIKDGhuAZHuHQvu+VeHURSxaip7BSDNp6HLK/Zv175erLI2AAPRv585dYw0l4dmvbWZqzjjQs2YanqxUTMqWMGX0+PgHV/+Aca2NQmch4WAA73R/WQ+mE9+iHErnpWlOQ0SNHAQzvx2RevEFz8qIo9CQXnhqYVvS6i+yK8=,iv:iluHLbgeuDVhhabwRMMGpgNhkjfjMMzd4rF9jNOlOPE=,tag:+XZsmzZBBhyJCB63zQcmNw==,type:str]
+    mac: ENC[AES256_GCM,data:N+DDr8DyJZDd8aYRwNysDVuMyGj2s4q6p+w9YPbHwaVh4p2hZduvrHybgy+RyrStf0VTrumaLs/sCVM0YRkc+7lynoCFpupJ94Q2iTm8Jz/zZRidYRAhy9kR9QpMZhp7qq9hvU16nn+MEPq6oVHH7bsRGh9YlwMxnzshYr39Tbo=,iv:lMZbVI0o3Ubmw7KFyaN+rDxYTUfzsj3CTy+NJZiCHUM=,tag:GBl5sxATgCSjXNi+aUK8xg==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,26 +1,26 @@
-#ENC[AES256_GCM,data:aWH6HGsACsPR4CNnd0bbOTQNLHKajxgyv9xILSxqycXR8NlX2y95QjVUwITdQsExm4UewEU8w/o1sZbNzJyELBCWmpKx,iv:wh9B0u2QKDacUYuF34idj2gZPo5fbKPi0jiWgUNV54U=,tag:j55j8+GjdcJ4F2m7NgzsFg==,type:comment]
+# Befuelle die Werte, dann: sops --encrypt --in-place secret.sops.yaml
 #
-#ENC[AES256_GCM,data:y4Vv8sYtYjBsln103TfImseoAaFavvY2ZRCMPKykL7wPLk/j24MYyqxUjYD8aI8eGdN/7Br1Bmg=,iv:zeblUfh1qqtfA0Mo4nQTQI3iAtkHLKpaBeLlu/WGoek=,tag:V6MEyn0So0dxZekGHtYK6Q==,type:comment]
+# postgres-dsn-map Format (kommagetrennte KEY=DSN Paare):
-#ENC[AES256_GCM,data:IXxQwsbZCfu+1q8hWGs2TZQMv3b8gJN5aoNnsxC5CLIo5Azo1+Uai0xhXCnlsfHMaKyWA4D5IRtbY5tNrVN1QTDYZULpBOvc8z6TThac8LxeLK/4mBGk5Ze0,iv:sb9blCNvZaY+JVsm3xVlUI8uiA3QEylZtA3PsP4hupA=,tag:aEoT4P8l1cuBEeWdpycMQA==,type:comment]
+#   garmin=postgresql://mcp_ro:PASSWORT@garmin-db-ro.garmin.svc.cluster.local:5432/garmin,\
-#ENC[AES256_GCM,data:ofN+IuJiOkb6eacB85fc6EA7jdaR0YgBx3mpRmzsSQ67uaw5tcm5WXeOu0y1fG4OS2oO1KYgkybBTM1axXGSpwa314KCKqmzOy0PJQ==,iv:eJ7fJuD+kFlaoelEZ1Zxvx7tk3jS5u0GfciNP8LGCKA=,tag:Hxb2sKw25jr9nECsekE3Ig==,type:comment]
+#   n8n=postgresql://mcp_ro:PASSWORT@n8n-db-ro.n8n.svc.cluster.local:5432/n8n
 #
-#ENC[AES256_GCM,data:m7EBfqgMmhq/ck9mhaWNeo93iV9U55f+EvffAO+Quj8ll1PRI33+kr1UrssaMLd6ALk54WoSuAKUz49OnAjyBBKXzW4=,iv:/jonyVWRMeb0ws2xTY0vco3UZA+KUuraJv887bScpw8=,tag:5Oi7dwzVV7OdFlj0LD2xgQ==,type:comment]
+# obsidian-git-url: URL zu deinem Obsidian-Repo in Gitea oder Forgejo
-#ENC[AES256_GCM,data:sjctJ1bxGUcFcSleSU6SATbDFuI8PG5/nYijCGr1/ZTaD4ajXyeqnVVFHp+aVrzZJAsf68P897qa1EuB/w04caljZnwC/Xfh,iv:FbjN464MOM4k1YCQNOArIzcBdY4w6P3Lv/+9TS0gmeE=,tag:7TcXsQ3uyeRcdeDB+CqxQw==,type:comment]
+#   Beispiel: https://token:TOKEN@gittea.net-scope.org/admin/obsidian.git
 #
-#ENC[AES256_GCM,data:qiJH+xqbWrDYrioVEqp19/2Z2k29iYpFgs0YWhaoDZNL027S5nxGN8mkAvG55fUayrBiARHL,iv:fGcGYKp5rSIL2W5PK+o1xT3ggkyiRxKpEvoJd2OT2XI=,tag:G3tMfzKlXG9otAfAZD4y9A==,type:comment]
+# Fuer jeden CNPG-Cluster einen read-only User anlegen:
-#ENC[AES256_GCM,data:sDfPM45xav786JSBDfJGoW46DeQFFDR1+/Qx7LgGbIZ9PtG5YdBpab932QJjTIpOaGB/U8cfI0jN3xsJkrMDLWHcJf7zW3bxw2JJDifu5g==,iv:P4XkdXbjSyYFSkXcIsxxKrmh3Ri6A5RB92z+ubb48NQ=,tag:KMikrrlbpC0Je0jXqEDNcQ==,type:comment]
+#   kubectl cnpg psql <cluster> -- -c "CREATE ROLE mcp_ro LOGIN PASSWORD '...';"
-#ENC[AES256_GCM,data:bEbQxtuwW7otEgParlh1VuVA/MUCULaRY0vt3f1hGWU5rf+4ngguBY0toE7OQnsGxc8C/OwGVAVS0AJGkJs2wPIyJv6lYyoWpL+TcOAzbSrQdPAfj+Ch7Wm5V0Ws,iv:MqakFV6hsFwJazhSuy7WaQjJd5n3ULUm4ja3Jt6nDh8=,tag:0V85t0TEstuIH9jYuwGPhA==,type:comment]
+#   kubectl cnpg psql <cluster> -- -c "GRANT SELECT ON ALL TABLES IN SCHEMA public TO mcp_ro;"
-apiVersion: ENC[AES256_GCM,data:lmI=,iv:AtOXGIjF5WlitRyc6rBf6AWbcxZoiD9h4FUzpkAMEBs=,tag:7DgvZCrwLMV/ftO7/ITqlQ==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:jjAxX6/S,iv:Z16uZIVpDXWeW1Tb5x1LX5a4gEoOqqK147j+w2P1J6I=,tag:OalEXJUr8bKR2amkXvumSA==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:FaqxQ0xe4PsKz8XXVvJecR3f,iv:EDMG+9c1+MTzcepVSQMr9V/+3r448hcm5VvljY/pkts=,tag:UD+dGESPftkjmdtHE4nYvg==,type:str]
+    name: mcp-homelab-secret
-    namespace: ENC[AES256_GCM,data:qfrKbojLx2r80Vg=,iv:yCHoANU0YMCVk+7XyaZaJ4XmcnuDeAmRpvZ+/tVBwsY=,tag:VoCDjBYdLwO0UYHIrwpQXg==,type:str]
+    namespace: mcp-homelab
-type: ENC[AES256_GCM,data:Wm3M3d+C,iv:DNE5u1Me8cDKFvLBuHYfhO4lWUaEIapCSEIa5HGcN2g=,tag:oMOlPocK1f/fXaFFsU5VQQ==,type:str]
+type: Opaque
 stringData:
-    postgres-dsn-map: ENC[AES256_GCM,data:QhZ9oPJKPdo1JejgYdCRioRYSnMG2rPeFK7FiNHMyxwAkTE1Eo+w7KQSyg23FaZjlOiqQLsuhDOcxsOQQHU96tH/TxaFYyyZQHpE2RmY3uPhxtwxkA==,iv:yfl68UoTsDrefPqja99csaZe6EyusxvT76gcd7Xuha8=,tag:BhlDuxCWMGFNpdVqiU+E9g==,type:str]
+    postgres-dsn-map: ENC[AES256_GCM,data:1mEFId0feKSjEkuTM9eQiQNJLxbTa0RC7Vvk4vJGMeqUsPrYorg00a9Ch2bzOAseZzRvKSGNtZ5CQanT7JIhQ0p/cfeWGmZRvtWR8+U05Uj41Q0Y0g==,iv:gljNdIpJIVl0c57el1PuT3MxnwgVBWBYP5Q04P1seso=,tag:x3XY5GEGz9PCJDeFuWhD7g==,type:str]
-    obsidian-git-url: ENC[AES256_GCM,data:7XjpAD6J+SHocyGzB8OTOYSCHoiX/vk13FJzBr98dmypti8jgscjzm4/ra684UYgtwmjWCxB++msOQaHA+Rem4Veo5cUxGCpewUTJfGCzaEM,iv:EEmVyQrydUUT2PjhYve3Ne7P5HLnv5HReF4a31FYyOk=,tag:xkiHplMffn8md4FqSsuh4g==,type:str]
+    obsidian-git-url: ENC[AES256_GCM,data:wXErU0PzOG0eCUo+Bfd6HVfdNye5Hz22jJRH7f+DuRvDROuEzokDNyp0efm72/iwnRwpcoL+1w/RJ3QGZblN6yieruIKf/Qplrw8onf80Itq,iv:AzNmiRH+zumsDhU0M/OHLchlw94kx15uKgYox2HbmgY=,tag:di0RAKtnMgkNVSQD+SOI1w==,type:str]
 data:
-    .dockerconfigjson: ENC[AES256_GCM,data:hTR/Nu6pn5tYukkA2DL6LTzF7xHxK8JhozikA2A69F2BdAOBoR5qs9VhcCBge1g3rYlJhcipxXpyh49nsNDKw4nmElmsdxwqtLts784i5QqteUib04+M6rXgL8ims4nFif2hBKO7KdSOQZG3ifVWWcKssO6lag/R8U6Br8EwsH3S/qMzi3C6wLsxbXiJ14D3f8efXA==,iv:YXXI9OvNCJZx0JUFWd92z5qomtaYjojwiwGtrdQswnE=,tag:fwaV+FzZYYsYA3LJXVLTNw==,type:str]
+    .dockerconfigjson: ENC[AES256_GCM,data:m8FTbcOc2dHmRr90+FdaZHvOrlc0wGEyxNt/5+KHZM8QnMishYp28yDVWm3OHo8RiQiQ7LAn4J5Al+hvCbnTiDeZblAR+uvFhDWSKwBJ4TY18EREjSXiLJMgtU0NJF17H5fiw2FRGN9KTxP+fdWqUcVqpiV7fOKIjMr4Q+X1VS4zMhov60iJheN7NaF8gDjeJQEYtQ==,iv:H9f8/L3qF5BJfRmT7yTnFSSV8RfINarqmmc2SNKkdck=,tag:rd4yMs7KBnfklqdOSP5dSQ==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -30,14 +30,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUMFJIY2J3NU5STExjOFY3
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRK25zUm4wSDAxempYb1FF
-            MTVTTkU2L2tkSUNla0V6RjN4dTBKTC95cXgwCllzRFVnTHR5MWEzN21mbkVwRGNX
+            MnVkK3hLYmhLK1oyc0p4SmdQUFNPRWZrNUVNCmNxV3FsdDhmbjIwd21ITXF4YjBC
-            ZW5md3VBaFpOQmlTbXZMS290TUVNdHMKLS0tIGY4ckR0VVQ5anVzYWNKcDBVY2VM
+            VGhoUEJXZVR1MEgrTTdBQ3FoMjRkM1kKLS0tIHNta1ZENjBkOTB2US9Od0ZTL2Ez
-            djNWcjVrQkcrOG5SbVAyRjI4RU5HUFUKBFiAp/eh9mUvM7LitqK5A/iOyDSr6+93
+            dXl0RWFKTTFXMCthQ2QwaHc5eXVSZGsKhTy0acQTgmtFgvxqSm4XPf9DPz/4Q8uK
-            nJXpIm3gQg8sTXauycMWU7WJ/nSa4UHVDVMr7FZxRIcGJdHm8Iz5mg==
+            ANy3ynZPNQIvlXyhREliDTt/OFoQ4cnH0ofgWloZWYRSuVHVZB4YqA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-28T10:42:22Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:TKsn8y9wTo1sWIbwxH/s6PFB5HbQxlnTCz1m9KHpJyWwrsUpFhCM7VCoIJWBZDTnzuNK7xy/rc5kBgXI52lADywA6KZdzYBAvSwKIEBN/cccIu3SKnrRxbr9xP3uTZd2LCiqx4Nf9pRwU0bBkTerCt54FZ/YY5Tw1CBbrL7KtR8=,iv:LLM9NNPDnmg/xLTcGkM04SMLisRLFd/ksMJ/JQHFo50=,tag:3yXGjUl3wR66kgFgsYwHAA==,type:str]
+    mac: ENC[AES256_GCM,data:9YtHtRttUxqijKCVJxNaOfFQd9kbn29COJm6W8904ZQm/SLQ2HKdwporOVbu1kY8RXMqhi/73dpGxU8y3d8L03rfPhepEvMPvGO4UZVCW7SRqxrvFlfVvq0rg2UwI4vPdxWyAVUsSlfSi915wnkMTdQCEswZQIqNJFs6lpd2OeA=,iv:ESenLuZcA7OeHxxBp/AekYGHnqby+jupRPcls2Cvlv8=,tag:4VIyJvq5KH3qfrHgKWTtvg==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,16 +1,16 @@
-apiVersion: ENC[AES256_GCM,data:CCQ=,iv:UEkV+zqP5svl3EjRoedjfW22jqdAkFlGo35yfSQ5snE=,tag:Wim3cn/qMVAH4GY/opqsVg==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:LNCyyb3i,iv:NQJYGC0VJg+J0kxtW+Hg685SnOL/ltN3xVKE1ncReW0=,tag:LIb/YE12p5Ov1E94WaGWHg==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:wKxOHms7qD2TGdbbJWYPu2rHT6Vs,iv:9nKQjNF0YQoTiBSOAn40JslvKInSkh3z2ZnGMV0UaG4=,tag:aOYVr9VZ7qWXEmMCMjR1+w==,type:str]
+    name: alertmanager-telegram
-    namespace: ENC[AES256_GCM,data:gkNTFxccRyhppg==,iv:Jri+itgHBKaCuGTM9fWTywlIC2YL+d/snD0xUBMkW6w=,tag:6lpNiA6WuHvoUihTD14sxw==,type:str]
+    namespace: monitoring
 stringData:
-    telegram_bot_token: ENC[AES256_GCM,data:0EXNBLsMLrchQBSpqP3cxgKYrQYtEo4RznrnuFZ8DcTvCLTTVor18BDcvpwmoA==,iv:9dAXbzfUeXofmm1FVOv13R2MxTGsuoa4YkX7HGXTj04=,tag:8wOByv0Jn7fcASAOvCLNDg==,type:str]
+    telegram_bot_token: ENC[AES256_GCM,data:/3iOf9nuH6UvP6Sp86lZai5ul4r/hIL8H3e3j7/KLMRP5i7J/CwhRrlkXzupxg==,iv:MkmqU6x24R1OIFTqkB7CdpTVUK7fqCH6TddOwiR79OA=,tag:xJT43GfUzhtTeAzr2hvPog==,type:str]
-    telegram_chat_id: ENC[AES256_GCM,data:eiGNYW+ZLs0wdw==,iv:vh9woopx6KbHnwop6LAQ5iVb4JcANhvpPkrSjjLS+uI=,tag:KmK0rUVILJ+uOcma4QRZZw==,type:str]
+    telegram_chat_id: ENC[AES256_GCM,data:JuYYW4WTUDh8Uw==,iv:ZBJgtVKOqLL9Yg81kkFK6prOOepO8MvNF4g73hVrEt8=,tag:sVlhx4Pwfia9ms3Z0Fyw/g==,type:str]
-    grafana_admin_password: ENC[AES256_GCM,data:xDyLV6SiPBA=,iv:6dMmJ3DD3NTcpEY91SlqMbXy91lxWpNZ6sr2hIbXgSE=,tag:+8vhndBsKIwF6/BIK5IhpQ==,type:str]
+    grafana_admin_password: ENC[AES256_GCM,data:b9qX4U2i4hw=,iv:vyC04OIhNCXlgT8tm4jr9NacCNwm3M6BQ8g/gntXV70=,tag:YeiDHphxMQFn2znKtCRW1w==,type:str]
-    admin-user: ENC[AES256_GCM,data:SB12lC8=,iv:yTITKYAzIIeOi3qboaLgtK6PhDViBeuQ9iRpR5AcjXk=,tag:Ek6dvVOwMyaPYo4bg6Aitw==,type:str]
+    admin-user: ENC[AES256_GCM,data:qA4RIn8=,iv:0bjnD+mmlFyi3nZNif0UY9agxr2r/OljML7jdRlZuZI=,tag:HsPZIxImbwn+ysotydK2lw==,type:str]
-    garmin_db_user: ENC[AES256_GCM,data:I2tWaviq,iv:k+jcJFcqzrTbvkZ3CY+u4NGHezDIzABAqyv7g/qoQ1c=,tag:4aWul5GbWfLcclv01d3ZAw==,type:str]
+    garmin_db_user: ENC[AES256_GCM,data:zBSlSvs3,iv:NXQ6/LUYLIVnzo+k5yjmwPYt5lT35SzanG0SZqNrSwQ=,tag:CpmOFND03KHyyP3yMpzsnw==,type:str]
-    garmin_db_password: ENC[AES256_GCM,data:twnNOys6iOpMvfmbKY9VCD3iqidRwQCftX+FCj5uvEEQlcM1jEmqbA0A2xc6Dy5CRvnQuchOGZ1FQtpK3AOmcg==,iv:5r/YOHin9bmqIn3FA4mRLSDIWH536GCdrvzqYKbfFCg=,tag:sXFbec6MRMwaFzq3kZyLBQ==,type:str]
+    garmin_db_password: ENC[AES256_GCM,data:RETa1yATexE2x7hDyLhqvOmk/sJYF6fJtk5OlBebHVGZhwvup6srNatphhruileWHQlwONZ8qgJ2hDgB8SupvQ==,iv:wzdEE29QjIglDWgJnTUjYWdR8fsOtMWF5sgPE6b9aFM=,tag:9/FtKZX8koZxx3VToXg8Ww==,type:str]
-    garmin_db_name: ENC[AES256_GCM,data:bXQ/QKFq,iv:SIdmrm+fI9JYryRzGBn4bv3puM0jsc5spaAwZ9r1bvk=,tag:9cZRj9PgFP/AlvJeQzLgSQ==,type:str]
+    garmin_db_name: ENC[AES256_GCM,data:qChsDfkC,iv:Bgu+nmIonoU4NgNnK9l3H7YNoPI97FlCYcP4/nGUPCY=,tag:zIFvtQgS71jmZz19m8lcUA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -20,14 +20,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzblJuMHVROFpKQUdqbW1L
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLSG9RTm1laWFlSmhkOWtj
-            Z050alhuL2kzeFpUdS95N3orSlBxNFpCSUJjCmFEdEwvZy9NdGR4T0Ewc2JpZG0y
+            SVlUR1FmaFVvRmpPaVJNWFp3cVBZNDhMeGlzCmdyclN5UnRPUVF6RitNZjJMa2I2
-            QzdiTWFJWkw2NjF5TDZjUVdtdnhnODQKLS0tIGNtYVl0cThVdlBhN2hxbyt4T1Jh
+            RUsyK1kwQmprRlJhMW9yQ1RRVGZJaFUKLS0tIFQrU3F2MVNLMUxRK1dTZ0s0cytE
-            T0tLZzJjWHFEZzc1NDN3M1JyMmZBeFkK1j9WyP/Vl9TB08zNYEPcCiBNmBwJo9wa
+            dXhGMENhbk1FSFFsQ1RUc3JNVjlUM0kKE3QbW7uocAaMWZxdpuOLB+5u0ebJldjo
-            JvwYLO5fNqzVF0/LZv5cN66/VVASiT45g5SCYEQwPknJ5I2y8GreOw==
+            SOFcl8/dUuW5MLIUdOQcM/UeHCYQUZvKmjCIvXl0207BzDB3hxHslg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-24T22:23:29Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:yUnxfmBzXwJs3yZiSadTfr5DZWm48SqYcfOa21WBImJN3Qi0Wy0jXvz5c8MoydTDKi6eo8pY7mStAc7t+54b9EBepcPqqVrvlnGHwaAHlWQRa7iF+s9i4oIO7MOwf1BUxaFfe+hV/jzMqR4nBNsVSfCy7eLY1WZGoE9CuxvIto0=,iv:LDqnjxflVY4awEEpjHNtkU4rbkclQUhY0oaqTm36u5I=,tag:/nu3JvQcffZhkRr3gGRQnA==,type:str]
+    mac: ENC[AES256_GCM,data:OC/SfGTq3KneVGpGJWXaIxAGLsxhxELyQp1DcvUwGeeMG2RquGoGHiL/2U/Mw434bS0w8siaYQwxkEP3xxCe4pJq7Ix3cZQ+RxiiXl+8eD2lLMtw3uVDGVA4G3hNmliTShwQjD5Ng331opOiE6cfBa3K+yZLb+q/hiTIrFF4K6g=,iv:Igb1WfWCJjb3qborihN3etKYq+yYIKdzFY6xgMbK6BA=,tag:w6r+F8rPv0LDNVH3CAQNBQ==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,10 +1,10 @@
-apiVersion: ENC[AES256_GCM,data:TXM=,iv:kMnjXA6mjoW7Nt2S/KpIBaTTd58P/f/yt2YPUB88eX8=,tag:DgL5kDdHMEsIF/2PyfF8jA==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:mcE3qreT,iv:FR0cbdgUk9zYTbQWmk5hCz4veNu76k7zAK9GUQ41mWw=,tag:t1LByyoWyEI5CiQdYpRwZw==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:1G0DBhxrGBgVQg==,iv:bRQm1Ln/OSb+MxcxxothTfG9jFiF4VCgW1F9laNxoq0=,tag:HbH10nM8rw/74AeqpTKAwQ==,type:str]
+    name: n8n-secret
-    namespace: ENC[AES256_GCM,data:ch1x,iv:KZ1QuNnJbCdDs408HV83bMN+S1c74lw/1iY3+c65Yhw=,tag:kiHmZelv2tBAC/spKbDD8w==,type:str]
+    namespace: n8n
 stringData:
-    N8N_ENCRYPTION_KEY: ENC[AES256_GCM,data:qT66evyBp0g=,iv:zyK2jHmJJCzCy+9HMDBqBAnWYPtH+3KJ+5+QhnMRTAo=,tag:37hvY/kYIH4DtUVtnFIQ1A==,type:str]
+    N8N_ENCRYPTION_KEY: ENC[AES256_GCM,data:cNYN+QtUshY=,iv:P2R0KNUNg8S4o/nArJ5B5YPMyWDvrvvcnweIS+elZbw=,tag:+ggHzGRclLc85UsUNvrl4g==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -14,14 +14,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4aW00Z05ZbktsS2o1SXhm
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAraFRTZUkzdGtLNkhKcXM1
-            TTRYQ0tnaFRJb2ozQ3VzTFhBMU83ZlV6aHprCmFWRWlZYXE4RlFlZTkyb2g0OXQ2
+            NzdPTEFUektZaVEya1ZwQ2JqUXFsQSs4dUVRCndvWktmb2xJT1JWNWhHbnhHSFdy
-            K3JGWWtVKzNVZ3NxMHFLakI4c3BlWGcKLS0tIDZFeW9JNGloRjcvRWdhV1FBaDF5
+            NWdPb3J6YlpUdmVOQTJmVHhjcGJzMUkKLS0tIGRaV0hTUk9yNjhsSlI3MnRQVTk2
-            S2wwSDBmU0pBTHZVUkNwc0dJVmVEYW8K7H5tNBCb8oVLSnHmBL6u05Z306t5682a
+            VHBNbUtveVpLTnNTUlVhWHFIRzN4ZkUKtoSLjgKtSwSzSl+PvIHAd8KRqPPI7clG
-            sl91GuzQOIsWp+5gxYLmPidyeV2RBa+lvBk6WSOspAwweoy/sj8Fyw==
+            WGFSrlrsn3R7lnNqB60PDx01eE04rCxmAvyIWwEyZ9x95Bx1e9ZzMA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-18T20:21:37Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:JwRPM+EUoOd5mCwlJQY+FUbcSl3phAKKAgfa4xvaKnX2PCfEXwRnZY7yHy5/3nTwa00FoRlmm1BAj/RPtcFx2KedDbkuMG366WRPfuSeh+9pt2wlHICy+Sq8N4xSZ8SjXm2PFHtAE7MegBOCxngCebYKUvl+2JGjjvdK9UtLlTE=,iv:TzlDv5QRQotKCOEIh1mu5dKe/gFVOdWdvBXcbTIktEo=,tag:dK5whDYwLvwNjUBw/jKXFg==,type:str]
+    mac: ENC[AES256_GCM,data:c2wh9Qk5tC3Gd8/+0fzSLXZU9uPUOVz4cMOgpVCVskEK+05fdRHsH0C1pAM5GnWxAnX+cKYUhTGNRWA2bp7MjUmFIhqZHh3KVa4taErg/hinNsfZgO8Tl3eTv5QaA+Pnehryk3jY3hpiqU1FT1QfYNfWH/XTKjobkXLbFuDmPM0=,iv:U/NkN96/qqhORNWap8JE1pedPNyoM/MtczI+j/7dShI=,tag:dJE9xCc0j5ThWLq0Q2QdLQ==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,10 +1,10 @@
-apiVersion: ENC[AES256_GCM,data:yjI=,iv:CaaqkugvqZ52yJxi7nD3RvMCR8oLrgvrQK6slVpnUiw=,tag:UykK9Mnfj/7YHJB5DJT1qw==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:jHTS/osl,iv:o/trc6z6P5CgzPKfLpbOmmPz7CPGvfjHwfTbe/ytAuI=,tag:RDh7VhGizaFFJAdKS8Kqtg==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:Eq0Kj3FxGSIInW6TwBO7MA==,iv:S40ql5cq3rPQo+kyjOtCUVIH5VbJCZTdOj6gn/eAGNM=,tag:GvT1+35KsEQN9KMaWNZwqQ==,type:str]
+    name: openclaw-secrets
-    namespace: ENC[AES256_GCM,data:AA2xoCaMw/8=,iv:7aYqsCGzIE4I73INU0XnYlusKZL4JQwBBw0SB3ZNJ0g=,tag:cLiEsoW815u7bRdX5StGMA==,type:str]
+    namespace: openclaw
 stringData:
-    values.yaml: ENC[AES256_GCM,data:7JWPK7qbD/i/AW5GNLpanshAeE8tW8yNnMUQB1phkMTfku5aAb7GiSSgFZ8/PeV6umP13RgK1mHwbeJazXBYGISBS7IWWID0Fv2HXBbsK+HTWjKuuPpRjBFqvTddRY5lDU4SqAx8/84W3Uvl2WX8ar+k6z80XNmZyVamUZoa4ORFIaUZvSrq2RIeoLCnhxjEKev7AzHA3Jbb3Kn4qQA35PiVG2jg+RN2daqE4JJhjmrxQcv8jclz2grsWnpmuWRgTU2SaGUDqxgYo4Yx3/NmsdlWZXZ6iFOg21Xq34lgsEXPiFoHwGgBPm+Eg+V8H8s1pA==,iv:iiqVWI+d2QJ9yaT/mUNeOQJ8crVcrywFwyzR67YqwY0=,tag:HOKAci2XKXfyrMlqw9wG0g==,type:str]
+    values.yaml: ENC[AES256_GCM,data:zYnpcD0wI34XvAKZzOWgYHW6Y9XKUl0QIZPHHKYOJzPSlifEpueIGe2G+emhjMuaIOk6G/xfLORKlwMXx5qslI2Syzg+LD481zxVfJRsyuW34VtaGcT7r4Wi7s4ccZF1lTUbBoEHnVry1anrr/XFdYwtAgw+mUFIRGNYf03IcBve4+C/PzkYg875TrMsJr4TPOwBcJel0qKqhVy6MGdo7xZO2f3Rants8W0pxLqdSrssPrypaQSmFza/9JQXY3UiavYqgeZrkBtGAT0MKCQuPHYJUtRqGfrSPpgdkgcSU1UF6EuvNyJwnT6ESNBEdmvO2g==,iv:ORXiofRqSBYuS+aXAYr9c8o2X5vjPTAlhzmDIANsi/E=,tag:zw/GzK4WetgKiWcY1SN2Ww==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -14,14 +14,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmb0FoWXdqbkQ0S0ZtUTd4
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvTEpwVXFHVFQ3cmlMRktV
-            amVMSnFJUGJrOTBCUkFrSmlrdGg1M3NBdVZJCjdJRVh4LzRoc2FkNkozQVIxRjhU
+            NU5hRDQrYnR6WktOS2EybDZqTlNEZXJLdkRzCk1mYjhsVElSS1hLK2xqb2xEWW9C
-            bm0xMGJFTXYrUjdDRzJIYUtHL1NJQlUKLS0tIDgzRVpTeHl2TjlDd3RFWU9WNEg1
+            VDRHaUZpdFlIbFdGK2JuOFBndE9HeUUKLS0tIDI5cXhWRFZQYVBqZEJXbmVMdjhD
-            WEFJNzNmcFg0WWgxZlRmUFpWd2oxRkUKDjPSBBTKOTCXeDKEqYTaMf3fpJiuJ9Nf
+            dmord055SzlMZEpwMS9wK0M3NVpWekUKRFg0dsBCr2NUFfXcKALZXz93SP+HpTvN
-            P6PA2danJXl26JjYNCNKGvR4a8bEGTqcmaHthh/T5ZEsnW32nENrLw==
+            gQ8xtu6INfiUX3pCisPKFlqJmfmIYeo+zTTn07m2sNhZezCRwoyyPw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-05-02T15:19:33Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:HQIGawTumI8rribcjRM85aU0HvJ0HLQ90nZzh3REbdmqopF8UYai9yQgZtYO9YkzeQ/a3x7H/wB1fXxmjWvV5u8zWcu1PiP6CJK7xp3Lwm4I3EPN/vgv/Xilzugv7SX1dmKGVyQxbj0M3LuAvzzvAiLYDrFflesPfVsbuUG6Z6c=,iv:37ttAZFEFyqZJ8TM++kqcMPkq0n7wEZccnhPusA+riE=,tag:EIGhYIbbI5RDwnCkh+QmEg==,type:str]
+    mac: ENC[AES256_GCM,data:tAblIvQyV8KvRmJM/VxM4wF7QyaXM6gy4u/z/l4sP5jmRJOaVm/XhR8uehCy1ocPczU8z2Ix5r3BGq6t2wGjMwYsN54Q/G6l5/PmW67Xn4KiB2anWfRf79sRcK0qvRTbCdJqXNCdgiswdRGoHB+xABdmo+tuyFMmapvvUboALsY=,iv:KRpSbQv5eaGdPYJtb7F+Zx6sRXZBJwKAVhl4hgpywGk=,tag:bGk5qJmLn2tE8FUsuL3W1w==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,11 +1,11 @@
-apiVersion: ENC[AES256_GCM,data:ajc=,iv:KDcOmQp/AW6VLabPTn3wPN3iu2ZJHdlYkZA96gpAXLI=,tag:fb25AvL7etTWyJeJ+whdtQ==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:+wO2JplC,iv:qlhkoes2tBBg6TzdNWjG8rtjF3fDnbtOsVrIW3kzRoM=,tag:ETNH/9DO3yrSrPWq0s68RA==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:RX3GSGag0cqHZEeyB0Q=,iv:k2eu8Zz+7e4tLNIeBtcvxmndRZzy2lMvnQ8NAdBCiiU=,tag:aYTO5w523xeMX6H+kd16pQ==,type:str]
+    name: pgadmin-secret
-    namespace: ENC[AES256_GCM,data:q2+Fq+K5Qw==,iv:WAhvMfA+nq2CWjURuZZUCA+U4Pdk91eBrhjeiqUlgFA=,tag:FlxFG6z/OrlMO3dvvXj8pw==,type:str]
+    namespace: pgadmin
 stringData:
-    PGADMIN_DEFAULT_EMAIL: ENC[AES256_GCM,data:xpO0ORGq4QzSfLI0klBh66OhR2Y=,iv:Nf71SISHQCQ4MQqvrxz4FUjQYIowek6hxbWOEfBDmlo=,tag:qutlgJ461wITA3eEUgeluw==,type:str]
+    PGADMIN_DEFAULT_EMAIL: ENC[AES256_GCM,data:gkDQuDOmHedP8Xd47cFBcarO3Ro=,iv:YOu5gsFGHIcPus08w6pUKpJYo9dlcicX45AeFz9e6Bk=,tag:SwlRR9vzt/qhE9UNeMvIzA==,type:str]
-    PGADMIN_DEFAULT_PASSWORD: ENC[AES256_GCM,data:csYoMX8TGSs=,iv:eeIUglMuxW4It/jj2mn/svpvX9ZAh4O3QMk3tn0uES4=,tag:qMNTlYbgj9UL3sk9zSpKOQ==,type:str]
+    PGADMIN_DEFAULT_PASSWORD: ENC[AES256_GCM,data:2iD1Zw/Kssk=,iv:oKCUohh1F3v38YNgH6kIEJjiIWStSkloUUPTLvUKyOg=,tag:o+z0t0CgtSKAShFJ/Dkyxg==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -15,14 +15,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXb2xvVTJxSlU3UFRFdGVT
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxN0RyZ1FnaEREWWR6bGdh
-            QjBCSUVuY0tzNU40RDRQY1JNNWhkU2xyU1NvCmFseC9Fd2xIMVZ0YlJkamFyVjdz
+            N0ZtQ0NjRWRyc0ZTZVY2S05VTnFXT3lJSmg0CjZRSXVXTU1yT0ZnaFpXdHB6NFJM
-            c0VYTkRuek9zamxCMmZuUjBvWGtHWTgKLS0tIGNwYm1XcVZ3dStGZlF1RWJ4Rlp2
+            R2J4ZnBzYnJ1dUhZdWJPNnZJUWlwV0UKLS0tIDRkQ1k0SmVxVk4zSGhVYUREYlVG
-            N0tKaUUwMkNlOFUxNkRNdGhadHB5ajAKrc0FGIrcuNiD/YXS3JCzeN0YwrXQyJR9
+            Y2tDZlBtMngvYVJ4U3JZUHVCK2dZREkK4zy26J3OZmXuelqvcZB71ACmsf9Yg/bd
-            W9gTXCMlV3GR6f+eriaE3uMSmpevt2tzWsc6nbP4q/8Up+SEdw6Q/w==
+            n/TtoKRgL12e2OQ/DeLNnfRaIeO7mBkJU0Us56nIienvMimXC334mA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-05-02T09:39:17Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:A0Zn52p/lYm6aH4dv4BvpS52BGfwnx5zwu8xZhI3sJFBCaC17bCCzO/b73hEPGsbYuvrvHEEIGS56gYtf+JqNvG8TypUhKwxWOSQ2FTGeYbMQm+5uBKcwbFmRkZrkLp3xraqikk1EmFNOSu0niE5eA/Ye6ftSCNlRMyNiaUuU6E=,iv:Q16Ttoi0p+cFkbvZM6JzlYSDyBUYHNgBBk7ZXmxqkr4=,tag:devAZHx2jFg0wC9NrOgJbg==,type:str]
+    mac: ENC[AES256_GCM,data:MRVLgqr1QIijcLi4+cp7aK9GlierQApiy/a2o63hZjY5Qk4RarKAO+BoYQd8soF89DuELBj/A5tMdxzq5+P/py6amJLYN6aq+eyapcMH/7bt0pU97c2xfS4c5sxqO3KDRDQ3oIFeyY5KXDHZCgItUJuO2W2Gqh2lgYNsyIh/kEs=,iv:2IV+tRBTXb12PTJj0mTrg61bzFWVAkVKjjy8VMFMUL0=,tag:LBmlD7gR0KbiqOCU8pwMNA==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,11 +1,11 @@
-apiVersion: ENC[AES256_GCM,data:xsE=,iv:T5w04FbQfmMKkL0j1g2SSAS/1l+Fk6g/Bi0ZVm1khHs=,tag:xQWUU+WiDTpiT3j09QX2og==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:nIIgKVva,iv:Ij1+no4db0KNdQChZzrtp0T8pn8diApmZb/f+kaYRxM=,tag:UCanL/X6rQxPGfxnqkVxTQ==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:VZOY5WgV7Oz8Rzs+8rksm0L4J26cRg==,iv:iAMMJOYnFJFmAwVIYo3t3aJHbbW8vJqeQRv6joYNcOM=,tag:AbOeC3WlwnbvRMjrkTQ1UA==,type:str]
+    name: minio-cnpg-credentials
-    namespace: ENC[AES256_GCM,data:e4fJWCfKfA==,iv:yFHPwAmWqYBjqdrJcyYsdRT7b0jeFjG4mfk2lAh3k5U=,tag:7xXLXdmQy+4t31PfQatWMw==,type:str]
+    namespace: synapse
 stringData:
-    ACCESS_KEY_ID: ENC[AES256_GCM,data:1no6G3U9pJSuFUNtYDUsjNREIC8=,iv:p7hy6PmVg0OVaFR1btrZBwJIuBZGmAIO3smuRBNzvl8=,tag:91Wdr2phhR0imEJdXWFMQw==,type:str]
+    ACCESS_KEY_ID: ENC[AES256_GCM,data:msMVxKNoUYVk1u00kIWc39oiT5E=,iv:IHahS0vJxXkgDRvcV6rpKHZchrKuzh/gLJPcgGCE1zQ=,tag:z04dvTpO5ZX719PuEQejlA==,type:str]
-    ACCESS_SECRET_KEY: ENC[AES256_GCM,data:UJxAubCw01I9p6ZrK8ebNpbPpbytUvkAOX3kziSKCHwgEmNG8XmGLw==,iv:toLrbTFLB3K2cnuv20s2hiuCiWI+0La+M0tN85b95OU=,tag:BW885iIh2wwiwbxuQ46sHA==,type:str]
+    ACCESS_SECRET_KEY: ENC[AES256_GCM,data:RXWlIPxzoxdfjsR19bLwTtLXiD+x6a5slS4MyUUd7pgcnqqUygzzTQ==,iv:bBGOCJQERRUE4BfyrnThFTyzCa+MG9UheL7PiJmCHmE=,tag:JQepvnsIcUu4SwM002axbA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -15,14 +15,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGczhpcnhFNm1vTVlVZ2pr
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4SXFCYVFsQWIyN0FSSC9z
-            QnRDOUZYZVZ6cE56VnM2NjQ3OWVHM2cwWEI0CndMK2dNemJBdlFZTGpweWMrYnZD
+            Y29YUnZmNS9aMmhZMVlUTTlQejNzd1JlbEdrCi96eXRPVDZwQjNQVFFBaWpZRXBO
-            MkUrU1hldXhmVDBmaGNCRU5zaUFPS3cKLS0tIEUvNnA3UGtVams1cThHcXhrdXF4
+            Y0lNOUVhY2JrdUo1MnhWSzg4ZjU2b0UKLS0tIGFuVUZZNEZDZ0FrU1pndHE0bFla
-            VGZrQnhROXlkT01jSXZTclljU1RwczgKuKoQS8KFFmRvDqkRfhBOVIj1h+jRreXg
+            ZXU4WkdHRi9VSnI2VjdHS1RKQWtJMkEKmpbhItF+UzN0wx9fKugx/6xyAWEk98E+
-            /dB0/gRm8rdMOjQJ+efDMD3dVqakQjM0o7LRol/FGNDnf/FrpNzHNw==
+            Qcw3pwNNoGKA4Yg0TU3fTyMLtL2KJGZQD576fugFFLXirOTkRVZp2g==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-22T18:51:59Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:CF6yAODac/fYF7Qv5UnLggrsKqWBrFr0F7rKosq8Am7bzjUJ398B2MAl4g80IM+cwj4VSxBi2Ejltin/yhaTz2FhbR6Nmx4k4p8TCJFRUkKjx3rLw2WMNM0taYTvis0FPJjbMYshgF3eweaqq0LXNb7x3RooaaC47ouOfj3K3Gg=,iv:FgDkQdGCV1RyI3rZ7d6hWsCpqQDXHEA1UrmccwjXnPU=,tag:81huyBSdcOhsCG6/WMhIiw==,type:str]
+    mac: ENC[AES256_GCM,data:vqJrmCAAPmjYsXC6bN4Uez9eMe1PoZOoHRnHTQeHuFSC6YPAuIwhCUIUJ0rFxak++80Sbf2+agp9CfN249CPTvdS9peCpZ3lQiuFAQEPHPUF+B9OWrxLpzJCW2Wk/4zAT0p/5OabjIljajc/K6dDLei9e2y4duaWmqK3b8u3ye8=,iv:aw9T/aLTeHC1+zAbC53LQYafGcg/CA4MA2jJ+cC9QBQ=,tag:WtjTbaz2srFoAfNGFr8pdA==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,12 +1,12 @@
-apiVersion: ENC[AES256_GCM,data:goE=,iv:H1pzxncLUgHixtEgZyjTWBKj5iKrz42jGrczl1P50Ws=,tag:VZir/D6mWBmJwKUYqjrd4g==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:D8Llc1/A,iv:cPjR+vLED+CX+Pdwcjc+L2v0yNZ3ZdjkO4D667M9/7k=,tag:0aqTslgYBl96X9l6lx3i5Q==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:SmBtH0O3vw//AWWFZ5Y=,iv:gnQCyuTRZ1st9VU3hPDXkLi5gn9nii7Q3+lvkt7EP0I=,tag:9O/NQiE3qpsTLPgInLK25A==,type:str]
+    name: synapse-secret
-    namespace: ENC[AES256_GCM,data:CEpwrvcCsA==,iv:0dFRs0WqHEaDWX/0TclxK2ZVcHcoCNuLsC8h3d6JDWI=,tag:ocCzvNRrXLICrQHZlDGvtw==,type:str]
+    namespace: synapse
 stringData:
-    SYNAPSE_DB_PASSWORD: ENC[AES256_GCM,data:lopLbr7npKA=,iv:mfQ5kqAouOaI3Ako0sEoqQC5JMm5WNKNlDiAiW8R8GA=,tag:LSEiJStxtLCSHEn8NEe6ig==,type:str]
+    SYNAPSE_DB_PASSWORD: ENC[AES256_GCM,data:C1OjfOuQtLc=,iv:xXXjM6QJpdXB+3V5WScPgCTrJfgbi71vGiHIu/iB1v8=,tag:3v72lSb7437BZx6mEGMO0Q==,type:str]
-    MAS_DB_PASSWORD: ENC[AES256_GCM,data:+yDolnP5aQc=,iv:Tnvytm8h90Joy3AQTEwEVgX6WpyejfjEMscnh/ryQ4w=,tag:9FGYGudnmbqhioZKRWs8Ag==,type:str]
+    MAS_DB_PASSWORD: ENC[AES256_GCM,data:Hm1DSsn9Psc=,iv:Jkfyg/s71sNAuUvofjOuBDIw/IMroUVkOGFeNnCzBZc=,tag:WLyXvFKHf4ftp2afjkvXlg==,type:str]
-    SIGNING_KEY: ENC[AES256_GCM,data:SPfN1H56/58/YZJbgVyi1H5laOh+8ddJ1uAlmohBRJWOt28HKmERfpizyYsMssVFA99rZV8=,iv:wgP+dT1Oi+CofC+lSE+rfOdWBBxgUnBwrlMYtowYq8I=,tag:4c6rYHuP0CE/tpqJ4Xbcog==,type:str]
+    SIGNING_KEY: ENC[AES256_GCM,data:mLeiPLIOCACvRMav1rsSEEJgzE5R08+c9N2b8FCrhtHgNkZiw48DcNh3RBVpGkS1kJwDIgo=,iv:96H5qp3zRZgH1RiUaDjoau12sZXd8CkR47M45aDSOaA=,tag:1hRN5vQnqFIUDEz5vTDpuA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -16,14 +16,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXNjIybzUyZzdMRWlhckhp
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIOWVGdHIvVC84TkswMGpu
-            cWkwdW1LWFJzbUllbzg5S2V2RjBmSEtaaUMwCm5XMlhHVHI3VnYzTExGVlNLYllJ
+            b2s5YXFnWlF2WmRnTTdxVUFrU1V2dHhnSlZBCmJBUlFwZmo5Rm9oTHBZVTI2Z0dD
-            N0Y1Sk4vWjBYZmFaZmpPV3psSFZPcWMKLS0tIG5yRFluV2FEbE9teFhpZTlOQjls
+            QkFvZy9IMVhlTXhOSk5iS0NmWndKNTAKLS0tIDdpd2pzMlR3SkVGMjl2TmllMjVD
-            aStHQVhEcGdNQVFVcXVlcUQ2c1I5RFkKs412eV6uT7glhdQYQliApizmGwxRiM5k
+            MGk3Qkt4YmUrajZLT2lQVFRaeEl1bEEKJIfZT2t2Mp8QxRysVNAljdw3+FB7K8lJ
-            p9FK94nfEC/I43yOhg84o7hInk944LVmqMlTRwGf7JSyFecuVBf3/Q==
+            U3AADe2wKmlbldV6/kSsi2bJjxQvDgQYk3f3x+B6f9D4fQ1d48VPjg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-22T19:00:16Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:ES1qvs4VAi2jQsIQ8AEdZVZIiQiXg3B50nChijUXi9R2Nc9efe48lZ/luwIbxDXv/ps0oASp5VhKiuGy5zQS2Z0Dxon7CgwKlIlm+lRjirthTzmCGB+xik6aCVkBFn2fpLBMoBZEfZOrarVr7kLX4/zdEttczLv8ecvI4tJodjI=,iv:Jpge5tp+B7PykOqXiV7V1aZGfWCPqmOuWrR4U9D9i/U=,tag:YUyjaliOKzCDLwhGtkJXDw==,type:str]
+    mac: ENC[AES256_GCM,data:w5rmM8mbadDnvRs3VoSh74WN9glpP4TjJoVnR4tmARJoWTx1yPpeqi4EAVaNwtfKzmbieWax3MS03jsP9XIuSlcNrnRS9srG9scLJEbxBrQK4YrOpX8opJ2CQruVE+VjFLBKoNjNKHjoIbsE5W63c02+vYQ0U9cDWM0c1lfg8ak=,iv:GxUT/msdStLZgm9rQoUnWT+/hYpasjNUlQOv7ChGtD8=,tag:c7xswWO7oi7SSLzanAdPvQ==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,12 +1,12 @@
-apiVersion: ENC[AES256_GCM,data:szQ=,iv:9dA292fI+pcgGcQaOtAoS5k/TLsp3KXemh0raN5rkl4=,tag:i24xABHKpbQC8kFGyRFV7Q==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:7AO6cFL9,iv:q3pEo5EyvGefq5FfO39BzKrxobmwmP3ucqJWJr16Sd4=,tag:Nf/D5OpGbC7/Q+DksXkrDA==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:JwGj7ZYYt+p0C3rb,iv:KBAIsUAZifo0DvnwERWC9jAS3/FqQp+xR/PlYEwb+Rc=,tag:+WNy/hxofiZqrNx47GXhng==,type:str]
+    name: forgejo-auth
-    namespace: ENC[AES256_GCM,data:uIYk8VVfTt3olc8=,iv:JJgClHDRSVFcqhLXRkUaqsFNGmRuhn7DFddQQUOsQ/I=,tag:Pt9S0vh7LBEngGv5cowIIg==,type:str]
+    namespace: flux-system
-type: ENC[AES256_GCM,data:YXxX6W6B,iv:EoRzU+ZYujkZ3pllE1HsC+6OeXi76NYMGLCx0x3Ax8A=,tag:61ovlMBf9keouaC05vzBsg==,type:str]
+type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:iBU2Yg==,iv:g513DvhT1bEFiES1rZIwQoYEXDdgufV0WsxoHFfHPyk=,tag:sfBQGmgnlV5f44mVbpzw3g==,type:str]
+    username: ENC[AES256_GCM,data:U7kTYg==,iv:9pv274RdJfHoylzt9V79l7T0iV2tEumuf38qjxRVKUc=,tag:doYtg+Gi8ZZyS0LreeGm+w==,type:str]
-    password: ENC[AES256_GCM,data:gwiwUp2NEyoggKjdwW2egTrtyikDAGZbidDqyw0XWGV7EuGMC4AyHg==,iv:37XMAP8RihWBSsy9Cp4WkXYblPJYj3Lvwk7wKGslw2Q=,tag:qshRZ4bca+aanyBTS4E3jg==,type:str]
+    password: ENC[AES256_GCM,data:1tHIugAyDARfUm8/7AzDC6epGcSo7eRv9HVxCbWh4Aj6LxgGTMJ9Ig==,iv:4ikxZHd2/1N7F3OjOD0NcNiCE05V/OPPBREuKMjlv+Q=,tag:xzANpbvGvSmdMx4LZOHfxg==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -16,14 +16,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMcGs2TllOQ3BKYkdsNHVW
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSm9JQWV1RGlPOENrWXYr
-            TUdibGZaYzF2SFFRamR2OG9DZU1QOTlwZlVFCi94ZC9IMllGYlQ4RTFxaU9JTFVN
+            L0pobHVlbXdyMFM1MEkzTXhRc1ZENXJXNHlBCmRNN0lYZEk5U1FLbEJLSE9OVitE
-            QlZoVTU0NTgvc2NxRmNLUW9kbGcwVHcKLS0tIFUzTi9NQUQ0SGwwSkQ0R1R4S1Fz
+            UzE5UkFyMFZBZGRDdFpBZVovN1FZQU0KLS0tIGhEZWYwRVNuUHVvUGhCLzQrWmxC
-            TDN4MEdQWFR6UG5JWTJxbnBIdUtGRncKpQGTF/9PC7c3ZFDMAaSchNpQVrc+ZCsM
+            T3AxUlRVVzkrelhqS3N6azh3eFJEeUEKIUXNZOx1bLZeBftHlu6YUJjaRvw3jgwW
-            NNJQ5uwGiAqNMAIwphbFij/xapi4dWzm1jVYkasNdNczyQfwrq8fsg==
+            kEpoCmKhWQOCGgRCtoyLAjr+S81g91n8KTvwZCt9bvCm6luGhKcHBg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-30T19:42:06Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:JkWx4t3t/6w3s+ZbfhJpEcrnvCdl3KgbgloJOTiL5FKSIQXk7K2Fz0R3b5nX+whMbPh32m+uV3jbeRn1dgqig+e7QBGbKFI/W1IoYWJxTU3SkIHXDXI8Kl6gDAj4KdQbzpk0tLCnOxQuRqlXqP+pFIDG8WlV8K+ehV2+TqjuiYE=,iv:F2HWcsCudLweA85zI9RF60RYxqOHmMFjbMcScz9IPp0=,tag:AUX4kFaiRGgT41bqYzF7KQ==,type:str]
+    mac: ENC[AES256_GCM,data:vG5YDQE6TBH1BwDgb8YlflVMpICj4MKePkyj/HqkEpe2GxWVbKzYhIPCGHAYds+WEHyHF6L+20tNsuqyh7NWThFFzZhqsVdoCGDOikLkznEUn6/cMop34fUqLQKPhpIOpmX2tcm6BVaCxf0onxsgi9Hgam5sPOkI//MVq8gSdVQ=,iv:xZBaAf2rrOitVtqYVDVZaHQOk3CPgJM36a03OQv0GRc=,tag:YvN1QQC3hnFhfxe564hNew==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,10 +1,10 @@
-apiVersion: ENC[AES256_GCM,data:eK4=,iv:Fj5wQ5cf1oXPWjYdliVb80XUcB8C0BjVWFyrJyt7aTg=,tag:mj4K2ChwQ/D0Lt0gRPbrWw==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:RkAb4X+s,iv:Mi96QQgDXG+TWL40MMejPzDlRQR7PsfCmXLgbjDSOts=,tag:5akqEdOHMATYFD0A32GyRg==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:jTrtyL4uiQvljgdFTQZsJzI=,iv:JZDTet2SImWYViWVz4Jb794mTKEPq83N7sCyqO5WrKk=,tag:k1HB3F/UxEp6Nhy03LVUMg==,type:str]
+    name: cloudflared-token
-    namespace: ENC[AES256_GCM,data:sirE1yyWYNMj2Ko=,iv:1kn+UmmdGXbbBlUSGV+a6tqae8fOX0oimn9wufdEFFw=,tag:JZOYE2krRQl0OQcKW/m7YQ==,type:str]
+    namespace: cloudflared
 stringData:
-    token: ENC[AES256_GCM,data:ltlR1eARdiJOlxpZTMNAi0MMAGwHYs0Kub3Olyp6qXcPw7mzndSqJCmGXJZ9eeaas32GiQWwfy/RuMfJqsAWKpIB9BeaMZR+gV5k8Dyewo33vAyc0YGEn9bM3w7V7QhwXag6IdrXGq9hrZX+0N5zpCwUKlJ+sgIStNEJLkRqVmo3sVzIxPaXXdhQjPG3DuSMS2GpsmB953h3Dn9zTOD1pWj/PCPlt/IqXuQJMQcK66n+QLTYDWMD8Q==,iv:idN1jlq/L5fumsFj7FYvu1TmvZG7zXbYZPsNUxxPRM8=,tag:+SzZ6vEH5rauLD8ZEVwPwg==,type:str]
+    token: ENC[AES256_GCM,data:Bpy/QiqTr2B3dr30DS34syYsXto/osBld7hcDHucEsjEhNxgyEanFiIL5NI6x5xX5Y4gNmIhMqtVbz7gFjfL8lSWKkiI60hZ+BiCSudKPEZQNeZwpjHEzk0DRO09xNR57bYx9qzR9WWGCBU/vlbESURpNdprMy24YliR6Pf5NApRAO4Wf2oryuuAEwCklI186UGBNK1PinPzZNspRty3isMGa0APkcaxfl3+yDnjGEKQ8p3PYWaV+g==,iv:QLdZG/526Ce3fxsRLW0uecpihfRBJSAd1Af7n7X7Uss=,tag:qqQZ8r5VyJED9ErvDrpL1Q==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -14,14 +14,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqNzBEYXl6ZTFhZkVJVlJw
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3RTFYbThBU3Y5VnVnM0d1
-            L3loYUw1WkRKOVVxTVpVbldTSGhZZDFMV3dJCm5IZklSeUo4T1g1ZGFQL3Z4RGJt
+            ckpoQW9ieElOQncxS0p6Qm9QeEthenlmcGx3CnVDdVhsZEY4YjV1a09YRG1KS3dM
-            SmtMU0ZhazlnUG1xc3lEUENlWEJGbjAKLS0tIDFiYlp2eis3eGlKQ3lZd1YxVy92
+            OWJzbVUrOXM2bGJMd25qRWpNQmZ4UGsKLS0tIEdKREFDVHFzOVY5NVpSSExZeDhu
-            Ymp1M002ZngvOC9zMGxEcnNNSXdkYTQK23pcTLGewPx9ahx9EFajOJVAb50sC6Qm
+            bWMvSHcyOU5yNUxuOElqSVNsbUZleDAKvIW9/mT4zFrQNYH2QpB1KJv0XNl3/bI6
-            dt9xrgkDWrgY9dMOUy2MuP4FSQcmnVQj89ED5pPbDECLkp4O8/Dr4A==
+            +qC55dVY6//l/e03hUbY0AuIWP5ZeCl2IW6CG88wdUveCknLfe4fug==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-16T16:13:18Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:lRHtLKlsdEro8fqPW9/+1ZnVUwQWa2m+s/Kicnz0wBkguBGkXFRY8SHbu64xacBzKGATin3SHvnrrcCoeKo5X855zy1zzyYeEg8yBef3XhRwIpzGfSyfSGH1WSnz5WPAIIozDXDf3GCgC+PkS/RUuxPcRt0mrjYY3cwiAm9qT4I=,iv:ifosyPUbDhKUIRQ3ILXYCIODp8V852IO7YdHlx19JLs=,tag:RCmzUjnosRdqYHPvEHTBKg==,type:str]
+    mac: ENC[AES256_GCM,data:a85Zz3uKQIZcgAl6Yp+XzWR/UvPH0agUvNjTqIxVkxaDIzjF4K8q2Y8ws/EWVgUbLG0d4FQJL/WBetbzJu7LlUHXQgzANGBTveIUmVMaAXsdKdyt+rVH9Kafe7WOgGf9SU5PLZGyJOHX9f0H1AbvwFHgnHP8gOwYUJidSS/Nakc=,iv:OlP/cjci3nigFi2qjKRhzDkAC44C+YcvrviRTxWhCdk=,tag:mqP7/QglYyRyNL7xTrNQHA==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,11 +1,11 @@
-apiVersion: ENC[AES256_GCM,data:F9c=,iv:v6+/TVvqwGz9BWcMBNBYYSNndiifXGa3NA/ocVjAjXg=,tag:cX4a5f/NNWbsTySODYopFw==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:eewBXe4Z,iv:mFxK35lVrbx6FlaFSBHCGF+EOQ21hjHU6ztoEzB8hfw=,tag:HyvyKMOHGehdh+ZzAq+o+g==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:kF7QHEruf32L5u59z/wszdmYGThYYA==,iv:vTlE1woui69ldz3TnlnOYayYeKECsoRkDCGu+L3Rc7U=,tag:y1tti16IDeiS30PXBTr9YA==,type:str]
+    name: minio-cnpg-credentials
-    namespace: ENC[AES256_GCM,data:/PUN372/psyg5+o=,iv:DvtI8RVTOpTmcjBeEO6Jl+JbwN5vCq3H4r3edduQtp8=,tag:s+hPeXfMBqcNIeP8uIeUZg==,type:str]
+    namespace: cnpg-system
 stringData:
-    ACCESS_KEY_ID: ENC[AES256_GCM,data:3VVZMUNKof0gZQrNoq+LQB7g5Zk=,iv:xfDaT5PEXdCLmt5Oj6D8+zASfTehxnxZbVId2vFmOhU=,tag:pGHAaklS0WLhO2ysoHFHyQ==,type:str]
+    ACCESS_KEY_ID: ENC[AES256_GCM,data:N6hQPyMUk+3OsNlR2riHofCFk7E=,iv:HfExsKNfkw13MMGENW4vVKF97UEChpSq9fiFt9uaka0=,tag:4p+ZYtdeZ1JWCvOQfCwHqg==,type:str]
-    ACCESS_SECRET_KEY: ENC[AES256_GCM,data:3CidDLWCAMFkUrnv4pL5IavryRvTw0Trgbp7azGf/UIKDDj6vFWIHg==,iv:a0oxrFc6n/YyZFJHijLEcZHruxM3dskq47ujH48R4Fc=,tag:RHZc3bRyWd+I4XlPLik/sg==,type:str]
+    ACCESS_SECRET_KEY: ENC[AES256_GCM,data:o3Syr7CAfg47D5FjSTaMi3qi4nnm8qOxA/m1I8whYA1kCMTWPEWI9Q==,iv:H0H20DgzcLBa1iYH7CcoPFMK/9vA1cXvkMKmH1l3BHk=,tag:xEnlA7R9fhXrj59dVtjRaQ==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -15,14 +15,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxcHc1M0hGRUp5Y3hYbVZG
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvNHAwZm0rY2xYTlRIRlEr
-            S1Vaa0V1OVBveng3L0RRdW9jckRDTU5SNDJRCmRQcTlJeGt5UGk3Tm1xQ2RiaFhn
+            Qm11UjVPa29FUS9qK051SUpBOElhblc4bmxJCjlhTjJtS1RzcUZVam1IZ1NHaSt5
-            WWR3am1ZTmErblhPOHFoeFUzNldiMW8KLS0tIG9NNTdJUzlMcGhKZzg2OVdqQVR4
+            Q1lweFVSZHpkMjRZTlJITGgxUFk2RFUKLS0tIHhMY1hueHBXREN0WlBsWTUzQzhN
-            M25iTVZva0I0Y3Rka1ZDVkZzRm9qaUUKMScemm0oYoZwEwj2Lm6pPLxu/jHZc1VU
+            cEh1Y3VMcGxQQjNtdXBhYjAvbllpVVUKM4A7011Cq7docvzj0OzoCP+PaYcfFVuc
-            PexTHcXNJ2RU3aI240PwfKq0q4DcMlO2Q5gWwX5SoczKfMmtPb7/NA==
+            6tzR2VSwjsO15Fq5ZCrmHdivADJX6SRMjKVzdiMPjNtAXSwQZf9dbA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-17T20:42:46Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:13K06WNymDZVQVa63maUFCQZYa322dTryvjyS6ztEN53/wRrE950IKG4uVN86aprPUE/300pFJTSSxdAtB1gtBmqQ6oy0/bVmFeSWvgRZZtS9TpA6feunt9g59D8ud5hB5stiGXs4By0/82auc5kbPqcvu76U3/VSXUFYm9QgdQ=,iv:C1dGvkSC7K4KIkDL09XKQKUBD/H5JktSeceU2nh4zxA=,tag:amt3z3WTrasg3KbLP2rCoQ==,type:str]
+    mac: ENC[AES256_GCM,data:kTyaqZ0GnOhzj2Dn3GH3dPbL9iMcDb5h1bxmdjP1pfKDNWblrAgYBSjgqSO3k2EBqT8gibd/q+DGsDhmuFncKlIUDxooyCf1V3LV44tiVSWe6iy9/WxdKxwsloXCRpuDP2DPMKEa6L+0YJiboC88UhuUTy9JQ1/He3yDvFRYnj0=,iv:K2W+59zQZrYLhlgD6LvYnGogAEnQ/tamF4Onn17b/Us=,tag:UM6AAVaLv9mBmSDSUQGSZQ==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4
@@ -1,11 +1,11 @@
-apiVersion: ENC[AES256_GCM,data:c2Q=,iv:sWxwTXsQmiE9GWOsL51qZ3kLfa92UoL0AJIA5zWt57o=,tag:MEumF2Z7EfUfDd6t1azc8g==,type:str]
+apiVersion: v1
-kind: ENC[AES256_GCM,data:SdRh5AEr,iv:TcpCb/98HCoUB2AsSkSm5u7zg7owpme/ShgHWBbpEcw=,tag:rTgkwyPisu/fl21NGOD6Aw==,type:str]
+kind: Secret
 metadata:
-    name: ENC[AES256_GCM,data:8oD4s21LG0oUf6ilsQc=,iv:cLxGsTuiYiCZrtAH4WFXyUUkyt6CxmZL3ZDwFmr8FPo=,tag:MIMh5tWzYkhCjbMN4q80HA==,type:str]
+    name: operator-oauth
-    namespace: ENC[AES256_GCM,data:1iKUAfloTaaV,iv:N80vddGZSFOsWn0QqyjiEjD6SPTwXZeqWSYUjsEu7FY=,tag:6lAMylzZGKjHg5MXiXyPcA==,type:str]
+    namespace: tailscale
 stringData:
-    client_id: ENC[AES256_GCM,data:aLnwsNIAAJ8Sws90VMM+XxA=,iv:2W4MkEqS4IPNeeqhDO2EPLGWU6CPBRya2ARr0ZtlmSk=,tag:GuawGGMS6J0P289J5jm9nw==,type:str]
+    client_id: ENC[AES256_GCM,data:ENLYFGf6+gZVpB1KisenbJ8=,iv:zk37m+cQRX9mt5tBMzOcUrl7YHjf9VxkaEHO5ddtYWs=,tag:xRQ1LC5+ICx8mdMHj9dEUw==,type:str]
-    client_secret: ENC[AES256_GCM,data:LaWTaoNuUM8M7Dc5xpeczU+WkQ+CK5yiJOzaqDFwnf6MDqmS5d3EqfzsHb9ep8mfzNPa/6tvgNU1wtldhd6b,iv:CIKSZ2wSIkHysCCIFF+iSg/UXMvV5csjTFgVOinH8+k=,tag:m9T3mAy4VbesKgDkGfWcwg==,type:str]
+    client_secret: ENC[AES256_GCM,data:LZnYb6AmOWoP8dVkqdiGYpOXBW2tlLJdlGPlyg8+IEQOxJwabkPSLz1z7Phjy5WGRrQxF8g15P+uzFhZ+Bj7,iv:rNMjquFjUygXLNDzcjYZjOI7Nj0YaOoMYBQYqAMfyaQ=,tag:Q+jP5Vw3nc9eCUlkLGTl1Q==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -15,14 +15,14 @@ sops:
        - recipient: age1rydfcalt7pu4jnmh298lgjlasxyjldyaz3xyssk7v54lpu30fv0qna96ea
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYc1NCa055YVMvRFlJUkF4
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1ck5vZjhSbnh3T3JOczZX
-            ZUM0MkNJdVh0ZHgySC91MC95RkR1R3NZNW5ZCkxoL21XbWcybCtTcEIzSkUzWUJz
+            ZGFJNUtnQkphOHRzb2VsaUl2Yjc1WFN1T3hvCmt5K1JUTGZDbXNVZk9mNVN0dGlz
-            cmtFd1kxcno5dVZLdHJHRDN3K05CcncKLS0tIHZWem11OGp1VjNFdS9yN1F2T0pi
+            QUd1K0lMUzIwSXRoSG9Xb1VnTTZnK0UKLS0tIDdmdGNyY3RTeWc3Zkg1MUJwaU5w
-            NFBWN1pxcjdSTks4VVJ4cTBaSHV0QW8KPKB54ogrQsJD2vjYNMdNVjuTjMRTsvdj
+            a2tWZ2J6Mnc3aXVRZDU3OVN4R2dkKzAKMKUxQiR5PNmtGEPjHVNS0j9d0dL/XgBj
-            XkSoQjNdWSfpOZCXzi2Y9h8idcb0J5Pl5nDrYIMCmbEOBKYtP/YMZQ==
+            04X8H+c3UY15ES2p89fZ4MkgbU6bWrizibj54b5A7AQGpEBYj6r3OA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-03-16T15:52:32Z"
+    lastmodified: "2026-05-02T15:27:47Z"
-    mac: ENC[AES256_GCM,data:ZIsn1j1njaBrS9qcFGSfXD7JQescvE4sO+vY/aF3Q4mhiW66WdKfJO2vxP3ErFZpFGGq4cvjt2WLGzY/QqPtjFlr6hk4bEp5IPKmxV8KWfFWowcVuxSL6fDrSCe51pZWvUhgz3ZMkbKPLIHiIhT9VTlq2bDSfXyFqIkShqjokOY=,iv:utetPdKLMXELKwtnq41xR0XBuvepBfzRM3a4/pAwUbI=,tag:aS2gt92HD3zwNgaFMja7aA==,type:str]
+    mac: ENC[AES256_GCM,data:lj3M5o9A65D/uxybN5vqNbQXPd0J+EgnEWpFrfCcu0ZYdjuUloNSm73Hb8Affnl5LcDCvIFvzt9c078DF19yNH2ojC5G0nFVgtjuIT80pNBD1JEwk2nORmPr7JfFofW14b1w3u8BIpJ6hAMYhFIcxz0SIV6PzaNcZ9wZbP+ojQQ=,iv:2Kj56LuppyQeIOP/i3N9iwzjcr2ZwRPcn9o68QYWirA=,tag:SXh/OCBldOe9PgfPKlHpZA==,type:str]
    pgp: []
-    unencrypted_suffix: _unencrypted
+    encrypted_regex: ^(data|stringData)$
    version: 3.9.4