Thore Cimbal
7f42a456eb
Auto-Deploy on Push / verify-and-notify (push) Canceled after 0s
Bot account registered via mas-cli, compatibility token issued and stored via sops. Adds an explicit NetworkPolicy allow-rule since Draupnir needs to reach Synapse's client-server API in-namespace, which the existing default-deny policy would otherwise silently block.
23 lines
1.6 KiB
YAML
23 lines
1.6 KiB
YAML
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: draupnir-config
|
|
namespace: matrix
|
|
stringData:
|
|
default.yaml: ENC[AES256_GCM,data:PlGEBWmpdzpeiiTP6fk7CJpeLGZHoT20Qp6tPKUOF9NE9/tTucK4qngo4YUx/+HHvk3EeZ26k+FInWABpLtQ+aYs60eecyeUPOyrJ7VNvTbgZLfGvJQJRwqjPauWKv8ODXlK2ABg5olP89k5BQIpBoqUr+p5WghnYSuQ48JkzEYSku6cLufprVfdZjbqexa93vYqy2RUapQgmR4cH8mjUg92ZF2u6d1u8OtblQe+vdAgSN0s1N0bOhwsCXeUKExuYuyfiAErc7MIr/eCcxZRBMx+snxqs8wnOKEKsxmrEvDGdjcqf2VH0TO1MECmsxc6oTkXAruRcJg1RTYNdQ2rpptrMj5pkqaJZdHNWQ1/NQ5vcEmRlsoPvSiaG+z5ohFLfQ5bqyZpUo2dmv0rWWyTY1eh66cmKBEC8YDIKg==,iv:/JT0/yL62jz+ZfDiDIsANiXdY6OnLe6U9Gn7UNVXNpo=,tag:0f9UzmLnXEb+3Mvq1o27Ug==,type:str]
|
|
sops:
|
|
age:
|
|
- enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBORHJrRGUraSs0dXc3Y2Zu
|
|
emZtZExCbGQ0dkh2d3NTZWdjZlVPSXp3NEdNCmRsL3VpdjJ2Q2NWN2Z4TnBwTm9u
|
|
T2YvL2ZTejhYVkprdXJQM3F6dlE1NlEKLS0tIFZwaFgwRTA1b2JiU0RMVmQ3clhx
|
|
ZkdURVljTHJjOE1xRmczV3hic2x3U3cKMVcGRX9NQlLefQrjqhYWPH+DyF9N4nw8
|
|
RxRVkw7DPbrfP8Bm57oasBeUya73OxVDZAj7UM/B1MXS/vtU3mXFmw==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
recipient: age14l0hwfqylwpemz5y2ghh2yxk0phszlnj3qlejhue0fw0kz3tmfgqdsjzdh
|
|
encrypted_regex: ^(data|stringData)$
|
|
lastmodified: "2026-07-29T06:45:33Z"
|
|
mac: ENC[AES256_GCM,data:RhzGNv1r0WcZb18PNAWpCfFCE6FJA8JijRpwZGZwLTBwJ2jdJVrypBEfkCBCPI3BpJNhomX6VMTAPoyfybMzK+s3GYnMgB3Sgju8vio+DsdpvFdu1rXmzHdVNkvvXgCOzxIo0ojoJHG6RwMRvcdcDqR+TvmrHYDFFqDz9DlXTKI=,iv:TwwH61WTRsqB3JyraHru8XDQsedNWU1v0cAV+lkKwas=,tag:0oxbdkPxE//vyrZkJNTTLw==,type:str]
|
|
version: 3.13.3
|