A lowly tech priest's attempt to please Mars
chore: update s3 key
+33
-30
+3
kubernetes/apps/storage/postgres/clusters/backup.yaml
+3
kubernetes/apps/storage/postgres/clusters/backup.yaml
···
14
14
spec:
15
15
securityContext:
16
16
fsGroup: 2000
17
+
seccompProfile:
18
+
type: RuntimeDefault
17
19
containers:
18
20
- name: s3proxy
19
21
securityContext:
···
23
25
readOnlyRootFilesystem: true
24
26
runAsNonRoot: true
25
27
runAsUser: 1000
28
+
allowPrivilegeEscalation: false
26
29
image: ghcr.io/intrinsec/s3proxy:1.7.0
27
30
imagePullPolicy: IfNotPresent
28
31
args:
+30
-30
kubernetes/apps/storage/postgres/clusters/secrets.yaml
+30
-30
kubernetes/apps/storage/postgres/clusters/secrets.yaml
···
3
3
metadata:
4
4
name: s3proxy
5
5
stringData:
6
-
AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:YBD7DclbfYxcdZNmcg99WUnm/BM=,iv:P1yXu0tLPoXlSUHJP27BjSS4zQe+vjuU9QXfgPXrO0Q=,tag:xzY10mtFxlbTOxpNX7BTwA==,type:str]
7
-
AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:AtN6zJ9Ujv73KbmmIe7Lb7G9SrhpRQvcc+wMddBqjIzoyapARWCQfA==,iv:qjsjxChwAGBcM/MuMrRdqKtcUC8bASs+FQSNsVNf9es=,tag:4tt7UQkdLcPUhErKWJKvRQ==,type:str]
8
-
S3PROXY_ENCRYPT_KEY: ENC[AES256_GCM,data:RWlJD5bJ1z6X9PyYVpTrARcI6CLLdWfDcDAXg1mq/V4cFL/8+18ooscbGiynbJ+5Nj6eCBenA0Dc3yIGYZVXm+293ZCMu7YNjVKyXDwJqXwwXexbboPR02/KAGHzVjweYseOgkCuskT9I+KXca/pVf3O+spL9kTZrzwUqv/jXWhEvxsaRLrAM3v8B5KQJWCc327LghLx/0okdHd9w26WKFHmbGbEDf1guD03Rg==,iv:KINK5Y3852TVNLzOuOqqntMlE3Au3Pjdq0TBFktsegY=,tag:DT/ANIJga7D7aqjVtrkdLA==,type:str]
9
-
S3PROXY_HOST: ENC[AES256_GCM,data:mwkePhCMXEv0rY3e3lUPNn+EmA==,iv:nJoFLsBQiWS5qxTF3vFI5nPbjAuXa7GDhOeiBiWv8Og=,tag:G5n4LqrZbfft2N8N36AJ4A==,type:str]
6
+
AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:9aDJffnxFSl50OPx8Nqgo4xQ4rU=,iv:4KXYpLoglyx7KZer5qwwkOTcrX2Bdd0BOz+vZxRQPIY=,tag:Yc0vd0+diJ/F0Iw9SPFHRA==,type:str]
7
+
AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:SsoEkMT5+sQkUPXSVITNIHOJ9pf3fW7P+pSPmfZkdZ0MEYF1,iv:dXjNIUkeid0r8m0CEHXxnR1QRTcypBuS+RgfqdfttEc=,tag:8mBqQwUHFnEdNI+Ww3UofA==,type:str]
8
+
S3PROXY_ENCRYPT_KEY: ENC[AES256_GCM,data:oIHna1qsCJ5hUAikZd20HyDcxwacgZhLg9Y3oMXUAyPcr4HhODIxq3UXCoTM+6KmtaYUA5A1t0UO0AQxE5TwzeE4agkrp0qg5MyfR1w2J0BCUBgnH4M4HoTuPwtr/k4fJ2mE3uY6z2ANRlu6fikBbC4gWoJeGD+B4TCRXVUMSUgYucpsYib2TL3kB3uC0MIh06JcF5fv0HMMv31fnDHKTS/wJNRV8L2IZmY0KA==,iv:sTjbucCu4bdNHNd31dMo4Iql6dQ4z07hONhMaS2OT4s=,tag:RQodp1Q0bFoZFHh05ksPIw==,type:str]
9
+
S3PROXY_HOST: ENC[AES256_GCM,data:b4DAwodpXJjQ2owwj/eLutEwBA==,iv:cvhtgHYdLpQhp+p/LHy824+zRIPs4S1uktef+6ERDvU=,tag:7S7OeGg+FHW/tzcjGFYRwQ==,type:str]
10
10
sops:
11
11
age:
12
12
- recipient: age13u6nqs8jgp268mya8rht9gyhu86cc53j74f5va65077rsrvkr9gsjeqk88
13
13
enc: |
14
14
-----BEGIN AGE ENCRYPTED FILE-----
15
-
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqaGxDOGtyNkZZT0M3NmRU
16
-
dVdIakV2cHRydk9SOS9LcWZMM2VJNCtOQ1FZCjBCMDIwZ1kvWE5uUjdSQ1ZPVXdP
17
-
YlA5Z0hYcHkyS29UQ2MwbU1FRVZPR3cKLS0tIHYwTkx4aEJCQ3FNeGViTEwybUJY
18
-
S1Z2KytLTjVkeEc5alNPbmI4RGQ3TEUKxP0cG1293hBbBBug6HmDZfWI6/n/RR3D
19
-
8ksg4LmS3BIAEirND/wt2zyUc9/zOKr3Jr6oxeMitbHGG1a2cYvSOg==
15
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoSjhodDVSZjJQU2lON1o0
16
+
dWFwV0RMamhpUVVrSHp2a0NjWCsreVlLbmljCkdQRy9SR2lBSGJJNTl2MEFYVmRT
17
+
Tmh0V1VaaHNKV3R3MTh6MHJVQmQ4R28KLS0tIGJiOU9qOUx3dmhjc3NhNnVzQjZu
18
+
WWVNQ0Y2L09FakVzOGhZVmdpTjMxWjAKFlir27dfhkj8qXGBr0aWufzSlQ3opdpS
19
+
ziHCIA5qL9UlOLrinTxbCIrw0Lw6YUhUSoucVIFSKf52iIMBkQoi6w==
20
20
-----END AGE ENCRYPTED FILE-----
21
21
- recipient: age16tv9zf54wf4txwjx39wz9phw7zggtxe7k0p2lkhtx59u4he72erq4d9xh9
22
22
enc: |
23
23
-----BEGIN AGE ENCRYPTED FILE-----
24
-
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLeGhXREZjZ2lleVZteGlt
25
-
TnlHT1JIMG1mNVZOMTBBSE1yays0c1Jtd1JVClJta0ptVkhyMkY5NjVGVEZhTXBE
26
-
TUk1RWhpYS96SnZmMWp2NnNENnhoVm8KLS0tIGdmTjVpTmNkMHVET2UvaUVOSXdE
27
-
dHJCMDhJTlNLM1VYZ2RRUFR2TXZNZVEKHHCj6Bvx8vF8oCQPHe7HCaBpOZA6TH1u
28
-
UYEq9TP21bGlW1f5r9Itu4zIY4M+9d/zf015K57DZOgXrGULk36ypw==
24
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzNlpJcFJmL3lIVmxSSDg3
25
+
VDJCMFhYdjNIOExmdjRWT2RETEJXNzZHZUJrCkgyRG9BUHBzZTJwMTUrR1c4Mmdk
26
+
ZkJiSkMzZzVacjdzS0hsWnNTaVR0S2cKLS0tIC9BbDVTbVpFVTNPOGljWUthaW5n
27
+
NXg3Y0RQcHFJWkZOZVRwMkNkRmcvYTgKu+XZ8RJPd7XVrqiLoy8GP2yZx6LuIxlp
28
+
2jc514LCgRNcoBAtPuOyCNcilrSHYtWl6tdhR+3GErFZXnju2C8opg==
29
29
-----END AGE ENCRYPTED FILE-----
30
-
lastmodified: "2026-02-13T00:37:28Z"
31
-
mac: ENC[AES256_GCM,data:js/kvf5CnKj1lKzqlVjMu7rQN1WgcaYvFc29yG4LoqNNwz9Rpe01xqRuv5YJu1MRSgJXSKquKXbeT9AczBhOOY1EDJoeGTHbOj5gTT5OK/njgKLRSh+XWmEkuaEjh8SY1BzqoLmKGGgNixvYaJTE+kRVbwfIILZQzYrFN9DFW04=,iv:I2xe9mwMTWQazhWt8Rr60VnYd/2cMSDKro0NQoJJ2sA=,tag:QdLFYybx0XOF5RMdx0nirw==,type:str]
30
+
lastmodified: "2026-02-13T20:58:26Z"
31
+
mac: ENC[AES256_GCM,data:np/E8Y/lme/LIPDScg5YOeP2SUxNswlPX48GZyvtzuwfZ2ZPrMuPm366wRrlyevfhQZHgqN+aPfBJfywcWZ65k8W1mARbWz1nU+DHCj52ujCUXxk1AuCbDspujQDCBDM5I594oUBGo9zO781G6WClgb9dV2UTG298rQqCT8qXIo=,iv:mCk+Ckr7GWYytKMW6xaVB0GnjacUJDH+/bxGqu6vBnU=,tag:s5MP8KoW/jcrmW6RHyiMAw==,type:str]
32
32
encrypted_regex: ^(data|stringData)$
33
33
version: 3.11.0
34
34
---
···
37
37
metadata:
38
38
name: postgres-backup-secrets
39
39
stringData:
40
-
S3_ACCESS_KEY: ENC[AES256_GCM,data:th3i9v2F4CF6gHRCL/zu/lG9JDo=,iv:siXoONFq3b2mdTKQBV721QC2w7e++CpJczO+4JNs4Z4=,tag:6CDdeFqNm3K5DKqkXmzKQg==,type:str]
41
-
S3_SECRET_KEY: ENC[AES256_GCM,data:My6vjH2HouKeJwhZpa13o/NfImVbLdZAmxDy/28T+o1hH/KYWaYz0w==,iv:Jv/mGWNu4p5iLsS71ptAWdWNC+8MezQoUlNgWiDjpps=,tag:gBKV3xVt1+GF3ZtunYN4YA==,type:str]
40
+
S3_ACCESS_KEY: ENC[AES256_GCM,data:MRPb1sqiDpmzZdwrqPnO5AVVcQo=,iv:JfRwvuFBklBkmA4JzQNyGx8yFA4erByhdoXt3uBeCIA=,tag:YPZKCMeA4Lfuvx/g1mMHpA==,type:str]
41
+
S3_SECRET_KEY: ENC[AES256_GCM,data:12G1Qwqp18oA8uKdBK6ZBr3wmxqA3+GYe0h8IaqaqN/coW98,iv:g/MlXrHlOZ90V3YqA6VXAGI+ZdKevPT4tzUvTSuWT90=,tag:/anrRsHJIE+t47cBiIstJg==,type:str]
42
42
sops:
43
43
age:
44
44
- recipient: age13u6nqs8jgp268mya8rht9gyhu86cc53j74f5va65077rsrvkr9gsjeqk88
45
45
enc: |
46
46
-----BEGIN AGE ENCRYPTED FILE-----
47
-
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqaGxDOGtyNkZZT0M3NmRU
48
-
dVdIakV2cHRydk9SOS9LcWZMM2VJNCtOQ1FZCjBCMDIwZ1kvWE5uUjdSQ1ZPVXdP
49
-
YlA5Z0hYcHkyS29UQ2MwbU1FRVZPR3cKLS0tIHYwTkx4aEJCQ3FNeGViTEwybUJY
50
-
S1Z2KytLTjVkeEc5alNPbmI4RGQ3TEUKxP0cG1293hBbBBug6HmDZfWI6/n/RR3D
51
-
8ksg4LmS3BIAEirND/wt2zyUc9/zOKr3Jr6oxeMitbHGG1a2cYvSOg==
47
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoSjhodDVSZjJQU2lON1o0
48
+
dWFwV0RMamhpUVVrSHp2a0NjWCsreVlLbmljCkdQRy9SR2lBSGJJNTl2MEFYVmRT
49
+
Tmh0V1VaaHNKV3R3MTh6MHJVQmQ4R28KLS0tIGJiOU9qOUx3dmhjc3NhNnVzQjZu
50
+
WWVNQ0Y2L09FakVzOGhZVmdpTjMxWjAKFlir27dfhkj8qXGBr0aWufzSlQ3opdpS
51
+
ziHCIA5qL9UlOLrinTxbCIrw0Lw6YUhUSoucVIFSKf52iIMBkQoi6w==
52
52
-----END AGE ENCRYPTED FILE-----
53
53
- recipient: age16tv9zf54wf4txwjx39wz9phw7zggtxe7k0p2lkhtx59u4he72erq4d9xh9
54
54
enc: |
55
55
-----BEGIN AGE ENCRYPTED FILE-----
56
-
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLeGhXREZjZ2lleVZteGlt
57
-
TnlHT1JIMG1mNVZOMTBBSE1yays0c1Jtd1JVClJta0ptVkhyMkY5NjVGVEZhTXBE
58
-
TUk1RWhpYS96SnZmMWp2NnNENnhoVm8KLS0tIGdmTjVpTmNkMHVET2UvaUVOSXdE
59
-
dHJCMDhJTlNLM1VYZ2RRUFR2TXZNZVEKHHCj6Bvx8vF8oCQPHe7HCaBpOZA6TH1u
60
-
UYEq9TP21bGlW1f5r9Itu4zIY4M+9d/zf015K57DZOgXrGULk36ypw==
56
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzNlpJcFJmL3lIVmxSSDg3
57
+
VDJCMFhYdjNIOExmdjRWT2RETEJXNzZHZUJrCkgyRG9BUHBzZTJwMTUrR1c4Mmdk
58
+
ZkJiSkMzZzVacjdzS0hsWnNTaVR0S2cKLS0tIC9BbDVTbVpFVTNPOGljWUthaW5n
59
+
NXg3Y0RQcHFJWkZOZVRwMkNkRmcvYTgKu+XZ8RJPd7XVrqiLoy8GP2yZx6LuIxlp
60
+
2jc514LCgRNcoBAtPuOyCNcilrSHYtWl6tdhR+3GErFZXnju2C8opg==
61
61
-----END AGE ENCRYPTED FILE-----
62
-
lastmodified: "2026-02-13T00:37:28Z"
63
-
mac: ENC[AES256_GCM,data:js/kvf5CnKj1lKzqlVjMu7rQN1WgcaYvFc29yG4LoqNNwz9Rpe01xqRuv5YJu1MRSgJXSKquKXbeT9AczBhOOY1EDJoeGTHbOj5gTT5OK/njgKLRSh+XWmEkuaEjh8SY1BzqoLmKGGgNixvYaJTE+kRVbwfIILZQzYrFN9DFW04=,iv:I2xe9mwMTWQazhWt8Rr60VnYd/2cMSDKro0NQoJJ2sA=,tag:QdLFYybx0XOF5RMdx0nirw==,type:str]
62
+
lastmodified: "2026-02-13T20:58:26Z"
63
+
mac: ENC[AES256_GCM,data:np/E8Y/lme/LIPDScg5YOeP2SUxNswlPX48GZyvtzuwfZ2ZPrMuPm366wRrlyevfhQZHgqN+aPfBJfywcWZ65k8W1mARbWz1nU+DHCj52ujCUXxk1AuCbDspujQDCBDM5I594oUBGo9zO781G6WClgb9dV2UTG298rQqCT8qXIo=,iv:mCk+Ckr7GWYytKMW6xaVB0GnjacUJDH+/bxGqu6vBnU=,tag:s5MP8KoW/jcrmW6RHyiMAw==,type:str]
64
64
encrypted_regex: ^(data|stringData)$
65
65
version: 3.11.0