From a78c0db3255f710f1918153bc3da85bcab9285db Mon Sep 17 00:00:00 2001 From: SeanOMik Date: Fri, 14 Apr 2023 23:07:26 -0400 Subject: [PATCH] Move transfersh to using minio --- .../apps/tools/transfersh/helm-release.yaml | 7 ++- .../apps/tools/transfersh/kustomization.yaml | 1 + .../transfersh/transfersh-s3-bucket.sops.yaml | 63 +++++++++++++++++++ 3 files changed, 68 insertions(+), 3 deletions(-) create mode 100644 cluster/apps/tools/transfersh/transfersh-s3-bucket.sops.yaml diff --git a/cluster/apps/tools/transfersh/helm-release.yaml b/cluster/apps/tools/transfersh/helm-release.yaml index 4344444..49cef57 100644 --- a/cluster/apps/tools/transfersh/helm-release.yaml +++ b/cluster/apps/tools/transfersh/helm-release.yaml @@ -23,14 +23,15 @@ spec: - --provider - local - - --basedir - - /storage/ - - --temp-path - /tmp/ - --max-upload-size - "10000000" + + envFrom: + - secretRef: + name: transfersh-s3-bucket-secrets service: main: diff --git a/cluster/apps/tools/transfersh/kustomization.yaml b/cluster/apps/tools/transfersh/kustomization.yaml index ea3145d..ee22792 100644 --- a/cluster/apps/tools/transfersh/kustomization.yaml +++ b/cluster/apps/tools/transfersh/kustomization.yaml @@ -1,4 +1,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: +- ./transfersh-s3-bucket.sops.yaml - ./helm-release.yaml \ No newline at end of file diff --git a/cluster/apps/tools/transfersh/transfersh-s3-bucket.sops.yaml b/cluster/apps/tools/transfersh/transfersh-s3-bucket.sops.yaml new file mode 100644 index 0000000..cc36c38 --- /dev/null +++ b/cluster/apps/tools/transfersh/transfersh-s3-bucket.sops.yaml @@ -0,0 +1,63 @@ +apiVersion: v1 +kind: Secret +metadata: + name: transfersh-s3-bucket-secrets + namespace: tools +stringData: + S3_ENDPOINT: ENC[AES256_GCM,data:Q5PAhvhq90a+IeQlWCCy+9hvIw==,iv:sD55TDuyp/LMbhDhFXBCjvDJanbBOI1t8vgXzZBHhSs=,tag:PvTckOtDeUnWet4E5MoTHA==,type:str] + AWS_ACCESS_KEY: ENC[AES256_GCM,data:e3GhNv50ybh9Ls1FSjKQWA==,iv:idI8r4s10Ux9Vv3JWDX7QiNWQRgJl1PwevWhAKCwbII=,tag:Z417z7ZcQE7QKXTkStcwLA==,type:str] + AWS_SECRET_KEY: ENC[AES256_GCM,data:oyFs0Nf7paRsJwD0xDeveuw3ATBi6+tjhZwZLCwiRSA=,iv:LawbdorbaIkkH95CMr2iEPkuFuY4kkLYcWfuyQJwEDY=,tag:XQcOq32Dd1rjFT3zR9ftew==,type:str] + BUCKET: ENC[AES256_GCM,data:3QoiSskImQEilA==,iv:kmNrSWfCm+2rW0HOVM51xCIZk9nD4vIQMSZMiBp/WTQ=,tag:gjy63D+VHvILIaxyEarrUA==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2023-04-15T03:05:18Z" + mac: ENC[AES256_GCM,data:elekx1+EEalv9iuRil7RDhLWdLr7XBUyEQ4niikhW4ZOm/xcdxqEvcow28Ss44Eou8K4JDklwNbkU302XRr0lcH5PDr96xQ84DcZKOSAN3LH9DbpeKqzalCDjdYVOg5VQ/liVUb75H3bu9yWFmyo/FjNngJ1IEDTzPsr5osPnz8=,iv:YtYk5jENg66ikaytvb+5Qe4LMNBxk711JAy1rs+k4IQ=,tag:R3c7oouWp+xCDcY83QTyuA==,type:str] + pgp: + - created_at: "2023-04-07T01:57:22Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMAzKleRwoSoixAQ/9Hi4VyrUXV7LvbCFiLbyfv314lMGwrAf+2po/4Lr1hANe + KiwpfthiNheAjNaGCG6v2C1rx2Wrr5G3+rMik/1TLWbg2u9zZU4mWO8bwJUGXKDo + /T1nl47f09UPDtQ6KiG0nPf3M0Ovmk3d63R3zpY4Q7uE4uhLNDr0KD9mp7MmRCbZ + PO++tdiZa67z9owNDh/NSnQr9Y6JwjlxlkJl5SJ76vaK/SaOi/j86mOm9CV6SQmk + cLOwiO7JxV8I4gD9jlLdYEPS+nqztX5eHLRoaXsAQrX4DdWNnOF0C2sk9nMHwQTb + W8/SVmg7TiVVL6qVCXgUCgFRXllrlGlXlfv+W6ruuZIBv2MAA1V+afl5A3/KVvE6 + FDq9YrJ4XfZPCD2ZByM2386L8MiUwkfF/3uge38MT/WDU2DTT+g7jV3UQs+Awi8f + N4YBVBcp5jGTkMD0347GPfPF7kdiN/YFZ/Ws1jf/EsS6vOpKNlPn64fVJfTSfdie + rvNxksi8Y4vpwEngy38t7JRfpJniDo9iK9EwhXMChYXnWkiz/B3vMoii496B7TzO + 9gKd4v7kFA6iXI+wqbYrZfOGeLZlMI99pwTatNL4fo9ABJ7JScISzTvS7p/xB6Ae + JPdlA0Tf8wP4RYz8YYRcNlfEQPZYb4kHj5r9Ei59InHzwKfq9GyKKvluS0/k3NHU + aAEJAhCVkPuIHluRLHsjVEbKbFzSJUG8p/hSSmQnfk3CT36/dJhgv3jzoL+1/Sx1 + o8OwWPmNq8TuX9SaXfhfy/EGMulWgRaztxt9D+0+wgc8IOAPp+0SYUsaOa0T9+Pl + pjU1GRaK5AlT + =mItp + -----END PGP MESSAGE----- + fp: 2CC2B3631D5C3393901335DB68F95C5D753EE1E5 + - created_at: "2023-04-07T01:57:22Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMA4WLYkVpP8xtAQ/9FQGyKS1wEodU9ZVZ8kxijp6aFtMCmL/I5HBEhbSLj0P9 + TVD0QwnUPZqf7zlWrAh6TspyLQdRMt9JAYZCPyLgu//FdKfBJNYeU3+aWj/lMtJ4 + Twgs7NPtGbRJcpF+a4NmAOIqzKfJI+h714BLFoWrGtUmTE9/dBHh2yxADSgprY1o + /4J8aHQfaqg5JwijP3PhtRMxla4YQfhqf0JRAcmQPKUDuxT2QG/wp59Fq/665aaO + JFWiCOPBqTtEhY4ML4EYNUV+Cd7UT7LOXC+Xzuj1eEGMV1Pmqd1u1UyQKvHOOXhT + AfGeCub+ZONGfmcDcY5gEMnbSCGcQEvipA3dBIIFklgnxM00jmcJ1Ojo1+MYynpl + E1XLOaolRWinlDNXA62k8iWG33hcxHGSzkHrsQjtqrrD2PdHS1RmTJ8Hn+iuRUn6 + /fGk8ZQJ7oMPsZNyfiM0OdwSXxJ4rQUtGkHHd727S4K6nXC6OLxXCzl7lYG7QKcP + RVrbFMNv01aToyNGhLmcSxUYdQ4oc+nv65rNZDsdbi34T+dlULboJDkwV6JrJ5dz + hlu3ySgijZuRD5bfpfKB2RScu2ixEijOIyk1oXBB2Dhyh1ezc3qnAw8xkGr9W2SE + roBuu95mZsIZEtfMS5hxwGyWzSCENnbkSukQhUoIjRXryly7MQgNZ5FMX+f5n3DU + aAEJAhBJcIEidIhFVqDkezzMcofKl3MlXWqkfTUV3vsjz6EpN1FwhpZ3prTexUcM + 9XCx9Wq1kMpjkphWETh2lSAafyIz6R/d4zWV5IWIeDh+USYT9z0Rprp4URka4Wjx + fux0T5xDbgq5 + =eiXM + -----END PGP MESSAGE----- + fp: 8DF31C9F48A24F525FFB1815FC96C52B59328E95 + encrypted_regex: ^(data|stringData)$ + version: 3.7.3