renovate: deploy renovate on kube

2026-09-21 16:36:05 +00:00 · 2026-08-26 21:35:02 +02:00
parent 45f8f84cbc
commit a80b45618c
51 changed files with 1074 additions and 864 deletions
@@ -8,18 +8,18 @@ alloy:
    configMap:
        create: false
        name: alloy-config
-        key: ENC[AES256_GCM,data:aevkZsfe4c4H34BJ,iv:4vrNZWwYWaxJUKGbNlnZfk0NM182nBQZuwvqUPslKNA=,tag:lh1iILM3uQAt0An6kN6EHg==,type:str]
+        key: ENC[AES256_GCM,data:RlUaIarJ9nfEU4ou,iv:Fu/T7W9gWVLUQ+/Ts4Lc1VLkmQapRiLyrKp1ph+P8mA=,tag:OFroKnEFq/Q6gXhbU/Bw0w==,type:str]
    # Mount host log paths so the DaemonSet can tail pod/container logs.
    mounts:
        varlog: true
        dockercontainers: false
    stabilityLevel: generally-available
    tolerations:
-        - key: ENC[AES256_GCM,data:zOMWiA9dG+8o,iv:yHp9aBczV8nVRGlJmsBaKs9WdmE3+ii8gWOaj5Xok6M=,tag:8c5ZqBT+vvC0WCW8mi0c9g==,type:str]
-          value: ENC[AES256_GCM,data:2Q04VR9xLbQ=,iv:6+tQXx3IGUIcrse+poG4X/4pS5dN2dKvhb79sCy+nfA=,tag:jb/TZmGpvdsWnKoC5NdCow==,type:str]
+        - key: ENC[AES256_GCM,data:M3Vyi8mZ9N/V,iv:SScQdHgTcTKZN7Wq3pGFHU3UE0zO3hIG8dKpRtsj6iY=,tag:QpJjorykGH4i6PCuH/XGRg==,type:str]
+          value: ENC[AES256_GCM,data:BBn840i3iUU=,iv:t3dSOH7Z5DenpqFVbtWZZvjt9sRcff1HiRlRyGKXs2E=,tag:N5VsZN2ZFE9jTqIZ1rYtDA==,type:str]
          operator: Equal
          effect: NoSchedule
-        - key: ENC[AES256_GCM,data:aVq8GU1ZDg5m9XDEI3PoVbbykU36SnKpEgrohvZ0IBmH47qDKg==,iv:eMcHRO5mGp9hhY4KnuBmdPTjd/9lqtesjA/RRSu4QMw=,tag:2jaGuogkLcIuye2meJQMDQ==,type:str]
+        - key: ENC[AES256_GCM,data:jMLashg6LfKAhJBTNbkoGHJhn7okuyHu/itGSOc7z3fBzS+u1g==,iv:pGMyTOP/h6p90mcjYLIHYvZdPdyknWeh8+FlHzd405w=,tag:54qWJeB2qsjnlDqh9iKBOA==,type:str]
          operator: Exists
          effect: NoSchedule
    resources:
@@ -30,28 +30,29 @@ alloy:
            cpu: 200m
            memory: 256Mi
 sops:
-    lastmodified: "2026-07-28T13:46:53Z"
-    mac: ENC[AES256_GCM,data:u6J/EIP5aFtOi8ZtT8BPn978wJAEL1E3r0WcmG5WIsWKJBZMMQHUYRmHgkS6n0/UMtczWoCdXlxObS73ZQMSSkdtagQHE/HPh69dDdGkjxyM4mlP+YMwcnIQkxpJBAQTERXA+SVoWCZb7ztKbiJS+zPjOCfA95ixQINmBCdUgEc=,iv:WOXngWu3uNWYp18/xWghGJyONBrq3SSnPDwbjHBDozU=,tag:1fasTfuLBGXBCo9JPytsJw==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:9sMkdDmbNDssQ5kqiRrx+rWCHQx4ZdwTFuA7fvUgKpuIGN39Lg+fCunfRXeZ3uRQRq9gnwOvS3lET9/NyXjRZtv89Il1XZX66AXn3+jlp3L/t420qdGt/jb/m+lAWoB4sFKO2G+y85WVW3lKOerciOS/8uknuTX3Zdo6Z1rsJew=,iv:pHEK9Wj6NRkJaMBvc2/cgUnKT3oBvXAux2OLTFbhT6w=,tag:ww01aBQiNqlTRbwaQr+A/g==,type:str]
    pgp:
-        - created_at: "2026-07-28T13:46:53Z"
+        - created_at: "2026-08-26T19:28:04Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiAQ/8DSD0jEn3YE7XHTm4DWdfLHPs1IVg9hyiWSHe5/xH0siD
-            zWonfjcuytw8EHDzv6pQMNYmIpyAmJ92Al4ROJmBV8gZ59+U9goHmw5HgaQAupBJ
-            /gy8iFBteGOHJT+XJPoVb/bu449f7Vle4L3DrOAl6mwxE0WT/7ERoQBeSxL+2OTZ
-            iDPdq24Zy+crDHpoM0GcSnFRLX5UpmL2QXGB8PHyctwSQoDW+sbAY2ME6buOw8HI
-            AremKTRtFm6Pu1Ksdh6ZicaHpLSvLyByPPt2zYhlBQsG3s/SjJDlnakUZHhm7T4o
-            oHzSpKqV7NQbE09ZMyGJrEkl+rfCPeu6jHplW2EX3xjqLWNUF8GHcsDWljogZxXF
-            irBPkyKASEDdkHZgiZobU6BmvQlxILj104xNtUYTTChcKu3s0d5BrkIOGe+Y7rJd
-            fNvMfkmO8/URBgtsXy2xPKo0Jzu/0pZsPEp2lxNeyElwxQqo1CFwhKZPkeQ2eLpu
-            4X7/CMN8KJr6jLX8HhX9AivlCj+2CoT8SB5GAPw4p00eD0GIMWSNyOXjyW/qQZi3
-            82EyX9KIpHjALoOI4/3YgFpUO12AEsjirYKWkUM+IoDp5l+YX59QdM7zUVVyzsTG
-            2EXEdQqYVA7DIcMJb0tHqxDGMGxNayaUsikV7e/kcRVUyDSH+xOfaSUrDTqqv+XS
-            XAFro6848HF5uMIP4pfM+dxzkc9rFF4il0CuGWlscbz5q+Aw9LImGbpNzrWk3Lpi
-            beuwWKFTZ8zab5TH9UF/xqsQeg/nyzQnb3fFPk+owvY7fH6XiYbN5WjKjXGW
-            =kBpp
+            hQIMA7uy4qQr71wiARAAvcjaDA3Rf0PYKELD1RJx5PwfZUdLpLDlGML66GsJGtYg
+            GlnhjSHxAmvJOhvCkrSpD2EGSCzAOHzkLdd2pEmhm5sDIpLl82bJm3vEMGCI6iWs
+            pKJmHFlxxVoswnuvHdj5pymvz5sv3m+Z7QtjX50IsTUiSkMA8kLb+KaeEs9/509g
+            Ond815msz4rfv4FmfjFluzxn19IdPSHB9+S2vMUuZ8iccvJ472RQGTzsOcstSk76
+            Do50+pNBV9TAsHT0j09fasSAHEEjU/xvQvFkgctqIfN0L5NiZu5MuJkEtqFUf0DA
+            ccZCmadZRlwsbF3AZw4026ZvHGpg01MNAhBYQyJsZ97U0/droaTbLSgrrkatShcy
+            rGIdn8WamYflzyr/5yAXYotmUroS1K9bWk7lcLsjD5IFKYTJH7k82AwxYETbOb2p
+            k0WxHZ0utfVm6BlKgJkl3NCtyKExXPnpMFXG8yX0PwHLVhtJoKnoRo+J7DYzrT3n
+            YCVF0xm+y5tZc9Uw9986GoctqAslR0SY3UNU+pJefAXIBLo+nw4VTqLDwB5uzPQ8
+            U4cqx6P48pBaP+wGem9Tem+sh+M4z/71hagPFOOLvD2FxLgY5rRYZxzx9yPi2lCl
+            5wU98CFB76r12lcnlreGyGYrQvLM6ZYHbsai8NxP9X3OKeTb36jC3iNpQktGVqTS
+            XgGj/hGBQZb9GfIS7ll+TRVWvDrHsNpymuPCyz56WRc7ZwhPzllSDZqFUCcG3Axz
+            +9lkm0CozmxBgL4GW/UJBv0xftdWyoT0T3PjrNfhnU8Zz+uyyhNnK/ztThZmwr8=
+            =9sVv
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
    version: 3.10.2
@@ -71,28 +71,29 @@ gateway:
 minio:
    enabled: false
 sops:
-    lastmodified: "2026-08-10T20:52:47Z"
-    mac: ENC[AES256_GCM,data:sT6EiERjNR2hOgsogpkCM3cKRctkGbcxcIrrJB7jb8KJZ2HxGdRGP7+U6uNF3ugxzPcT0O4/80qlEFQ3b+Sf6N+vSAXaBsab+oh7uKt+9En7lgd5V9zkbQtQSS+cr+dlUhU6SOVMCJ2weGyfL59TvIPpxVLy2RRfauAA5W0fl/U=,iv:Bcx4gaBUKZ3GBEKCs4KQMaySuT+Fb7SC7URRrMWRRU8=,tag:byEDzUiP2zdTjPyBO2j1sQ==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:evTELz9bIobCkZDF9+yXXPBjI2Ua95iFEJN2b1mr2pzaei7sYMbseygjtn2RWz33bEMF3q18MSX5XmcqLBs0T2O0RO11yu1KG1QaG2+SudGhCv9+D5DggIsDlHH7PM32n9mX6brA58gD4DS4BKTSHm4MiWQFVxi2GjIdYnNwwww=,iv:KFFXx3MBq0VzAyUvRK//VEHzLVTVd1Zxwwjq/QHqPZ0=,tag:2EAvsPnPnt6dVBF3uXmjfQ==,type:str]
    pgp:
-        - created_at: "2026-08-10T20:52:47Z"
+        - created_at: "2026-08-26T19:28:04Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiAQ//YxPGeiBdLh1nQ6BiV8hWCne5bJA0PcvafsB3caBLcVu2
-            wg7mk+MlcHolXLOpS3DSsdYVlfXr1+qIDToXmFeuWMgeGiSUL5mQghIiZfHlBzwT
-            7aZUcKClYsWg5EGUN9kLkEpqcakrKN/GKE2uBS1Rh0fZUzDbrtugacWfNHmCymQ6
-            TkExLX0nylb4TJgQ77qLk0iAFKwyJ1xw6x/mcc1z8fbUKhyhs9e9pErhCH8f5myl
-            /mAxx3rRu/bEtfn9IRO+XVLLw3l4b0KK21koFi5ZVB05+sz91c4+UNLSHsHaymtP
-            IAcRnaMa1KyOZ9iZ9iVTbFgFfTZy+4N2dm4tYAyvR9Nphj0+XhVfjeoljEh4HdXY
-            SdtSXh/aC9H45Q6wwT7PvBHywRMLYLj0iAoY++SO6/cHF2HGtZJ3MzjrjcUyUZHL
-            oCK7Qmp64bHdYXJQIIprT+cB5CwUPOgW9lE/LbRwIEPbFzCn6q2LMrbZ1Cna9Dd1
-            +/AELxscykqatnuRYP+zNEl4y9Foxux4usXMDCl0piNnVWU1b2T4tBRitD65KUnG
-            yR64Dk9E9+OT/v6xaHKxIxBkfrhOj3K1Tb3tyEhgfvan3x6JRMN1bt4wrD0+Q1s6
-            nY1B/ya63Qo3JHm0461S5oK7Ncv2Op4y1yr//LJ8ueFEOB6zRYoPn4O11WV/29zS
-            XAHMOHZFr7tUXOV222SQ17jIFL/5vrJ0F5WAWrVla4hGRYFUe/Zt/9RABDcKZRWL
-            qzgLvXkfXAiNMqJd1CrOSXBG5MyHoVUYSZef4HXABf2sOxYsGqIgFqUciOa1
-            =OE2y
+            hQIMA7uy4qQr71wiAQ/8CEL9TX06JlyWb79yvro2icKUtd4KCpeD/tBnAnn2ZNbc
+            zAL5xcMIk0FfJS4Rpi3isUimawVoLMBEFhdbNGSq6O/7Za+mmG95eodBalGEe9d0
+            vx0yZQHNNhVZVssMwixApcB4H9bss2qOZJ2An3iIak2dkCG+c+3r+RyeVvOlLF0N
+            Q/b4TEzVlnlHt3gAti77mku0rTbFfGNiKjC08jVtyqxXxSCiDCl97X6d7KHVXyEc
+            /F7WtoYUI14GyKZd5BX/XDuyEOMmGd+ZmM73oIIwrwlcrFnkzHyk45aqrruSpXns
+            xim9CO1Z3t8/wCc3udRmY9KnbKBV1vX3SjGecUi+tBwrchhJ9AqHRMQgOuDMEDx0
+            K2fCAAuww7ZdHCI8R7nBYOj+mbfgy+4vJ6Gtoeee/z7NITGAIZFbggHp8Tyv73AV
+            hxdaFj+//SzHTCu1VAeUTo3idFByAjPqFyIcXJwOhjhUuMhTGG4w6ZolbwNdt2jd
+            1OAxC2q3iECF2sCHDIk0ZhAitnulnilr6YtJ3tdevwVUfQOsuV0efRjkdKoeBHMp
+            FghsUcbItQuZ36+axCrsLk7d/K6fvetPx14wCX2xWma25S6+E4mRbvOlcUKfc6WE
+            /IaM8kObsRYxbhW7gfyBr/4qpGAUcQOJX2psYEXZVZJ0IwrFC9RAbIXYFf1Zv2/S
+            XAGypKSrEQxTBv+0zAi/cPVNZsx5mJR2bYGj4X56z4VVuLQRxVq9X4hLUxkLhoGh
+            0mmlW17YMU2+eVx9f5yTDyHlfRbS0UuVhmLEYtWfAYOWlXvuBB3mA+14ZoIB
+            =LgDs
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
    version: 3.10.2
@@ -33,11 +33,11 @@ vmagent:
        selectAllByDefault: true
        scrapeInterval: 20s
        tolerations:
-            - key: ENC[AES256_GCM,data:u/hZlRGlQsjm,iv:EIP1fb4hFx22j2pBmlmtLpUWcCqP1mZgLdgtG0UHnD0=,tag:ZDc67BaFIOzgobSOxzwoSg==,type:str]
-              value: ENC[AES256_GCM,data:37vtp0nJ+e0=,iv:v0Sch84ysia+ka9foooh+lqAQTc4mYhDxMRiiimIWy4=,tag:sNEHQI89QvMGj60dgoJy4g==,type:str]
+            - key: ENC[AES256_GCM,data:ObyzBcZsnqG5,iv:2YZGA40pHj1LwUxSI6iS6i+YajmXdOrzsdg5FfpsfbA=,tag:AKfrwE+qN9usqW/KwRdnvA==,type:str]
+              value: ENC[AES256_GCM,data:5QZSm1cB9r4=,iv:a6iv6SEvHegPNEyTtyXel5nCFWsVsqQSb6x0NFEMJAU=,tag:hVZcZqqsYfeausuGgWf2RA==,type:str]
              operator: Equal
              effect: NoSchedule
-            - key: ENC[AES256_GCM,data:xBpooUuWDs5ji8gvswL9dBc4hOsqlGpfYtsjGj0t8k8ott/Hdg==,iv:vXQyiFjim3d6qUsgl+lyVaolpvkY0OC6S0JraGuyWaM=,tag:dM6H8evZAw9BTa5UmETmxA==,type:str]
+            - key: ENC[AES256_GCM,data:pe9O4WDtS2wKj+kBMyvK46W1JXELB7P+0sC12OoHWDifeHbbHg==,iv:NNIxYquZCHtwwQOn+GLPRVqP5Bm1+tkJddJximPiGs4=,tag:KGdbdUdT5Pz48X1dY2PfOA==,type:str]
              operator: Exists
              effect: NoSchedule
 # ---------------------------------------------------------------------------
@@ -110,20 +110,20 @@ grafana:
        size: 5Gi
    adminUser: admin
    # SOPS encrypts this when the file is processed.
-    adminPassword: ENC[AES256_GCM,data:ufl2eX7Q7cyIhXUeZxWgVeHa+5Fj9g==,iv:FxaR2v2PhfF+zR7+ScAsEzPQhpVsGly55ByXw6/q2jc=,tag:5w2M3TjMkN7LUHcHezpGhw==,type:str]
+    adminPassword: ENC[AES256_GCM,data:Caz9+0gCg9tGW937xMdDj6yJAKaz4g==,iv:5BAt1p1zpdaabizJDfGzCymb+QESq9lqHCT8cdVqs3E=,tag:NksoLtm5QRN7kO8mTgjFvQ==,type:str]
    # Provision a Loki datasource alongside the chart's default VictoriaMetrics
    # datasource so metric/log correlation works in one UI.
    datasources:
        datasources.yaml:
-            apiVersion: ENC[AES256_GCM,data:1w==,iv:XkLdUqFlwufQBD7ThJ+kPlhsWcY+0cqWkK1Mk9XOK6o=,tag:xk+jVn82cmPqTBqYarzfZg==,type:int]
+            apiVersion: ENC[AES256_GCM,data:hg==,iv:3t/7j0toxZ31JhpOZoOz3WjjoWGhutg5Ga5WGJjnRZo=,tag:bSDD3h0xoQcffslmuBPOUw==,type:int]
            datasources:
-                - name: ENC[AES256_GCM,data:v8Ub8A==,iv:PETLfpJPxLv9UcYAqWb+gaJTIcNixXRd7rztjhNnH+o=,tag:sdNcDdf7/g0x1P0X7u7egw==,type:str]
-                  type: ENC[AES256_GCM,data:mYW4yQ==,iv:003u1YybknNt3pGVLtZNLfCWqi/gcq1cXjzgHa0wVnM=,tag:5B7Zo3KDgTmGrytpMll+Gg==,type:str]
-                  url: ENC[AES256_GCM,data:5+SeDxRQk6qTV3YZ6H5Lw7qgvjHNU2riXfnxXYkx/MVi3DBmm5ugL9PpEprYYt9S,iv:cD/G0SUhuwxX5pjWuyQ9eUdTLekRbzEVo/0AgtN99xs=,tag:0K2BS4IGBNHcTWLUFYaw2Q==,type:str]
-                  access: ENC[AES256_GCM,data:MrPS+4o=,iv:AZ0Jo0jhUhqETZnD1PhkZuQN/GqlHmI7nwv+ket5KOY=,tag:edCTNtS+fsjpN67fiAuoMA==,type:str]
-                  isDefault: ENC[AES256_GCM,data:tL41ZSg=,iv:FSfXJumXRrUJeOdupCRuii/aNY3bbb9tjkMA8JUcV8o=,tag:s/FOwc6s2C7X9KKJo+CKng==,type:bool]
+                - name: ENC[AES256_GCM,data:w0CKrw==,iv:sJJWcnHqVGWQg70DEOtO8U8NdIKqxNux8T3N9y6xn0E=,tag:MuozFD6M3n/6Gua+c6ASMA==,type:str]
+                  type: ENC[AES256_GCM,data:oPo9vA==,iv:l5itcQZ79LA5n7RYQ+mF5ZKlFHdF+3w+bC/4cDnaWkU=,tag:q7avCfUl6DmqBZe5VHQCTw==,type:str]
+                  url: ENC[AES256_GCM,data:PjGswrAD+Y3aqWHmuV60ppWrY+pmnVeezfI8BiD0h2CeAh0Yt0LxvMIIqPnvYbQT,iv:oEavqV6YMYI+iZ+tGs70N2moVRuBrSYDlruS2YjeyZg=,tag:nEJOneNf321DnnwW/y5DQQ==,type:str]
+                  access: ENC[AES256_GCM,data:QC4cUVs=,iv:TGlJgdVlvsnLO4AlinMJ5pX8LLSz7E1XmFZRyvo/RAc=,tag:vAEwvlTdHWfitJO/E/86fw==,type:str]
+                  isDefault: ENC[AES256_GCM,data:kmIxwOE=,iv:3aUjEF/CNF48xnV4/ZLLMI6XQ6N9sSW7lD8ndeJOf4M=,tag:8eqVGpyu0vtxubRFyJNspg==,type:bool]
                  jsonData:
-                    maxLines: ENC[AES256_GCM,data:NKwyqg==,iv:t2Rsefq9jsXpH92b/SiF4mh1Sy/bQ9SQBhg6xqc8nbU=,tag:w4o2v9s2BkK+T0PlEyBwBw==,type:int]
+                    maxLines: ENC[AES256_GCM,data:oVIHOg==,iv:0Pqr6QHMuChLx0fW3BDo6F4DjD+Db8KfaRG0d5FVpiM=,tag:p9R7APLX6jrqlpfziFe1jg==,type:int]
    ingress:
        enabled: true
        ingressClassName: traefik
@@ -222,28 +222,29 @@ extraRules:
                    summary: Low disk space on {{ $labels.instance }} {{ $labels.mountpoint }}
                    description: Disk usage above 85% for 10 minutes.
 sops:
-    lastmodified: "2026-08-10T20:52:47Z"
-    mac: ENC[AES256_GCM,data:9R6bXpoKxowWpkoSOcjxkVI1EkKaoCiy7/c3/LYE81j50ThgPUXlcAnf024D0tXHv0LYCJm54qXNDwkg1Jzb3SYOt15Xbw9wPHyxtUFHKDb12BWGtyrE7TRw6VYdXs1P+TzZDJZPJJjSyTOW+hdB2WxNu7QG1M27Bg3DE28iOdg=,iv:OQisyRio+fqzdSU16whSJ26rvGibqP4FardJ0p3Ubeo=,tag:fHPd1TnzsmBWKLb6QTP7Fg==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:duINkuCjZUjD8uoC38wXH7j3QbFLw1fM9R4BA5ZDSsR+yh/YU463co5RbqSMOWNz3vzLAvwrx5oIT+mkFvq9WlhqDFBNqTRaSZUtXeBrX9DDng83fG2lRn91HmcnjcdNsq+JuPL/tITvWOZj4B35SCMU4qDN/RNRZ7lLN8aM4Qg=,iv:oH+WXVyya0+UPzZp65EShapOwVKylP23oSl8o8BQSFU=,tag:HVY3fh22qjyHDrnTyf2dHg==,type:str]
    pgp:
-        - created_at: "2026-08-10T20:52:47Z"
+        - created_at: "2026-08-26T19:28:04Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiAQ/+Kc8P/t7IZ4shbHhrh25wdm8mI27QZ/h3uujubjgoWooD
-            oh+6zF7sqP36hOxyFjGBnmyHCp1Qqk4lxt3mBT0f5TR/q8DkBTbUDm8PTouZTG8/
-            dbEt29r7dzVrH+O7vMf2QWGt7wpvv5iOJsOXBJXvdaiKJCM0noaLryHPnzTbt1BQ
-            tAN5vk1wlDMZ3lPekKBRQe8W5dWAcfo5WSf5dPH0cVcXtDvO86uCPN+hN9dSp0KZ
-            LeC1WPRrNCLoHYxF4uFl/DYlnDbS0mg9DJqRqSvLdMqTkAIZUHEv/5Qwg1nsNGjk
-            5K2OWdbBz2vU/8hoN/9Qmw3gfZHfA4NW+DFzW6bv+5siATSNTObkLCBOHhgWd1oY
-            hRRhJeD6o6KXZhwai5OnTH3VMH8+OYp9wxYVhVDQ4y3+JOtbgCuDI18q7dkU7mAy
-            9nJMn0IgmqkRw7v8hfzjV8T7Ktv/b+HlJq+PB6/UXGaUutgrPFa70RLLAkFfFKUj
-            2oV3yhRHvPTTDXx6bw5knBDRh/XvtX2JJVgp9x7hnKbHr905qithP+tABNAloX3V
-            zOeEBV4EnIZk/sMB5CQcR0A8gznGpskYtowEVVr9pouNaC8o8D2qfCRIYvcaDCFU
-            t5N4te0vg6uLbW9PNokO6rzhJ+7lweC4Ou2zRAxRhSgzmi81ylIdNMKGle+5sn7S
-            XAHRSz9TKJf061m2kk+Ku/yxnzN2CoH4z+x65VvuK4qpVy2dSC00xyXdR4HxGzVO
-            jpRlAuWFlMu32gTa9cCXQjVPkYE0NbniGtlZkdsCUhydnVtNqqdm0JXTNvPS
-            =U+mY
+            hQIMA7uy4qQr71wiARAAnQ8Ybjm7BCJ8yF5dQXsGRNcz62xxLl0hZy09Ovmp8ofD
+            rUpypx85jEbqVSuBK2dXaDrFNnF47Pk5PG1J1XK74K6CZh54SbtDBDmkfi2wXJBN
+            GPZB0dE5g9H6BQwhuv5KpiuwGYHWHpOPeauYImfEoLoVzO9hw7kawDQLGWylSf3Z
+            JpXFSdSMXW/Q3OVcmnN6e7KumceOzmwjbCK5aDoBHEMX8PrG23rGaBe1Y4dMuZT8
+            5dDVO5vaS1SYC81Piak7ekWTeEP6Lw+kGUdJyrHqyCzrSeGxWisBcqZkbSqSgKqQ
+            OllJ2aPwTA6PUNp3P5aTZBkflS4aKGF92gmIAZSsWDcqu31O5gWJ4+aBHzb8KbRX
+            7eMY8oLy5YFndX3zD2dBpLomtGXNxXwD+R2QRMR5hS+CAVEGPm7nF0N5o624OG19
+            vNUNHxaSLoKamhlgPPky0PxqArNrXfZ0p4Cvm8hj9zAMDex9vggXb7f1YE/aXGyc
+            iul3yMEb6Dk/n/91GAE62SsojHer1UyE5JptRdLDrkBiVLoAeV91LZHjqUSDe61q
+            8K6zrZL1wj0fJz+EljExhN2ZfDk+c+UKe2vTm39HDGltDjNbCnFUAUDsYmn7lcf+
+            cKEYliPFfyG+WJfwk33+2Pa8t0AITCBf4D9XFQyjmUJDsVDH07AjUjxl09Za54fS
+            XAFWX2hR+jYN5S2JM07HLwtlyr3/K3I8dlGrNwvqXomFof/U/EBA3e94FKHt5Rnn
+            9uM9de/8j6L18A6hI6FI1P58pcAzO2y67JegarsDgiGqcDnvtNghOzBKRWMP
+            =Oel8
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
    version: 3.10.2