renovate: deploy renovate on kube

2026-09-13 20:51:14 +00:00 · 2026-08-26 21:35:02 +02:00
parent 45f8f84cbc
commit a80b45618c
51 changed files with 1074 additions and 864 deletions
@@ -3,7 +3,7 @@
 mongo:
    auth:
        rootUser: root
-        rootPassword: ENC[AES256_GCM,data:yKSN7sugGhM=,iv:7DM05CopEc6ocTrte5M+YkLT7C7rPJLy+1db2+aevl8=,tag:QXaKXQB11Z2vdgxqcUuITg==,type:str]
+        rootPassword: ENC[AES256_GCM,data:KYOvN1TxMko=,iv:S3MLPsJoSPGwM5oHSmMR5kWaYPvz+daURgVczll0i5g=,tag:pjUS0aZopHu38Faz/REMLA==,type:str]
    wiredTigerCacheSizeGB: "1"
    resources:
        limits:
@@ -62,30 +62,31 @@ matchCollector:
 # --- Secrets ---
 # mongoPass defaults to mongo.auth.rootPassword if empty (chart template)
 secrets:
-    riotApiKey: ENC[AES256_GCM,data:+8pTWeB4+yZQrsKI2TofjfD7UXGR3FM9/0qtRabYzt4uFYtzcWD9I+Cn,iv:QRvhqATwr5d/a5c+j9G3E/+ywe0J8HRl7dEhvBB9G3E=,tag:FEAEFvpxNqLIgkI4oUEthw==,type:str]
+    riotApiKey: ENC[AES256_GCM,data:2tArxsgyeEZoHwgEeL5PxWcBjdd/Wp55pBuqLnDPwSpZtElMcgrWvMaF,iv:sHm3HvoWLY91IkTSukqSqaDFPd9/T52k244BWKSrKeY=,tag:3r8Bd/uqsZeczWeRy9eyRQ==,type:str]
 sops:
-    lastmodified: "2026-08-13T10:55:04Z"
-    mac: ENC[AES256_GCM,data:pfBuIh6+7hFlirOgnKxhb+hOSd5iI99HQdBdreN/fV1tt03nsLh+xgMwddRMjUY0IQ/Z+L9ZM1TklCgAaXPU7D7ZCnMnVvhvRcSVhjOMca4JVXWtCgYm+/JDFEL+tUbuJqcHF1cjCCG6LKxAG1QhPCfrO3VcUxi5xQRRIgPlPRw=,iv:RCu0jtZmH4p+H1CqWSl0ccFyjlB6asj1S8y4d8EYSL8=,tag:ueRgSKiNhpeWpli0xB+dcQ==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:u7XouUyhhpnMGZ67/jCINIMLNnD0O1dyFh6RR3jlV5KqeRZMzoerDlf2MS7TCD1IMcFjVpHnxU3bOEvRH5kKQJqFq74Su1t/2nFZJPtlw7veBTl4JNlew1uf9l+L+Z5WbDda293smj2Q2R5lwdM4+JRVdcMCKfqbo08UKssUfkI=,iv:oWs3m/l6GsNgKDnYgrriuP+lUUyt7rcZ8tzKi4Xl6IA=,tag:ACNUOv0BPTvuiSHYDzdibA==,type:str]
    pgp:
-        - created_at: "2026-08-13T10:55:04Z"
+        - created_at: "2026-08-26T19:28:04Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiARAAtiFXYhTPpb9298IfH+flVwlwUblP8yTIkVK0OTaYabrQ
-            i9Am0gTUIW0bKPaLNZfYIiu1+h1Qi477bDVVERhZa54QuwIJaJSX5qYFbKH0/3FG
-            xohOQNHKXy0SZGCjbgmJvy331JkdFGX24/9bbDyvht14AUlBhhs74zx61IG/POE5
-            EWLV6P74W88XU1xLWchssMUbs/7nQtuP+N0LQ28Ja4i9nc8xwrM80kn/s5PJeil9
-            ccvjFg9maQ7BY5IYyw2nkPiQ1r++4lVPKzGgJmORRnohsD+Ytf/HlTKNy3KMcgJg
-            DxLEQvej0cSV9clN1DhQbot3dPL4eDXnLhzU0VdZGT5uLvnsMjeINSwyJP2GgHPa
-            OSqG6jT3wJKJMLQ+GWIeTXZD2aPpCHfbhAMvUgKba7hUU/gxQ7/xFwQMW5Mgr+AY
-            NRcbmvFEeWOm73oubbBUepJEoZBAAN9kgH02IZHD9lkfVUdMzFb853x73ZTRi4CS
-            HhAKUqiSEg1ZGgMWPY7H59RGn1Vguf9+YTT0MSZ2YntuQ3Zz++zxM7gomUXOmwoH
-            YuOrV8tOFZ7A5Bv8sGc9NXJuH4D6V3eq6A3BvJb5nRX+hA3uyqMDHuhbW1Ei4f9R
-            vvRp4cGTJY8Mq3GxPmPrH0Rf1P2XIHwfe707DioFJkwTaAtl7aQkEKVU+C9RFSXS
-            XgEvV71YV73oUC+wfugCtRjfWkLfup5KA/0iBsTHiHTAX+3i+TIwfVvgYavPvrRf
-            HktjWZk6X9aD7jMTQRQo53URbcYOiEuKFvOOwYO47RjEWvdToGpSxo3hcddM0XU=
-            =hC/0
+            hQIMA7uy4qQr71wiARAApDjG4q+2vm1NoIEsErqtCoQWpWidU/q6yKEIMlAMxG3m
+            T18ToL7N+/cXN7J4AYmV6D9KL3CC/DDWnPSgcQEW16of3SsBBUF/ufYD8Vm+bkwx
+            ua6Ma213lMBI84RIbHjra/OxDBOP5/w0Cwdkv4jZpgQdgtpkrUwwU1LDZ1JImc6Y
+            x9NQ2ud2D3MsqqAeNOM7YBdVi7dKvnstaBqKDYvuhNCgAYMthw/Z6+67avEcKtcC
+            wtXC8cAEklvpmyKkXXRTYJSkhXkujrRXTbfRIrGW6/qsAlpolOiBYSeVmWgV/BeP
+            j/SMAMGmgy7GQAM8QW+UQhU9a4AOxOP0bc+OubRpQ46VjqjJ/sYgJGww8X6ym+iX
+            kilij98VfdQnGTvbuc4xmiXFDylHcce5p5RWk5HQVfJc+4iNqqzKC9bk3Z/lbgOE
+            TY9MHkQoVlaxFYFRPJM+IZnCdMIZvUE49PgwlRu9BeMdDiDb5PTtq87gvc1O8XdB
+            M8lfa8zr3Eb95f0gbUViZQd2zTVPFKVlGFD894gHoePmUDqNFIVXnthghVjo0Oa0
+            AG69N7F/UvDGqchvcYALOtmnc/sISO7+OOCUjyTASq4sDAyHHuZGLwlgpKX743kD
+            Qj6QATEYwYDkgnAx4d6VbvPOvo5zNFXI4TgnzzJIdMa3qnK+rS5I2Hp+KFMPmwPS
+            XgF02056swR92TVWrRMRnsXX7jSj4M9VtwcLrK4ZGlqIp8erChZRgRIvRHWjPkAh
+            sdSS6JC5YfLxMxGvWrskGwuGdMMbpzsRjzyaJKeSVSFqT3rlx5koq6ecBOt1DRg=
+            =m2ZU
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
    version: 3.10.2
@@ -23,11 +23,11 @@ ingress:
    tls: []
 # Tolerate failover nodes
 tolerations:
-    - key: ENC[AES256_GCM,data:/CMYAKY1KdK9,iv:b+SH9zZtCwROCmMLTa90L+3BiSbLr/keSjRnBTTTWWw=,tag:es0kLEhnri8WZxxl0hEwcQ==,type:str]
+    - key: ENC[AES256_GCM,data:AAvY6dhjiqTC,iv:Wppxrm/iJUNjc/TZvC9mPDAa3toF5BhkLUkuqh77bIg=,tag:p9QKeRskh/y26zjI36freA==,type:str]
      operator: Equal
-      value: ENC[AES256_GCM,data:cFhYWTHVVUU=,iv:7NVK68CshoAzE3SLr80R02Sh2CbH4wLGt4IAS6s2mPA=,tag:1kXlilI3sJDP+nALaS9hmw==,type:str]
+      value: ENC[AES256_GCM,data:m5zWONDhDNw=,iv:ylrQNif/KiQvcyXqIvkCQCiqKaacNElHC90rCGmG9kk=,tag:h+Xm0I9UeEJ33UEq7g1URg==,type:str]
      effect: NoSchedule
-    - key: ENC[AES256_GCM,data:oZsPBWoZNGlsdMKsy9a0iVyFoEv3u+QuH7w9nH+LvxMZwcqYKw==,iv:1CXgeE2ulPBvqWuHGy7MMv7YVvylVVUFkhO1C7bWTy0=,tag:YWtEmfF7/2kq7aUPpkIEig==,type:str]
+    - key: ENC[AES256_GCM,data:FdFM3MInrxMTdioB96eLjf1SuZZFNQOxV3/qjFer8wX/cG43OA==,iv:bTi0PaS0gn/FsxyIIjPpq2rN+tnotqZoiGuZyMSOP68=,tag:5V8LogK4UVMsCUS1fgrwDw==,type:str]
      operator: Exists
      effect: NoSchedule
 # Prefer (non-failover nodes) in normal operation
@@ -37,33 +37,34 @@ affinity:
            - weight: 100
              preference:
                matchExpressions:
-                    - key: ENC[AES256_GCM,data:elhdFbnzEc3Hfk2WfXMMM9PJ5ZE=,iv:W+PHxb5PeCbLr7gLrysbedDZcjkQ9j9sGnL15XWhq80=,tag:pmEtrOBVmVIDEhsY0LfwsA==,type:str]
+                    - key: ENC[AES256_GCM,data:jgNJn7jRN+dMELJ63ywucpnXmOw=,iv:M2uNhIywAnHs4IFCfXNyI5HV3Hb5sCjP7pz3/Yl/nTY=,tag:FS+VvTZmzmQILjvJW8Ceiw==,type:str]
                      operator: NotIn
                      values:
                        - "true"
 sops:
-    lastmodified: "2026-08-15T14:43:02Z"
-    mac: ENC[AES256_GCM,data:0WpSxKZk03sP+2RKDWzkb2z56eBkkUG0fOkAafQn9rxGFTNXmo0cwS4HfM0RvUTHcpEygA2ACb8YyQW3btCucMR2DFtbJ0nnks9qRI0cLTQ12rbJbkwy6+jOz2Sb5g4oD+xx+PEWyyZHKj2J+uRzsPbFjUe6+CG1HOT/lRaerR8=,iv:nhIROduhPWMrVN8yQzU2UqGlLcY7HZMR4SBA6EqMWoM=,tag:17zGcnJjQgH+0speBHymHQ==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:0krPSq8UdOyscNONBsWoRXA6qfDrBlDmm7wa4RMRGnkeI0lM3+GM2PiUtlinrqL6MAvIHlzKTkgG/SuWQoD+Uj2aM6PSxHsIfnxoW/chqVLrw+Q2GvIMlehEKNEsDM/dedvZhIryA6Pl7qD/4xKrkQjlj8LEyrq0qC3OqnHk2Uk=,iv:tQvpZPQUFKdFxcv5ucMSGrzFMJDC5TLP2RsYjYOtaK0=,tag:397SQXa1AYTEzI0gaa2JKA==,type:str]
    pgp:
-        - created_at: "2026-08-15T14:43:02Z"
+        - created_at: "2026-08-26T19:28:04Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiAQ//WPBdlE9EkPZut4QRwpGyj4oNwnKpQhlUSJ2oKxNk1Wtx
-            GMs7FOm8iSpE34RUoDx1UFA8aB/0bqVy5x7Uu8TLhlW+khmcW1rMkSaIOBOqLpgX
-            8sRTefkDq91dC17OFTYIjg28a+7gjlDauQpF2c8ejA4yfCJGRl2Z6P2EVtzEtGpj
-            wKV6wdXrDlHNv+606VrhNzn0eZ/Z0e+NaL3a80rRKmPfbLQaWiRsXxD14ZpdVJLc
-            Vk2dZDSrLmFx/TLHSqrwr5JLOxaNMUYywIc5gZZSQ8lWLnoxZ9zaugvp0JQ5ldb1
-            qQL2a6lyH4sPDK9ZexMlsd4X7PWKQju7ABE790WoLdF/F3++5jAqWAXVoD3d6esG
-            2L1dJFd/4ZhG4NcHuGPwLIowCJnJzfXh8w3jNHKFeL7JAEzTMjbrlg03PHkLUGvW
-            lYWYkRq6HknWr59S88bbRUm31CXCbO0nXQmt9Gy9P9ActaCLfj4kmfd9zkB9rAnS
-            TW0TirFDpyx/I/h5AKgtltH9cp/r8dh/yT4lWp5dvosJX2aP8ux5/bUXJGIJaU8H
-            bU3EZYQBRsWkV/7CqcSN63uIAP027sDF9o4QsrD7N+qCL+/ED3UVXpnQ2YkEXQlN
-            olTO8uQg+HBg34j89a13dXL3y3uqPow4gD6Z/17+rWA5tCKCUYLaS7MjibDoizXS
-            XgHiv7PzHvxrVy5EmyOx0uWO2gzXyUh1oqVMFTlBqlWc+nokHnepCevYYuIWkZh1
-            ePqibvEJyt8DsAnh+4w51fDD27HuYx1hmeZ0r80tmHAkJnuc1d0LEzD4tulvEJg=
-            =0u4g
+            hQIMA7uy4qQr71wiAQ//fmb1BXRMO8INJV9P2ru3R1wDKNO/YCW/ohYhGeRlcNvS
+            y1vIY+GZ5ClPaWMgqcVAUbDmOKseOOXSPhaDPkVwECDsX2nzKSIKAIX9AihD07pl
+            wnDKY840Iogosf8yVHkJmiTCTCcXmj3yoynGDuwiPbi4+pA92ebCx6igCGdUFaTD
+            nbUhDhEVIfMNq5sqmt4ppYuAk3XHabw/g2aF8Tse+thqLlZOeDNmhFVq+sboR6GC
+            KNa6Zxqo2Pp3OjvAjqOVIE9pVNY61DEErj/LzsBGDzo6Sg4qckv8h41lPxbm+Gq3
+            pm7/ytJ1F1ZEk2dfiMgFvMZ6yKi+urWAklZWdsw7II91kvqZ1HZv2JEWC+61Sh5O
+            KngWeZ2wP+Uu6bnBpWzpOpvyKqNb9NcDniwpdE/2KNpVMuWZ5x+G+eLhIS2R+9Nm
+            AiwGpUTsXZv6aT1oeRHDuW7T9EurZYqfNSuJqSZaDJZhYS+PdwUF25eqxb8Vpxo/
+            pNI0zLOtn7C2kXVgUSQLyD/mGcpNo53Vr7K0myg8RYkuR8l7ucbiczf/4YQguDJS
+            Ntxhi8ChVTAtcerpuCtMwYRVlatISf/4jnx1XJi0Im0kQoTPDN/ybqt5wTK/DtHG
+            gwgJsPO8uLfCmNjtKw2c282e1jlDJGTFgKfH6ls3jBY08Uql8qTjgsFa+fL+eanS
+            XAHUEmqmezCImPSyF7Lu18rlB26o3W16FmglTuy7jwV5NsuZJBJVegu5x+oz7xOa
+            2eE4xIpk6Iq3q1AAvbyiLNsvli5tm8mTFjMAZ275DLWps2QlFLFYPmi0nZ9k
+            =K7AY
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
    version: 3.10.2
@@ -6,28 +6,29 @@ ingress:
            - path: /
              pathType: ImplementationSpecific
 sops:
-    lastmodified: "2025-12-29T18:15:28Z"
-    mac: ENC[AES256_GCM,data:npCm/Cwhn5wCsf5qIu2rcwVP+OFe8Ph1qRHQriVANMTC9dioFPuS5IMU1RRnJPNt9y0nE5hSscg5LrfGBB5qCPUbqj3Ca9/Iv3raZLYR6SUcAaitFlxhdcFSEXOhLa+PW6yW5RZjjD9uD0IEuOje3+oa+05kIm3HqdL5Qszarns=,iv:LlywSpl9l1iEa9f1KatvLJSGU/jZWvUbK1HI9uRpZT4=,tag:I3L6JD3GeLNlrR8e5Gz3JA==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:IIlN4Eg5FbDJbQADFcU1Rf0kzv3GrvwjjmrdK1oIX2Ae5u2Wu3+iXhhzx4j6CD43R5omnKdvLVjU3RxDS56vPWuyJziBBe1Hzzl1l8AfdjF4ggS9RZqLf+50+EB7en4jVD7CXwgGBLoy+eU8UZKCeqR5Ft1sMEUcLxGMnvwVBhE=,iv:a0gk/m26Z+q1IHKH/Rdum9eCUPlWXN7qeKP0nQmkBus=,tag:F7f7XAksl3I0KAActBP+Vg==,type:str]
    pgp:
-        - created_at: "2025-12-29T18:15:28Z"
+        - created_at: "2026-08-26T19:28:04Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiAQ//S5Ormwo6DS8bywMVa3JJLuBbkD1aIvuxItPHzdJFte24
-            1b3xRi/byR3i5pgOg55/VPNfscxZranA0GGayYALAepTpdKwYHkrfeZF4RNZHlwe
-            C/7eQoljncOyGUw4txEcD0gfMkQ9aNYYnSs0GwWYylpc/dxaogzwsmsZOGNVK0Rc
-            oeOFonEABIFs/dW+pGTAyUnexJPZO9cWQyt22dEDzRRiifPOJGcSE9+2RICS5p4A
-            75riaa9jC/ANrDi3d/fTYFffAStggChNUtDQMzSKP/itpqK4rs+xWRcsF/U4LLZM
-            xgDPHzJsw4apZiDT+p4dH43DWmEATPcUH/UftG420cHOJdeU7rMuabVbxRXJeXA2
-            1idQiODRW4pEUNEqPMTtjrmxl+SVvCx2TlJ31idiJL9rM0DXfzEF0dacnTjV4LuW
-            2oo9CiU5n+Vh6PRKPYkBXxc0GF6Vcs9/SZj47X8RQcxxqP9BoEZs4JclIS6OGiY7
-            K8dw/xDmpHhLgQ1JCHEWAVuKDNH+KcnMm0mzmCHetI5yMXDVQpxuTkquhUptV3VA
-            XL5+girkZ5W1XMuQiKYcKzS/r3UOHieKBRLw+MhuN+MRLOLr9FRQ+YbEGQ5Mi57R
-            Qcp+nycwU+59rFRjpJaKauRDNZx3P9GnpTJBL9L/4/uibYtyyWEmMNWQcDtyhPnS
-            XAG3SEsYE0547TKm/fP7q9rnAOfKwV4NwBBzGblAUJa/HIFjsT7uGicRdTexrvkK
-            pbIqbyBn0qr8Y1ipaqEimfyc6OT5JDT8239SYnOwG4QPz4DV5vibjG24kykf
-            =GDKV
+            hQIMA7uy4qQr71wiAQ/+I3nQpvsM+0JUvNM/0Cb0H2eI3xdBXwLONzY2EE5U5Qzr
+            81TyVTcKtjXVNFmo4aGUCdXPt++uzLu8X3iOzzZDJzU0IbOrs1t+/CGaHPJvVxIe
+            vTYSF1A3HLr5vZCZ0y96EWV57cU59iYUEDNvXfMuzGG40JGsBiJK0fTzexqc6AnH
+            8L+nWXzBnbN8rU/SnVGPyUPbqeJfy4woeIHolkFS7Iwm389CPEcPdgGQqMpBDb9Y
+            GKoZEg5ZG7p7iAtwIp3tObxu87IsUQg/q3GkAyAJqDc0GTPIVKHcO+x0kbyyBas8
+            bDLBVkJ3c4vR52KL8aXFnQeoB3AoihhbeLZHHr+WuNCv+9xQbQQ1mh6emehIU9IS
+            YSCcEG5/k5WidzO74NY3JDLXLzYJKHTQ7MhH28YkehJJk01Con+0OM+ySvWsqJ2o
+            V/hmHt/UFljt5fEOo8IFm8MTUpSmihm7HJT1FG4N0SLpSEyr8h87rA9WZpZtWYI3
+            6F+tBOlXjBp5Lrl5MfGHzNS/M7zTohUSwSK/N253jUXB8sB+QKOMC/dHB/388JxW
+            46E1MysidePHaxJk3M7DsXcmz4XvWESu1Xpf0bAzDrRS1VhtIHrbQdLwZ6xb9fz9
+            4DphcE/o6uZjJKHS5DwisMtdmX9ibrmw98VLy4lB+sjC6hQhoPI9Ijd/qBDdSYHS
+            XAFVqj4L3dEqfvOpBagoLGRiUV4f96njkEkSmAvtaenF/Ae6qPIbRjPOQv/RNC5y
+            ksOXeeflYu2gVNZvfzENAU3NBYGkmto1MpPDOj0mnUN8pjNbI1SPwKkuzYdo
+            =DesT
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
    version: 3.10.2
@@ -43,11 +43,11 @@ nfs:
    softFail: true
 # Tolerate failover nodes
 tolerations:
-    - key: ENC[AES256_GCM,data:whCOkQ/xDUyG,iv:MU1iyLWTp21dUA0Ukn7L4Kdmp4DcD2946/1lHrgNJJg=,tag:VdVgjP831+lV9IdabEYvOQ==,type:str]
+    - key: ENC[AES256_GCM,data:ja29UypZ8PY4,iv:OclYLpgX/HfvEBeAXsBvaAA4hB0l2Cg0JR7grR1lTTg=,tag:NdWJQdG7glFCOyDHzvXibQ==,type:str]
      operator: Equal
-      value: ENC[AES256_GCM,data:IXlCv4VONI8=,iv:/7uiSYGVY85/8nGgnQjeO+hClQPqWEJWOMwEZs1VuzI=,tag:gZI49sfALmsfaxjF4mP4WQ==,type:str]
+      value: ENC[AES256_GCM,data:kbW9J1Gq96Y=,iv:TbCK7mPcikPYnDIxMVXqCCdhoVFKdinB7D1OczpAsxU=,tag:MHHTSu4zr+BE3iY2q+l06w==,type:str]
      effect: NoSchedule
-    - key: ENC[AES256_GCM,data:7MK/rNoqAhDUJh3O4r0b47PVfT3ItjnnCOKJWZCThzHNIrw0bw==,iv:hUCE6+NwucVw5lwktzOpXRqjG51w4g/AQceyBiduu+E=,tag:DWGdD++4ZptIsSmLpwZAsg==,type:str]
+    - key: ENC[AES256_GCM,data:EmD2g2fExXx1efzKZEBR+gDI0FurCGY7drZeJQ4UWWqWD0WK9w==,iv:g4NEJKZ4VMs4CWjWhV6M3IR1f3iC+1FuoCLnrmWTneA=,tag:0G9psRenOhpP1jF4O/gB2w==,type:str]
      operator: Exists
      effect: NoSchedule
 # Prefer (non-failover nodes) in normal operation
@@ -57,33 +57,34 @@ affinity:
            - weight: 100
              preference:
                matchExpressions:
-                    - key: ENC[AES256_GCM,data:EDr52ZzUZjtJe+oxleIJZZCYCl8=,iv:ZafjjEMMaWYP7JKAhnRkMB9kFghd5LB593mUELzDLwQ=,tag:4EChdzHuvLSxY+fEum1Gzw==,type:str]
+                    - key: ENC[AES256_GCM,data:Awenw5YOeHT4Ox4zmVS1bwOUqEI=,iv:H4Wh8ym80hb7Q+5ZUwFsZi7eJ4PHSLrwV6ug5o6BIzA=,tag:eEXV1rSrhj+h3uLoAPgGxw==,type:str]
                      operator: NotIn
                      values:
                        - "true"
 sops:
-    lastmodified: "2026-07-25T08:12:52Z"
-    mac: ENC[AES256_GCM,data:i7rQRSLbo97jjEksr0NlQzaW27RmYpHwupe+KSAk5Y9yCSN389EKDWGiOlnCbIDAFuvAeIwZOtZah39g1F0f6EW4UWhxP2URqhFtcc9UeDExEi15lbI0/6cgWsv3mHIZb6WPp8dHrfF0JszEPinb154TB3PpUmhyLkY6gghTYBY=,iv:d/pCDDw8itNu9NCkwTxPbr8w+unmSFrjbvaw6KYlrEA=,tag:x+0Us26vvNcvDyn45ilEQQ==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:SykWsjz27MliQeGiof0rYYzo3/qexc+HkYrDW6qTte82+WB4EJN32VeHjU77pPcFHntr6vOJWJuIH+7oP9y6IUp8v2W9L3RF+2s497OLp6s2+rkec7cBNczW7rulTI1ByimcleYuDIDq7X38En1Cy0DLqJfQsgmGZNH4SW0EMQw=,iv:/bQGm0olX0CSlIml6gVFHwXExOhh7IhmGwxkCKesIV8=,tag:RM1BEKHJAxNO+xJSMW6BAA==,type:str]
    pgp:
-        - created_at: "2026-07-25T08:12:52Z"
+        - created_at: "2026-08-26T19:28:04Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiARAAr6IcISfUd787wl46NW/mDOEv+sQCBCvFUSgVUETIVB2W
-            lryFntO+jxYjHYTDoevCimyJpFWai6YzkBvSVb50xXObpyHgjLl3IgQx6B3LZxk7
-            mwIgpa/mEyvlP06GzU4NZy3ac0X9bKpQo5IcU0nwfs5ZedCZ0i8FN76PUp/nIfFJ
-            6AzjxVzcJTDDEPu1ckn1g3sRvLsGsQVzagrLtyEFbYxKxugSE2sswYCMjbnxwMpW
-            NTWGal/6eW7W+oR5iJseYnkFz643ZbkI8BLyEuJtCql14kw5W245FZwbffJQpGpU
-            NbEuRjbVCF0tDwH9zEPNlBOsrmw0FM2HB6sBCMHA9xexuhP3OdIjWuyNHf6oMwS5
-            d2FCOT8xrYBWNOwcoe+xgLam94L2jPcL3SizP7AUEQU1CjXO5q49RvYjPrrgH5zb
-            PvE8yiB1zDPcTqnBf4O+lIUkdEQ0IxkVWuYKljsaJN35yNgFkCoROaGsZD4IcdD6
-            EgtYAllK+NXdzd2/iLHf63J4mJsvRHzLsWcdHZwvJxi3RN5Gi18EB1boCEhFM3Bg
-            KkaNDNwZtWtLl5QLkfO6zTEBx1E49hGRlE1nuDpSbqer7cL5n5Ca5TRAm0BqAC5Z
-            VIjt5CqNcojTVsZLUsYMwq/yI2Lij8/OdM1datuNM8RD33mE+tDB3n8WdNFgN8TS
-            UQG0emw3jDSkHQHVWGc2iPZ033NobqICdv3xvjyjdjngDWEtPj4OoLmriqxi0y7Z
-            LhlZa4RWyBc8TWe9Q8paBUh/NzFGC4v1zt8mfUMSjYfyFA==
-            =ePQy
+            hQIMA7uy4qQr71wiAQ//Te5mPuzpn3t/Tjl48GhLVXX85mm+FmcXLFHD9onv2SS4
+            ojlbXYQcaQyvChWNCHyQ1COubkTWa0JOk43lNDmyrJoTq0fh0avX4oqtJn0eUg7a
+            Ss0xwrUjJ9wQDScyZaqNHH6H3Km2JDll+6ObLkX7qvTvQoi6x8RMxqTpeJ8G8bmS
+            /2sOK5oj9xZlGrA+Bz8u+JE4MguhHwf1WvcJ5dBwaDYgEISUpaTalAKjrLRHFqRL
+            8lyaFqMNBy8VB/zhgJDxy7WhZKv3wGtU4cNmYatJUPWHcjoTSiaNGiu1+7XnjBxY
+            muso76okHjAvf0qiEE1wfDvxuB2VpZyj4QiAgVctcq+hq3yW08FftdMq7xtIiYgw
+            Xsoryrc0reXys4j7V7/GT+g2lIbjOR0EbnY69cLOkidijEIxuqW5F2dSYXv6E1Sn
+            AowT5SH95RyfNV2TghUL7Z9z5a/xzhBz0gQBVvlxcJntpMqkaah+ffwYHHY9nPPm
+            KynAk3zHkRd3MKHHZDrcYwnvhdDAQf/OVrHq34CB0uMIqDY/91EoOE3MiasvzREH
+            8P53YoktNdw/TV7RIhYaHfn6/0J1qw475TiDHEaY/Zy3cXBI1v/BD5Q0qp0ECKr0
+            iYuRtMm7GZNFp6Xj26XbxChPH9MEPvrAkM5iTZ3kXlajjKzNHbMV2ANMI0wxBl3S
+            XgF7I4/pzOC+RzJd5hQFFWOF9aWYFeIxd+IQQWwTDDJ/k+8+Ttd/I6Bq5hdSTJgS
+            OUSnJ4SmnZOK5iIZWVsRvCBCA3ukKUiIsUhFf9UlYxFjkKArOXnReYeaOwzyicQ=
+            =6UoF
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
    version: 3.10.2