renovate: deploy renovate on kube

2026-09-12 12:11:14 +00:00 · 2026-08-26 21:35:02 +02:00
parent 45f8f84cbc
commit a80b45618c
51 changed files with 1074 additions and 864 deletions
@@ -82,36 +82,37 @@ extraVolumes:
        name: coredns-lan-zone
 # Tolerate failover nodes
 tolerations:
-    - key: ENC[AES256_GCM,data:jLsxKqX8HEo8NbwtjeGf+8TdVzTgpba8myb09z1FOIoBsplZ9g==,iv:c+rAeZRAL8ZmQwpHDF5xv/l0ZqbWsnsdDlpFDSDfZrA=,tag:u9TfeXzHJ6W0ifaAEoPYFw==,type:str]
+    - key: ENC[AES256_GCM,data:TD6fwhFKP054jWvEGAT4xwhZNT/MP8k0r+Z003ZNxZAAgvA+yQ==,iv:0BoyRY0bMER/w/xhcfyG8rypVwnAX5Mx4GY/uw3EWaw=,tag:Wa+XMBfOZFmozPkkrCC22A==,type:str]
      operator: Exists
      effect: NoSchedule
-    - key: ENC[AES256_GCM,data:hPb/xXAmQrH6,iv:xo935JWcl3a3LyQ8YNIgNrjQkdqlP5aN4ZnjTnp4RM4=,tag:/rkpqOI/pHqXP47OGULnOg==,type:str]
+    - key: ENC[AES256_GCM,data:MmpjgvMIVnwY,iv:UczUocGrbKPWtHvqroPSM0fENcFKA1/q5gg897FQ2os=,tag:VjIXXMqFKZpuJLDcCwrihA==,type:str]
      operator: Equal
-      value: ENC[AES256_GCM,data:nblSYUAjuMk=,iv:yu/IToMo3DC9kfI5DcBPvreJE3dkxdFA5x2fy6dUpjE=,tag:NGVTMBXa/STsOCD+g00yaA==,type:str]
+      value: ENC[AES256_GCM,data:wQt4J0CGyvA=,iv:96KUByHzR0rYzUd5SwvD+KADFJLzEq6tp93WkidjqRk=,tag:6cdRiLbkFam2Op9eL2iNkw==,type:str]
      effect: NoSchedule
 sops:
-    lastmodified: "2026-07-25T08:12:52Z"
-    mac: ENC[AES256_GCM,data:fyuCFq0hIVP0P8e8vqF/OKjBway2EzDo8HJhLpTQqhIOhOP6PsMszovi7BzG4FuqT0Hbcqo7YrjcVKY2WPGIlxoMVBuuXcUSvNB8Tdu6jv1jgq9KOoB0HNbnqX/l3TzN9ckC6Hr+QrwzLIpTYNefDlNovMCz+zBP6ALfMwADCYM=,iv:EiXUFcWr9iL1qdfzcTiL6LYLLrsShzwNNhE0eyLVYrU=,tag:JyN9WrQWSE/3wFksooRRFA==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:JeqUi3IuWEHkXOinYmL1zTnRJzngIZ0YnAsEk4/yAly6MpXEjvaQTC+YCutr+rLd3UKENcpeenqVuJiFni4EVpUUunVV+2TCGuK7rMAUaUBHgdscbnJPxg2rvTnmhDmKwFrEcgM0k4bszzRJnRONCnjf3NDZxbNNUuFDiu88ZFE=,iv:+d4VOxM9fCICHvgl9O4Nm9sZUYkzgqhYqiyDjULPfgk=,tag:wvtKkcdgYcbmtFrUD6Ycxg==,type:str]
    pgp:
-        - created_at: "2026-07-25T08:12:52Z"
+        - created_at: "2026-08-26T19:28:04Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiAQ//efLh++Dcra+LFtcgz/BRXdLyE+RhWXpQjABE2PzgOJpQ
-            xubJJDmIV7BtUFyJS2lEjuZ2Be8uYxs2WtWILDktz2IwNQ882NVCWNCQTPuzEpoK
-            DWqwi7/L6iQldx1aeE/VUocyIxYsqS8ZUHqOM8Z95xlQ0/fmhB7reTCXvuEOiRy6
-            Aapvb2yW9nm7PwBVhJiWQQLGVGUkgPE7HIK1ar3ODl+b4T0FCYqjUzeB78mG2D5i
-            RI0SRt56w+g9XVWk1tijKL9wx11U9KOBbmbdBuE9fkHuenns5omAzKIK0iwdHQkV
-            cl3rr6m79OAqJglDYLFf8LOgHxuVcnlVxOYgmiHXjG4hlJlt7rGE96+UlRHCemhD
-            bgyc7kDR3h4XMagI0OcLzjyvwsymCtZFiE5PLRVLkSCQuyrp5B3QL7Z5hbRZFiKF
-            UlOziOw8sPOcvjOOJpPYF2IqWAGLSYwo5S0nI0O0bwOiM+T+ehZ5q8p47NzFp04q
-            l6JpHtWdjsxVS38nDb9AWqvoHyf8EtFbJYmKeowmbN1/toPQ1q80at/NtUZIzn/3
-            +VhxDP9u38u+lAAuhaBdIolitOi9CWwHqrnRXFa3V4fpQfJqXUc9You5bw/+EABV
-            jTjMpcN7cPWE7SC9R1ZZjvxrMKK0qxdKO5cvXtP/hBd4zOnBqhsQBzr/QB3DycPS
-            XAExosGRaKVumsUVYqEnh7ACVtMHGDLvupj1mqSa8oxRJLVDXNFLpEllFqLpoxjD
-            qbCMib+JeL9/Aq83Apk3HQ48WX+4hvtkKIJ7gzeIPC/IvIVJHk0shd49kxBN
-            =Xsas
+            hQIMA7uy4qQr71wiAQ/9EkvguGI0a/J6jP6h4c6jbvf5EFkF9qUtWimjMgfB/S3F
+            DZjX1YO8lyQmoyMThK2O5U/ocq5/rdQ1P9I9ZZY9+rIy6Gewcw5xBfwivuLUo0aq
+            JRIC98dGeJN14sGJFwiatmGp4Oq31TE6Z9yOam1Qvxcm6X1kURTAa0FYXo6BlLH4
+            sjfdfRAiGScV6jBKsIDc/fct++3FK2TIvwwHgyyXjoDq6Fp2i4hPT7Q97M+nm1d6
+            0HoRO9RcEZzPjulyhMQCl9J037IMGZsA4dpy85jzvF7wsI/XmhTAj5GkETD1ARtS
+            dYGhgz/CUPG78JsRjbP8oEztsUw6blORlhvooB+8gMVPihnpjiiApzHzjVBxz4gJ
+            nxDIUFTqz6sIoAA8W1/auS8zpw6/+bObSA1A+5Uzqc41B0DuqSQLVqx8fO4Yvnt9
+            a0+J05qgOLvSm3uduXCeKnm8nLSMm8YQSKYV3qYSyrqyp0j7pJJ8I2amm1Lq3wdz
+            roMNO5yj4g085x9+6El1+Oaovz1cQM2OlNjV9nYhhJfqZ/zzjuGE2P0VUWfYK1u0
+            +wFe+9ZEgGmwjD5Y8cd+2EFbuY0L2Uuq1LG0eLJKORL4nUy7Bam+sh+WEZ/+hqSi
+            56lcyY/3btMS/GGYekbJ9KU5nsqnw6CAcXxofdhC+VaX5DKwHLSrMXZ7p/a/H+jS
+            XgH4WbiGrBaFDeWLMXnJW0fmR/kn6bt7dLsigkuCxqZ100sD29Qwx+GriOBuqTHD
+            RCSk+he3rUnvCBlSjCf2842cQRlvwg4m7hWHOKJhpPLSXoW9OTK3Fh0RDP8c2Ew=
+            =UIlP
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
    version: 3.10.2
@@ -16,28 +16,29 @@ driver:
 feature:
    enableFSGroupPolicy: true
 sops:
-    lastmodified: "2025-09-23T20:49:33Z"
-    mac: ENC[AES256_GCM,data:PzR0Bd7Zri4gjpaSaeouJxSJbUP8f3dHuzuNlXm7q0B3SgTExHAYWT+YQ4S1QZPibE7LcPMln8Al+ac2TtVaIYD+voISUMt1+w6bqA2RmO0ZbF0mOqMiMTnWtbvCI5b/8g5+lYQRWt+5k6Lwtl5qxbdEeaBKa9qYpNw/DoEDwlM=,iv:T2XcsYVdQUGrjbleoAfcZXmS/m+kh1VcdMpU6TAMnX8=,tag:eWpR8XjOdSujxaz5aeWz2Q==,type:str]
+    lastmodified: "2026-08-26T19:29:16Z"
+    mac: ENC[AES256_GCM,data:NapXtPezjbRh2RVcv8Pi5/jS+TxCsPEVCXhWBLIuvfC4wWuwKelqjX1BjH4B0zTlEVzPzXKkeLyT5Kz0Jh68hwltSPCzF+32BqzpxpP1PD/ErvLvjtagRwnoV7KVN0MuR7RyNusFQUBDVXll9dHp5R7eUIcpe0S2qkVWiqnbx5c=,iv:ynnKQThC7PLua9tNTJLRp1b+V9yp6yUtKtd8fgvkol0=,tag:3r/XZYwK+G4sv+GAHQ2OCQ==,type:str]
    pgp:
-        - created_at: "2025-09-23T20:49:33Z"
+        - created_at: "2026-08-26T19:29:16Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiAQ/+IMPmEpFfZkMC65azxf/qhbBg6z2rVC5Yjb2x0F9vhiCS
-            nbyrAe1jTi5sLXBFAeB3NSR4NAdmuicJMIVcCTBbIQFOdGgE9zh62ZK3nR32JabJ
-            cPIiQLI0N3Mk3Jgmll2m2Zfj4FoanDYm3rJ2mAaKRhqN+txjHCv6bfTMcWfx09FZ
-            QjZbtU3frO+5dbSv7SAvQGpk2ehZJ/zcbhnwMv/wD8uMj9fjRLdhP4yBqDDapiL5
-            IvHkEZhm0egy6dYx2KsM17j31GbA+b74GU1+2+OiZI8CVym8ZqYjHTwMGYjSQrmF
-            v5DqpNrmmq0iumkRkjwYD1z6VCRJTWaSgUplfUoJnXGx8Grgmh7TqTBzAH2LlkR/
-            lqqOo1+GydP1H292AQ21JMTEUoTjbVSJgYDZo+FgfbWIWQMa3DfPx5byC1cL1iQY
-            kIJHkJ5k6NyPzJAF88Wah0dGlUx7IQ8wVZ8T43hf7VaeU1KoLucQfBiSau068cUn
-            zekMh0apT3PadC3w5t5yia+gl4acy6PdpyqFdqEE1CahsIxr8PzFIa3c9lyzkr+E
-            /naeDLQT0akEnRUnvSFLYEwo9TD+pA63eGAMg0fxNtvBpn0l7T9ygyw70ERqyOGk
-            RixYAOwemlFKm4vsJa8Om3vE8chZ70z9e50/bx+kybGgTWKR6251AWU/yCxQd5HS
-            XgFgCrzXAVInmOTNqpafadWJloLrMh9ukeDS2eNIeTe+rbRL9z1iWnBWnJSJ0RBr
-            RYagnwWcQTdxi13qUQcxFGynYZGa703r2/yvCnE0iDVU44IJvWr2B9PW0wnjOSI=
-            =NHP9
+            hQIMA7uy4qQr71wiARAAoaqSEhJGt0xxhujiIxgrHc0psSFXl9USxXJWYsxFAB5e
+            ypcxbemrGtf4cTQn8Ol/pEF/hd8q7NlUnfggBYua9jX5O2jTUYe6v/l67Jxvux/Y
+            X3nt9BmsizFEpHsm4QicsNfqnxJMEWILKA2A+35SBIfRIgqcEP03JrJKkOIsbAkD
+            taNxfHhJEgJlctqnGgIK8KSXQQhYohZiOLukTpfwY8nys+O4dfz7lPu9jlF3GZHM
+            2BZgbEb3+dNq4MsJIysy8ECUCZVuMuhxYHgogcXmm7iZXDoc+ala3CVjGwi/KBVx
+            aD4UBG06kacMaiM9ddpelmTvkD4/GHl1FFCoiIkVelmNMVjD5aecn4xl6r15CC4J
+            IQRO2Jc72sLPAjQsiq9El6K0hFoWj9v4L7xLDbE/1KozjVK8eUtKT5r5p5t5JOvq
+            wvD2TfjDwxdosJ/hkCj6FwvGZxvUUHAyXIN82Q8nMMldjyqtww0JbSOLEz8sZFds
+            AqbTz95kNYZGSoJRa6OYOdXYQk0wG89sqBm5taFm6V9N0hsgv6y7Od21wEgHKxKX
+            GMR/K/mlZ8lr30Tb3KhCgPQ5JpyDKBIvGuAJLnlVE5//wkj7Qd+xXAiZX7qhNFBq
+            ZNy7FKLSC83l5hFKFyFbELe7VPB7YaBGy2312uZue+WQgchndFgRataROaFcz43S
+            XgHovdD6j4T/AEd7N/l+pd6Za8Xejc25+37F3i2Mstbme2Nh8pEqkogRk0zgpJKS
+            /Y/FtQl8+lpJAwiOAbghZYnflvK9bLnTa4cR5MXb737G4MjMg29sPP7sEJGdhpQ=
+            =Xr/t
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
    version: 3.10.2
@@ -8,33 +8,34 @@ provider:
 domainFilters:
    - lan
 extraArgs:
-    - ENC[AES256_GCM,data:pWoRZNy0bqOOC/KNOy5u6yVpqJv29cJIgQ==,iv:gWQc3vdCwT7V67D0tyrPASAUNhVKjc2SIBLcQutIWG8=,tag:q6C1CLTMiGv0ZJ4jrPYOGg==,type:str]
+    - ENC[AES256_GCM,data:6iKGrY+uwK8bF3mpw2TrzLzJkNcPg5gLLg==,iv:0NuYOmgVUGKZkncT01li1G814YHMhgz2MbdfNBewRqw=,tag:evLAb6LzulILrr9bQaeWDA==,type:str]
 env:
    - name: ETCD_URLS
-      value: ENC[AES256_GCM,data:w4cTglu/bE5AkzdHdXhC8B0IazuxfQECVdPB3S2kUSJ8L4Q21oUQOs8I,iv:p560+9a3EqNcnA83Ahx/91w0PfzqWlAY8KRhbaCO5t4=,tag:ajc0Al6wZTOVrkLDXG90+w==,type:str]
+      value: ENC[AES256_GCM,data:Y9osquaMjUJa/irZR3cM+wmhtaIIhQYwVkLVoc1mvK3NOkCX9T0xtCYX,iv:5RkDFNaBi6rpa+JXmwjhZ/DIDtEcCyQ+nY6b/bdZa/c=,tag:EbLcsqneJud6ZQaWOLqZlQ==,type:str]
 sops:
-    lastmodified: "2026-05-02T14:07:20Z"
-    mac: ENC[AES256_GCM,data:unn1TyPyIJZZZl3rB07iCjBJLP5dACsEowaHG2kPD7ItcLeZhz8gjy0Mz0lPgZXizBLtxdPxlH9W4DPZM6tIudghKovOg7ivoUlA78We87wOxACzAlLwG02vw4f5CKwopqEpdcl9aprLbg815IzcDdsKqSLHIw+Xdm0nW4rP+T0=,iv:YCoJhgO4hlcCcvVx/dxrIBR1677U9UREX26QPB8G/WY=,tag:PguKaLKr6wm93OgYgzEENQ==,type:str]
+    lastmodified: "2026-08-26T19:28:04Z"
+    mac: ENC[AES256_GCM,data:GfjlnBdScJU8n8IErBE3mQ2aUpDjrnq6VJmc1Jj+g1ZWVXnfWP2VdN+mn2UHEkZTSzbKLyOI90aDJJYAz3xyR/Tku4GPfz9GFirb+ihz/VkxELtGKUWKOuGKvijieMbzSO/BkdZnkUc4iaxpmIhwxT5CLcqmfjuZmUKHyZLa+gA=,iv:HJH6Kt2cHjjfaPkkQNNsni7r6YNW+uqa0kF9+Am0dO4=,tag:ixBoBrexlvkMvwuHVDzw1Q==,type:str]
    pgp:
-        - created_at: "2026-05-02T14:07:18Z"
+        - created_at: "2026-08-26T19:28:04Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiAQ/+OD3xMKWh/zrmSAzeha7eBUQqxV4Md+Sk5ZaZZpJwXm0F
-            Icb4N7rMRZiUL/BXaH7dDyLNKFbqTGTtLhBtp8IbW6Y6pijQDa3lgX2aC2LjZYP2
-            GTILWOVYMo18h/idESrj9RBpODDCLUwDUipmNNDrNmeq+aotWEBGZgum2mE/lIdY
-            Xx+gK9y6vE4IRnDp0AMBahYenO1QrzmzEJphBocw9H9RBwrXx3a4Ke4NY56/0cn+
-            Q0+pBZdN4T+tmsplwT55I/2UIyyuLWLzfiXqgzP9PHj2qasP/0txDr3cL1bdMnLU
-            U3ubRFbWHwstjKvsc7sHEZscaSE6CXzpxMCQs98q0I119+l5K4cm/n7ch3b7JDFB
-            vRuYVdNXBllKMbSdvl++zhh9eYD/gofkZhx9cpJTrku8u6IlKuZkuTjNPp4QtkY6
-            pPbC42znQ1xhEw5y4YtCxCfynhjCIko31P0uraMu5Ni8nPwt+nWANKLXn6T0VzlM
-            lFuU2FiPm9/p/4vNd3WlN73ShEf+QCUR6fZqJDEWY82lbdxMX5+p3JKbWtiY+rbH
-            scKh6hH1PAEYxNQosOabQWnt095niHXseWRAAYaRkm86jB500noYZw9sASmARFT6
-            ojrl+hKzUqZa7Y5QIG3VFEiLJKIMDDoT8ojeKkuq5jCznInMdqQ/LlRX68IPI53S
-            XgGNlbkKDLJx2r8ImRTXDkXIJT0d7iBnWksUHYgNnMnFgd8cR5Kud2NU2Hfh5zbQ
-            2q3dcJiO58H3CK6fZQhLkyTbodvD8+4z6E9rblWeAZR03qf8UPW2UmmWPlRgUPc=
-            =SbhF
+            hQIMA7uy4qQr71wiAQ//bmKIj9YnLfdbA0FGxeve0/LggMedHktqWamjHy00TCls
+            +sVFYjJ5LY4d5i8yQQMP3PbTv6TL5PChDJ0oLXuVevuszDpTrCxJCbpQgIhzNdpH
+            DnSh0nvn/N4dr0vyiZ0i3HOqVn0BxPm8YpllsU6yXzoHdOtDVf2iboYe/ePL9XAX
+            PB7ZYOeAKjPcCPrb5lUaBKn9j8WmMz3XmGcQpYS7kIfJ5BZlcuXROV7UCLo8V3pD
+            6NvyXWBhbmBJVWjofcrLQxIdGgc1WKpIOjAWs7cmroZ3Qpyh6r3EFd8GkahVFruK
+            y79BELZjZIg7texNN+oseqv/KXWVC7ZU+fRbUJCSF/z0zWINzTyrbIbMi3MxDzUf
+            A6e8HGij0PRmkzij4BkFbkbRbvoYYdl0pThtoHlZCvKuVSa8g4IPorukK3HD9ows
+            9W1KzUOBMGmhiQLivg0k9OUkZcCtGdgu70a502paW+KieFngfcEkQG3CzA6crRw7
+            uWAC6UJCGtD++kiIloaqFlur3ElihesbrP/KD2XvDzoKXoTKHQQtbus+RupHJdLV
+            gxEzftWABs/4CVirQ4PwV765egsn33nXoHsqTu99bbA61d30T2x/EetOuxVGJqdj
+            L1c9OKXB5SF7/9QxPmmAGGQvm1k9R8Ii7LxOUX+HKlk8bEys6L565KYPz8lhxYrS
+            XgFGgKB+m98+t0UKtYTuc7N9JXiKjCKuahm3sjWHN61C50W4UZIe6/1h/mVpQrcM
+            DjOv4pDbXvVRFXoKEA5W4WimyRcvkICDloI2Q71F4nT3Bv+3MkjN6KC+wdzJBo8=
+            =+bui
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
    version: 3.10.2
@@ -34,23 +34,23 @@ persistence:
 # R740, but keeps things correct if that ever changes).
 longhornManager:
    tolerations:
-        - key: ENC[AES256_GCM,data:DDNTXJiwP2LQiOmqgf/L6tLIZiFgqh42dLDXj8xomGv7rlUP9A==,iv:eu6vnl3EiLu1DWWDWlxkQNcN6/uEhSkpufw7L9Ikr14=,tag:DJOMo8LDGmzkqvIEkfCTHg==,type:str]
+        - key: ENC[AES256_GCM,data:/lEcTm3XFvlmSSJwYhG0CeYXmDHOfUa+yHXfQFxt9WgHN/EBGQ==,iv:h2ZUX6s/lrhjp6yC+PFYACR10uxH7D86vAESbQ9H/9s=,tag:F5xBv+YpjHeErRKTRzNM6g==,type:str]
          operator: Exists
          effect: NoSchedule
        # Tolerate the failover taint so longhorn-manager runs on the P330
-        - key: ENC[AES256_GCM,data:rbWq0sruC6zC,iv:Eq5izQ4LXZ90Bhf1BJ7V9/Xo7HVMULeDHZ6NgItZfGQ=,tag:ixJt7YD4cBy+SrG2WVn0ng==,type:str]
-          value: ENC[AES256_GCM,data:wxGNkS97rg8=,iv:bBGGqcwibhXE0zkH+ZJEVgr20ogu7JwQxxDXqJcMdsQ=,tag:VLBQh8vRl1SiYB9S/vwLeg==,type:str]
+        - key: ENC[AES256_GCM,data:dBRTGlRjjGCR,iv:AcPEXMinsw6ow0izpIXFntwZUMAvMOA1P65mJDBwhmw=,tag:0w24kf8BfryNs07RpWme9w==,type:str]
+          value: ENC[AES256_GCM,data:7XvkPrpko5A=,iv:J8qgVcveMb17rgzYN6WgmE5NpsaKDKMU/2EEctaQL5I=,tag:T9ofKbtlEiVPBqX/xEpnFA==,type:str]
          operator: Equal
          effect: NoSchedule
 # longhorn-driver (CSI provisioner/attacher deployer) — tolerate the same
 # taints so CSI operations work from the failover node.
 longhornDriver:
    tolerations:
-        - key: ENC[AES256_GCM,data:1EBSG4hL4heCnLFJYzTNaQWtFU3v6xwTlG+Y9/H4p5d0TZdFog==,iv:9ILcNXXzxzG5CYA4Ny7bKHBI581B1qJC3OBUObScxbQ=,tag:4B4JaFO0tfyVA6w7ypCY6g==,type:str]
+        - key: ENC[AES256_GCM,data:LuvHfPv9JRofL9cOJe/kvfs01+9F3d1hiCjr+WCTzMrxlneCBw==,iv:aC8TMpygwEio0Y6zau5QGTRNMDoxajuBLwVrFF+7fjg=,tag:nSJB+PBouekJkX23ar46kA==,type:str]
          operator: Exists
          effect: NoSchedule
-        - key: ENC[AES256_GCM,data:ZSC5qg+ChOkI,iv:rIq8j7L7F641kWDzcSV9lrYxhHggT1FTZ8WF53vxvV0=,tag:Hj4RlF3usdIQi0G6Ecmdbg==,type:str]
-          value: ENC[AES256_GCM,data:YfiuCv2EKec=,iv:+6i5CT1ToCKy1gFtVVIFv5FLQaJaKHx4vQk8b0IBy3U=,tag:zHgzNuijbwI1QbvuLnZNvw==,type:str]
+        - key: ENC[AES256_GCM,data:P+XEpfaaKMkr,iv:SY0hvYXfF6MyJYbzKcCEMaNhzoTWAbK1dYgusgTfsWM=,tag:U9M9+EeSylFKaOqmWUW6bg==,type:str]
+          value: ENC[AES256_GCM,data:A7XxyClHSCQ=,iv:cw9fzGcxDcSrELJlWmqxGuzTvZy5aYe/y43Xq0a1xdc=,tag:sj0ZQPBXJQURZ6A3QPJENg==,type:str]
          operator: Equal
          effect: NoSchedule
 # longhorn-ui — tolerate the same taints so the UI is reachable even if it
@@ -58,11 +58,11 @@ longhornDriver:
 longhornUI:
    replicas: 1
    tolerations:
-        - key: ENC[AES256_GCM,data:n4UdwssGYhHQgDTpCpu+WgIPsdNc8uAaZtnURZt0/C3VfeLR4w==,iv:mqy0GqHN0KxtkETS7psu61Mr1oGmtPDhg2vQhVDas6c=,tag:uUd+NY90XK3i0aigc5ndCg==,type:str]
+        - key: ENC[AES256_GCM,data:k8A6ubFAYnPbFLVraOLB80iJctQEV4ffH21UceeYlMG0khgfkg==,iv:YIz/8wC36BkA6n2qKyBEp+jJhfI0mTvXz57oQC527s4=,tag:kA2c9nmLkKJMANrv6KXXPA==,type:str]
          operator: Exists
          effect: NoSchedule
-        - key: ENC[AES256_GCM,data:isSkUNqax+AU,iv:jWgZyZL9VMmzYqoLCUkIiUuy1iBeOm2RE5CjZGCcXxQ=,tag:714V0YGb7jqebC4IRX/phw==,type:str]
-          value: ENC[AES256_GCM,data:Qbtu1wgV1oI=,iv:RihD43IA1+C3m9OkXACGgd5lY9lDWCyzIcw/MCoSMvg=,tag:WzQtC4rT+uovS6s36DJWUw==,type:str]
+        - key: ENC[AES256_GCM,data:38V7JVb5lLNy,iv:gCB4vmb9dDlOvYg2BBJyg4qzFKz6rfCNiiPZF77t2JI=,tag:rPQtsPyoVSo1CuRnB/jVGw==,type:str]
+          value: ENC[AES256_GCM,data:1X3YImQC2Js=,iv:G/y3Gn1NVPoIqtezDGEahPdv8G4kepSDGipnh+kd5Xk=,tag:HgUm6SNMLp7ELXhpUwWDbw==,type:str]
          operator: Equal
          effect: NoSchedule
 # Disable ingress for now
@@ -77,28 +77,29 @@ defaultBackupStore:
    # Poll the backup target every 5 minutes for new/removed backups.
    pollInterval: 300
 sops:
-    lastmodified: "2026-07-26T08:44:08Z"
-    mac: ENC[AES256_GCM,data:4shHlVWcVol/Z8b+5+tz6shT8x6gCZz2xhYv1VT7dHlgcYWWgq2V5mbGUtsVmWFzkGPC5rYvU3dUEiEkl0zb6Q1rP/fD6xQmlyIgH/ioHrfCvjorY5Rv8t4OFH/TyBK9hMwC+iFdAUJOdE9vYQoDmUMTGz6XwWiDY3PxRv1X9D4=,iv:DDDiStImg5qH2QP9lcSyW5+b+1P1mk6F0TWkt9p2syo=,tag:zJnZ455gsXPkE4Lfup2Rcg==,type:str]
+    lastmodified: "2026-08-26T19:28:05Z"
+    mac: ENC[AES256_GCM,data:afotIAcIgyM9YUDnvMJEVQqG2GG5+x14vbBdzg1wb2nYvJEQmLF6QRXhi7xhU59xIk7aPC+EuZmaXITc7jRJdgmr+4ovyEA0ajaRhLh22Zvhwg/WwtSOTx21PLQ8TqnKyCT+Qg/XfHimefkJM5LN09ZcmlBfAn6ycUo2rjTafho=,iv:+2UW9Ozwaezz8U/WnmcDFkKnl5HWePnWrgM++fqup1A=,tag:OlJi69lRHdWMyZXDqKUU9g==,type:str]
    pgp:
-        - created_at: "2026-07-26T08:44:08Z"
+        - created_at: "2026-08-26T19:28:04Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiAQ/9FsBtkggrKwHfh5FFRUFkyqCU596d/R7ZEvsMP7zzCH9H
-            VAAYJxl8D6/KY5EavpeZH4s2ZnlzZjlb/qS2CKpSzXuN7ADPnK10cBxxAOQLp6KF
-            pqdkv6x5MyWbfv87IzM8cI0D/jlG2/iZPfBZy/YU4Rg8cefIl82vNgNADW2O68bK
-            w1VS75AYKmUfXZ2vqz+wX46YcjdXkrvRwzM9lzfIm2Q2dKMqBKSYzxMICZ/hWGRj
-            t33KbZLKC1Kg0NmYOY4GCt8hi6Ck4TjKvzxktsEpXYFDhWzXe9nr+axtrfypLrAn
-            fcLCQV1FSovMK+P4JxB/dd0u+F3RR500F3tBJPQ1xs1Rc1f8Cd2Ynr/3LWtTstkq
-            JyOfLFAj4/LG8o7ub/FSvLZZI052iRLZqlIIe0cFTqCz31yVEJOnLJWmME36hDEm
-            rfd3X9IvixfwWVTa3K0TxZta7u0Q0DsqHIt3eLdeTJC3wY4J+A/vUvPFv137YEqp
-            O+/ALTbwK7ViSQIupjr4kEcklBtiu9myNi3u8JNg67/XHwahCh0tfGk4jCevve5S
-            dDk4Ud7469LuDwYSZw0RdwuU89jQivvsp8/mZpQIoSVzl//iEQ2EOAff1gMfiPoj
-            1MrwGtrrMAo+2Uoxacd7LfFn/l1zRNiGw1rX21NzswmzIU84US4Grv9LGealQ8TS
-            XgH+datMRHIAPKcYY0u/B/PfyoKArlPUzQsIQOm02+s1zuvK/dArKxgObKTAr/u4
-            uNuVH3ObUVMb6VX4iwlxfS+VKpjotTbgY2TJfV46kGC3JJ0w1LdjEyJbpYlIz/k=
-            =HWEp
+            hQIMA7uy4qQr71wiAQ/+N+McZCHhik9SUyO4Dk2O2/9Lu06X81x+VCgjBP99Sa4V
+            bix8t+QUfkhtUhzkxWtX9NMRa8r/61xMFs6RWIfCT1pAUKerbSBuTUb6kJSaDEfW
+            WvJqfAp6SHGLAi5brvcargnRXBon2uuWCMIifB5dAQWrZxSyh3Y+6QBD4bKUJAkD
+            9oEJv0edWoDbVbwPxYGJTZWARXONo5wAOXJJPP8EGPmt84XK/u+s4jMDfEzeo1cA
+            Uhg4+1E6IXjFCAokMgk+vPwq6YhWpUt3kjY6xUaOpF4M4z4nxAUusJrAdJ55W5Hr
+            kffOrQv4h9rb9+XQDh83jdbUN+PToq81mzY2S/CutdyRDYIokFosocBay/bSRV8N
+            jg/yKXzuh6NDHRgYHmIIWwxLenG2ig/JMwRCqK32NJaSAFa/aghdkLqjjNrzGFca
+            DAH4xxT5g4kfER7R3TX//V+vQGOmlS/Ft3p8uuBHiKhTwTf18tKLvyqFQEqYA7D0
+            eyXcsQr5P/mnWKaTrau86aYMbaBjP4DtT4hHYr2yVkY4e5IyCW7IIYjxmg0zqJoO
+            oZeLk14Y+v++vCzGhglSkyiQEqCVrEhgj/JJbb2mPh/F+Ck9NSu7z54qQK7HpUx0
+            fmgW0+szkfnSlzWSa8m9cSpSgIqFeH6/yuGkgrOm+e/t0pTlE8w2Sgf3KwC2qk3S
+            XAGwOmmBn2FUjN/dBcjfhlJjxJS6Cb3ggJ6YnracJzJVjx+YkkIdpFYYsYs6HY98
+            Fhlt9FPDs0IfH/wXQdGRF4o4e7n+YXrgPXcHEebDgQq5C+e0p3OawnvnROQQ
+            =JRl3
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
+    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
+    mac_only_encrypted: true
    version: 3.10.2