vhaudiquet/homeprod
1
0
Fork 0
mirror of https://github.com/vhaudiquet/homeprod.git synced 2026-07-28 16:40:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

obs,vicm,loki: fix chart version, config values

Browse Source
This commit is contained in:
Valentin Haudiquet
2026-07-28 18:09:30 +02:00
parent 36146904a2
commit b6b6cbacfd
6 changed files with 173 additions and 162 deletions
Download Patch File Download Diff File Expand all files Collapse all files
kubernetes/infrastructure/observability/alertmanager-config.yaml
-27
View File
@@ -1,27 +0,0 @@
apiVersion: v1
kind: Secret
metadata:
name: alertmanager-config
namespace: observability
labels:
app.kubernetes.io/name: alertmanager
app.kubernetes.io/component: notifiers
type: Opaque
stringData:
alertmanager.yaml: |
global:
resolve_timeout: 5m
route:
receiver: default
group_by: ["alertname", "severity", "instance"]
group_wait: 30s
group_interval: 5m
repeat_interval: 4h
receivers:
- name: default
webhook_configs:
# n8n workflow webhook
- url: "http://n8n.lan/webhook/observability-alert"
send_resolved: true
kubernetes/infrastructure/observability/kustomization.yaml
-1
View File
@@ -11,7 +11,6 @@ resources:
- alloy-release.yaml - alloy-release.yaml
- vmalert-rules.yaml - vmalert-rules.yaml
- alloy-config.yaml - alloy-config.yaml
- alertmanager-config.yaml
- vm-internal-ingress.yaml - vm-internal-ingress.yaml
- loki-internal-ingress.yaml - loki-internal-ingress.yaml
secretGenerator: secretGenerator:
kubernetes/infrastructure/observability/loki-values.yaml
+47 -24
View File
@@ -1,10 +1,34 @@
# Loki single-binary Helm values # Loki Helm values
# SOPS-encrypted before commit (per .sops.yaml rules). # Uses Monolithic deployment mode with filesystem storage on a Longhorn PVC.
# Uses the new chart-v18 "Monolithic" deployment mode (SingleBinary mode is
# deprecated in Loki 4 / chart >=18.x). Bundles storage on a Longhorn PVC —
# no minio, no gateway. Resource-light; tuned for a 2-node home cluster.
loki: loki:
deploymentMode: Monolithic deploymentMode: Monolithic
# Filesystem storage — chunks + rules on the PVC. The chart v18 requires
# an explicit loki.storage block; without it the workload template errors
# with "Please define loki.storage.bucketNames.chunks".
storage:
type: filesystem
filesystem:
chunks_directory: /var/loki/chunks
rules_directory: /var/loki/rules
# Required schema config. tsdb store + filesystem object store, schema v13.
# See https://grafana.com/docs/loki/latest/operations/storage/schema/.
schemaConfig:
configs:
- from: 2024-04-01T00:00:00Z
store: tsdb
object_store: filesystem
schema: v13
index:
prefix: index_
period: 24h
# For monolithic mode, point tsdb_shipper at the local store (no index gateway).
storage_config:
tsdb_shipper:
active_index_directory: /var/loki/index
cache_location: /var/loki/index-cache
filesystem:
chunks_directory: /var/loki/chunks
rules_directory: /var/loki/rules
monolithic: monolithic:
persistence: persistence:
storageClassName: longhorn storageClassName: longhorn
@@ -21,10 +45,9 @@ loki:
# 7d log retention (user can tune later). # 7d log retention (user can tune later).
limitsConfig: limitsConfig:
retention_period: 7d retention_period: 7d
# Disable subcharts we don't need in monolithic mode. # Disable distributed components + gateway + minio (monolithic only).
test: test:
enabled: false enabled: false
# Single binary only — disable distributed components.
backend: backend:
replicas: 0 replicas: 0
read: read:
@@ -38,27 +61,27 @@ gateway:
minio: minio:
enabled: false enabled: false
sops: sops:
lastmodified: "2026-07-28T13:46:53Z" lastmodified: "2026-07-28T16:09:30Z"
mac: ENC[AES256_GCM,data:bk1sxO2qIY/FT3+9dTCfpxKBbb9NlyEfTFuUihURUA/AmMJHV4XOx4EaBK6YFbSOVCLny5/aDbUDfF5DMudZTvKMNyU5sWq4X3+6BBZaL3vHSw2+UTA8pdpkNYpLl4uDq5aDFvAN2v/f/XwOpMIEte1L+yi7Rl96hq3Is9TYxjg=,iv:0Ayu7eiEVRAml+SycHWgmmP+rf4fZxhXAALor6d01rI=,tag:+aVf2mehHqak3K5xOHSJCA==,type:str] mac: ENC[AES256_GCM,data:phQ6t8rBVG5rdOR3H4GEWJHiCU1rj0MOzjp2jn2nneOUbbclyn4L4ga7YHOuoce0HEEMWniWxchT2eB0BZM3gtOd3yyBq3z3vTQKI12TsTzQSXxm+AgM4DL855BhPrFJCNZYeXb6IAGVkcRK/N7ihuGWiZORBsPaIcYseW9kjf4=,iv:wNIkcPRr1d79odGsT+yJJ+zqlUVTtqj8c/YkbhqOQjA=,tag:LSXyM6QiCM9qoit++nUkBw==,type:str]
pgp: pgp:
- created_at: "2026-07-28T13:46:53Z" - created_at: "2026-07-28T16:09:30Z"
enc: |- enc: |-
-----BEGIN PGP MESSAGE----- -----BEGIN PGP MESSAGE-----
hQIMA7uy4qQr71wiAQ//cYdDJn/PZWg3nx7eNeHjByT8kpYiTgi28Hbx0MmaR5Dd hQILA7uy4qQr71wiAQ/3c4Q36xa3tNPub4HCEUmJwK7Nmhdrg+sihZYR/TOHuDuV
koqKVn47tSO8UkoIYkJ2uoImBJMmIqSLg5XjIhleUmSrZnrCLm0zhdgljMnkphME sY3GX+HwaRaMh4rOiJpCDa9E3qJY+qh9Wf+rgq+vaL9hmfNBlC+2q2xGv2u6FdiN
N9NYHc2gd65inztRDoZi12zxeDdPLcSo1tKPBvIQi33tWODbT6E8TJ4YGKBEv1+X xXE501qBbZjyNm/9fVAnCxbTBZP2mkRgdzMHfK2dnhIcL0/5LK7NAu+PsMQ0J8uq
NggSqgADxmYevrVYrzJtHCf7o369CUjHUedSkGPDEk7ZNKimb2kEdi4qKV+QFiX7 J5JYCqQTp/bfoRi8O4YXJD38u5d0UyEIy7HImKSn21za6CUErHEgdOTGUzw+UTH9
y4iyqgeEepTjmloXSF6diC1F4cak96MqsNeIpiJLU5L1vWGGvb5J9znijpgqL6eX kYHQykiBVML6bpp3YkqIquBm1tDzNuPvKSynnswJS5DQnGwsWVmESA3Rgfes2doe
aompNyrpUrwrF2dbsfb32o/AW4FjdJsC+7RfLPWs9qBneoUtU7LPisZpN+xQ9kgt 4d2f4Bso8+1+BRgbPkmp2c3/GdNFeUjjj6ViRar1bX2Bmt/ODLjoxAriRzS5ChRe
cx0CVY966y/0WTPm3coIhzO90fzL1kAn7+Bl5W5WhMBFRGDq7K0oqYcgdQmcr45o MBJkKcW1hWotQE1IZgYC8A2I4dvDAbjeTwWmyJW7T1NV0er2rDd8TC9aQfhOPSeh
yegnYxV4uO6Vgf9NV9zEqCvq+UqRZUwJhQSdmaPkvWQDhx91y7lca0WP90xwYMhN mXdF18PXSmonmAdCj8Fu6Zfd6kcMQUQdI5L3BLRAQNs6+0r/tNjPH8vgYQtRWtxO
jUvhHVcpZ7b++sbxNnvbhmnBBkAlwesQHVc85WSvok4kb3KpM1wju/j0KmOP2/lb acguClDwTrMwGM33HiBAYpoZ4hpCk43PRDNf0o2JkDy8tr3uTeBkmHPIA80UsIi8
YazrzeXu47diSttopRU+JphtUQyuOdTqQ+k5x/1gt7qd8R4IbfKAFMKWPC/KLBnH /YmrLzzaF0TaN7OvDLbw/5HUR1R2Wt2Mc3GnTdJIxMogqcw+jO86cNm2v7FJX5v1
d4UIwa+ln/lWhhuR+/PxaPZrXGlm5SidM3r2SlH+1iGJfRzq1USaeEn9Vfp6OVvS wG4ocHbrbfH1lcte3ZW8E5z3evuUeXVgUTL7dRHdNWmfL3HUnBlX+H+z7qWoNdJc
XgFZngqHN4Wv9zdT71EUGeixMz142maTlcPBM1OnHgiIkf3gLoInizU1VrZz/f8s AUhXpEvLTZ0LkA0ZMi749sUcL9cLsXkKJhAPbiF/3ytc7tLc40QsTY53uuqGPU/8
OOB4rHLwFjqj//Lze896q0kaWtnvZOuKdvTRsE7ep8VqAG2pVKwzcpINqnyTZss= LVVX7jUjqBrmeUENYj3zSN3kxcI1OX/qzHdTQ0LFSPPUrCEPtE8hWJrLaUE=
=ww9K =Nr2M
-----END PGP MESSAGE----- -----END PGP MESSAGE-----
fp: DC6910268E657FF70BA7EC289974494E76938DDC fp: DC6910268E657FF70BA7EC289974494E76938DDC
encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$ encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
kubernetes/infrastructure/observability/vmalert-rules.yaml
+36 -35
View File
@@ -1,37 +1,38 @@
apiVersion: v1 # VMRule CR for custom alerting rules (node CPU/RAM/disk).
kind: ConfigMap # The VictoriaMetrics operator's vmalert picks this up automatically via
# selectAllByDefault
apiVersion: victoriametrics.com/v1beta1
kind: VMRule
metadata: metadata:
name: vmalert-rules name: node-alerts
namespace: observability namespace: observability
labels: spec:
app.kubernetes.io/name: vmalert groups:
app.kubernetes.io/component: alerting-rules - name: node
data: rules:
node.rules: | - alert: HighNodeCPU
groups: expr: 100 - (avg by (instance) (rate(node_cpu_seconds_total{mode="idle"}[5m])) * 100) > 80
- name: node for: 10m
rules: labels:
- alert: HighNodeCPU severity: warning
expr: 100 - (avg by(instance)(rate(node_cpu_seconds_total{mode="idle"}[5m])) * 100) > 90 annotations:
for: 5m summary: "High CPU on {{ $labels.instance }}"
labels: description: "CPU usage above 80% for 10 minutes."
severity: warning - alert: HighNodeRAM
annotations: expr: 100 - ((node_memory_MemAvailable_bytes / node_memory_MemTotal_bytes) * 100) > 85
summary: "High CPU on {{ $labels.instance }}" for: 10m
description: "CPU usage above 90% for 5m on {{ $labels.instance }}." labels:
- alert: HighNodeRAM severity: warning
expr: 1 - (node_memory_MemAvailable_bytes / node_memory_MemTotal_bytes) > 0.9 annotations:
for: 10m summary: "High RAM on {{ $labels.instance }}"
labels: description: "RAM usage above 85% for 10 minutes."
severity: warning - alert: LowDiskSpace
annotations: expr: |
summary: "RAM >90% on {{ $labels.instance }}" 100 - ((node_filesystem_avail_bytes{mountpoint!~"/run.*|/var/lib/docker.*"} /
description: "Available RAM below 10% for 10m on {{ $labels.instance }}." node_filesystem_size_bytes{mountpoint!~"/run.*|/var/lib/docker.*"}) * 100) > 85
- alert: LowDiskSpace for: 10m
expr: 1 - (node_filesystem_avail_bytes / node_filesystem_size_bytes{fstype!~"tmpfs|overlay"}) > 0.85 labels:
for: 10m severity: warning
labels: annotations:
severity: warning summary: "Low disk space on {{ $labels.instance }} {{ $labels.mountpoint }}"
annotations: description: "Disk usage above 85% for 10 minutes."
summary: "Disk >85% full on {{ $labels.instance }} {{ $labels.mountpoint }}"
description: "Filesystem {{ $labels.mountpoint }} on {{ $labels.instance }} is more than 85% full for 10m."
kubernetes/infrastructure/observability/vmstack-release.yaml
+1 -1
View File
@@ -12,7 +12,7 @@ spec:
name: vm name: vm
namespace: observability namespace: observability
chart: victoria-metrics-k8s-stack chart: victoria-metrics-k8s-stack
version: "0.43.2" version: "0.87.0"
interval: 1m interval: 1m
valuesFrom: valuesFrom:
- kind: Secret - kind: Secret
kubernetes/infrastructure/observability/vmstack-values.yaml
+89 -74
View File
@@ -1,14 +1,12 @@
# victoria-metrics-k8s-stack Helm values # victoria-metrics-k8s-stack Helm values
# SOPS-encrypted before commit (per .sops.yaml rules). # The chart installs the VictoriaMetrics operator + CRDs and creates VMSingle,
# All values for this chart live here; vmagent, grafana, vmalert, alertmanager, # VMAgent, VMAlert, VMAlertmanager CRs.
# kube-state-metrics and node-exporter are sub-charts toggled on/off below.
# --------------------------------------------------------------------------- # ---------------------------------------------------------------------------
# VictoriaMetrics single-binary (the metrics database) # VictoriaMetrics single-binary (the metrics database)
# --------------------------------------------------------------------------- # ---------------------------------------------------------------------------
vmsingle: vmsingle:
enabled: true enabled: true
spec: spec:
# Keep 7d of metrics; user can tune later.
retentionPeriod: 7d retentionPeriod: 7d
storage: storage:
storageClassName: longhorn storageClassName: longhorn
@@ -24,26 +22,30 @@ vmsingle:
limits: limits:
cpu: "1" cpu: "1"
memory: 1Gi memory: 1Gi
# vmagent scrapes the cluster (node-exporter, kube-state-metrics, cAdvisor). # ---------------------------------------------------------------------------
# That same vmagent is reused for the inner cluster; the docker host runs its # vmagent — scrapes node-exporter, kube-state-metrics, kubelet, etc.
# own vmagent that remote_writes through vm-internal.lan. # The docker host runs its own vmagent that remote_writes through
# vm-internal.lan (the Traefik Ingress → this vmsingle).
# ---------------------------------------------------------------------------
vmagent: vmagent:
enabled: true enabled: true
# Tolerate the failover taint so the scrape DaemonSet covers all nodes. spec:
tolerations: selectAllByDefault: true
- key: ENC[AES256_GCM,data:pERZJq2cU/V7,iv:eMeR91aKxAJmKpKLEL6pA9rcIHOrd+Mg+RmA3gt1xGw=,tag:l2igrTTHLclHPEO3bCq/dg==,type:str] scrapeInterval: 20s
value: ENC[AES256_GCM,data:m0pJQf4RLt4=,iv:Au3k95QkD2wv3OP/yDyNQKDN5ZrDIuNAwhXaMCEEn+g=,tag:mEcqTG4e0aYwoHr4TtmgTg==,type:str] tolerations:
operator: Equal - key: ENC[AES256_GCM,data:5DBp0fPnVYyX,iv:BGtxkvDHxjVaRZbnH5esSpWs+krJlkXDoGPHZ3fmpSE=,tag:5tuw2/B7Sru3xxep/Rj1cw==,type:str]
effect: NoSchedule value: ENC[AES256_GCM,data:6I45YT4WEts=,iv:u1kUaM/4v5Aw/RSjvffKJ3MWBrOvJ3GUnK2JWJaY6yM=,tag:WNvjO4QYm5uqTTLx905HEQ==,type:str]
- key: ENC[AES256_GCM,data:lDW9tKXBee7p5HjH/FWmzpwtnrazCuohAQm47B5htn++6QUYIA==,iv:yJJdF/XaFXghwBOwC2lByMRM+M5MNP51ho3qTfAKqq0=,tag:WFNE1PMRFss+M/I6j/8Nbg==,type:str] operator: Equal
operator: Exists effect: NoSchedule
effect: NoSchedule - key: ENC[AES256_GCM,data:3oTjA4tZt+JSHQoP8Oa8zVjzL1Nt5TBqB6Lr2q4y4hxniGWvtg==,iv:3zCNYPib953OJ4vynI8kWb5wr8tTm2Jtq5GNsV+Xy3Y=,tag:ie4TmhQZA5M6x5wcxuiRTQ==,type:str]
operator: Exists
effect: NoSchedule
# --------------------------------------------------------------------------- # ---------------------------------------------------------------------------
# kube-state-metrics + node-exporter (metrics sources) # kube-state-metrics + node-exporter (metrics sources)
# --------------------------------------------------------------------------- # ---------------------------------------------------------------------------
kubeStateMetrics: kube-state-metrics:
enabled: true enabled: true
nodeExporter: prometheus-node-exporter:
enabled: true enabled: true
# --------------------------------------------------------------------------- # ---------------------------------------------------------------------------
# Grafana (UI) — served behind ingress at grafana.lan. # Grafana (UI) — served behind ingress at grafana.lan.
@@ -58,15 +60,20 @@ grafana:
size: 5Gi size: 5Gi
adminUser: admin adminUser: admin
# SOPS encrypts this when the file is processed. # SOPS encrypts this when the file is processed.
adminPassword: ENC[AES256_GCM,data:VXtozCJ6XZ7JqWuIrDTmZkfWDeglVXl9JZ9T0sY2OUDY9MM=,iv:PO4leV1zpTFZTB2/hWipitGec4zrHfW/gOkJBrGk24k=,tag:9GinyiqoA4qrbyeKJ33Iuw==,type:str] adminPassword: ENC[AES256_GCM,data:Uz3XzmG4sMyr3KeGab8mMzURfPSD+w==,iv:AqeXRhkLK9Ld599fyvXq6kkPxzFOGtWJIHCbWlqig0k=,tag:L48h8xb+iplaCa2e9yawfg==,type:str]
# Provision both the chart's default VictoriaMetrics datasource AND a Loki # Provision a Loki datasource alongside the chart's default VictoriaMetrics
# datasource so metric/log correlation works in one UI. # datasource so metric/log correlation works in one UI.
additionalDataSources: datasources:
- name: Loki datasources.yaml:
type: loki apiVersion: ENC[AES256_GCM,data:jA==,iv:rpFw7Sk5ThPCllX1feOQnLnHV7ZA4EKTO0Cm6azvVFc=,tag:jYPYL5FY8VLUv+cXl9N5Qg==,type:int]
url: http://loki.observability.svc.cluster.local:3100 datasources:
access: proxy - name: ENC[AES256_GCM,data:0BZ7uw==,iv:ggpajZxObJrc3jSMLFVJO60/6sZjdduGT4R2IwojGuM=,tag:kIT1dgnfmQagEUqHzvv6qw==,type:str]
isDefault: false type: ENC[AES256_GCM,data:7ozGiw==,iv:fAidTjPWFBnLzach+7Y3z0ftd4hXuE8uCg15Ggl3eJE=,tag:3alEggHcBOibye7FH3Rzcg==,type:str]
url: ENC[AES256_GCM,data:zXAzdCQhS6J5LBuidX9hVS6l5sYoaPg2s5NxigJo5B4oZEY13DLTrQH2ywt8SVQl,iv:HebXL7GfMeK93oSzlUZvUZm4Sy9lfFqnSugfzzTLHwA=,tag:RQqF74Xa8eovP8YLl/Vjhg==,type:str]
access: ENC[AES256_GCM,data:5NoiZFo=,iv:qGn8TMfhwpA2QV6E9BgiEOU+qierJlOm7oPXc8dea4A=,tag:pgXhCiX/7TrM8cnEhgN9YA==,type:str]
isDefault: ENC[AES256_GCM,data:RPVCFe0=,iv:kDTdl9Th4vpdn6GH/N3+wdeV9hAxQg0hC8SLyj+mvyw=,tag:dw3ouN8HZ9yHNBsSdwPPvA==,type:bool]
jsonData:
maxLines: ENC[AES256_GCM,data:DD1hcw==,iv:liPXxvyrNu8NR6e9GFHto8LDNqG03GjYZP2hY+90rTg=,tag:eW+iejjRuAxOltXN6cz/+g==,type:int]
ingress: ingress:
enabled: true enabled: true
ingressClassName: traefik ingressClassName: traefik
@@ -78,19 +85,17 @@ grafana:
pathType: Prefix pathType: Prefix
tls: [] tls: []
# --------------------------------------------------------------------------- # ---------------------------------------------------------------------------
# vmalert — evaluates the node.rules ConfigMap (see vmalert-rules.yaml) against # vmalert — evaluates VMRule CRs against VictoriaMetrics, forwards firing
# VictoriaMetrics, forwards firing alerts to Alertmanager below. # alerts to Alertmanager. selectAllByDefault picks up all VMRules in the
# namespace (including our vmalert-rules.yaml VMRule CR).
# --------------------------------------------------------------------------- # ---------------------------------------------------------------------------
vmalert: vmalert:
enabled: true enabled: true
spec: spec:
rule: selectAllByDefault: true
configMap: vmalert-rules evaluationInterval: 20s
configMapKeyRef: notifiers:
key: ENC[AES256_GCM,data:7obbOvuMe8Cpdg==,iv:oIzOCzFFA0cptWQMPiIOi5b76dR3zp96Y8JrdKOkE8A=,tag:ArteBgOhdz/7N4wNpWE83g==,type:str] - url: http://vm-victoria-metrics-k8s-stack-alertmanager.observability.svc.cluster.local:9093
name: vmalert-rules
notifier:
alertmanagerUrl: http://vm-victoria-metrics-k8s-stack-alertmanager.observability.svc.cluster.local:9093
resources: resources:
requests: requests:
cpu: 50m cpu: 50m
@@ -99,52 +104,62 @@ vmalert:
cpu: 200m cpu: 200m
memory: 128Mi memory: 128Mi
# --------------------------------------------------------------------------- # ---------------------------------------------------------------------------
# Alertmanager — 1 replica; reads its config from the alertmanager-config # Alertmanager — 1 replica; inline config with a single n8n webhook receiver.
# Secret (see alertmanager-config.yaml), which has a single n8n webhook receiver. # n8n runs on the docker host and fans out to email/Telegram/whatever.
# --------------------------------------------------------------------------- # ---------------------------------------------------------------------------
alertmanager: alertmanager:
enabled: true enabled: true
replicaCount: 1 spec:
storage: replicaCount: 1
storageClassName: longhorn port: "9093"
accessModes: selectAllByDefault: true
- ReadWriteOnce storage:
size: 2Gi storageClassName: longhorn
configFromSecretRef: ENC[AES256_GCM,data:C6NDZCkX76QLaZLw/vY3B01+AA==,iv:RSpe3Zv1mPfo0nj73tWrf5IBd+Sfqo1NUrERvmVPBgs=,tag:4ZGHA2Kyj9zpGn6eylNbXw==,type:str] accessModes:
configKey: alertmanager.yaml - ReadWriteOnce
resources: resources:
requests: requests:
cpu: 50m storage: 2Gi
memory: 64Mi resources:
limits: requests:
cpu: 200m cpu: 50m
memory: 128Mi memory: 64Mi
# --------------------------------------------------------------------------- limits:
# Storage class default cpu: 200m
# --------------------------------------------------------------------------- memory: 128Mi
defaultStorageClass: longhorn config:
route:
receiver: n8n-webhook
group_wait: 30s
group_interval: 5m
repeat_interval: 4h
receivers:
- name: n8n-webhook
webhook_configs:
- url: http://n8n.lan/webhook/observability-alert
send_resolved: true
sops: sops:
lastmodified: "2026-07-28T13:46:53Z" lastmodified: "2026-07-28T16:09:30Z"
mac: ENC[AES256_GCM,data:ZyCYO9b3OMJo8Br9tzbK+bN3rZvlkk/scOEUSHwkAABeQxL7JDbcpjHL8WauSY57wLnl3sK9JQnUHS+/ghOiZu/QDuodbhpoRrE8jpdjo1+qZaqJBqjbG1NIYU/aLQnHr4bnIzh8oX0PYnsu2uSqkg1c0c1KCJmrvHtXlFwtWOs=,iv:zh8yVzExwT29JF+4jLcZgmuSPM6R/d/2IWTcYfK3Qn4=,tag:LYTYY6rJVEKJRsOp6G/T0g==,type:str] mac: ENC[AES256_GCM,data:otB8gmzb52RyF8D3sk2OafpDBeoDCn3yd7gV/MpcD5Ib3vz0uyQxDgArfIfec75Ma+ttUBKnrIiIDjIiwqaufxZCFP8cQBQ+lFkmFYyQ2i1+2yVxwopevnBq/AAtE+gyf3Xlu3U8YMvTtJJgufETtoRq3BqCm72NBkaJP+abHUg=,iv:/pLrWw/+eqPpeJmdwVaMy51QTUilBFrZ+FFiSASxRok=,tag:mCcfhs1lQVf+oAm7KJmqrw==,type:str]
pgp: pgp:
- created_at: "2026-07-28T13:46:53Z" - created_at: "2026-07-28T16:09:30Z"
enc: |- enc: |-
-----BEGIN PGP MESSAGE----- -----BEGIN PGP MESSAGE-----
hQIMA7uy4qQr71wiAQ/+KP62YdvAUJjxvFoWH1skMELYx9Lj/5TRXnrHOtqQrpXC hQIMA7uy4qQr71wiAQ//bRxO8eMLjEWlkKtPuDTux1JXnnNudvjlteGRTTCxejq+
UzKNgS3XFmgeUcpA3wXvhTEPhICtdC9KDvxkF0jPTATqM2WFPcF7V2vjhTjuAMtU qAzpNX74stIvxPoZRGEWw5lpyGAsTnh+8blGhGO8G9OXJER5BG+P6jylz90cHZct
/g4RR44j6U2WRZJFjs0tEpVGVrw+HXiaACdgqy1P6OmnmgvTSBvZvj3AsBpHOHeM /ky+GDigqwuqA5aO0hw5KZW4IqQlJqV1UUlMuW6GZl6TXChfXwCHX60/FI0x7eKZ
teaE11couXeYnrZ9NJeCvhbcvJfYAkdpqyCLJ9UWEro3QFm4z6tvs6D4rq+nAhBb 8q93VXO+CEQh1In9W8roZ6cRUjSG1MvDM43assafm+/169T+XXsxXvqDBMEWJOQq
MntlvArijXunkwbHLZVPh8SyfxgGooy9PBSEX+ymyuxPYmjTlarYgO7oBQJUWjRk 8Dn7MdSQPbxeZgCz8KHtXWL1YgSHYKF/sQ/6490qtezGdjonYSOt4ALoSUqQr34d
BqkKns9KKNPyaUP/37tXJA8Gvgog/Z9JKDT28lq5noe6CAeHbBbUUo4hZZA14zcD D05VuGxnjWMa7GfxgLAUmF5NFy20lLF/67G4dS7tlkhg5g8jhXjN7jqQ1V+8qedE
/Lmkc03KdOKf/eLnEFGtoWjQJ38FD5+uAh5Zkixm1WW0wV/PdqevJrG8mRjn8FuP RwQ2jL1KiODaiRYFoA2f3KiupFlezNhpYm0Ulg8E+mbDJihWDPsmHCTvUvk95LM1
6GU+nWo+77BxDyKvA1O13iOtTnGZtg/Z+lXVUbpcM8F7QCGrabhLiWVe51iWjYfU DCPy6XSS/GDiTZjgTuO1/S/lplLS+v+Zt0V68d5XrQiJuI8XDgExCcvLYtIG4Hk8
/Ub7HZHRDXmiz7Q6Kem5Wleoy3ME/lxFblx9v0LbO3Dc0lj/85EVNm9os8tt5PD0 lJ5CdsGIPFvYdqPz1c9zF6qAasgF5jECAO+OmJzgYugUBLd78U6r3bkmAmrT3jLM
cvGE/cGsZfUfgwbjEVpPnRN0SzlQKfEr9KVQP4DGNAqDOzEl2AD4Dg3l29oAgSda g+dpSZx6A3htCzC4zLPiE54vFDSVzKNzm1yhDxRlU/z9r+aU44ZZvGlPQwvWp5JU
ZRXdYbEN/ZIAGUg1wNVfZJf2KoJA+wm8c4uk7KAAI0+bIeaongovU4vnylVCHIbS RO7X0IKQ1fAV71bZW16lwxoxfIHpKoJqQJI2xhNyC7VuBvTI6gG4rAzte0v1/G7S
XgGDxEIDZGOueHms+xEMIW6QmdazFdkaLumY0XrEInHMwqhKM0NOyZL2zd/liZtE XgGisRgEY3EHnpC20OFo2nx/7YinZadXekjMcxo/qpP2u/T6nKVY3sEGz9wzzhsJ
wb8xm/V+eOWhjnE2RynNBCwMI6VeVYUPkin2MKQcq+nr7SVpWQsm2+Jbj5YtWCk= 7jRNdjWwrEOoZnsHVkeCz8hevoHf+kGaz+ji0ld1DisY8bCPNXSZPkGBuiA9VEQ=
=yKiR =CWsw
-----END PGP MESSAGE----- -----END PGP MESSAGE-----
fp: DC6910268E657FF70BA7EC289974494E76938DDC fp: DC6910268E657FF70BA7EC289974494E76938DDC
encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$ encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$