fix(observability,photoprism): add resource limits to prevent OOM kills and sidecar crash-loops

- photoprism: add requests (200m/1Gi) and limits (2/4Gi) for RAW indexing - grafana: add requests (100m/256Mi) and limits (500m/512Mi) to prevent OOMKill - kube-state-metrics: add requests (50m/128Mi) and limits (200m/256Mi) - node-exporter: add requests (50m/50Mi) and limits (200m/128Mi) - vm-operator: add requests (50m/64Mi) and limits (200m/256Mi) - loki sidecar (rules): add REQ_TIMEOUT=120, retry env vars, and small resources - grafana sidecars (dashboards+datasources): add REQ_TIMEOUT=120 and retry env vars
2026-09-11 19:51:15 +00:00 · 2026-08-10 22:52:47 +02:00
parent 086b35fde4
commit c183f17606
3 changed files with 134 additions and 62 deletions
@@ -43,6 +43,21 @@ limitsConfig:
 # Disable distributed components + gateway + minio (monolithic only).
 test:
    enabled: false
+sidecar:
+    rules:
+        env:
+            REQ_TIMEOUT: "120"
+            REQ_RETRY_CONNECT: "10"
+            REQ_RETRY_READ: "10"
+            REQ_RETRY_TOTAL: "20"
+            IGNORE_ALREADY_PROCESSED: "true"
+        resources:
+            requests:
+                cpu: 10m
+                memory: 32Mi
+            limits:
+                cpu: 100m
+                memory: 64Mi
 backend:
    replicas: 0
 read:
@@ -56,27 +71,27 @@ gateway:
 minio:
    enabled: false
 sops:
-    lastmodified: "2026-08-01T20:19:42Z"
-    mac: ENC[AES256_GCM,data:KYZQGIimeeOlt2lltCrKttLXzk2b7DOT8KNOhpeVqF/VNNcVxP7Srz6nCR5J7dI6wFSePspof5gNJEZlzP3EGJFQaGBf34hOGhHBUtlcscX8vj2JYmmJ85B+pylHjQNPHaXqLP4tAwIFfhcJi368K+GEAu8tztkxJKk7dtOOyrg=,iv:V24R3eSzW0edwPnPSSwEQqqSfiNrK6+ZyQ368xpJKhg=,tag:LmaMhhGwRIIG+SxTUJf5gQ==,type:str]
+    lastmodified: "2026-08-10T20:52:47Z"
+    mac: ENC[AES256_GCM,data:sT6EiERjNR2hOgsogpkCM3cKRctkGbcxcIrrJB7jb8KJZ2HxGdRGP7+U6uNF3ugxzPcT0O4/80qlEFQ3b+Sf6N+vSAXaBsab+oh7uKt+9En7lgd5V9zkbQtQSS+cr+dlUhU6SOVMCJ2weGyfL59TvIPpxVLy2RRfauAA5W0fl/U=,iv:Bcx4gaBUKZ3GBEKCs4KQMaySuT+Fb7SC7URRrMWRRU8=,tag:byEDzUiP2zdTjPyBO2j1sQ==,type:str]
    pgp:
-        - created_at: "2026-08-01T20:19:42Z"
+        - created_at: "2026-08-10T20:52:47Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiAQ/+PDeQtUHMysWOkTjqU8vNAl1IQzDrwHskeBmLXLI99kdc
-            hU0afTjzUbomFdMRGvf0QZrcFbnD5OHskw5KRleDbYxOp4aXjzX0RsqSe9elTFAj
-            ml4XG0UrEV4Ygi4mTNOGzmINaIjobcn0tQd6nZFPUUA//udBcHsczs9x9Rrf+YTv
-            XrUdNAhveRlowvbvfNrDIh1OsOgyWyHJEJsKiLbt2b7e47PKhhRQzET+bNwhXzTb
-            GMY/w3rVYPddqx1wi5HPtYlhL3emYlmMYLLi1ITr1fKvAsgGKSJpaGS6yu+YkyiB
-            AJHou+2aCUy1TVk8U/Ne9TSrhsV1AJSIbtr8+iyKAtSsSuodam0Pyzn59uqL4nNd
-            1S4Nkvm1UDYv97hmSQdAzTGs+Aql6HyB/Wyi+rkMZQ0fl7+hdX5/eEDYZzijD0Nu
-            Mqk1iFbTn/rXir71VRWNttycIM1PfGAOUmLoyOR+TrL5Ecy0Sx9yx2DS9DecnqtS
-            39YI6UNqiEYdvW8Y+XELSFI/B5cjw7C1A5S9tecUxoOIBGZZSeRQa2WDSWb1dYky
-            Rzvncoeemgjkp8CHQhSqrylB+I4s0Y1HMUWR/q0wxew9juNEIP8ZUkfKcueuCYlm
-            5ui/RaeYatMFo8hg+DrxEtQIkbBZ/ILss/QzyHZZG3RMq0i9s/PIn5yipVhOgorS
-            XAFEeOrVaKpN06LfNP7/HTI+D/5HJL++Twuyz9fwC2Eb5saIIB6gpywiICH8HcD5
-            MRmmhl18x2YU+JdmkAcWNfH5+JHVnx8o+D/y9JqeCf6sle/9LyToazJv58Tc
-            =2u7h
+            hQIMA7uy4qQr71wiAQ//YxPGeiBdLh1nQ6BiV8hWCne5bJA0PcvafsB3caBLcVu2
+            wg7mk+MlcHolXLOpS3DSsdYVlfXr1+qIDToXmFeuWMgeGiSUL5mQghIiZfHlBzwT
+            7aZUcKClYsWg5EGUN9kLkEpqcakrKN/GKE2uBS1Rh0fZUzDbrtugacWfNHmCymQ6
+            TkExLX0nylb4TJgQ77qLk0iAFKwyJ1xw6x/mcc1z8fbUKhyhs9e9pErhCH8f5myl
+            /mAxx3rRu/bEtfn9IRO+XVLLw3l4b0KK21koFi5ZVB05+sz91c4+UNLSHsHaymtP
+            IAcRnaMa1KyOZ9iZ9iVTbFgFfTZy+4N2dm4tYAyvR9Nphj0+XhVfjeoljEh4HdXY
+            SdtSXh/aC9H45Q6wwT7PvBHywRMLYLj0iAoY++SO6/cHF2HGtZJ3MzjrjcUyUZHL
+            oCK7Qmp64bHdYXJQIIprT+cB5CwUPOgW9lE/LbRwIEPbFzCn6q2LMrbZ1Cna9Dd1
+            +/AELxscykqatnuRYP+zNEl4y9Foxux4usXMDCl0piNnVWU1b2T4tBRitD65KUnG
+            yR64Dk9E9+OT/v6xaHKxIxBkfrhOj3K1Tb3tyEhgfvan3x6JRMN1bt4wrD0+Q1s6
+            nY1B/ya63Qo3JHm0461S5oK7Ncv2Op4y1yr//LJ8ueFEOB6zRYoPn4O11WV/29zS
+            XAHMOHZFr7tUXOV222SQ17jIFL/5vrJ0F5WAWrVla4hGRYFUe/Zt/9RABDcKZRWL
+            qzgLvXkfXAiNMqJd1CrOSXBG5MyHoVUYSZef4HXABf2sOxYsGqIgFqUciOa1
+            =OE2y
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
@@ -33,11 +33,11 @@ vmagent:
        selectAllByDefault: true
        scrapeInterval: 20s
        tolerations:
-            - key: ENC[AES256_GCM,data:SyutB0y9QtqQ,iv:EKRXNGtUovQYsESHFQTGygP09O2UWtLuBEQQcYZm3Oc=,tag:zh7CYOZleSgbbQhYZvcT+w==,type:str]
-              value: ENC[AES256_GCM,data:So+8xmHYSxs=,iv:7sfUBAaMZd7imjVx14lusVn58cJQ4HpTkaPy5Eal2dY=,tag:hRBjT6wuEfG3Z+ZiPJhwQQ==,type:str]
+            - key: ENC[AES256_GCM,data:u/hZlRGlQsjm,iv:EIP1fb4hFx22j2pBmlmtLpUWcCqP1mZgLdgtG0UHnD0=,tag:ZDc67BaFIOzgobSOxzwoSg==,type:str]
+              value: ENC[AES256_GCM,data:37vtp0nJ+e0=,iv:v0Sch84ysia+ka9foooh+lqAQTc4mYhDxMRiiimIWy4=,tag:sNEHQI89QvMGj60dgoJy4g==,type:str]
              operator: Equal
              effect: NoSchedule
-            - key: ENC[AES256_GCM,data:lj9OurynU8pRt4/MhgyevjmV0b7Zq+WG/9+zRRvPeA+RYZsV+A==,iv:LjuhErDT0bDlLcpo/AlNykz8Xu89B+nx1ja+HkPNXwo=,tag:5xM6XHrCdEejE7ituQ8W4Q==,type:str]
+            - key: ENC[AES256_GCM,data:xBpooUuWDs5ji8gvswL9dBc4hOsqlGpfYtsjGj0t8k8ott/Hdg==,iv:vXQyiFjim3d6qUsgl+lyVaolpvkY0OC6S0JraGuyWaM=,tag:dM6H8evZAw9BTa5UmETmxA==,type:str]
              operator: Exists
              effect: NoSchedule
 # ---------------------------------------------------------------------------
@@ -45,13 +45,63 @@ vmagent:
 # ---------------------------------------------------------------------------
 kube-state-metrics:
    enabled: true
+    resources:
+        requests:
+            cpu: 50m
+            memory: 128Mi
+        limits:
+            cpu: 200m
+            memory: 256Mi
 prometheus-node-exporter:
    enabled: true
+    resources:
+        requests:
+            cpu: 50m
+            memory: 50Mi
+        limits:
+            cpu: 200m
+            memory: 128Mi
+# ---------------------------------------------------------------------------
+# VM operator (the Deployment created by this chart, not a CR). Without
+# requests, when the API server stalls and elects a new leader, the operator
+# pod gets killed by the kubelet on node pressure before it can re-acquire
+# the lease. Small request keeps it alive.
+# ---------------------------------------------------------------------------
+operator:
+    resources:
+        requests:
+            cpu: 50m
+            memory: 64Mi
+        limits:
+            cpu: 200m
+            memory: 256Mi
 # ---------------------------------------------------------------------------
 # Grafana (UI) — served behind ingress at grafana.lan.
 # ---------------------------------------------------------------------------
 grafana:
    enabled: true
+    resources:
+        requests:
+            cpu: 100m
+            memory: 256Mi
+        limits:
+            cpu: 500m
+            memory: 512Mi
+    sidecar:
+        dashboards:
+            env:
+                REQ_TIMEOUT: "120"
+                REQ_RETRY_CONNECT: "10"
+                REQ_RETRY_READ: "10"
+                REQ_RETRY_TOTAL: "20"
+                IGNORE_ALREADY_PROCESSED: "true"
+        datasources:
+            env:
+                REQ_TIMEOUT: "120"
+                REQ_RETRY_CONNECT: "10"
+                REQ_RETRY_READ: "10"
+                REQ_RETRY_TOTAL: "20"
+                IGNORE_ALREADY_PROCESSED: "true"
    persistence:
        enabled: true
        storageClassName: longhorn
@@ -60,20 +110,20 @@ grafana:
        size: 5Gi
    adminUser: admin
    # SOPS encrypts this when the file is processed.
-    adminPassword: ENC[AES256_GCM,data:vpPvJA/PktMnsg/IovYfsD4lDBndUw==,iv:b4eLMEcUMJj4BwyeYw1kw2sZuieyr2xL9et+R7ss0BU=,tag:u0RcTp6mkQNAGkblG4/xww==,type:str]
+    adminPassword: ENC[AES256_GCM,data:ufl2eX7Q7cyIhXUeZxWgVeHa+5Fj9g==,iv:FxaR2v2PhfF+zR7+ScAsEzPQhpVsGly55ByXw6/q2jc=,tag:5w2M3TjMkN7LUHcHezpGhw==,type:str]
    # Provision a Loki datasource alongside the chart's default VictoriaMetrics
    # datasource so metric/log correlation works in one UI.
    datasources:
        datasources.yaml:
-            apiVersion: ENC[AES256_GCM,data:Uw==,iv:KYTMBV53yMbojMaqNinYpm/Uj5ylV86jcdJTdxuy+G0=,tag:IbIpiSBQFw7YSTQg0WRGqg==,type:int]
+            apiVersion: ENC[AES256_GCM,data:1w==,iv:XkLdUqFlwufQBD7ThJ+kPlhsWcY+0cqWkK1Mk9XOK6o=,tag:xk+jVn82cmPqTBqYarzfZg==,type:int]
            datasources:
-                - name: ENC[AES256_GCM,data:BPfR8Q==,iv:MkMhH3IJfBZzbIcqQw7y6bfJB/4Ew4feZNugjovk5O0=,tag:jaa43tzIXkE8kWZp2R/kcg==,type:str]
-                  type: ENC[AES256_GCM,data:WWncww==,iv:hPqJE0KCidSBnf11wxFH+Je+YKztWmeToBqi39Qf4ZQ=,tag:c9enJ2VgQqDJVbasvgG+Dw==,type:str]
-                  url: ENC[AES256_GCM,data:YkS66tpWXpW62Dtful0KNCwoZ3rG3nQtDBUsNQUwdQ+eqtG38JTrAudQqnsRD51q,iv:Mu3Sc6T2xypdot9dA1DHc8nD7UI8372nqlveLITR82E=,tag:1VmmIg+xR9qjWcvPKVYsJQ==,type:str]
-                  access: ENC[AES256_GCM,data:af3GpjE=,iv:MAYKfklF+wCC/XN+4snebjPAnW4KpYzaMMGYds7rG18=,tag:X+oFiDAiCb1f7cfREqFT7A==,type:str]
-                  isDefault: ENC[AES256_GCM,data:Zgu4Hn8=,iv:nnVB/in75nPAQos0Dfl6abBrHwT8tCt5X7lcCYBZbLc=,tag:u1UvkSj6SjcMm06NzKMGDA==,type:bool]
+                - name: ENC[AES256_GCM,data:v8Ub8A==,iv:PETLfpJPxLv9UcYAqWb+gaJTIcNixXRd7rztjhNnH+o=,tag:sdNcDdf7/g0x1P0X7u7egw==,type:str]
+                  type: ENC[AES256_GCM,data:mYW4yQ==,iv:003u1YybknNt3pGVLtZNLfCWqi/gcq1cXjzgHa0wVnM=,tag:5B7Zo3KDgTmGrytpMll+Gg==,type:str]
+                  url: ENC[AES256_GCM,data:5+SeDxRQk6qTV3YZ6H5Lw7qgvjHNU2riXfnxXYkx/MVi3DBmm5ugL9PpEprYYt9S,iv:cD/G0SUhuwxX5pjWuyQ9eUdTLekRbzEVo/0AgtN99xs=,tag:0K2BS4IGBNHcTWLUFYaw2Q==,type:str]
+                  access: ENC[AES256_GCM,data:MrPS+4o=,iv:AZ0Jo0jhUhqETZnD1PhkZuQN/GqlHmI7nwv+ket5KOY=,tag:edCTNtS+fsjpN67fiAuoMA==,type:str]
+                  isDefault: ENC[AES256_GCM,data:tL41ZSg=,iv:FSfXJumXRrUJeOdupCRuii/aNY3bbb9tjkMA8JUcV8o=,tag:s/FOwc6s2C7X9KKJo+CKng==,type:bool]
                  jsonData:
-                    maxLines: ENC[AES256_GCM,data:88JJqA==,iv:lKsZa024I6223UEu0SHuZ3N9LZrzw0WBTfC+L2/3ljI=,tag:YvqieXK36xMmC/sSJ11NIg==,type:int]
+                    maxLines: ENC[AES256_GCM,data:NKwyqg==,iv:t2Rsefq9jsXpH92b/SiF4mh1Sy/bQ9SQBhg6xqc8nbU=,tag:w4o2v9s2BkK+T0PlEyBwBw==,type:int]
    ingress:
        enabled: true
        ingressClassName: traefik
@@ -172,27 +222,27 @@ extraRules:
                    summary: Low disk space on {{ $labels.instance }} {{ $labels.mountpoint }}
                    description: Disk usage above 85% for 10 minutes.
 sops:
-    lastmodified: "2026-07-28T16:39:09Z"
-    mac: ENC[AES256_GCM,data:Ymxmmkui0Nuv35Yq6v4BXM4xGhvjAufexW7fIm9fUIdTTXZ3e10PitNCZXKiaDwwCJfdEkNZri7jPAYzhTzKMIdcTKnOMImsMjdiJZwRwwbKcYVay0A6KSLJ8eFjDRRYhlCXbsAIRlQHpFh4UkssKdu40mIiudU0qIVm04ppbno=,iv:R8kpITPYSbQ1yZw5IK0fArssxUtIjNmvzknOrLJQcuk=,tag:/CRcr1VZAIKIPbcag05uTw==,type:str]
+    lastmodified: "2026-08-10T20:52:47Z"
+    mac: ENC[AES256_GCM,data:9R6bXpoKxowWpkoSOcjxkVI1EkKaoCiy7/c3/LYE81j50ThgPUXlcAnf024D0tXHv0LYCJm54qXNDwkg1Jzb3SYOt15Xbw9wPHyxtUFHKDb12BWGtyrE7TRw6VYdXs1P+TzZDJZPJJjSyTOW+hdB2WxNu7QG1M27Bg3DE28iOdg=,iv:OQisyRio+fqzdSU16whSJ26rvGibqP4FardJ0p3Ubeo=,tag:fHPd1TnzsmBWKLb6QTP7Fg==,type:str]
    pgp:
-        - created_at: "2026-07-28T16:39:08Z"
+        - created_at: "2026-08-10T20:52:47Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiARAAmOxyx5eH5Jykp/GDL79REgf61iGujtPiUVy8CT3o7O5k
-            tTGma6rRXK5wZV/iGN3wOQehF19Oy2iYwMfxilRwpB69RFwyKPKdHDDWMWNXv5Th
-            wJnNjVjWZ0xiRautWPn/TjDOJZ6j6p7lQ3IcQ3vzuap1RVRIXv081DxJGR9JbeYl
-            khmrl1+zecwxS87JK+fLko9NIBb5JgFEtEf1RvLyFak8nZu5cNCu+PCykALvUaO7
-            V5NAaF1aV9cdz8G9TZWmHZsIlDDE9/oro2aLR7cr8uxnKQhWerttqvyDYNwYzNKW
-            qgsUplTxTmyuc9DdnLDfJ55Ncuv9qS5/4/p5GpsHrteD6oiPNjXaxR8cBVFLvGwp
-            kQb/VZgOGAnkYlMCUG8APiwRhbpAlyy51hKBqVh+a9iRlzZEWHKlxcvIrcFAQaHt
-            sDXyg36F0GCoHiMAqHKG0kRcbTV7Sq0JZVoLU/qxvaDfqvyCZO7X/U/YsSWNbWL0
-            emyBfeSvBX9h62NJx2aw8xKyiL+aeVfzSKAaXHMd/r4gKxBw/kVHAljKwRzbL85j
-            UHeLUvqVkXs1mtIqGgUnpCcAVuV83omgcOwF44FitG/f9GCx+UWTvScwaw5ywuG3
-            J/4fOaA3K0Z4e/mOejARd4jLSPktSRpA01k9kjYY8UBn7TzQ0LrMLj5dxh8BpWrS
-            XgECZapi+q6IjIses7+JqkWiP25hcglhqK3LAiUapA0c5UmAa5Vf7jfnkFm8eUdZ
-            bA7ZnhX8nxK9n7JdSxrZhrbPWMO8hF/XKi7KTZMvgXFlb4/qP96y7oeqzKYcnvE=
-            =pmSq
+            hQIMA7uy4qQr71wiAQ/+Kc8P/t7IZ4shbHhrh25wdm8mI27QZ/h3uujubjgoWooD
+            oh+6zF7sqP36hOxyFjGBnmyHCp1Qqk4lxt3mBT0f5TR/q8DkBTbUDm8PTouZTG8/
+            dbEt29r7dzVrH+O7vMf2QWGt7wpvv5iOJsOXBJXvdaiKJCM0noaLryHPnzTbt1BQ
+            tAN5vk1wlDMZ3lPekKBRQe8W5dWAcfo5WSf5dPH0cVcXtDvO86uCPN+hN9dSp0KZ
+            LeC1WPRrNCLoHYxF4uFl/DYlnDbS0mg9DJqRqSvLdMqTkAIZUHEv/5Qwg1nsNGjk
+            5K2OWdbBz2vU/8hoN/9Qmw3gfZHfA4NW+DFzW6bv+5siATSNTObkLCBOHhgWd1oY
+            hRRhJeD6o6KXZhwai5OnTH3VMH8+OYp9wxYVhVDQ4y3+JOtbgCuDI18q7dkU7mAy
+            9nJMn0IgmqkRw7v8hfzjV8T7Ktv/b+HlJq+PB6/UXGaUutgrPFa70RLLAkFfFKUj
+            2oV3yhRHvPTTDXx6bw5knBDRh/XvtX2JJVgp9x7hnKbHr905qithP+tABNAloX3V
+            zOeEBV4EnIZk/sMB5CQcR0A8gznGpskYtowEVVr9pouNaC8o8D2qfCRIYvcaDCFU
+            t5N4te0vg6uLbW9PNokO6rzhJ+7lweC4Ou2zRAxRhSgzmi81ylIdNMKGle+5sn7S
+            XAHRSz9TKJf061m2kk+Ku/yxnzN2CoH4z+x65VvuK4qpVy2dSC00xyXdR4HxGzVO
+            jpRlAuWFlMu32gTa9cCXQjVPkYE0NbniGtlZkdsCUhydnVtNqqdm0JXTNvPS
+            =U+mY
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
@@ -2,6 +2,13 @@ image:
    repository: photoprism/photoprism
    tag: "260305"
    pullPolicy: IfNotPresent
+resources:
+    requests:
+        cpu: 200m
+        memory: 1Gi
+    limits:
+        cpu: "2"
+        memory: 4Gi
 ingress:
    main:
        enabled: true
@@ -36,27 +43,27 @@ mariadb:
        repository: bitnamilegacy/mariadb
        tag: 12.0.2-debian-12-r0
 sops:
-    lastmodified: "2026-07-06T19:30:14Z"
-    mac: ENC[AES256_GCM,data:QgOnL1dsq2S78nRD+xe08w3u0+bRfNML/ea9P9v0TBCQq5EmKj6yPKJApvttyeGUDJDGo9Ds17a9XLDFtOl9ORoax6E50VqJSnc1ElE2l5EFogl3JPuMdQxEzXniaCjOSrfMNWNdo7fHN/qcX0Gzs7BL9pw+NyQLv4kFcDYQv78=,iv:buV08iLiLB5BJ5JYfn4blmFb/eu/EtpnWsxT5IfyXfQ=,tag:8egGKWNa7CEql9t6zWHlOQ==,type:str]
+    lastmodified: "2026-08-10T20:52:47Z"
+    mac: ENC[AES256_GCM,data:XmAZDN8ejFDtXVbjdFMivKr/BrWlk9hj5h2RTjO1CVXnLx2pc30GK0d1g5f17967bW6Wn9hEtS202fBJjN2mhVdKs6nFOE6MFXk6Pv2b0oqJCX9eWor6j74mhTWJA8tFjp6DD++GMoRkMY4wQ2HF0a0SpxgchELDg20J0sJmNPQ=,iv:Mx7Yrks89v6ErkIXsFDWviS2j5Sy/QEg/tyiMoM7ku8=,tag:IBIrA4e+BGltAiAPzW8EaQ==,type:str]
    pgp:
-        - created_at: "2026-07-06T19:30:14Z"
+        - created_at: "2026-08-10T20:52:47Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiAQ//Qg0OcwKr1mG40IoYmABD8b+/W+X5zTyyht9QCpNtRSVO
-            JzhtMl9YZHLqwkiwBqW+hvfIKXYtYBNl2TsAZ57xcE60lr72bHfqXkO24hf9+jvq
-            jmFwK1Mo/zf0/b3R8gFqEmg5mW97jdmEXHfRrzzyaAXhGk0rWfLGBSbaif71a/dj
-            jVu+Vf48LsEnUYH3oO2ASY3OlVwKAn5njfyIz2MWwY5iohOsiJwJu2WiotI+zCFI
-            VOfftPCYvJyVKGG5bE3GHOjAlbNqHtRCn9Bm/mXQVyLkAU9ik+i1PABGEU9nc09q
-            +IcO3Njo7MRtZU9pctMZLvRSbxvEx2bZOKSXe6nhVK324Qr0cETX+/GuDZn3SeVy
-            pyHR/BtpGXtqyWsaQyCvPUyOcU6IV/QP1P/8ovCK6Fek54xqrptTCYnov7U4VTBN
-            WhVxpTY19ZlxPxY+umhhg4bTf6oiRKGMXPe3MlYTGN4DTF3NE8g+Rld860GypHTt
-            yHYr2sdibLV34JZk8W/E1S5RTeTWjKxMUHZCYaNadQEQRwyRWmFTdHkPiOLHOBru
-            TBYAZJHP4DFegHL58+Z19vjdHtOHWMQWWKYNvKzV9m1lzbgT/MhrHqeGEWSQ9Tu0
-            kcvDK9iTfjgZyISPe8rpDM/6YZMSydSUgQ8TiE6YQFsJ3rkyRSEKSkH6CcqUD1jS
-            XAGv1EpFowmHVUXzMY1TciufOek51nEDfhbzpCX9QeyKIn7MVAZSWhn83vQUBNiH
-            Y1wrvUB2X3egY6jQVv7nalsNvU7CeEvzxi1YrM7YtoSO6yPY7z2A6e/4Ev0h
-            =krxN
+            hQIMA7uy4qQr71wiARAAqIPSpERoN/XXmXrwgOWywCdPIgU6n5wdM/x1FmpaxXDW
+            hH4LbOH2DW2G5ocYZ8XMsXtXXOnijS3mqcu6z2I5+gaPo4ZFX4pdVCD3txXY9vpF
+            XMai8GI3a47vn77rrBXMcuC1pU68NcnDqXdKKRCi2ZDhnO1s4cp9el/YO/zM82HI
+            nUmjaj9ZfvYM5pRmaay44OUw24yhyZ4nDr/cyvl0krHClSc3sNLHefoXtSiKAuGD
+            IK8P5QWTCzBMdtiIvjHdLVUE5u70r/D8IZH3xW+k38flSHMcJNHw8Co7WSaCZIo0
+            wyj6pZ6HuoQmqgksDdjZdraAoj616XH28qz7P8KdzyZHPdRMWFk2prm+wkxR31kv
+            7uw0YG+/M8uyFLR20LwB0ywktGjy4zXVE7XBpxsJdVnVUokhSeWHJdNDzFgFEu9J
+            N+2yqgE2oqcpLplsuYHa7rV1d92yHN4qlBfFEcodEflJlJVrY1zjttuDMxQCikf0
+            9mhki8GbHYfTw2yMoJQ2OQbmPASVQBzVVfw5iJJfnQ2K+7QFlf2KEuUcnDBBCKnu
+            rZd4CJuAoaC7Tef6+rdgXANaFBa2s9sL7Kcn2V8gq7LLXwhqyfL71UQqcNph5uub
+            WDxk7vE8qlk9PATDQay5hxWItZQD69PlGMUoQ+q4C+e6JtPV/bWRZybGcMBcrAHS
+            XgFptQ7SJPhL7duSfPqTJ3Ef4f35P5kU0sFNW/U5LSwkQKmC4iQDDdMXYKArsvY7
+            Db5RTRQutrXsioHICm9oEjGDPm8Wz/WVwYM0JbR6CSfwv0OGLco4s8kXGBDX74o=
+            =Y5CE
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$