From 963a4700efd4544bc3882a31669b4a74abc4857e Mon Sep 17 00:00:00 2001 From: Bernd Worsch Date: Sat, 21 Mar 2026 10:44:37 +0000 Subject: [PATCH] chore(creds): encrypted secrets [agent NK-WP-0005] --- sso-mfa/bootstrap/creds-state.yaml | 8 ++++---- .../secrets.enc/authelia/secrets.env.age | Bin 1507 -> 1507 bytes .../secrets.enc/breakglass/secrets.env.age | Bin 491 -> 491 bytes .../secrets.enc/keycape/secrets.env.age | Bin 588 -> 588 bytes .../secrets.enc/lldap/secrets.env.age | Bin 724 -> 724 bytes .../secrets.enc/postgres/secrets.env.age | Bin 594 -> 594 bytes .../secrets.enc/privacyidea/secrets.env.age | Bin 1143 -> 1143 bytes 7 files changed, 4 insertions(+), 4 deletions(-) diff --git a/sso-mfa/bootstrap/creds-state.yaml b/sso-mfa/bootstrap/creds-state.yaml index 4c9494d..83d3639 100644 --- a/sso-mfa/bootstrap/creds-state.yaml +++ b/sso-mfa/bootstrap/creds-state.yaml @@ -18,10 +18,10 @@ emergency_bundle_delivered_at: null # Cluster injection (per-component) secrets_applied: - postgres: false - lldap: false - authelia: false - privacyidea: false + postgres: true + lldap: true + authelia: true + privacyidea: true keycape: false # Post-apply bootstrap (agent-run when pod is Ready) diff --git a/sso-mfa/bootstrap/secrets.enc/authelia/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/authelia/secrets.env.age index b4c8ab0f6940a67c2c9af0ba1dd5ee2b19172ac8..727960abf0ca68627aa3bd7a01bd94f9ad422a77 100644 GIT binary patch delta 1493 zcmV;`1uFXE3*!rrAb(D0cVkm@a7-~VNpUtycWYB|O;|}pR(DQuK~zk1b!~WfQaNKa zcyLZLZwfI`XjVo`YIt*VW=u?MNkncnOjR{WxFBZM|n*r{@##M>5aw6I_+eqN{pwnNAwj`y-lh! zUWzY9T*)x}cH5Wkar_R#Gr8#sX{QW$>}5f~7pBZY$uG#7tEqGXzXmVynwtMwMVlg# zn$U~r`x<42$A7DK@pa4~xS3Hb=^`B{@x-UZVVSdaOmcZA?Uq<@#)+yQui5N3nZEXa#?FmY1t zL0RtGGLyzL>r-Y%fy$ceFGSk5fs#sJqDmbQ3fI9)#n%x;mv_XmQzeSf`BS80PsH{k3A$z-J6hQ8jpx5XWnyy zFhN--ntyCfP~R3jgI-2WV0DemJ9JG6kbpkk)n_U$yI6P}7=Q=pF=+pMQ&`bE^m?i- zi`2D2G#6!DrMK~J6OLDIyZ>9xv7F<@B%KrR2klFaBe4&{Pe{Ih?X5JcC*64wiJyx9 zU6@6A=@)peLtLY^&z#-4J{lz{x~tP-#kBxhO@DHsxBLjh{e3SOz5YP`;+gggx_R z3Etl-GzxMRH85fIG=VY+RvvP?)#=tX= zAAb?9uE5jWX@>0jC)iHyK~!WAQ?qcAe4)P9Bi)~vK>EzT!?fI8k17wRpzxxwQZHYo zz%{eItHK9$W&d*(WnOYldkVr*)=TbG0U<~pB`LZ%sXMd-Rg>B6rJM34=sD~$;J=Z0fn%Vz0F#iX% zmqJbOK;}VPO_jQ>rhm+-19Wkq5HM12{^eE@li0=^*xHqt`WwPC(hV>d?B`0)4elRr z7O8)~M1By8SdRjaZzNhpw#YZU6|s~j2bJd4A>KjHj1M;rn5B7ZVhF>yqU5_Z+<(dO z(X=@@2c!nk!k!?)T>nw^M}2jd08gi)p+MLr)Q zswb>XvEM(Zfv}RF*4Rj@*mUYAYhVWAftJ;^R`RM!zG81sNn|Ok@4YmCT8P?YdLOAr z>=C%g3IzaRuvA~0!SIo<>{#z~Cx5R<<^*IT=kuqsIlJhs7>F4+kVGM~tvrZ9adPJ9yqbw&X<=9h-Qd$wR3I?>OO1JF5RoP&2lWn_snZBy z5jyW-1*=T%)Zcm@##;>G`gVtF3);QzG;oJ*H9hv z??hT1H>RwfHrp5zTfP!a%e;VCr$_<3U@SjEt`(ATNkm;0eNSm1(o4Ji0vJAMA}~$G z`1kT(7w!wtb>}sv@6Yn6E(4>L4|$|ZSF|kdfF=Vm?$wHDPL<#sVqcT)$zs=RWkFJ@ zLbxv(#yULYPt{APbB@#||GE1sD-#&ZJE&T{iU{}(fRWZlL vOn$vWn95-eyum$_`YYsv;x&itlk+r*I%(JM?c^smJVHxeI(Y~+H-NmZRLI(y delta 1493 zcmV;`1uFXE3*!rrAb&MbF)K`NcTz-eO>avxG*2sfPIzo-PEdJMada|zR9bpbK|)D* zL^(8icM30JNpeFrO)oiZOl?CeWjQ!lNJ2tndMidUR5ns!W-xD3V_`;cc~3@Sa|$gj zEg*SJWpGq-c~xU}aBEpNHZyH(MOAcoFI8%JT69uGS29>mNPlm6aYZ$ARci_^j)#4e zifHwK>{)QdZ5xzE7RsGeZ)##~^coG4J0ctQDWM{`5}@;`hB`+$W}Ve!sC*v}QD%qr z1P4=6sx;g&gY(4=u({rxZ1H!%%mhtkVy8avJR=6zY2xIPn{+^8=*P-^7i#AVoAuqk zS4L%3Qm#d;q<{ardiVZlal>}dPN||d8P>Rpz(Kjoe~J?$DHs4sYj-_>!r4!?z$ent zN@%SQ6k#1@U}s;I@Qv#E8?>U`l{2~A;#B-SEYzv2cra6Xc?u%y-kwPN|JK?DU5%z_ zic**^D#vn5XQcR4PKSRWJY~4oFhlguD0;T4ih*}<(|@44nG;I__kX?{C@@#%vE#;r z<^HB%?(`D5A|iEvM@<;P1f=uU$^XX}MMZZxi zNcw)lT{s`8W+&O`u`ofw=oJT*)s`s(o+MP(6;}{IbgZYA0^&wTP}AIK2e)FPW1up1 zko5_>GJoA5bA7`2^sQA~z=bq%jM;`AHlHc_%pD8#`*-t5rh?TfO&-xx7)`_LAF4cF z&T<1uV^N>F)y5npNPuAUgLH)A6}|eLMR9^VXqg5Iob?y=Lo)xbRiBX1Y(|9qg`BWr zS^K3j0G~e97_4U67MM!}k3R+v@PLjjwllD04S#{6#|88^xsw>NvRdV5^j<=^`&VNV#KziODRF| z287}P+fW=xF46_#kkguvOP=Z`3*y#Qi0g~)!jaWkY%IF<9Rg*iHl!t~+hx-=t*7oMfe% zV)b47m*8oj_zl!ft~LBcK#5W`C)JIUXAiWDxVF?za@0?h^h5eV;^X-TAU3+%GQ65Q z6CUpg86CFZd4ba~#}3uUg`Tp3sK!}2$$uCdu35iUn8PTQjpXYrB&|{<3fsxtP)dcU zoHH^0zZHl>zyCAU0PpT$O*K3R)S+3^XsNbw(}fyqe)4q_(Cw-p^6u3P?v0z=p`Ne3 z+s}%@qRzDd<}aRaWDyGme7JD+tf6Y&xO8J0A<+ft>4{nu&;V`0S?H9H4-eS3Z-0yQ zG5&G4Yi<~=B~BIH<-@$qQldeLq1Tm|bOhPyDhBBV!v9s+pMfSMFFX982_PSeSCP&= zNJ-}2nH*Knmj2>;H(A&>ZRB>``350|UVqp(HR5`ymVrp-@5;cdmL65r@h|o6oE4~%)A2G0 z9o=x}1Abjs5G|h9Rx4wy9kM3}1|P2+BSZfC5`!0mKU`rxEcSA0U;S%_X)KWO9 z3cNDN#b+aWa~aeZjz`oAnC*ZAZ?zK=<3#qel7cJh(_8GdYYmV^Or0ik)RNx zR={|G>B9JZ$ud#Hmy~pJ2(Oo`jH2ilrQTsi#D+V#f5};WTJ5o6kY!wi$a;PbaF@;l zBo?63FFC0(0Gn&V?!%btzfNNiTb>k0{QZ4I`P$BpH(25$;8RE={AivjzD@3bjKgU> v{n*F{4f~7s3j8@*kUxF3vFj&|F_qa-U$<1P&U20joFuLTNKgVNX$dXH`u$Og2PXZdP(PQGac8SVd`dYgr1Yi25Qn zlVT_u6bJ6eV)-O=iMV*x4F6Lo=bs>>s)bKZ3JB<1@(uHi>sP1qjb_$=&4dbPpD*7PL z+~{`6^3a{yScsR++2Vq~@g~Y|-SILPem=2Gx1yGsM5SvIvR-JE%0dr1qCh2YuE>ds z_+YGvn2MGxPAh}^Hcpl~ys^;N>3@*wW|w~oh1G^_1x`O)WoafYCG@lDkceAorY@Jm z%nWVIJrai2KwFT!?)X)+R+kGUPhrt8M9L53takbvczSupSs6Qgc4l_k%uJkc950$q LLk1*V4Jq&kNXgC+ delta 469 zcmV;`0V@9M1M35jAb)XYP&g}PY;#mjV?kzlb!9dyI8JsiV`@})Wq2`9R$^LbWN&9` zPc>wCSqex?F>zx{QZrd*S8i8raCC5HVq`LDQ*ba-Pc%?yWphcn=D^6l*D@#OTOn*f=R!wqOQ8WtAi-bB) zZOip4s+sT?qz_hCQixEV?ox1Jds?vxg8{x_z3$F*B9*~~A`OL{rZ-A%p9@H4gD?)4 zjlVGbwH>k^u6aEte~w^XOmd)y$!_)axF2DZ^^vsXQw+)zEUgHm#&Gkoaya8L_r3SQ zOB=w$Gs;Bqp?`bPfY^z=9D*i?@obp{1W|0Xdn4LX!AJWw49GE8A~Yh{jMibv)4$Ubz1Qi3S)EJk@)^Z93s50DzaFCqeE01WKzJ zgUy-MGH}|fm|YNI?NYG1uHlBare&}s?=S9$p(kfu%}%ae{qqu)8+Tat9|hI1AAT`0 z_C@JHY?4h_u3Y4mw}fJ5UeRk%eOS=PSNIp7@(dM<5<4WTXb$IkY~^DpjGCtb@C?sQ L1rXuqm?}5ofC|rj diff --git a/sso-mfa/bootstrap/secrets.enc/keycape/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/keycape/secrets.env.age index 1e29e0bda0ee8bb30c255b89254fe05e2e1589a9..98bbcfc58996cd2eb33bc0c5713b9159d9d7eb99 100644 GIT binary patch delta 567 zcmV-70?7T$1k41GAb)jfX;w}*PeE5UPBC;zM^Q^vPE}b>VQP15XL(sQGh`RzX@bVrFh@WPejdMRRCkb}$O-F5u@{ zP78SoHe85Y@};B}y8B#vKI4+7Sa8jw)BNi|Unu=mgT<%L#q4}J6@wlrgR>4Ab1O8vK%d z_Ws(i(=eY5nqng<6G8?e%_>Z4L`l4?bi!C;-yp$`k}S7taEMSxy~V_DA F3Vaw61Y7_B delta 567 zcmV-70?7T$1k41GAb(79X;xKKZcgZDcnuaam?CGGj|wLwIjDGGcdaH&!n&NoX`eZg)poHh)+vYGhSOSyc-BgvRX; zX_5D|YIgyrG0wVJ(eXCNcH~9wEtc6{A7ENSW{!q#U2|tPQ zm|sS+=GD_jfe-BQKxtd1Gf?^CL0@P%TTdHj2n0gsIWK0&g3pdfD7H7jr2Qa$;{^&2 ze0m$M35*tCIe$QLG1vS9sEeG*0cnbra3fMPL)NqzlkK7a`J9SngJYL3-=I<9M*ZD^ zl`Xg1-#%ybZ9@q7qfPIhB>qTH(jiNLEtiuN_)H5b@P~O8wC&S*xVUp2f zu=!5^`C$baDx0*z3oSKY$N?*Ik!9`mAS{ZVM+^-sjn4phnE@o>58LM+pkdbYn!J?` zhN2$q*DwzLfFH}E9J}y#;;-d42C)ZuDgd66Z1GzBA;VxM6=y}_cG!=TOfR!PBfrxL Fq_A}k{?Y&d diff --git a/sso-mfa/bootstrap/secrets.enc/lldap/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/lldap/secrets.env.age index 83d913c9bb991a3fed962f80dbb982c63f15db4c..01446c0b3534fcee466b6e93ace08afb5219341d 100644 GIT binary patch delta 704 zcmV;x0zduK1=IzQAb(CWPAgA#S5$CWb1+U%YcXX-NMd&I}v(wF^RW31Qfnz@U@wsl!CeN6u6l1{^-* z+L51aAk0VFCPmXgmZK8?I&xb>JGDgWp!1p!zTFzLqc@Uc!+!%w7THg?nZ244QuE05 zK{29PaygM<27hSB^NFt6w^t(oq1(Au2%MCf_5qBtHSr%O93n!2wgtPyP?DP#Hc-J-310ZfBaQzs#{&m1du=)Jk1ng_(O;0T7N!El zk$8$kT1z`WiRu0XLc%!HMy#sDf)yusL8rbLvF@yu4S#hixOg{-z(tsz^6fyk*jP8I z-vX4i)xurZT&r@;d2#EeEn0$56Ct%-X+03g?N8a?OIc?`Z6C4yy$1awfVJUV*LN=sp|kl0Vq2YQV*X zhtogQZ-3b)AxwsGm&eS1+I|*v>t}Gc$3Oket@Vi}ml#Z52Z&ePI|m^%cmno6_av&p zpGV!b3Q2-%I&raD1^YH+TX`9X1BV!ok9@k(;H41XNdJ$m8^9&%_GxTv6AKjVBQ>xg zLFi|K1?FO+wc(k)3yI{W&<)#aAWb_$gUoZbX*q->Tz*SRVli1VP&qk9H8m?SRc3TgZ$&h1ZEjL^cSS{MN@93# zSVeS2MG9>+XLxHcYGyQNYf(2fdNp)pGI4EVXfNeV43 zEg*U^MNBhILP&ITb$MkkRdO;hIe0W=F=$j`S#nHKIb&B&Sbr;KSW-enYefn>TdzP6 zQ0*tWe#!!cbKdI=I399c&OO8@r&0KXobR8x81P6xF`Z}fG=!vLefipd9rd(HL3LcaY^C-r&1_wCATz%o zVfhE@m6^G#d&l5^M&84TzQjqAkZdG%+qjh-(BYB(kAJQF-r*>cIUrojmKy_07q1cn zApZO|Mw0$$AYXTkxx2suSwgdnITEvm(3kE8O(9z_rOvo#zPiI4ovLVPb5mTk9f4~l zage>?E&VM^kIE=-F03Fn`L{L?*FU^Of|MICe(z*-wyk0xO62qoS1}Rld#+tj-Zl@a zASVl_ZGWfgnU#4GOcs|-{J!N4Jdhhqm_|DquF;%hTBJBq@jAEEf1Lm_CaAm1smv2l zuUTJPC*T)>;rBhW-eR)-f4HYM7yC3A`UG2Lv=F1yYTG(q7~In!Eyo`|+X(dn@Fpd4 z+e0#(O3nb^$1kwbMAb&4UGiPF1YkE~rG*fDCaba_FPcm6%YD-KnbWBxnH%(VhLNzpG zRWL$WSqf-&GA~y|He_;5aY}4;RBdosOJO*9IWbW=OJQ?$GI~RAG)Zx7Y-=$#a|$gj zEg(2fRdQ%AWNTqlRC6_INir{EWqNN!G+1;mZ&pNPOfzFcLVs*@IZI(=ctr}oR<6x* zgo7P}3x@-tRh2*u=@WdL62m|)Z&|={6Tp={P;LgdQ1nnR6qT#5RexgX^MgvSLKGA5 z$+)|&U+6(&PEMiAObbqOnXk-RFc9-Rz$yjb=c1ZL9GA-npkAH%mBU>GOOBTF)QS=+ zx>-=efY#*{Y=4Ak_|aAr@u4;{-R0^Wkph8|prGTO1Y5NCY+$NqJ%FwADC{)~{b7l; z>|zu_!V*^MJN!_8L{~rmZn22)XTPN*2MJv=lev=N5IVjacUPI&sZgjwb$yAG4k_`{ zGie{8NP9se>&=e@d}By6?6%xdkh9K)7?1TFyBOcR_kWVagsxmvY@e=8@QWuenS8Cb zrd3JfOYez)c;4M_BveJf`AY?2AE;mk?4fVl&S?qv`7N>`V!rQ6i0-1d#Gk4|6mZUD zpPJdlel?S^);AlXJ6#tq1I{_#7_>cad||+WI&ICr+@Iig%q55q?FOu5OE*i$X}b^$1kwbMAb(O!PV>V|wO)F7oVKGK(FEDCpF>i8ZS7vQ;IdnpJOjK`c zZe({ya|$tNYfpA`X<2erXGm^%YC}_VySiPX4?rZ?Ob_D@6NjiikRm3eFL{&JtVcOtWig=gq!c+APy@T%X zOxJU?Ga`@v(MzA&V;8&O5qhNAp#3#=G;L51A865;Wg(Fn L)I9ieC|#eIn!Ww6 diff --git a/sso-mfa/bootstrap/secrets.enc/privacyidea/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/privacyidea/secrets.env.age index e2f402d067cbb4d3186f7c69d48f82954bfdf07a..b7a3d01317ff67d91537cbc6e09f51f9d79dfdb3 100644 GIT binary patch delta 1126 zcmV-s1eyEy2=@q(Ab&D3GiW$+D{w_CQ%XxTbW=4pHcCc9RcvHtdO2%IcxE(qQ#f*0 zWJ7FsK?+Q4bapmSGIVToNp(j~Mo>aRS93~JaAR|DX=pDsNmyiRYHBz+H+eEbFbXX# zEg*1jQc-A7O=oH`X+=X%M00Xhcs62qFi3AqHAQYrMNCI{HGf4mNH;Vzc54bQrFQ_~ zU~}MxgF#C}-X#=| z;F*mT+zKj)b${Ybgc8FqNywc*>#1!sYyn`x%N21_gB~52Ko0MdKj2Ne+_7ATU*9U7cYB1hnOsiSavB;hk-F4(7#Y zhT8ualAz^EITKS5GOE3L8IDb_f&%cDwp1bHUmaqf&AaD1d z39Z!N`a)5_!1_BXd)5aWh2c<{*c8^d;KdmFsRjaSl$97;WE;B7YnC`)?(&EmnxEot0baXDij>4J$!Y zk#4P++V`1Gi)Ep>tIplc=69pH8GU~CLf8;la{BD{NEjuj9hkr&n|W@Alpk5~LpKPL zjyFa4%<{A{41wAz11WBjNX>qZgC}?yZPl2S-%Rq2M%0`cGs&Z3YM*vXBj(IPkoPb6 zwtpu?qxPtVaqCeLp@Z?VG+@v^T6Y098O3=ANIixU&X|Wq3r^v8mq((}2O}I0iC$6F zpa;?1qs1C%fXL?qj!fdP6!;65b{PJQkV@kHV_1ZnYiVfrj66B*s!!s9)UR0dh)Nh~ zmWf^T^8%0lgb$|g9*{#jGEs0Eo-X~zhJUt5II5;onIN4xCqJ`1=>tXA{huVf>d`g! zivsVL`;HHZaJe0gT|F1&ST@m_Ip7_Rd9tdxXHvykBt#9&FlKBN4l0uYr7WgzzdZe5 zLB6yXVxlM=KZz*rG<4d7bx#>(Kc`nD1grVP5_(|Rwj=|zqRdhY!6xV4(`G%aqkWf97!5Qj|=)WxUaj`G00g|bbmiTtX?MwOMi1H(e sk5DiNegJ1KZJUy8-`V@k#2JPhMImn}?-ptNoz()NqAC4SVMSGXiG(7WlT~q zVnKLBa|%OpD?uxAF)?jrVKX^$X;n`)Q$lk_IZkG2PiJOKNM<%LMsRducy>1{cM2^n zEg(y9HbFykL}g=DcTsLKF-U0rh;L zz5NJ1z!}#gX_}2@LL_XAITX)d$==dI1OuE*cA?GnWJWd|3}0~QP#c0)uG#U{hPfk?bA-pmZW zs@Em(4+~7(ZI9^}B2PH-mYXFj@&&4OLjGI!vlLC6XjNp0Ku^9dCz8bl_XN?|YS&4w z>#V=U_J=Q^QSP&u8k5oXQueqkqS~m?|#*=Q9GiNf#YjR;Es67;2e}+8sst zxKcd8!cP&o&OfOKe4;~{no?H0biCy~(LnSZai2Hsx6>VzBbs>5PcMde)1&nQT=;5G z%MFp-vT56vnNiUnvqh6Bt1o#vwWILVyDgOA6#jJ5c!dp3w$x~Wq!=La*ri*VMPELB zul7FWtBxR-KEL$uvcw-mad#I01i!DFG|00e>xTo|>9PX1YPy`=;SN)TGI{<*o++qI3D=wBFsB9{3jhEB