From 643e7a4c08da17f1c0c82404251bb773a04fc563 Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 27 Mar 2026 09:59:14 +0100 Subject: [PATCH] feat(valkey): add encrypted Valkey standalone values for S3 platform Standalone Valkey deployed to platform namespace (bitnami/valkey 5.4.9). Uses hex password (URL-safe). Gitea session/cache/queue migrated from valkey-cluster subchart to standalone valkey-primary.platform.svc. Co-Authored-By: Claude Sonnet 4.6 --- helm/valkey-values.sops.yaml | 40 ++++++++++++++++++++++++++++++++++++ 1 file changed, 40 insertions(+) create mode 100644 helm/valkey-values.sops.yaml diff --git a/helm/valkey-values.sops.yaml b/helm/valkey-values.sops.yaml new file mode 100644 index 0000000..3f8e9c4 --- /dev/null +++ b/helm/valkey-values.sops.yaml @@ -0,0 +1,40 @@ +#ENC[AES256_GCM,data:AErRSCaVz/VrVUjvVeJ4bBV3UVewDUdR399WyIDCGCYyErQFQSwNSTI6QPM7P4nhoYkx+GYdrw==,iv:l+Xid9D3p10g3VzaLqxsktOYqWMkeBz7WZMqRlBAgHo=,tag:+gEt8WOFitE2PwXIOlEmQA==,type:comment] +#ENC[AES256_GCM,data:slteIFbjCg9a02EgENJPgGCR82bWVI5iIlHDsOStBC34EAMsXBJUbqNF+F/eclBF9S5sWysMdjbbrqbTm/rHIiSueA==,iv:8ragavLGwQcCvFv+UHCHAPr13DsbU1sg58P+az7ZSkI=,tag:97jBN/OjvmIZTzAnKMFUdA==,type:comment] +#ENC[AES256_GCM,data:FsuSE48eS1bh8uYpAJn2Rx6iIpVag2lHJyRg,iv:OGycez31L/9sFqCASt9VS0v02KOKdrkWRSk4rIqFjIU=,tag:cx8mrPkcLHbvuGaIWZsIZw==,type:comment] +# +#ENC[AES256_GCM,data:QR9Hdv+XE9uG1s5WvD1EiMirZp5Hp2Bo3ngaI8Ktihr+82gTB9aPVBeC69GyVTQ5pkho/mzhb/pFobw/UJZtc+aTBZtxpS1ijvuk,iv:7x49cqZaHMFIqSf4hFqRxr/ECF/j+m3UfRKErNcxlZM=,tag:Ig8vyLx9DyKQLkT8vmdChQ==,type:comment] +#ENC[AES256_GCM,data:gXLpKaxr6Yy/F4JdYlKwIwXVmVHJMc5ail5AJvWB1//ymaDkzTPNlP6TesK9aGgkwYyQx9eFS5e3O2NH0K2vMYQ/byRt2VX9A2CQp5h6lg==,iv:9VptbdpLt8sGyAwLAM7d8vD+NZBEn5kvm+J2yyogjt0=,tag:n3Fo4I1wp2rj5A0RThmHiA==,type:comment] +#ENC[AES256_GCM,data:8VU/lQJ0EG5EV/Ky6dM+qhJK7w+guy/rv9GBpRzO2v+yBAhZu/FCFF70tPpdxkq+WoRKt9KHNv/bw6idExKII48LgvVItM923SWuSbd93g==,iv:FYynR5oQyBKkBDVQmkNGKGznQB1vhWStZ32THafU6wg=,tag:NsKwgaIIq0fjVhImoYA+Ig==,type:comment] +#ENC[AES256_GCM,data:Op6pbbXTPrXWgiosTPR2fFzZrGwTjOze92O9sTe2JYlyG0W95wOke6tePbnm4Fq5jAHWreMXz2iA+xdY+PqLKmN9f/D307m1s+mjpsWsHA==,iv:5i4Dv/TJmlE/fqhRS1mNw7abryccrJPVjdnrgfHoTEw=,tag:6nEoneU8yVMtpIimC3YYBw==,type:comment] +auth: + enabled: ENC[AES256_GCM,data:ZUSYfQ==,iv:tl7Hz7YG1O+biB6jUoWsFnfsn6ROsXqNfLgu1rw1zxg=,tag:I52bXTrll3kzPj0GpeQ1sA==,type:bool] + password: ENC[AES256_GCM,data:oRyHm4wH5NxY0xNztDfB0GDUeImhaOtL9rF77UPF1Y+sDiaTaQDO6p2qGr3grxAM,iv:vzJs89Uda0HHvikhJuVTuu9XrIdqWAslleyt8Blw4E0=,tag:byoqDB8VK9GACtePZIFcuA==,type:str] +#ENC[AES256_GCM,data:wvwsbd1fWJG82xk5/Iei+dfZ8gn4VfQpqEtQIwriQZzngds6DLwPu6QswcuW9w6gmiwDbg==,iv:40Pz4A0+7U8mF0jqzHld8lbjxYScgQ4q8ITDlKRzpwk=,tag:aVlTAyfBs8/YwsjqCxoTRg==,type:comment] +architecture: ENC[AES256_GCM,data:CzFjqtR3O0NqTA==,iv:rZB6sAFprwXjyHc8Q5S5VtHhuJ2206wVfr6sF2qUwR0=,tag:y93bFaLoIec1pPe1kyFElA==,type:str] +master: + persistence: + enabled: ENC[AES256_GCM,data:LJalRw==,iv:P73oJPB6D+35SGvbvRNrQrLCC78ZCEcDwu8o2jKCjBc=,tag:ZYIssA9xfdT6hQg0RBMbUQ==,type:bool] + size: ENC[AES256_GCM,data:y00L,iv:CAxjmCvvhVEFJw5V6nAbsWaYnAiDK27Tk/S3eYQttsE=,tag:35+y6Zjn4zJZAx+fWQxhIA==,type:str] +replica: + #ENC[AES256_GCM,data:aOJW7iWKuq+lxv0cuvSmqxFZnLPzOtCW7hwTR1WRoIA=,iv:gyLdEUUweLVNtWg/IJUyQI7aWPk/Rfp6uEUAuR8NpDQ=,tag:alBdknHzG1vBRUTYbn2E0A==,type:comment] + replicaCount: ENC[AES256_GCM,data:VA==,iv:4sHpDprUa3/l26TqnQ9IDCnLXw9Jbw4mPIvs2z7ukUA=,tag:i+W+ov+Q+9OZOiikgT4f0Q==,type:int] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1aq8twfd78wvpra0had8cezcnj96tj4q0068edrz5jez8d6xwmflqdepsh4 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqTjJFY20wMFlqN0c1aVJH + MUc5UisrOVVxdFp0YnVJRGRkT2pyejNjVHk4CkVIN2tMWnhvbjJlR2lSNnFzWGQz + a214Z2MvR2JCcGFUWnEzWUZXdXRoNkEKLS0tIG5zbSt0eGhPU0xIUUlVUjBmNTZl + QWpHK3lnK2w4MEw3eDNnc3JHUG1TeWMKmthxNLeSLkTKs/BMbhV08FF5wMh6EfX0 + oYxCGTh5jziBXJASXWatNggbfjAIHpzJe/8YpjP4FdVjjrKLGBz83Q== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2026-03-27T08:51:49Z" + mac: ENC[AES256_GCM,data:2Pla0CD8wAwsr0Sl4ne53cqYb50iElhsjCfe2ENOWb4VA04cKQYoS1tNO67M63b6mzgRy7harNAu3bP/1MXv6fUiH0J99doEEvARMbKZ6H9SEZ6Dep6e8gHUmeUQrYUdrxD51y1jvLYEHnvir6IfeYmbBDDcbFopnGJTGV3Fc9o=,iv:74PTzSbX6Y7qwFtcYuUpxvtKUnOxGMhg9I/OWRHhM5k=,tag:MGzlYvGbJML5QA4DCpNl0g==,type:str] + pgp: [] + unencrypted_suffix: _unencrypted + version: 3.9.0