test flux secrets

kubernetes/apps/production/arr/radarr/ingress.yaml

@@ -3,15 +3,6 @@ kind: Ingress
 metadata:
   name: radarr
   namespace: arr
-  annotations:
-    nginx.ingress.kubernetes.io/auth-url: |-
-        http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
-    nginx.ingress.kubernetes.io/auth-signin: |-
-        /outpost.goauthentik.io/start?rd=$escaped_request_uri
-    nginx.ingress.kubernetes.io/auth-response-headers: |-
-        Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-entitlements,X-authentik-email,X-authentik-name,X-authentik-uid
-    nginx.ingress.kubernetes.io/auth-snippet: |
-        proxy_set_header X-Forwarded-Host $http_host;
 spec:
   ingressClassName: nginx
   rules:
@@ -25,7 +16,17 @@ spec:
                 name: headless-radarr
                 port:
                   number: 7878
+    - host: "radarr.${PUBLIC_DOMAIN}"
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: headless-radarr
+                port:
+                  number: 7878
   tls:
     - hosts:
         - "radarr.local.mafyuh.dev"
-      secretName: local-mafyuh-dev-production-tls
+      secretName: local-mafyuh-dev-production-tls

kubernetes/secrets/flux.yaml

@@ -0,0 +1,28 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+    name: cluster-domain-config
+    namespace: flux-system
+data:
+    LOCAL_DOMAIN: ENC[AES256_GCM,data:m6nkdDfRlhsgTcImO4u3LA==,iv:perK/v90gauuqG9O32x9+ZNDIHo7CmKVU6yGQei7QCo=,tag:gM97bgh74hFiTTx4f50Uyw==,type:str]
+    PUBLIC_DOMAIN: ENC[AES256_GCM,data:VmTTqtqN1cM7RQ==,iv:4y8m3q/SZkEoxtIkzLjxsBwg2u8KDSpTwJSx0YBFFIU=,tag:/pCFh0j0cYyRZOSsIigWmQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age18z6wevr8ze5azvq7nfty3l29s7887l8n5mefr64avhlthtr4uvnqw90nfs
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKSVdMcTNYMTNmY2kvVnhW
+            VHRmWGJQRlVjb1pkaUE4VkE2RVpoaVVIeTI0CnBVOFh0TVFrUWFYRmZiNy9CMWNW
+            TlBVVkQyV0tZZEZiamFEak9aUS9mY2MKLS0tIG5LdUYrU0c5Zk1TYmNlOGd5NUhv
+            K1cvYlZ5THZDaGU3QzlpSk9HR29LVjQKgTCBa08fZ1WExmwjrh08LwTdNeNjrQpA
+            zbbNnI7LzcBggmfuQkBUMhVZx+LOU8IJKFb4K6i9Ihu1lqEfLmRZPg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-02-17T04:59:48Z"
+    mac: ENC[AES256_GCM,data:6e/p8RM7JytjOgn2p+v0KUmbjGRO0y3/z06jtyIiJIbiTGMbnAOUjBALC7r8QCC5kpLq8mnWi2nQINUH7MkeJmontFZrDBfmauGb0q6MfGTLfY6KtgtSxA20h45WkZgSKS09mILeHlFoE6yNGhlyjzn2Hpd+b4MVGx6BBBH7+rQ=,iv:uARk7mMsYw4m6q4LixsrtAdUTzPBUB7QnMiuRZQKhD4=,tag:DNxnKT2Dia0RZ1xzjHIqBg==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.9.4