Helm Sops

.gitignore

@@ -2,3 +2,4 @@ build
 scratchpad
 *.sublime*
 /k8s/dregsy/values.unredacted.yaml
+*.dec

k8s/dregsy/secrets.prod.yaml

@@ -0,0 +1,27 @@
+inbound: ENC[AES256_GCM,data:EjIcl+VpG+N9PcsWwqRXU3c3n8U/ErJRvBFsQeFxslc=,iv:Kg/IQM1R/NrDeAk7c4QQdVDBNRrTVcmHZaJM0FKhSgk=,tag:idE/kWeu0Fa2EK8i8O7TyA==,type:str]
+ecr:
+    keyid: ENC[AES256_GCM,data:JZmbtIO5Agvu8UVz/7Q6Mcl5ISE=,iv:Dz35QjdKQoYNlUAvcPxUfp2TscjxGwlkgxu6yqAVqhE=,tag:0eLI0T7hhLKzlaMaeHs7tQ==,type:str]
+    secretkey: ENC[AES256_GCM,data:a3fz3s1UJUIAfkO0QigMGDwZIz//y0WjKXsVBIHg4cDvTydOeu7KZw==,iv:0GW43pfitUhwYed9Qn03rvTUeoZxX8j36XGwAL+0Q2E=,tag:iX41NEqHnZd+I2ppI5SS7Q==,type:str]
+acr:
+    pullonly:
+        keyid: ENC[AES256_GCM,data:trHdbntqsustdzTVfh5jmw6e/nMOm4quMD/T48jR71JFJuXi,iv:FkjV6bgk2ijozuTL1sOYwjlJmFcDnhNWcyh+yt+X1Lw=,tag:7cr0Ucp/Fh1pGWURvJ1Itg==,type:str]
+        keysecret: ENC[AES256_GCM,data:V9rDYe1gj247lW2Xw57bj/iTI3Bd8lCCaKjxatceoYDtWQ==,iv:9IIQX8yGm7BeWH08PmyscdZeN/+4Z+d2ft9uW9IXIV0=,tag:75/zBKQWOJZ0K0+HbBl3TQ==,type:str]
+    pushonly:
+        keyid: ENC[AES256_GCM,data:5vlhQMQG25bJyhaFfVwyZeiQOX76hw0uKGYbBO7wCW8rijU4,iv:K0hIAy0+rnfFmUUs581N52Nslar5Cj+7BOBXVwQNFw4=,tag:HtmjCIGDlPEV5/e6qAgkxQ==,type:str]
+        keysecret: ENC[AES256_GCM,data:/6eOOWRNm83pRkpm64sJ5t088ze63THpRKLAFYa8H5LeVg==,iv:OjwdjYeJPPPSd2pBYBMVD6+y6eYDhO9cmRG0TMvp/Kc=,tag:5YWDHI8R3xyQ3JfMmlNpTg==,type:str]
+dregsy:
+    bearer: ENC[AES256_GCM,data:4QME5zi/yiOba6Xk8VvGoqE8tgbdtBVsG26JX1shpuySQ5xjn2aSafZIwJjuXs+NQ3mffpTGslbg0XVxfE/b+Q==,iv:Tfpmz9/JAb6qrNSS/jGGU97KR/LCg3XcvRLxhjrAx0s=,tag:O7PwKrY/hs+xvq8aiqRqTg==,type:str]
+sops:
+    kms:
+    -   arn: arn:aws:kms:eu-west-1:096108736502:key/a94a1de9-5070-4e41-bcb1-caf4a2d823f5
+        created_at: '2020-07-21T13:28:58Z'
+        enc: AQICAHj1lC4IXMS9NZVoevrJoxgzoshzcvx2v4D8Y93+0hYHNAFtxt8s+NhGAE7/r5E9aryVAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMIt//Brkcs5nl0WmGAgEQgDtgcdvE97IwHGlT2D433upUQwW2o5tAMn9VSPkYWYi8h7RvpRsfR2J87qZi+cbOfLCJb0mD2SQgBVzNvQ==
+    -   arn: arn:aws:kms:eu-west-3:096108736502:key/203af757-eb6e-48b1-9a98-9dfeb66ebc87
+        created_at: '2020-07-21T13:28:58Z'
+        enc: AQICAHjS/p2PTB17EELEeUZXROm6BkksZqBgJxnapJB5EYChiQHHWzYi7OWFX627fm0ng5XAAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMq90fLCP+TcmCrygNAgEQgDsgRFFPZMdSroJ7o7u+D6DJRpCE1oCV5UnPkwnN1z21duxMUIRalRjYsv8IKup8khU4SUJlYkDGroLEew==
+    gcp_kms: []
+    lastmodified: '2020-10-12T15:38:32Z'
+    mac: ENC[AES256_GCM,data:LrjYPNAOL7Ve2cqjD6W5aBuJJWBsN/yoZh3elk90GKx0mHtd2TTqjUwO4tkyZSJDZhgRufIZi3VBjMf+swcStITGySlKXbDR9aFjqUzcC72Hs5FC1CNuAO5TnAqdICj5Te4fpsj+SRil1g9nzu+29hclbRFVCszappV5dH+0zic=,iv:b9a++s8f0Lj6lJK2Vzain2uad54UUVUMY/MLf0OYzGs=,tag:G7bmB42wVmSkqraQYoSvaA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.6.0

k8s/dregsy/values.yaml

@@ -1,12 +1,8 @@
-# Default values for helm-dregsy.
-# This is a YAML-formatted file.
-# Declare variables to be passed into your templates.
-
 replicaCount: 3
 
-instance: dev
+instance: prod
 
-inbound: https://address.com/acr2ecr/azure
+inbound: acr-push-events.aodap-staging.fr
 
 ecr:
   keyid: XXXXXX
@@ -21,16 +17,16 @@ acr:
     keysecret: XXXXXXXXXX
 
 registry:
-  host: registry.com
-  image: /somepath/dregsy
-  tag: imgtag
+  host: padoa.azurecr.io
+  image: /padoa-tools/dregsy
+  tag: 5161dc214a2d385813782b2d4116b52844cee43d
 
 dregsy:
   bearer: XXXXXXXXXX
   src:
-    host: registry1.com
+    host: padoa.azurecr.io
   dst:
-    host: registry2.com
+    host: 096108736502.dkr.ecr.eu-west-1.amazonaws.com
 
 pullPolicy: Always