feat: secret

Author: seipan

k8s/harbor/secret/admin-password.yaml

@@ -1,8 +1,23 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: password
-  namespace: harbor
+    name: password
+    namespace: harbor
 type: Opaque
 stringData:
-  HARBOR_ADMIN_PASSWORD: "your-secure-harbor-admin-password"
+    HARBOR_ADMIN_PASSWORD: ENC[AES256_GCM,data:jSDWmlhYOGP1Q/E0QxEw4gXvnZ7/L+i9lqt8zzUU9kZf6hjnRGzwDOGKgsQ=,iv:+gbddTvo9laSQpztv3guUG5rc1mlcx8wwvzpTz816bs=,tag:2wOq/SoL9ANS4wVq0wJQmw==,type:str]
+sops:
+    age:
+        - recipient: age1k7d7drqkwqawwfxhxzz6gd5ur7ns68xd5kpn69x8t6yvf9cp3pmsuukrgk
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLQVAxcmJDMU1zWGROMWx4
+            ZXluczIvd1RsbGIyV29iZ0MwNXRhamYvR2lzCm9CSmh1ZGd3Q2VKRUN1ckppOWZ0
+            NUJ0RmozUFM2YkJYMDRYTDk4amhyYU0KLS0tIHBQTXZjb3VBOVIvOFVZeDFkMVdz
+            akVOMEo3VndYQUtPZTNmMElXTmlWdk0KrHTEtqKjssXuEGtf6LtyIad7h/ere2CF
+            LQaEhxHh48WruJL21C8YRIgpSl3V+ohPA0aAd43C2+N5nyrQi8WGlQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-11-26T17:04:31Z"
+    mac: ENC[AES256_GCM,data:xgsMrNIU1SRkkiiXqyhN0K5hqW6d+97XUvjJR0btSo9vVTCNFzi5EiWkAc/wEI6+ZK+umHiS4zKHTb+7D9I/zsQ8XMgJrOT6D72pJhBotJT5yNd1YnZOJpYjbOi9Wth+GcZuZWmaG7L/re6r2R2+1ECffTu21AiIW4lNLGRxe+8=,iv:F7d0v+xNSSRMVa5akLILQceIbQ9+shjjUz1YfpDICmY=,tag:FexBExuYm0iMyP3GAEfSCQ==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0

k8s/harbor/secret/secret-key.yaml

@@ -1,8 +1,23 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: secret-key
-  namespace: harbor
+    name: secret-key
+    namespace: harbor
 type: Opaque
 stringData:
-  secretKey: "your-16-char-key"  # Must be exactly 16 characters
+    secretKey: ENC[AES256_GCM,data:bQavTt1Paz239eTOJ+FxE41JyCERAjKi,iv:BcGgGHSfxYNljlPLqBuJO272J2vkLaGWmc8HZ0QnVYY=,tag:RB5WmdH0QiFbr6ZR0A1QuQ==,type:str]
+sops:
+    age:
+        - recipient: age1k7d7drqkwqawwfxhxzz6gd5ur7ns68xd5kpn69x8t6yvf9cp3pmsuukrgk
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvYzc3c2lDVEpEU2lQaENv
+            V3FJUld0cVVlN3hIQXhQdjZZYVI2SkFoaEhBCmpSUHg3V0pBVXNXLzlETGFSc1Er
+            TFkyMVhidU5PbnY5amhkbVdlY2hSYmsKLS0tIHZMYzE0R05BQm9IL0JIdCtCOU5m
+            WnRTdE5GdHdkUE8vOUZ6OVFpUjlremsKKIqg3aH9RBh1OqCW0wHjCmslZmwjviag
+            0p3afHE+8hJmfqPnq95SuRikO4C9RHs9rWikGwJX6bCvOrW4gTNi0A==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-11-26T17:05:09Z"
+    mac: ENC[AES256_GCM,data:C3oLKx1OZEhcZhSVkqoTkHFDjQLLeT1KGWVF9A8Nvrz2rcH/i3aJbJ6K3AQVGQs2y41Sc8nVA8DnnXpRf/V5I4Zf02CL/+XLFlwd+4mje+RFtfPWZKIzznYnbX2FGJsQTxIAJCBefV2KU3ozYQeWw7ZXZCt2zRGslCPvsXRnedE=,iv:93vSNQ/2oTuO7vdmlAsEx+a+145hGkmaVV5u58V2hFg=,tag:B06jK7LOskw4t5cLJKEmvQ==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0

k8s/harbor/secret/storage.yaml

@@ -1,9 +1,24 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: storage
-  namespace: harbor
+    name: storage
+    namespace: harbor
 type: Opaque
 stringData:
-  REGISTRY_STORAGE_S3_ACCESSKEY: "your-s3-access-key"
-  REGISTRY_STORAGE_S3_SECRETKEY: "your-s3-secret-key"
+    REGISTRY_STORAGE_S3_ACCESSKEY: ENC[AES256_GCM,data:MPY3YPN8QDshXe/tb9M88JT3Cw8=,iv:DydZdRhLdkhX2QRAAGwRki5Lho6CBKNmR3bDkSR+RoM=,tag:S01B6ZqaR1M9CsibvXQr0A==,type:str]
+    REGISTRY_STORAGE_S3_SECRETKEY: ENC[AES256_GCM,data:gpc1HaFbD2HqQ32DX1Z/dcTJ1H/VuS31grh80ejYky/2Z70APS+iaA==,iv:l27hG3e/MS7P36r3hORru1K8Gl3mscaK2+qD2NyuH9M=,tag:FOsWPrbwZsFI647ZWlTCgQ==,type:str]
+sops:
+    age:
+        - recipient: age1k7d7drqkwqawwfxhxzz6gd5ur7ns68xd5kpn69x8t6yvf9cp3pmsuukrgk
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHQkpGZFRjSmIrVDdwblFq
+            NmVsL0JXaE43NSt6SFMzWDFGOVI3UlV3L1FFCjlGNURIY1ZnMWY1VmJTQnAzMUVF
+            Zy95aFY2dkhFVFM0Y2V0cFR1N2VxZ2sKLS0tIDdIZWJxeXhCQ09qNW5zKzRvRlRO
+            ZHVEMkU3V2Vwamt3eUhOSEhyU2dUS2sKOji9ZqLEgas9zyVXyK11800a0Z6JBO0R
+            dcd2QJgGmw4AeTfiPF7MlC9PNV42C74Yor36GaeqrprkPlMewSb6ug==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-11-26T17:07:05Z"
+    mac: ENC[AES256_GCM,data:c0EqfNDbp71t3oc1DkC5MN1Wu3pq6QTUFEST4ysTkTudp2Uvv20YTcE+Fe8OrpCR4V4Y5rHgA4VoJVuXTctF4SlzA5a+2maAumYOm4ZuAWHYVpiPB4XthRDB8LpK3Vi6Mu2Q8w26MELmyKPZnjNeTL2/Hy8hTNtFrVfgbvHr9+k=,iv:IoV2nyXhtqYWPjrkhsnw2rhKAZY6o9h3kma+CBOQ0UM=,tag:FkIFefVkFb1rfiejSDN2mA==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0