state: per-stack Transit keys for namespace-owner access control

- Each stack gets its own Vault Transit key (transit/keys/sops-state-<stack>)
- state-sync passes per-stack Transit URI + age keys on encrypt
- Vault policies scope namespace-owners to their stacks only:
  - sops-admin: wildcard access to all transit keys
  - sops-user-<name>: access only to owned stack keys
- Anca (plotting-book) can only decrypt plotting-book state
- Admin can decrypt everything (via admin Transit policy or age fallback)
- External group sops-plotting-book maps Authentik group to Vault policy
- Updated CLAUDE.md with state sync documentation
This commit is contained in:
Viktor Barzin 2026-03-17 23:08:18 +00:00
parent 6239e07dd5
commit 77143dfd6b
96 changed files with 56972 additions and 56944 deletions

View file

@ -1,119 +1,119 @@
{
"version": "ENC[AES256_GCM,data:7g==,iv:/piRd9/Deio9HzttEZ9lD5BHMXVscYlezQQntZOmS+w=,tag:Y6qQaA/sD7701UpiMyKvUw==,type:float]",
"terraform_version": "ENC[AES256_GCM,data:GkWM6kM=,iv:gjLnhi4VKPnaHW7UEuyNy56PPYNksS89dYSDG96qxA8=,tag:O91pWE8m0+oMUODrWDzT/A==,type:str]",
"serial": "ENC[AES256_GCM,data:YA==,iv:E11It2rdW2MANGtLWt8bYCWveVf1chJjgPna8GU06kI=,tag:REqj0yfm/NF/hfwhZJkBgg==,type:float]",
"lineage": "ENC[AES256_GCM,data:DaogI+698cMlwbat5I66eKrlIsgQF4c9dNzbM2lqiV4RzWih,iv:3mEqELBwzi3ZAC9hCBr7bUiwZEtqw5O4fAZFBZDUmfc=,tag:6pqn4+yuiNNHY14VPEzkUA==,type:str]",
"version": "ENC[AES256_GCM,data:KA==,iv:VHbGx+y4O6wY3fmPLoGQzBBw5M/80CMVcMZKYnwYxYc=,tag:RkYZaAbbDku2MBrkjQZ7JA==,type:float]",
"terraform_version": "ENC[AES256_GCM,data:+amW3sw=,iv:4ZZadttc+7dWb6qq/833QwIosX+vknVDXC0DV0+PItU=,tag:A9rPxGazANXEIzeWAFWH2g==,type:str]",
"serial": "ENC[AES256_GCM,data:dA==,iv:Ejqon5Ks5ejNnqynZ2fK3TIZjCMmG54nJmHcGJQp70c=,tag:qLlSFwB8VVPFzWr2WlgUrw==,type:float]",
"lineage": "ENC[AES256_GCM,data:R5r3QIJWrGrXktOzNhlJ0Dtdab4u58xYnWLWdSFz+EKiBrSF,iv:wRo8tU/5D+LXV0pnnGJyAI2O5U4oMknzANuNixjYehE=,tag:8zQ8H1uwCQlyRrsYG2veKw==,type:str]",
"outputs": {},
"resources": [
{
"module": "ENC[AES256_GCM,data:dFbI8uChrCwzDTM=,iv:8oixmkaFLR+BhJEh1RH2ZdpywJn1HKnwu2P2Vxeut8I=,tag:xpM1ihYIb55Lr0vSbFyFtQ==,type:str]",
"mode": "ENC[AES256_GCM,data:DMmhfs/2Jw==,iv:yecQLWf4vfk1IK2m8cmwvYm5rFKEA5SzD9CDPPC3tnk=,tag:bGKbukkbswZt9P4ie4bdcA==,type:str]",
"type": "ENC[AES256_GCM,data:FP7pb9pUGAIXYFiV,iv:QisvQhCnZfcTU5s6DjVgoHolemCTo50E4vNZBGL4QpY=,tag:AbJ4QQmBW3C0gQv3Iyt24A==,type:str]",
"name": "ENC[AES256_GCM,data:FtRt2w==,iv:IefAAPlkvxWoXYuSshmHBBTZ3k9Y4sPCqn04+afG2Ao=,tag:cB0K9mE4CP9N47srYOA1hA==,type:str]",
"provider": "ENC[AES256_GCM,data:E3CDVJ1Ugg6OqR/EhGeWxRouBsXG4iDSFSSRnbwELYedtJSdpo7GR5iS+GN91K7w,iv:jkbZGTD4iYjHSVzatIoPKeGrjMn5z1dU6PfgCHCMV5I=,tag:1rSFU/pkBgLTCgDoB+kHKQ==,type:str]",
"module": "ENC[AES256_GCM,data:dw3nc4Z/081ycPs=,iv:rWEq8DCk+TpvTvpOY0CqpMkT7F+Feg9pyfzaifuqOMQ=,tag:7/SMsL2Rf62ATbdsnEaWpw==,type:str]",
"mode": "ENC[AES256_GCM,data:qWyfPcYqeQ==,iv:Tm+sVmuzRtZNmNVvWa1tihGWcqCWo2gHdPLpYgpu3Ys=,tag:3sj8qfv7yzFhbq0Fb8ea9g==,type:str]",
"type": "ENC[AES256_GCM,data:Y7JlYv93/CSPeQ2E,iv:7wmaMtwi8o+HoA2WpktaJ135lHJLAIt1Lx41spHZpHc=,tag:8NZgRYSEHzS1DnuiWY9QvA==,type:str]",
"name": "ENC[AES256_GCM,data:ikxfMA==,iv:h3Rdk20hJLXJaKqPPplLuMasIVWJCWP9+PdeEwvRtKY=,tag:wfhsgHP9J6eNvvJTCWVaaw==,type:str]",
"provider": "ENC[AES256_GCM,data:Z6jA5VuVegBQkskKTl7oEr0TkhioEUNagBAFw5ai908rW3GEQyiP0HZPTf1X36AL,iv:f1MYHbXV5BWTxnekgdUm3LQw5mr28qxkb//BU5pi9VY=,tag:gNBHzhC3RIPEJUD9ue8FDw==,type:str]",
"instances": [
{
"schema_version": "ENC[AES256_GCM,data:dw==,iv:VS+qX7XLV6sD+UCaU3ZjfDv2ARVZTYdZT35MpvUHanc=,tag:5II1iqbu4u5a5LgRm0c6jg==,type:float]",
"schema_version": "ENC[AES256_GCM,data:Ug==,iv:m0vKdKlGZzWKtqgzXEq7pYM/E6fk8RkjmkW5qtOsfKU=,tag:snSraiUVmeJH7ABOZ1Yg8A==,type:float]",
"attributes": {
"atomic": "ENC[AES256_GCM,data:WQDfSw==,iv:hBDdDbYLtaPgOy4utCR/hQ1F7HhRrx0cxSSP4bH7CMg=,tag:Y6cPBkwBtd8ehtaZ27SQvQ==,type:bool]",
"chart": "ENC[AES256_GCM,data:3VPgTLoGZ5L1RVB4Jaw=,iv:qylQmCASKf6WWrykqG2HFKj7LXgi/9OBSf+9h8gapY4=,tag:HxCbkKxt04b+gBQF4nshYA==,type:str]",
"cleanup_on_fail": "ENC[AES256_GCM,data:CzpDpmo=,iv:FHgX8GrghykGFSL5mobXT7b4pHPE7RJUDak4twWZvkg=,tag:CQaDcPDGGwLkqmPP3Lhe7A==,type:bool]",
"create_namespace": "ENC[AES256_GCM,data:WeEngXE=,iv:APlaA3rwF6gubPOY+yeFTHIwyy3se4WlYHJgD2Uc14s=,tag:NegiOPvt1J040GAxF5pGlw==,type:bool]",
"dependency_update": "ENC[AES256_GCM,data:+niGcQs=,iv:vzhtodQplF+La0QNeda2T0WUIwoPak1nHh+GJjet48Q=,tag:JJKPBPM65puXvQyLk2EGhw==,type:bool]",
"description": "ENC[AES256_GCM,data:nxM2xkdkfum1pll8RITfKQ==,iv:6nCNn600zmnIsfgPThZlwmBoGUMT6QKF8TIR/silsSg=,tag:mA5UjDb2pWNspJYvdROjcQ==,type:str]",
"atomic": "ENC[AES256_GCM,data:plOEpQ==,iv:S0OXlkWyqaKgB1fT0U/Hf6KOvwienQWs9el4KXN5+uc=,tag:KjEbEGDkS/u2p79CHaZXYQ==,type:bool]",
"chart": "ENC[AES256_GCM,data:GaZBvrTRokMg2dssAjQ=,iv:oaa9rMQdhPkNcFo2hkptdJmXdnn5bnTbEnwZIPh6xSo=,tag:nqIcl6jd0YgYSuO/0xIhkA==,type:str]",
"cleanup_on_fail": "ENC[AES256_GCM,data:cGGgXCo=,iv:/ZUQO2EhLI3oZ4YQhLNcy5gAzPsG/+25v3k0QjocRUw=,tag:esdU7VQovHVBE3dx2lnBlA==,type:bool]",
"create_namespace": "ENC[AES256_GCM,data:iSJ+l8M=,iv:naxPRfMWoy+f6T0VTnQkqRiHSWmvRuMe2ZbEJZjn/50=,tag:lBnLyEc4k9YqCNPk6kf1VA==,type:bool]",
"dependency_update": "ENC[AES256_GCM,data:Q+I2DJI=,iv:QNPJflDNqVIvY3CAuzMhGMqNyw0kTzn0WrWay7AIzaE=,tag:z9SXEIRKLmSsKlpeLVKlBw==,type:bool]",
"description": "ENC[AES256_GCM,data:59PhszT3dyELCmHKTmxFqQ==,iv:FlW39vfKJDIga2xcTiGMZhI+WQSbiagBw3RSfVhwxFU=,tag:yhKuTKCj1GYQaC4vbiXsjw==,type:str]",
"devel": null,
"disable_crd_hooks": "ENC[AES256_GCM,data:HFIgt4I=,iv:rRgymRYDcfhWmesCW2lFRlGH1gmIJYUfhWPvr7mYUgw=,tag:6vc28OshH0oRT4wD1FckZA==,type:bool]",
"disable_openapi_validation": "ENC[AES256_GCM,data:rtP3AG0=,iv:rfdcXPR0j/htWGX8eoXvCBRTEr4h33Gcqbi8JiIOFos=,tag:dQYtMeACEW/pdJsmCZRJUw==,type:bool]",
"disable_webhooks": "ENC[AES256_GCM,data:Cn3tBHg=,iv:gcnRXfqF2aRg+4VIAvRZQqjFrKZnWcis//zqu9Wr2mU=,tag:tBcF7L3QwubYzf0QlxF9Kg==,type:bool]",
"force_update": "ENC[AES256_GCM,data:W2sdSV0=,iv:8obh4oLJNPsX8zNhVdlnIpx6I7jdE0Z0FUPX/NfcYUQ=,tag:KkqFTXWy6uG03EV4HeZ3UQ==,type:bool]",
"id": "ENC[AES256_GCM,data:A6eKww==,iv:5QMGW6AXAcR7K/8nLEKQzek0z8gj+ChXGecziGPvKFE=,tag:UJOfFkhpI4PevnSslGc1lA==,type:str]",
"disable_crd_hooks": "ENC[AES256_GCM,data:oMosAYM=,iv:KvFjys0A+7AmzIka2+qoiMiFCQfVe7xhSxjtfzCFy+s=,tag:OfPR24r+lxcoAsUWMsTigQ==,type:bool]",
"disable_openapi_validation": "ENC[AES256_GCM,data:FWZZlpw=,iv:6CQ32ubkSGgRlWholhyjqh+CRhe7Llvq/QrGY1Ct+os=,tag:z/FJp2iaEDzuY0ScuvaRhA==,type:bool]",
"disable_webhooks": "ENC[AES256_GCM,data:lXOmkZM=,iv:FAiLqvTC9riPjSoLgKR6DxrX16sTqzvw0N6aM/ONpRE=,tag:UU6muzhmygCoKOQu7XAtsw==,type:bool]",
"force_update": "ENC[AES256_GCM,data:79bvsoE=,iv:wynpSzG/UV4HqwimAWnzUXq6Uro5IvYxnPx+7EXPuR4=,tag:YHX3rOEMXRx5VY501VCBmg==,type:bool]",
"id": "ENC[AES256_GCM,data:AFnzrw==,iv:3wBbWPxeytG0WiZwg9Zo4sGzh5Yrf0VgUZELnEZvbI4=,tag:SCL1BAnFtL4h5VIJKNcZvw==,type:str]",
"keyring": null,
"lint": "ENC[AES256_GCM,data:5jnYy5w=,iv:/f2QLcP8/ieCJfaVz9vKRolI5DkQYASQ2ITJp+WEkSE=,tag:9wK6CfTzX2s/gjPeKIDxnA==,type:bool]",
"lint": "ENC[AES256_GCM,data:C4ymL5I=,iv:DlT5+8zv/znG5eQyG01oWWXcXGRSnTexbfwzN4s39xM=,tag:F4PgqQJlpwLaBb/C83oDKw==,type:bool]",
"manifest": null,
"max_history": "ENC[AES256_GCM,data:IQ==,iv:BOr3nrNlJlSgP3KzaX0iNcVZq9WuTYT2pOzuPdg4l/A=,tag:KAiGWFBQTMFljc/VHUezvQ==,type:float]",
"max_history": "ENC[AES256_GCM,data:7g==,iv:Kn/f31j3vZgIYABLBcKLB8TAqQ6qcxEzcesjohnls9U=,tag:E6NMrsfLuC/a2TuiN1L5Rw==,type:float]",
"metadata": {
"app_version": "ENC[AES256_GCM,data:Z2ckaTic,iv:x8rLrDTgjrlQhleS+uGRcgcR+CwmVK7Bsx1w2sanQfE=,tag:s1i0AHn+egJrC+amqi8j+A==,type:str]",
"chart": "ENC[AES256_GCM,data:5BN2IqMUcdWvE7rKFZw=,iv:9w/OyzDFLkNRPqdFezNOTQQkaSJwkEOv53p0De0HUS4=,tag:JA7zMDSjHxW0t1WPX20fww==,type:str]",
"first_deployed": "ENC[AES256_GCM,data:iEAvYzWoJFh28g==,iv:HK8jCzMMD0X9aZDNKyG3T6cNNCqPafVm1inKuekQthE=,tag:2n+Aq8DP02+z6AwnoKn5Gw==,type:float]",
"last_deployed": "ENC[AES256_GCM,data:VbMZtWWbAr+YtA==,iv:yNaphfX/94RDUDMy5zzaDTRh0Xswz7iw6UUNgsEEARE=,tag:Xu2tXRGasiTIersR4v+WQA==,type:float]",
"name": "ENC[AES256_GCM,data:8cdQUg==,iv:4CnFA9sSrJVSNwA3As4t0EXOPNXvEC9JdFhwYebQMdw=,tag:VJKDrD5Wo1dh1g89Ub2mJQ==,type:str]",
"namespace": "ENC[AES256_GCM,data:drHN8unuG6CMWgw=,iv:xNg4Q3CKZ2I0yDZyc2HgOe6gCDV7MiH7AW9Hi1u8GwU=,tag:hz5fHDkBN2Al+aeNwtj+EQ==,type:str]",
"notes": "ENC[AES256_GCM,data:BESNN69OWcXjW/UM44ve4VA9y/s/imT0oRx8wuKfzo4c8WIeLO/8rIZZUskiVy4qhqmdQjxdedwEdIZ+7JdBycFMBf1iwRTvTNpL5aru9OdApKKBg1q+aItUdHrWMgqFi4yr01At4jjDtzPELVjgP/njFjeaIlQessdKgFQ5j5gmObKRDrvAGNdUFQ1vQPeGGlWuWyDcQxPCoJgifThRDdqd74NuC6RYAlpBoiCrE8hIKGJwxagyyiSO0wF7dK4kALgoAUevUaWORkIQaOLpZ7IsbCH2XXI/HX+l2+b4PNOzjOBml0XO+AEVpXgHm2vS/TDqSipG1XKm8O2d03691KogeBO/9e5GzPYu0aUF8EU5Gcd9RIZbOKBKEB6Yuw8MKZGpDA9fOx64xeM6pj14N6vvXV9lEAiWLCBp/iEo7GnfseqPd+euLRlWoorhHNxwhHmpYOE56oalO61iIvnyOfl/wMJfbJnIug==,iv:Uw7zhx87ve++hm/f5E4lhi+l1cLJhH3NUHepiI9A7nw=,tag:MItySdTzf+ESaFfXzbFxuw==,type:str]",
"revision": "ENC[AES256_GCM,data:Aw==,iv:A6eFFawv1nYUyQeq/i4orsAS3n8vfyg/AWpbqUCFalo=,tag:Y03nCEnHtUG7XmfEdh3PRg==,type:float]",
"values": "ENC[AES256_GCM,data:ntQOvpQXT6f0QXl3WKe6YGHA7TWHIuC1DzR5vdixDubYj/rpcb6uBQ42+Zw9wg9WDlclPUu8xB4ggb0CG/WiKfCSVEkIeMAcLXxZoyGbhkRxRT2QTbp/VzwJL5zFGPbk5oupvSPkMWbucY8OCUZeQ9jZqWG8GPFxlVzxX0mx,iv:/cwO8+oPo8DRU9qbYDv64dgt28byO0JZAm8kEDy+K14=,tag:bGwsDxrAy34QjzvQ4STZfg==,type:str]",
"version": "ENC[AES256_GCM,data:zmigFzDy,iv:sOUxthqurQILNKXP09R/6yVC8EUlgUF8PcCxGg9Hwpo=,tag:GPMQUix9icSv7TJMyf/CPg==,type:str]"
"app_version": "ENC[AES256_GCM,data:qZfXbEc6,iv:BR1Xcfuj2N1GBuZ9BrHXO8REyRibrH+mC9ZuGdQ8I/k=,tag:qElqWf4YaDm5sRDesuK5tw==,type:str]",
"chart": "ENC[AES256_GCM,data:AUh5LDYpsspQ3zsM1wE=,iv:7fNvtES+zLg7PTxZ/bFPCm2FlnR8wUpoAnDyGPFGMVE=,tag:GWGjaL8loIGoKOz9/QvBgQ==,type:str]",
"first_deployed": "ENC[AES256_GCM,data:9gymYsY7imLd5Q==,iv:l0+k7ifXbX39Rk08sBp3rJearH3n2s03cx+JocP9jlI=,tag:N2fnrHBFyqjtTZQVlYV33A==,type:float]",
"last_deployed": "ENC[AES256_GCM,data:sKTpSeMQTUQ2dA==,iv:iunM/m3R0pFJWCWPW1GNy0Frau/QgW+T+1axYmQT8js=,tag:FZO0G5MOqRS6ocyEOzYvbA==,type:float]",
"name": "ENC[AES256_GCM,data:h9yB4A==,iv:hWq7DFgWbEL67aLcMCgCEyd5OPuG6I6ZJpJfq3tpR2o=,tag:oQ6YTGQA8anwBQDFAudG9w==,type:str]",
"namespace": "ENC[AES256_GCM,data:RdBnZE/g5J45iww=,iv:vGyZ+DGWikHoRCEbCS/tCHjzmkf5NJZ9I8SrwLnn/Vs=,tag:Vgf2WiwpDd+PBXx08KW2Xw==,type:str]",
"notes": "ENC[AES256_GCM,data:bDUSqkqhMqyJpj1iBMGPeBYPGq3zmauZYPPQYCXmVA7jvXzqKdMVN1tKbLXB4eDWmSELlVCOgkDf3Tleo5DVH9Zt+3EedscF/UaY2KV9yBS9Z5JpIKw9/cnAhVFmcvTXqIDzGMkTciSfREFTn3aIzGlNU2e41B6qLdiamOzCTsikCvM5BiPP/Kv/phByaRpu5vRfhU2q4x4Jp5UwPY55+Gl5ixdrOcnWjlGw402z6LAO4yA2n3FxIJHM+cgCs6AlUgoYHWe9Z4O0jIpPBZSBVzWdmOX4gkQlxCVSa/76nphN9RFOEKeDwWRiwtdI//TXRFqVdPNTyDvODbXM+8PUGMhq0yfOi4qLNxpSV0CkjHmuJ4qomJ7fF8u2Fzh28Zfk+6jSBTwqkCRw3uSs2toxhHA6yIDSeWmy5c8IYXRkXGULvEnNhaJDwH/cyyWqscOEttlSP4Rp4+lthT/Ib3iAoIWhJwxm3UXkgg==,iv:cl8RGF+MPKOyZwsodd4ROG0WUwBpAu3vPLvG8rtwQgI=,tag:ZoVF7KWLesNZI+e+DHkVUg==,type:str]",
"revision": "ENC[AES256_GCM,data:8w==,iv:QfEWJ/UB0XGRH9pn1tmA0jlHyjT6qY+UN3Lww6LPeUU=,tag:b/AW8SuRREPwipswILkAmg==,type:float]",
"values": "ENC[AES256_GCM,data:g8ic38M5+MHdJ1obK/dqtRpRqQyVn/lW7hm1hjC7zENdcCxd31tPer8v9zzIQiBstyXNj34o4PXQ+oRL8nCJN2GM/NT3lhjiMh+bR7Pz5lqbUxxeoOKOdOomlYvyEJwZi3N0IqDldQuMI/igL21ZENLh5KuihGupiRFpWmo7,iv:l8lREvFlxpmLf7lmUbrS3QMyMu7NmfnSJDwT0rSEa3g=,tag:lTwjFBcN52xcTEYQAgyhIA==,type:str]",
"version": "ENC[AES256_GCM,data:ODAdWXgc,iv:PdkE+ZrdCoSDdWx6PctrD4QoyJEYkKccroxtdlwnIyY=,tag:Hh04u1V8ZR/QjEG4rmHI1Q==,type:str]"
},
"name": "ENC[AES256_GCM,data:a/LuHA==,iv:9ziIBxyN+UvoNd+C14pZ1g/iW6nXI6b0ufKfqaqfO4Y=,tag:SI+PlgStj7dlS7zDcZowLw==,type:str]",
"namespace": "ENC[AES256_GCM,data:l+J8pQo5vRHMZOI=,iv:gGgrLVhSmXUCfUYrJwXKxp1pH4riwF30DR5mg+ngRvY=,tag:W92k6rqH/KRgWiYvoVYYSA==,type:str]",
"pass_credentials": "ENC[AES256_GCM,data:RErQwC4=,iv:edCnPmR6eNTEfsnSrmMj/u3LCLdohBFyHekICby7opk=,tag:nxdmSo1pekw98BmZ+JRqOw==,type:bool]",
"name": "ENC[AES256_GCM,data:9/nodQ==,iv:iuLi43p7oVbWyS3axB6lLFd6afxEjS3G/cEKRwuF9wg=,tag:FpU9TwxQLiKnRUpbD/YDOQ==,type:str]",
"namespace": "ENC[AES256_GCM,data:oYhLIV/EWpCvn8I=,iv:pAae0bMoBR4erf0HfJ48LKS2IPu94/MWBetL7xi9s98=,tag:HgaOy19EKvdbVS7edS6XiA==,type:str]",
"pass_credentials": "ENC[AES256_GCM,data:WtBLGDo=,iv:nmUdozHjwE0dLJXBfubAGIsD/F9lNffZrvoVkaSQQ4E=,tag:CxNBMWoK2ULliAzYQK6s4A==,type:bool]",
"postrender": null,
"recreate_pods": "ENC[AES256_GCM,data:t7zNKIE=,iv:+uiPZ5IYRG3loi+1rDpn9enVIwN913A0+xgtLMetMNk=,tag:JS8Tj0kKuCBTQhJ42fmUhQ==,type:bool]",
"render_subchart_notes": "ENC[AES256_GCM,data:anVZoA==,iv:N1AlhR/YsSJx4fB8NMOvsJI4icjbKjB32UjcHtVPNdI=,tag:zaazWeVg7X9OTwwdY9nleA==,type:bool]",
"replace": "ENC[AES256_GCM,data:+Gu/WoU=,iv:n+KOThXMItYwbjbLXTLijYxJnY5x4cUL9wlDsHB5+00=,tag:PD4S/v4R0N+qcaxD0HO/iA==,type:bool]",
"repository": "ENC[AES256_GCM,data:rblah6oM9hYErfIp9ut/jgiyT9lZv5VVopY47D/OUN1DZyC5wQzw,iv:0DLh+vJlizPhBkDjHm3MwO3KXRdvnIa2B4GfyJ75iig=,tag:JC3PF8ympWR2RGbmPOueyA==,type:str]",
"recreate_pods": "ENC[AES256_GCM,data:prS0/iY=,iv:OarGm6KQvlFFnd1jT1dC4r+Iqn8iXiGchkic4YKaMac=,tag:kURDRxQgY7kLcHdkJrPgiA==,type:bool]",
"render_subchart_notes": "ENC[AES256_GCM,data:aiFQnA==,iv:gRjXBGwUjkKzek5NjS3ELGAmkd3cssdRxEhbib2jDf8=,tag:gVAD7oaobDNs0uJNxFKyYg==,type:bool]",
"replace": "ENC[AES256_GCM,data:CzK3eTI=,iv:J0IG5FQLa5yedGGpZXZ+hEsabZxLMiSwAZk+6dexJfU=,tag:CCVpm6kL50q6Tk00Aqv0tQ==,type:bool]",
"repository": "ENC[AES256_GCM,data:7XTrvp8z52PRH/kBpWXyWW6+VB3ZkoJT7zeOtVRb91JAfw6jB9ft,iv:OT+WDQF2YUxmQx3bBtDthw/9GH0MCDH5CfGLQqmk42U=,tag:mRS4gyOduacd/LNLiHp5Og==,type:str]",
"repository_ca_file": null,
"repository_cert_file": null,
"repository_key_file": null,
"repository_password": null,
"repository_username": null,
"reset_values": "ENC[AES256_GCM,data:yQuQ2Hc=,iv:UpLtTe1g5RqWMVD6Tk3oGPSWuQO8sKpz2rs11EelIR0=,tag:0PMKiXI1kv0/aerPqNZSww==,type:bool]",
"reset_values": "ENC[AES256_GCM,data:fkEJwdU=,iv:QP5d7eyW7h0nRWv3qRKQQ/aQnjcTTLsQLf+vZ7sWtYo=,tag:6lRSrlYHN/tNPYTNCECp9w==,type:bool]",
"resources": null,
"reuse_values": "ENC[AES256_GCM,data:XZcby18=,iv:dhisLvTF1huADk+n/UwrYXh026IBoo0g2psJ73F4n+I=,tag:0ghJxmtDDI5u9j3IHTuQag==,type:bool]",
"reuse_values": "ENC[AES256_GCM,data:POZT1p0=,iv:VNqiCk3kDlJwVVz4rFm9+yL4k0h1tSF8EXEobhGPfkE=,tag:2OICqlwy6pEt4JRwg0mgVw==,type:bool]",
"set": null,
"set_list": null,
"set_sensitive": null,
"set_wo": null,
"set_wo_revision": null,
"skip_crds": "ENC[AES256_GCM,data:wAWmkOA=,iv:tgmeij+a+lF9MX6218LV2DHUuVyYoRsTMxm6207DffQ=,tag:z94jyunwq1LSVo6abRVJtA==,type:bool]",
"status": "ENC[AES256_GCM,data:hZlEagovA+c=,iv:8ufAPLwtm30VVYgvqUoa2EQ95bxw4D7CWzw6iDJHLiM=,tag:ZR2r0TGTOfVwJ638MWhImw==,type:str]",
"take_ownership": "ENC[AES256_GCM,data:kgC9m+8=,iv:ppeB8IhyGT+0bPgpHsMBNHPuoGUGNZC4rLVugmQ0iXE=,tag:9qX2slA0vxxnwr4SX6UKew==,type:bool]",
"timeout": "ENC[AES256_GCM,data:ONMq,iv:/48D5Qvss7/wSqmxdzcEix1RaJjhcDYaAjUpyQiWZnU=,tag:wuv1jIpbMn3h/5n3uIpGVw==,type:float]",
"skip_crds": "ENC[AES256_GCM,data:UdSjqMA=,iv:eURCVSWRdAxDpw/9gTh38PsmiO8eFm3CEgALy1A8IPc=,tag:a/L4G/+QQbysTA0jGe741A==,type:bool]",
"status": "ENC[AES256_GCM,data:0idgfQt1AsA=,iv:/s8YdDkTDc5+aq05/2kiRDVgYpK713sJckexsfMGCPE=,tag:kiWKa5kgCWn57b3g2Q05KA==,type:str]",
"take_ownership": "ENC[AES256_GCM,data:WnPcToY=,iv:L/ioBvgCtHet7Bcuhle+cH1A4xD8qas/mA8aZ2rt2DI=,tag:EfCpuQgGqzgzdElXvyLzbQ==,type:bool]",
"timeout": "ENC[AES256_GCM,data:CxBL,iv:NTWVVFfkvivynGAVNXgr7VZMi+3qmhkqekt0Vt0pcgo=,tag:Pf7+RNi1Fc9nmwuRuMeTQw==,type:float]",
"timeouts": null,
"upgrade_install": "ENC[AES256_GCM,data:RG0f0oY=,iv:5RI5mFSXdBD0woLZvE/5ZBKGbtUjYISTZSBXaudKmIY=,tag:o5I8pFu6T2a/zKMvZFjnJA==,type:bool]",
"upgrade_install": "ENC[AES256_GCM,data:FW3/A3U=,iv:wjTqDdwAX3b7Y9NajIBauqrASiAP8AFgTsL4D32iEl4=,tag:eDX969NDLtTRgxFY544HLw==,type:bool]",
"values": [
"ENC[AES256_GCM,data:+ouoy51NpxBqWyq4vL154NnfHAgzCBjouIANDaqb918+kqIt8CAcKboOw5rTxO/IlTAoJdvJKaJgTXsXzTNDesKpGxlqrRvLvfVb02nlFp/UCxgo0hsr3GJna0fi46GWyykeHaoY7kJue50xchYJxwqtqD2uunSISalNcOMfZAgrq6n5lKK6+g22XZJmvJ6v,iv:w9YkYSN+6ZI4VQBIYGOshXPqXulSzqMAFBuRRwZA960=,tag:/EgRJkTCp5dVfiE70Ygh0A==,type:str]"
"ENC[AES256_GCM,data:uLT2zC5ix5ZcT307/DcgZBSYSrRiCkxdix1Yp2GW+c1EtkgPI0f1rudGy4GRu/IXF/qggRhOMUn/yIFwuOsbuoNJT6bu6ItmP/kOXHBEB2EQE3nYjOd/2AzFi442CPzOAO/wPN02FojnxN/mmf3ooPuwwJzMx+GoGLR2s4DRRS6cEBuHw/xcINDV7FE+tDuv,iv:jQ9+omrt17zEp3u4zdDjnaNp3ybhsRuUuiiqFxJFUdU=,tag:PoLLxvDmuJrjsxzdMqCaIQ==,type:str]"
],
"verify": "ENC[AES256_GCM,data:JMvWzI0=,iv:zgL+gSCe4MI140U18/iyPEw30rrxWeuyNmRKkmh11us=,tag:279XnUn0hsxjtmFiGTySSQ==,type:bool]",
"version": "ENC[AES256_GCM,data:nJUVyzH5,iv:el1UMQ6pWzoZymmfAI3YehzZg9HLXej2th2T0yGEzlA=,tag:7c/TohQExHvcMp4D5BJJvA==,type:str]",
"wait": "ENC[AES256_GCM,data:aUe7ow==,iv:bzsgFK75as/ODRw5Nn0rqYdsukLcuAVRrCym0NNmc08=,tag:BkKw7T4eeL3jiDmtFPhIjA==,type:bool]",
"wait_for_jobs": "ENC[AES256_GCM,data:/dof5/c=,iv:k9hvler1IDFYUBm1+jf10gre8EXXFG1XGyryXXnsAr0=,tag:/ooBynfiB1xpJg4SDQGjJg==,type:bool]"
"verify": "ENC[AES256_GCM,data:z5No01E=,iv:mzre3DQM8cGSHNsT8HYOtB5wx9iPXwVR78kZDwDIJJo=,tag:DU6wvLMU9AMUnbeZir9OKA==,type:bool]",
"version": "ENC[AES256_GCM,data:PJtsmSqV,iv:Y/ypIp/yi+6smZsZQfSWW3mpTIeKhk0FUtcKYrZBSJM=,tag:cFSVRPf7nbuRKfpzVonbFw==,type:str]",
"wait": "ENC[AES256_GCM,data:tlHDzA==,iv:vIHaxiqBWJrQU18uLmzERVpGcAKe9eOeJesO5gdh+Ls=,tag:uJjcsS8pI14tRXHEQlNE8A==,type:bool]",
"wait_for_jobs": "ENC[AES256_GCM,data:6Fdf1eA=,iv:g601IXaoc+aw3g/NomlZAFURIKxUZ4sthEXtOHiFDeE=,tag:R4dxTqlu9xCbdghVZA5gHg==,type:bool]"
},
"sensitive_attributes": [],
"dependencies": [
"ENC[AES256_GCM,data:zj2d9iBwuVSQurEudBMNYkbAY3Mum4G0p09HLDoUZT0AmHzsuHbrewtxjmU=,iv:lOimmvXLl5QaeCJcsNPHUskTQT6CNt6BtmRK8dNUGYc=,tag:WzvID+E6twUxepX9irQKxA==,type:str]"
"ENC[AES256_GCM,data:XCrYCQyMZn5G3tJqL90jaS2r8Mgm62iGWHJgOzM3vIbaeNsMlLvUkbXB8TY=,iv:J4cluJ/bLictsRT21g75zircWGYXfoOslDrYeg2Dkis=,tag:L1vylUldxFoSqGOaCayOZQ==,type:str]"
]
}
]
},
{
"module": "ENC[AES256_GCM,data:2W2WbgGOWAlpN1M=,iv:E78FQyDV+Ka86IU3yTqSgsvjQahtJHIP/X6fqzyycWg=,tag:2UNA6Zhv9EsI1V6DA6zEiQ==,type:str]",
"mode": "ENC[AES256_GCM,data:Rz45HCWXtQ==,iv:dgz0jormp1VSVNbys1xhpnnPHhwjgBUoiRUYS4Xo/jY=,tag:mXsGyDE2+nS9K5TEYWUrwQ==,type:str]",
"type": "ENC[AES256_GCM,data:41W5/aQ7evyR79B73aSuO7goRjI=,iv:ke+Dh6Q4eCQTThHmMeQHhDcf2Ki/e+OYB7+oTDryQsY=,tag:7+9Piv79gRz1SbYDxBWAMw==,type:str]",
"name": "ENC[AES256_GCM,data:hNA72ReSolQL0NQ=,iv:AGLH+t+Gdg15dmr7kkJ8/bJsg1ZQtt9e0fdDbAlE5Lc=,tag:vSRir0Z3TPvtaYBNaj/9dg==,type:str]",
"provider": "ENC[AES256_GCM,data:godpuoqEyQlMm6G7Kz2a0XMZQ2XM/XUYFgKXhQeWn7kIIxbBE5gzBebPdzarFGi/XjON1L8X,iv:/t8y6SMNc3xlmKbGrvAstykRMak6NVi0tFi2BQZLU8s=,tag:JRHKenuHI37HwkQGgX/JPw==,type:str]",
"module": "ENC[AES256_GCM,data:Lc5b3ZjzHL5s+RQ=,iv:ZAzrkVSSskgDZllTXxHLxsIV561xzqL2/cC0XYnphzE=,tag:QNZUWTwLWx6RqlFyaROuQA==,type:str]",
"mode": "ENC[AES256_GCM,data:Pdv1GFNRGA==,iv:NzesBoUhNedmF1X3nm7TEyPKceLSNJrS9JnO4q7bkvg=,tag:Wnk5cTUS/+O0dWts14o2Vw==,type:str]",
"type": "ENC[AES256_GCM,data:+yRpz7wcSdUJGEwZ8TxhhoZVjCU=,iv:6UZUN33xMkRBzTpkmSwpxShWwWsR+bdgyGEGgvDORJw=,tag:3qboYJr93R95IlaTy9PAbg==,type:str]",
"name": "ENC[AES256_GCM,data:e2zZdAJG4uOYsmU=,iv:KDJWgymCw2+GWz88whfuWy5tEQasX8wOThvem/o5Pq0=,tag:9Y0BoAyCelBZpGtR3cBXPw==,type:str]",
"provider": "ENC[AES256_GCM,data:ch3agAWE0ci1o2QEF9Y3gyDNsRRfadu+K9a70Jounp1hGBnmD9n6AtBylUU1tOfuMS473Lcv,iv:BRCkm7wyDJG0D/yqbWfXezq98OWFQVCVDyMHJtvxzWU=,tag:8W0eWWULy0wCTZV+MwR8rQ==,type:str]",
"instances": [
{
"schema_version": "ENC[AES256_GCM,data:/w==,iv:xBs/AxGpzWIwkMIs1Cn/KL3o5wvRp88nO3kXwPhRUGE=,tag:cIvTQGRkhZzGexElAxfGvg==,type:float]",
"schema_version": "ENC[AES256_GCM,data:LQ==,iv:NwCudMXZWOXhYpLzbzD/AT4ISDeB0t4AvObeO7nTuiw=,tag:AYaWoMeJWtC/ZxU1hFfxpQ==,type:float]",
"attributes": {
"id": "ENC[AES256_GCM,data:wAm8O4ShfBkfRM4=,iv:VpSVe/ClJ3NnVc0kWTcbTBPVn0BFlNQsNCasZZnkoG4=,tag:si8ATKtLaOHuK5F62QDhuQ==,type:str]",
"id": "ENC[AES256_GCM,data:u3BJwlQorLyFvvA=,iv:AIonZ9EQP2fgx79n/y/NOaIkz1NFAOlXXC7py6aV/No=,tag:ovfc+szH1FYMnzdZBFWPGQ==,type:str]",
"metadata": [
{
"annotations": {},
"generate_name": "",
"generation": "ENC[AES256_GCM,data:fw==,iv:neRHWpS8CtN8yCbc31HZjJVk1cVWivqiTzjPJO5YYGs=,tag:/UbkAbhS5wdr0/zaJGFE/g==,type:float]",
"generation": "ENC[AES256_GCM,data:sw==,iv:iGnwpzIwSPmNvfDp1hOsE/OllIAV55SypJOBPmnS4E4=,tag:YRu39W1VJbtnKy59A2gMmQ==,type:float]",
"labels": {
"tier": "ENC[AES256_GCM,data:foLOWQbDh9i9,iv:ReVUDQ6IutapR6213d+2qXaljO+kiGj/Q4piTvKIcts=,tag:BMgisLFpR1taLiVnulA9iw==,type:str]"
"tier": "ENC[AES256_GCM,data:kvVW8xqAMBIi,iv:7+fOuZNpvwZjyXDALezAHRBc19GaSc0VFiO/Cg1OYOY=,tag:nq9n1g3w92rQveRC+KkPDA==,type:str]"
},
"name": "ENC[AES256_GCM,data:AM6GXHCIV0/3HbM=,iv:BKFp7Z65+QvDRXdW3nKGARMCUpYSYUenBdOpl1JGgFU=,tag:Lbe+I8BxPoGPk5ulu2m2bA==,type:str]",
"resource_version": "ENC[AES256_GCM,data:CbCneAfizooY,iv:5bPmtvnw5DnDQTyfbGP9VzdVCSo3eeGxzeNidstAUrU=,tag:E36DCbNBZkteBi0mgBDHXA==,type:str]",
"uid": "ENC[AES256_GCM,data:2sncFxVguYG+HHsiBk9gnuO1TD0zMirq10ZkN8Wlxu/rrggv,iv:fqbNR3l5TD4MJ+FGG/Qi47wQ8/j+mYQodx3nhwA3IZU=,tag:OTqYKgJ6mNA1C3yWBUAWFQ==,type:str]"
"name": "ENC[AES256_GCM,data:HhEtyDkVhnIZSKk=,iv:sgi1bHja12+K2Wp7lrqugKZfWym/Tov+uBGqzV3loYI=,tag:tIwVgaa++xapjxs3et6/oQ==,type:str]",
"resource_version": "ENC[AES256_GCM,data:xQfxKy3auzAe,iv:sfU/oyxExpXY7IkskuWrWkHrRmX2ku/raguHTIB8o2Q=,tag:6H0HvyBtZb9fz4RCNMiogA==,type:str]",
"uid": "ENC[AES256_GCM,data:xAlKygvnhbhJieQiSL2aw4DumAorEIV2ZZhObE2zgyyvdIHu,iv:U/tm8ZXcKogfQJZYdGyqbShINIF9qXfp8E4FxqgsjEs=,tag:iHP+iG1yAp9awiEHA0qH+A==,type:str]"
}
],
"timeouts": null,
"wait_for_default_service_account": "ENC[AES256_GCM,data:jFsI7oc=,iv:M6Jnzw9DfSv3c3WrjtqQJn8IhBxq3ocwVbySJR+7nC0=,tag:jqisnm8h3GGUMABU9p0Usw==,type:bool]"
"wait_for_default_service_account": "ENC[AES256_GCM,data:tQhluQ4=,iv:Ur6gGSvE5ehnIQKxh9M2Ue+yATjR0SB4ieKExFBXtJw=,tag:jSwHdL5gtXM7ejR/M0UDEg==,type:bool]"
},
"sensitive_attributes": [],
"private": "ENC[AES256_GCM,data:psIc9N7ZYifLN/6YQB9bf4g+1v2VLLJk15zU8J706/dxNIWo8GxAP33jbxRqkhqLsF73Q4+g/Ga5E1cfdVxzYnztNcO1A6f356wjTiOF/Ins8Ob8dI3Zjw==,iv:V1jmV4gZp6naBN/RRLV16nMu5ZTtr4YCIYzWAA2iz68=,tag:2djCzB+o/kHrQ/K7gKmlcw==,type:str]"
"private": "ENC[AES256_GCM,data:A1gpirtfCLzL7vxLhgU4AksAzl8D/k9U5dSjZpM/cWKVRdo5/SpXJiyy+BBX5d8ANLQ+RfjhoSgEnsOT7WHnmmEBaQb5Dyo3rr108SYqPnu1zL9cSJBDJA==,iv:EWhhFFXs42fxoYGipBYlxGiqdAZaeP9NXZD+nFmYXgA=,tag:2rp/g0qrU+5+CnWIEsdYPw==,type:str]"
}
]
}
@ -127,23 +127,23 @@
{
"vault_address": "https://vault.viktorbarzin.me",
"engine_path": "transit",
"key_name": "sops-state",
"created_at": "2026-03-17T22:55:11Z",
"enc": "vault:v1:hFwQ4YR3GCw11N8weA/O8ahs29j4XI3cBVISq9iQLovRz+sYpAQjQwjmMbR/tGLNSzSfICdu3dTQKps7"
"key_name": "sops-state-cnpg",
"created_at": "2026-03-17T23:05:45Z",
"enc": "vault:v1:KNKTO8ZmyhLfOb7wc/qaPGA4ZZPC0D7eNlEdtH8uNqtLZ643VajFKIRUVrLaQKOmC6x0XR2qIbrSuSRu"
}
],
"age": [
{
"recipient": "age1z64h9t3acsm2rr74pz7j4846kwj5tutx9sk78jqv46y8fln4vs2sy920ce",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwcWdTdkJOVTE5THROL3Z4\nNVYvOFZVMzVGTE9kKzljNUpYYldxUUhLMVVjCmFIUUpoY2J2cWIyVTZ6MjAzWjds\nNzhwbzdTOU1LTFVZcENiWHNMTDhnMUkKLS0tIGxzYmZPVk5kajlsZmpnKy9JajUy\nU1dpMWtMV0xIbnhtQXBPQ0NDcDN3ZjAKBPvvCgQ2MD5pJkRy/Keu0wbpGijUZNVY\n1NR48Pjlpoa4DeH4gcqvur5nxqZ8Xht1Zl78KbMBnUtGZw6K/NCMNw==\n-----END AGE ENCRYPTED FILE-----\n"
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4ZXRsRlpucWZveDNhMjRP\nNHh2anp3OWFoYVFJRGZhYlBkOHRpdStONkVrCldPU2psL3hvRVFieWticVJaSVEw\nM0pGaUNYN2haZTN2Z3RoZUx0V3RtUjQKLS0tIFJtbmZuQ2gyWmVERUtHcWE3RFph\nVG1lOSt2Z2RQL28rS3FmSzRtYVVVUEkKctvBCfX/WIi54B9jtswoVRlAKk3iSLPR\nchQ0ui0nC8gBorv3eMYUAvJbsv5/BhSLFcledKAd7jyCaf+fj+GtTA==\n-----END AGE ENCRYPTED FILE-----\n"
},
{
"recipient": "age1rekkad48r2wzhwqgfetw5yugu3ln3qlht4xg3txmx55tee8cveess60r90",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3MU9ZSkprZTdSbUlVcDl0\ncnBWVmcwUVFxRmg0cGhhSlRIeTVkZkhNdGxVClZFUjh2SW8xcExMNXozREVvYTMr\nUGx5MkdWNDJTSFdjeVBQcHZERWI0b0kKLS0tIGR0MG9icVp2WGlMNm5NamwxM3Q5\na2J6RXc2SEJncUxDL0MwTi81TzdreDAKduaiKsuTqVHyx4jnvuz6sPpjtx7ZKFwj\neOpKRCE8RDkcRljpFOWLCqey1b7x+qDbOLUtck+zVj9j5z+F/bttPw==\n-----END AGE ENCRYPTED FILE-----\n"
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1TW9ncDhSemhSZUJlTWIy\nNjh1d1hRc1JzenN1RlBiK01SeStmeGlvZ1hJClg5SExkV0hIMUVNVkE5Ti9Ybnhu\nU2pDamVtVjdxQWZWQ0lYcjhqODNJdjgKLS0tIDkzZkY2ZktyaWNTL0l3a1lSbThz\nUndSdkJxVmRyVUNDMnBhTERUNEFHZlEKOrIQPH9yu0WHiLD6RQE2b5nLbmec9nAy\nUBRRp97kfDg7gel28lOy7v9UlyJYQJexfkZ5cvZFTypI8KQdtcqumg==\n-----END AGE ENCRYPTED FILE-----\n"
}
],
"lastmodified": "2026-03-17T22:55:11Z",
"mac": "ENC[AES256_GCM,data:8n7r6qO38jUzdvo5lAiVIA/WwdTapbHsb3QkI29ffl9UoC9hXzX+hu2g9yk4A2E8LPe9xi3ymR3j3K3o3BR6KjbkH0tHMAwmPknWXlSXuDjEapREUdqZSEq3bTbhWdxt0J0XJk7JwkrM+WBaP+QilyzHEpuBNFAJ1x3cS1IV1N8=,iv:xiCvEdCexUfXsHx7j7ICIZqL/UPubdACuekBBTwPW4o=,tag:VHqI7T0z5jPsE8TYG9KX/w==,type:str]",
"lastmodified": "2026-03-17T23:05:45Z",
"mac": "ENC[AES256_GCM,data:LolhwGoOSSAlXo+ASX5qc566md/1BSnNjrwIEw9s73B8X2r08KINeGPShK5LbldR8udS6oGjypkh9Z8wM9+uWj5zbwQkP0ILvUsntJfcuV6mCuBG00k7Xx/Bl0ekvy9D/FXNsmx7DssxmDt6N/YZlR48qxuXWHJisQH1B69oByI=,iv:UZ978wPMQdoQT9opN8CemOmnNOTm+t6Uf2DfV2nlHFs=,tag:K71ZjlBM1pAYQPnrUbpfzQ==,type:str]",
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.9.4"