feat: add mjolnir to cluster

willianpaixao · Mar 6, 2024 · 5bf4e37 · 5bf4e37
1 parent d6de0d0
commit 5bf4e37
Show file tree

Hide file tree

Showing 11 changed files with 71 additions and 64 deletions.
diff --git a/ansible/inventory/hosts.yaml b/ansible/inventory/hosts.yaml
@@ -8,6 +8,9 @@ kubernetes:
           ansible_host: "192.168.0.3"
     workers:
       hosts:
+        "mjolnir":
+          ansible_user: "willian"
+          ansible_host: "192.168.0.4"
         "mnemosyne":
           ansible_user: "willian"
           ansible_host: "192.168.0.5"

diff --git a/bootstrap/templates/kubernetes/flux/repositories/helm/kustomization.yaml.j2 b/bootstrap/templates/kubernetes/flux/repositories/helm/kustomization.yaml.j2
@@ -4,6 +4,7 @@ kind: Kustomization
 resources:
   - ./bjw-s.yaml
   - ./cilium.yaml
+  - ./prometheus-community-charts.yaml
   #% if bootstrap_cloudflare.enabled %#
   - ./external-dns.yaml
   - ./ingress-nginx.yaml

diff --git a/kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml b/kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml
@@ -3,7 +3,7 @@ kind: Secret
 metadata:
     name: cert-manager-secret
 stringData:
-    api-token: ENC[AES256_GCM,data:JoCCtOYAWOMSIK4rw1rDMBJQSEk3/7CmbM1IVG1Za0v1xEDdL/ERlA==,iv:R+yYEwoSpir2zpRu275qck/dxsJppy78qOEHQ6UoiO8=,tag:nAlWrB3jOgo6+YUjivs9dg==,type:str]
+    api-token: ENC[AES256_GCM,data:eXN/XhGx09vT1wue5gFU+SLmVNNzytE4l3/dRH+dMVmWkA0ax1NZAw==,iv:3Z0YlVOIziDHfjUYPHf0dbwEVLXxqVwDnBMzmNwXYwY=,tag:DMOh5XNBQN6soz2tzVY07A==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -13,14 +13,14 @@ sops:
         - recipient: age17ary36xtm566uptguuhsj7xmuqzyz06ce54tcf6p3mge2thphqfs3gln40
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBibEJPSC9vdTYralc4Um9V
-            MmNFZkJDZDZncmJSWElGVUJLMEJ6OUdtTlZjCjIyQmZ3SG5rZGo3bnFjUVZqWDlM
-            cEtENEN5c1VxR21jZHliMFhBeW5KMUkKLS0tIGt5NlhJdTdKM2lBbVA1eWFwOEpm
-            ZHloOERmdHZVRGtUaXRpRVBqZ3JlNzAKo2Xbe+tGuVjsLBniQ0UHp0nzib9OIR6N
-            BdTQYfp7fiDHWqZkJY6gjUUeMjGX6lYoc/Pqy3Y3jOwUpg57WtjlbQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzeURUWDl0OVBKTkw5ZzRy
+            WHllNEpiaTh5SnlRTlo2LytHS0NJbElEUXkwClpMQ2pYYzF0QUQyNXM1OTFpeUpW
+            NzhFZ090R0c2QStGTHJNNmUvZ2ZwVXcKLS0tICtnWkRERDQySjhnbUVWUThSR1Ur
+            VXpaN3czYVhMOElWK2pQaVZITDVPaFEK8/ImTZXp3NMzNFae7aAkmpLu7oMJXMBo
+            +zewZ4CL6AtPzgEOcPw0TvN2+jDy0516RfuYEqm02vhrP4DLbSChdw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-03-04T14:59:56Z"
-    mac: ENC[AES256_GCM,data:nqBtFBfrYr6wZbB4jg0FJ+4ikKfcC3KySfLMgjaa7pTc6fSCirnQHN5OODvebV5iracHmL5+ewlJl+vpS3T8AnZvbyk+EEYVhekSKc+0dbN9R/EcZ7m/IfbCDYSggfMfN+WvkQgsRK3IpxSPmxLj1yOw02t0/1sM1A2QPtvwF5M=,iv:kuNXkf7AUg0fSQquXN/ViW724FlWb7AD9cVThrmVWrU=,tag:toboU/k2/OJkguZ6UmkEoQ==,type:str]
+    lastmodified: "2024-03-05T13:28:30Z"
+    mac: ENC[AES256_GCM,data:K3KkUggf/R35uYnIN+qDXCnmMO23nqFncYk5vNT6UAN/5ludAbu4gkDXXcDgSo3njZvcYNNumEjzIPa5X87aviQj+eL6+ln2bgmRl3J4UBS4Gzjv9R3ti9YMQN34SToCl1xkkZpvhoFCL0yFjczgcWZLMZtJjJCsDbSUhsqcR/U=,iv:byh7kYid3DpaBKGvWBXi/Sg3Q4EIDnfuWTGQ4T3f17E=,tag:OjJcylQrEDjPjasjxwkv8g==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.7.3
diff --git a/kubernetes/apps/flux-system/webhooks/app/github/secret.sops.yaml b/kubernetes/apps/flux-system/webhooks/app/github/secret.sops.yaml
@@ -3,7 +3,7 @@ kind: Secret
 metadata:
     name: github-webhook-token-secret
 stringData:
-    token: ENC[AES256_GCM,data:NyhAAr8ZvCbfvSz129uhaDI4E66yh6qutttRRPQ4kfs=,iv:5I8JZJU2MNILHppS0ad8hhqx63Nf6cJTNJar9M3q6uE=,tag:l4tv/APQWSPy2BMyQfC9LQ==,type:str]
+    token: ENC[AES256_GCM,data:CCKgIiyGnL4A/zMZ0PjXmu1+IXk1KrmIrlC88m9vycI=,iv:pZDgNAutjvS0W7zyXNzeZxG9JHREuoqsiuunXBjWKF8=,tag:dGVi2gIe6Oq88g/AzN3qDg==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -13,14 +13,14 @@ sops:
         - recipient: age17ary36xtm566uptguuhsj7xmuqzyz06ce54tcf6p3mge2thphqfs3gln40
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzM0J1S0FBa1lGeXZOcENK
-            WTlpVnFqekRJYXdpKzduZ3lwTVo3NjZURTJVCjBZM1BZa3ZmYVlVMkt2RG5XTmZa
-            T2JGWTVxbGhpK2dZOTNHR2VHRFJZUUEKLS0tIFFPalBPOGhZMkswYjZEYzQvaU5p
-            N2dlVStMamdlZmZlZFh3Q2wxN004SmMKo99lonMJkMQNvT1ssINos09UPuxf+Bs+
-            ZT4ej8xKUixoeLwfLYLOu7v9cVlvR7Z6hRtfETti2BwCAmmbfT4bdg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoY2VMQ2JTNGZyVnNvNms0
+            TXkydHlvUW1BSWg4VWxtTlNHNEEyM1Zkcm5JCmRCdUpicDZ2SWNvRXRtdjZqYkVl
+            MFBBUEZ0N1dGUGhMaVNLazB2M2JDQncKLS0tIFZZcHZqYXNwMFFjaFhnamcvd3Yw
+            c3lqbXRWcGN4T05qMFhEbFFucUwyekEKKH12Y6tcuhNiTr8CqT2GIq8Y4qYV2MXl
+            jRU+ElJT3FgjBPrf7/oaE6PmH9nLj8KzksKIWknOQLtFMU55JUcbyg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-03-04T14:59:56Z"
-    mac: ENC[AES256_GCM,data:O/vG4T+ebihzhiUiP100hTrgcP0HoqIeyvOgmeZ5dNdCj11DPK4XFrzGWtXsE2Yuk80XmFK7Ank5syzB4ZWl883p+KUXlrAv7h1bEJ1s3CSnbWdXk1uhderSYoG1FgNfY4Z+ypeScwqj12+2tcNdIUp4c+vJNOQIKXcZsxRPRy4=,iv:Fud1CzP/MXzYPSNT9lOK4I38Kt7E4CzEj9IGvWOe1Ig=,tag:mAOLgxA6iURouxVeONmrrA==,type:str]
+    lastmodified: "2024-03-05T13:28:30Z"
+    mac: ENC[AES256_GCM,data:yO4MyyjwEHIurDyuiAqHN/DWKjbj+fJrjLPz2UlC3sfqR1zDnyKAt75TQqpjX5u3sgHgXrsB0AhmrzXOBfp6FQtxYX3oJMfnWsYD6OUl2MTzDLTycL71Vcxe/lhJDrITfyYYH4Nl4SGSwPN2N5VXq0oBDWKq+eJd0cg/1F7FCmE=,iv:Othq9/FVEixi/yePy5An4WWVZCcxqyPM6le83iFR2MQ=,tag:n1TdCx3Hdrfk6c/wYte27g==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.7.3
diff --git a/kubernetes/apps/longhorn-system/longhorn/app/basic-auth.sops.yaml b/kubernetes/apps/longhorn-system/longhorn/app/basic-auth.sops.yaml
@@ -1,10 +1,11 @@
 apiVersion: v1
+data:
+    auth: ENC[AES256_GCM,data:KYh6vdH/RY7CoBZBYI0KSEksUwo6tKnssSM/mPwcZluKGnUEWN87+eWkjASGq8/+JytQvx8oqzGS9P+2VHXjig==,iv:+s8108j0myYXfKnLKhSklxWW+eUi8WCeWL+b5NpU+UY=,tag:nKXK3+m3xe+Q8MtET6s/Sg==,type:str]
 kind: Secret
 metadata:
+    creationTimestamp: null
     name: basic-auth
     namespace: longhorn-system
-data:
-    auth: ENC[AES256_GCM,data:yPk8LAzM9zNa4YIHWfrFro7RwHhWe2oOMMfhZsbgShqhM7XIQFxIfcE1p154g7net6ptKxHVWu3U1Q0hnhkhTg==,iv:M7AZI33CbNsj90rqeB72PkrE44aoEmuhhpwcVOqMjmo=,tag:ArFpbaWcNJ+8hOT3Qg2QzA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -14,14 +15,14 @@ sops:
         - recipient: age17ary36xtm566uptguuhsj7xmuqzyz06ce54tcf6p3mge2thphqfs3gln40
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWcGNjMU84WHUwMlZqSUFh
-            azB2cE1LVU9qM3pJMW9hbnpsTjBvdHVrQWpZCncrTGdOK1RLYU9YSUdUY3lRYWcx
-            K0NrYzg1eHhsbFo0cDNLTjV6UUxRZUkKLS0tIGJsMlZvQnJqWEkvMkdXTlJ2TzEx
-            MXhhaVk1Sm9CMDZxbWZ6VVo3WXpmaVEKAXVSJ8OXWwa+mebc8zG4y83nMCiTyMAE
-            Xc3IVQhECQUf7nvATOtofis9r249vpYSS84v1lNIihtvIS6hZDQcQQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFVUF0VUpHRFlLZkFUcjVI
+            ZnBLNVhMaHJsRHVvSk8vZVJVd0V4d1NYR0hJCko5UWFWQ2wxcEljQTh5SEtZbnJ0
+            bXVHMDBUK0lVSStqVVp1VitEaVB0RTAKLS0tIFlzY2dKM2w4QXBBQ09KYko5RUk4
+            bm1ydVBOSEdZdWNkc0djcXlJU1E0TlUKt7//mXx8jys1VBiwP9WpO0CtSO9/GJGJ
+            IBq/a2BAXTk/rdDp3EBN1IjsQKUEzJzk6HxsQdk6Pv7sFT70Mmg8Kw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-03-04T09:12:27Z"
-    mac: ENC[AES256_GCM,data:9brxFrrBZor5K1px6W8wGUqEeouOGThmNOFUwuodzSTe7G3qmeW0pRtFzax/qV9m+xACbeGzcVeW/XrizkYGppiOCbaVnCkxolvd5EG6rkvG/UiT+2TysEocuNzLUv7560Gx9z8q4d/wqalqafn/Fn1gD5FmZ+3sMPUyVca82IM=,iv:LyTDtjSL9Yb2DhsV8mqX3/Kv5ySdvO6dDafIq+2vaPQ=,tag:ypi8jSeIFxfT/U9ZeKy1Ng==,type:str]
+    lastmodified: "2024-03-06T18:25:10Z"
+    mac: ENC[AES256_GCM,data:xyhmAxLCSVWKAP/Wfgy6zmRLeRD1cOzcc8OhOuxDumkdfL/UnQAOBTqAWxMHAwqpp05CZJDsiOtUoaJAsdAZ5CmGAWZv1rIUuQhJEoHJTHMoSVkNHFFVVAHxZxjvYqB8w8fMVL25TsfFuL9IlGaBXtCVIUx0QtpkzGd90nseTZ8=,iv:FkDomTN81d25TXPkbT3P+DYUMhzY9Iy4/70rYPpHoUY=,tag:577TEgX+R/xUD3sRyFJppQ==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.7.3
diff --git a/kubernetes/apps/network/cloudflared/app/secret.sops.yaml b/kubernetes/apps/network/cloudflared/app/secret.sops.yaml
@@ -3,8 +3,8 @@ kind: Secret
 metadata:
     name: cloudflared-secret
 stringData:
-    TUNNEL_ID: ENC[AES256_GCM,data:k+sridDkaIG5QawgGBfwltVAHNlXzduVWdLt4rcBZNu3TY/b,iv:LkkCcth9YPOtxN3w5/iin5yfUHKy/+bbrJysDXhbi+c=,tag:6/jzF20QB2VwwWQdjYytQg==,type:str]
-    credentials.json: ENC[AES256_GCM,data:XM64PywpUG5HuQnAAxHc6QBfQdCGkPkQKNaclZzLnON8LZjgz8FsshoDhQNgEYQ3XuC12a3WtXLcjq20s9/cGdxhvuVW5cSm55qoKXDrJehjGkZ0rIB87bJp16YKh6/yD9SUL8ZHe8LUFw7KoU5gtDS/WCev+KBidW6WI4AoVDgAgkDNUfXPlQieRg8rnrAXyhi15+Xiq8SSWS7sjveUrGXaevFhHIu+ajoIdc4+fg==,iv:wHcXrX4BWviv41kbKiSZavaeVq+wO9ipTmpTSJD+Y/Q=,tag:tSd2hBP7D7ytjdoCpuqgJg==,type:str]
+    TUNNEL_ID: ENC[AES256_GCM,data:ZE64iH48C7mq4aM9f/mqVjZbINBmCYo7956fzsrfqhvp0+y/,iv:N43SmPxMNRoKTVfza+9rEhlOA/j/9w8a8P18Ixg5aqg=,tag:wG20zxedyOE1e+kkQYxfpw==,type:str]
+    credentials.json: ENC[AES256_GCM,data:K7STGI9D3LG5iSK1zWyo1FQvPBaJlrdyW3EQos8OcNdZrjks0TvC1aIDoxzbEm8c0TWVCerVoHB/5dVZRrP71ruxc8zm5WqUpIodEBTAjNvrLHIpGepOsWsjkIC0/EosE2seQ/Fwt0qKDJvl0iSTP9gd0dQWFgG6Uyf6rzKxSsDejT7chVCT/8+pS4pbQnx4MRwNnK6gR1EOdVGyEcHB6o2H5SJejbpxCvb0Pmx8hw==,iv:9AVgPbmul9evp7S5Eam2dmxL0L3RGv0VuMjWUblpr+4=,tag:XPMpteO/a6VwXLc6ZSG5IA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -14,14 +14,14 @@ sops:
         - recipient: age17ary36xtm566uptguuhsj7xmuqzyz06ce54tcf6p3mge2thphqfs3gln40
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJMmpNYXJBVHdyb3gxak1Y
-            SGY1U0hhM1RJQ296Z2ZRalBVT09ET0Ftb2dvCmkySXZNVk1TVi9BclFNb2xkK1Fy
-            aHI1RHlWRWZpb0RqWGJieDJreUxPa2MKLS0tIEhsOUIyZ2pmdVRlOHdOMGQ5dUlZ
-            RHV1ODJQTUNmeWMreUtxRTZxWWFMWWMKloX/S8laT0q1IlaBe58O5RHLw1hUrGeb
-            YKtjb66HxM6HOOb4ssOFVaE09McshypB5f+Ob0Ddf9MxiWdjxc+6MQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtWldUOWxwM2ZlbnhqdUlr
+            bzA4VFFOZUR3RGFCazFWQzhjZU5jMjhSYmxZCnZ5WlpTTHNiV05McjFTM2dOODVj
+            VW1NdzhJNGZTUExPdGhKL2tHQWdCM0UKLS0tIDRXY01KQk1jd2tXYmZ3Q0txK2h5
+            a21xK0tDa2NlTEpjM0xBV2djUk5JMEUK8OAfm2Rfive771I9md3k/qQBEDEM2zlk
+            B48DncBQtHl7Mi4B2g6afh6dNvUlsPtFs6nCd4s4MJq7qoKHEAkp6g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-03-04T14:59:56Z"
-    mac: ENC[AES256_GCM,data:O+BshPIZhwlWHMXh/SLck3eVkW9tn1j+BgsQWnMBdB22eGqP6s6OH0OobaTJ/wD7FrpgDg6oPB9gTVQF8IosRBQe3znJ08aks1cKj9a0FEMQs/bYswxhR6BGEa8s31RmtMvMPlO8nVX0kWXjXiLsqojbLvn4zHKVqpYfmLZf9MU=,iv:cl4LuXqFGKUrMVEUKyo6JgKWM1+Cl2UWC41D/0xbcmY=,tag:WG9WJB3ZhZeZYEakdeDpeA==,type:str]
+    lastmodified: "2024-03-05T13:28:30Z"
+    mac: ENC[AES256_GCM,data:ltNhfRauYPSl6v47zEeRlp2WufBlXaRIAjihFhDNt8d2sn+yI97+3Q/MCB+66iqat1wL5h/FdDOKi4wewWhwmJSr2OtLa/S5U6XCoas1KTdbGa+pUryOpe9If6zhVwnTHFqFFKG2dxulhWuQoyw2AL1Gd37YZ/BpWaNoBVtk1MU=,iv:i7WSoTyEL2ZDF+PfQkjJy30il7ZBA2V7aK0B/t8RWX8=,tag:BiHeTNoW/RMVDkMwKQL/mg==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.7.3
diff --git a/kubernetes/apps/network/external-dns/app/secret.sops.yaml b/kubernetes/apps/network/external-dns/app/secret.sops.yaml
@@ -3,7 +3,7 @@ kind: Secret
 metadata:
     name: external-dns-secret
 stringData:
-    api-token: ENC[AES256_GCM,data:VcN1M/d40nFbcppqqev3+uHdzIum686g1lqjKIBPT+qfqThErg90BA==,iv:fSU5PMxI/RDqkHFRInSSmnvDHMLb3VEfI1cTSb59AD4=,tag:28FqrwmyjFfBbFlqnvDMFg==,type:str]
+    api-token: ENC[AES256_GCM,data:FYb0yfgumZa5z1xPI290u7eB8FqoRfg43TTVGP8HN5ncoaSLtDEEsg==,iv:/IdbbvzLZ2rR5xdBqNfYV5ysmBlZYexN0BhYeY7yuXM=,tag:dSLaxby5xaYkFX4u/6vBrA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -13,14 +13,14 @@ sops:
         - recipient: age17ary36xtm566uptguuhsj7xmuqzyz06ce54tcf6p3mge2thphqfs3gln40
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxZWZrMVR6RHN0TkNCOUZZ
-            Q1hvVmFqYkd0VWNlMk1BdjZxaHRZV1VFODBJCms0SVFlcnpmNlBlTnRva1l6TlF2
-            SFhYNlJ4RGw5cHlQZW1HeVlKQzBHRkkKLS0tIHlTQUVrSUI0NWdlMnVjTWtySEg3
-            VjZMSkkrbVdnS3RlbGdqQW1UV3BYU0EKo15KN4TS0WcRDyxW7/LdQQVZtkR55Tvh
-            EqUYXCJcdtcUKCn9RkqMEDGtP9qKHohueqAVlvnDAaQ/tVwyWiyMEw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvRmpsWFdwNFh6Z1paV0lr
+            aGlHQnd5Q1N2Sk4xSlRkTzlpOXQ0cmdhU3pBCjQxaW1WOUtwU3FBT09vN3VYdk9J
+            OGF4QkhqZ3BOSGJtcHpmcmFqSGdsU0UKLS0tIHFXN29KTGxPZGplVkZNQnNUb1Fv
+            eE85OENEUHliZ0hDL3JuV0JhS1VEb1UKGPa6W0/pUc/BrQIuWRWIvtWuBH6zIL20
+            uP6ZwABdx8Lcr929zOXZixLPSikL694hNulcjZfA9ttzPPB3j2vkUg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-03-04T14:59:56Z"
-    mac: ENC[AES256_GCM,data:9RKiTY5hs08eWMJqzzmiDsTDk7hnLlv9Krn9MF49VTQwuIIwpt8tHIkWARtfyU7vcCjaFMZRLCjGy/fwb+EfwTmOImhAzWMSpNCA53K6VPqQKFnbNt1J89RqvXJjbDzwVs0Ic1h3AIkzLz+LBc0qJiVjCdnr0Ttl0U1Z1PmU6xM=,iv:G5SdrcbQJetTwplnP7JKTRSSMTrkPRKcrf68BW+IeuQ=,tag:8T7nezjyUrYsI4kKA3LhSA==,type:str]
+    lastmodified: "2024-03-05T13:28:30Z"
+    mac: ENC[AES256_GCM,data:1W4mefNiB6JWZuUElyI/DBEymdzZoYo/sFM11ojD3zlkGjohaqdJcAbORLtwTTKwxZCUDz5xFqCuWhY0kPJ17jm8Wkr+IE6h/p4KBwhN7C+wBI6EMh5sZVB3px6gBeq9TXnsQXD9bS1VfBaLFRGXSZYVuvZM2f3opcM3mPKHHN0=,iv:WtC2Hq2CoNtKzIQz1+VaHRwsJkjzwOvVdZHUs6zhuh4=,tag:o6P0SGXCM2FzEGmT2ziuWQ==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.7.3
diff --git a/kubernetes/apps/network/k8s-gateway/app/helmrelease.yaml b/kubernetes/apps/network/k8s-gateway/app/helmrelease.yaml
@@ -25,10 +25,10 @@ spec:
   values:
     fullnameOverride: k8s-gateway
     domain: "${SECRET_DOMAIN}"
-    ttl: 10
+    ttl: 1
     service:
       type: LoadBalancer
       port: 53
       annotations:
         io.cilium/lb-ipam-ips: "192.168.0.80"
-      externalTrafficPolicy: Local
+      externalTrafficPolicy: Cluster
diff --git a/kubernetes/apps/observability/kube-prometheus-stack/app/helmrelease.yaml b/kubernetes/apps/observability/kube-prometheus-stack/app/helmrelease.yaml
@@ -165,3 +165,5 @@ spec:
         size: 8Gi
         finalizers:
           - kubernetes.io/pvc-protection
+      nodeSelector:
+        disktype: ssd
diff --git a/kubernetes/bootstrap/flux/github-deploy-key.sops.yaml b/kubernetes/bootstrap/flux/github-deploy-key.sops.yaml
@@ -4,8 +4,8 @@ metadata:
     name: github-deploy-key
     namespace: flux-system
 stringData:
-    identity: ENC[AES256_GCM,data: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,iv:nnfHmIPPBuuMzCAM0p+owuYOkA/IrplDgaUb8VMUJPM=,tag:Qx6IGpUL3D+WU0otxMQWxA==,type:str]
-    known_hosts: ENC[AES256_GCM,data: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,iv:ifXDkALSxg91nRPB3Z0WnqFpE0U/+sfZPOhDgTBqIgg=,tag:CKN2r5SJPGjEXoEVg/KaHQ==,type:str]
+    identity: ENC[AES256_GCM,data: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,iv:m7/sc9Lbsy4epuKhoXhUhe/n5PNkvv5EhOs8KWPR/BI=,tag:2P1UTq5iy6/q/F2JFSs/YQ==,type:str]
+    known_hosts: ENC[AES256_GCM,data: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,iv:+7qRu79+fSjiNPlIRfgoDgGCg+8QVcnV3nJSofj4Gp8=,tag:pfA13O5EeWD+EPioY6pX8Q==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -15,14 +15,14 @@ sops:
         - recipient: age17ary36xtm566uptguuhsj7xmuqzyz06ce54tcf6p3mge2thphqfs3gln40
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmNGdERjVIVDEvck9kSTZK
-            d0h1OXV5RUMwM01xU3QrOXAxUUFpMzNETENFClM3c3NrZG1ncGZRZWZyWllqeGxM
-            Q3Q1STJ0eDFBRnFQMU1GQ29XWnFoZUUKLS0tIDRCcmxIZXNTaHoya21TdFNEcTdT
-            VEJhdFZzaWVxWWxQTGNHTnd2NWhzeEkK2QC06ma4ld1ICaEoGKIMTXf4We5qbQvx
-            +RLPpahrsCSFxSFUlFj0DgEHAXaSdDxOvCa/apsCugAfvKcDyg80fg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoQzgzaTZwSGVWcldMS1lH
+            NXNwRnI5VU02UkU5SFlOTzYzbzd4dkFrSG4wCmZTeUxna3ZhT3lyb1hDR3NHald4
+            VEVuSHhiVmhjNHFlOXpFUTI4c3BITGcKLS0tIEJJNDFSVGk5R1NzRG1EN0tibGZi
+            SE85SXZBM2ZpZC9ta1ErR3Q0Wi9Gcm8Kz3DfPFsAU6yteDzkhVPrcKkeIae5e6Uo
+            JKefviEaJ+B93jv3BGgo/aSs+Slq0ZkbyKtj29kajfNnV61OsSTWNw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-03-04T14:59:56Z"
-    mac: ENC[AES256_GCM,data:9brdiGtRuS1kfBWpoBBTLy2KC0yDNQpvHK0NP3HcmKpJfG8650yHdLGQOvags/G0jy4lB1GwEisDmndztDD4/WQEjYLUoBegc0gbZIIbbb2etz8rr4FfgBZLG5F33vxtVB0XA3vXyZ3mbl0V+TmyLlc6A8TGW+ioHmjn/0GMx3E=,iv:ACskEqFSgbZPnJc4m5SAiL+ECecbcQFQYur2ZP+1Bls=,tag:raj38SEQWtlcv/xFngwRvg==,type:str]
+    lastmodified: "2024-03-05T13:28:30Z"
+    mac: ENC[AES256_GCM,data:SCAhvm2n8QuP4bcdvEs3BQwkIkQEod3ynaQInGwxzJWrZYGSQSwtMByBce1+++Lz+Pj40e5G4WUASPJ2xCbesNCNx44TIDgsZgx7xBcooyL3cv3NghUNDLQ1hlG70J6yxLCWQPm1uikaqbvJ5PaJX0rjtPLuswVj3yFD0JcrWTc=,iv:BhoJmHX2HNGdOHpeoo7oB+agHXThxSrowYk2aXFKavU=,tag:STY7/3Jy0h9CwknLykTLcw==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.7.3