MAINT: use updated secrets format

move opensearch secret to apps directory and change filepath to match - encrypt with worker key

Author: anish-mudaraddi

clusters/dev/worker/apps.yaml

@@ -63,7 +63,7 @@ spec:
             chartName: opensearch
             namespace: opensearch
             valuesFile: ../../../clusters/dev/worker/opensearch-values.yaml
-            secretsFile: ../../../secrets/dev/worker/opensearch.yaml
+            secretsFile: ../../../secrets/dev/worker/apps/opensearch.yaml
 
   syncPolicy:
     # Don't remove everything if we remove the appset

secrets/dev/worker/apps/opensearch.yaml

@@ -0,0 +1,87 @@
+admin:
+    #ENC[AES256_GCM,data:gV5joxGKGIQ5WSx7NS2PKioU4uaGoh4JN86LQNVJoete/tKwtB2J7+dQGnAkjNZML760yPfNMrvk8hBi04FF+6Bg54mpFgOSwOhPaAxEu7wk1TgeTz70pISTnCzuK6jyQxqs6Q==,iv:0crzVrI2ZqJFoGnNQEVeeFfgIdIiLkbm9qEn793PDnw=,tag:EoU1YVNuP3P8g8C+0LZWOQ==,type:comment]
+    #ENC[AES256_GCM,data:tXMCECd4whgQBEctFvbHjf4sdrqJArR8LcYS/SnCY9UdRvhM6O7kNEFq8C9nj5f/k1n6hD+ehanalD46eMYUDIc=,iv:jqwi4+7uLU/ypmU3BGVLWe5FkeZVCmxunTxKUkv9dMs=,tag:V6wRXxjoORlu/ixxepVDGQ==,type:comment]
+    username: ENC[AES256_GCM,data:jSxjHuQ=,iv:OASlVp3ymxO4xYjbPtIciNT1xYjT3RYlypsnAQcfbjI=,tag:/tjUCZAPHi1wJ5Uw+VD4Cw==,type:str]
+    password: ENC[AES256_GCM,data:CL4IuUdnYUcR39db/JOXZJaQUxs=,iv:rUGq9hYt8/QxMYSTv6E4JXqzvqGygdyLByb5Q+UqfpE=,tag:RaM3UYOIRjT9wTjkDHDs/Q==,type:str]
+    #ENC[AES256_GCM,data:zdYVQLwtQjjemM0U9z0vIrTv5nqK/uWLWuCJwm+94gwaEDpi/pkF7mSlRR175ICD7hd/QLhNare5fbCP7O8WDNanyDJHNA8BwtU=,iv:bdrEHCxmvyDRGeMuhWC8VJLPI3Hr3knkO1KM7nvMvs8=,tag:4Qrl1bBapz9rW+nsF6w0KQ==,type:comment]
+    #ENC[AES256_GCM,data:OjTIrzxjfTYEEMiw/5xAMmTbS331hVS8nQyh+ARBVvul65c9bbDKDLNprWPwI6Lr,iv:d4yDEuxXb/VUWQ1tI0I4qs4PudZnn43EoQXpu3D3WF8=,tag:QS8jJDvMamppvIEfVTW17g==,type:comment]
+    hash: ENC[AES256_GCM,data:a+W2EGkVt1DLFAyulc2FKEiowR5p+wE+QUg1i+5yAyZbPPX/npiAb7jX4958oJ++Meuxm7wWk+HOLc/d,iv:kM5B3oJQ+wL4FKgEJ52RODKXDqLMai5UCdG/pKx/lzw=,tag:dB+/Fqcbe53dVGjqcB3aCQ==,type:str]
+#ENC[AES256_GCM,data:soDT5A5bGWdMuR6Qwyce3JCvKKCRGr14FACgdg==,iv:tJZlsJ7Olibp8WiBGXn45FtiKgk6SO7DFDQYBKGHbXI=,tag:90fQzk40NTbw9Qy6SG/8eg==,type:comment]
+openid:
+    clientID: ENC[AES256_GCM,data:KHX7NKP9X8YVMMmLM31Tei5wjCYa0Hf10j31e1inxWk+JNeT,iv:Am0fik3D118fCveCBTz/7z+LnyrkLNRcrFBT+mxdwfU=,tag:XqbGg8CzTSj5wVDF1MspQA==,type:str]
+    clientSecret: ENC[AES256_GCM,data:qRDQecazK49j9i4U84JIKBg4CjEUlrFwenvs5SJ5ypIAgn/scMhUuKJnbIhltICKX3HaARBOeez0vHQqKuz7K1NT3wpQ5y9JHTKJ6ggz6VFv6qV4p4U=,iv:fvBV+Iogm9cL6DdAvMA43vimjgkuWE7m2b2F3z3erwE=,tag:E7ivs0hdHbO1I2zETB1Saw==,type:str]
+users:
+    log_writer_dev:
+        #ENC[AES256_GCM,data:N07PzdRuDidgPFaZc5Bf9XaRq5Ss,iv:HNydVz/2Tv4ORqchc0PeNz1o3GTpSTgqP2p1/bi0sKU=,tag:cTZXAPDeWoNg9ujgDrWF7Q==,type:comment]
+        hash: ENC[AES256_GCM,data:4GghQzxQ+txASI9lLUiw/1HjYGUNsHuW4pL26MSqhZUpXrmoYWZhH5miqOMPXyI9TX2PSshabdScRGFR,iv:5WpkFvYs1RFtmHm/J7eb8eEfJCZkfSO6Sbms4gV9ba0=,tag:CPk1OB193oSK/OUYlDjwEA==,type:str]
+    log_writer_staging:
+        #ENC[AES256_GCM,data:CnyU0e3VctbKfODIyyQSvTxwNrgI,iv:ikij7TsQOp61NqDqRlp3/PUfFOWRdGmD2PNosnmahlw=,tag:Pr99fxuQt8EH+zVg/c2DlQ==,type:comment]
+        hash: ENC[AES256_GCM,data:r23Jg5I2p3Oc6LoEPioQuavOKL54SOR7ccF5tkCMK+OqPlAEEOaadEWR8Ht1zIehuolNhtEPU63Y6fxB,iv:jm3IIdVD9kOdWkok3Wc3+5gntTCsaaLrfKbp69qzWpU=,tag:IfjObXqu6PnGnaxGlNTTUQ==,type:str]
+    log_writer_prod:
+        #ENC[AES256_GCM,data:5GTLDfccR9qqQwCmyVXrrXkqiC9E,iv:KIrBx999sIQyxSpF70Bmi3d3MPCzaqqlfli2eaPFcVU=,tag:/DnRONxN1isjqX6jLHE3TQ==,type:comment]
+        hash: ENC[AES256_GCM,data:Pj2Uep965geB8Ub10gdR7pYnrvfUmcXczInVgmx5SZ2dLjY6ZwiXh8F3p5PLriMzGhS1cHujxHRaJeqc,iv:no6fxUtr4kQSnmKy+kQIbUcjRol7qDt35ATG+iILarc=,tag:VwjLQZle3lBY2DPDLiBvBA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1x0t4j6qxqy42usha0u658r4f5p5d48y8knfuchyu2sc2rywtacgsryp0t6
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRYy9SemJJazY0L1c5MVFY
+            djNZS2FpOTB0SXJQbjVJQ3BkNVJqRnhlZ2pJCnZwUGNjLzlNclprRmxMS1lQeTUz
+            RjhmZ3RvWDFVRHVnQVo3bENvT1B1ak0KLS0tIE03YVR1TmNad0dpdzZWYXovZktJ
+            Wk9uUlN4UFVSQVJuY1VySUc4SEh1VDQKzV4uv3fqfYErwN66ShJiFCETG8msBHqF
+            KF/u3rSNS72YsHp9v5G5nHduN5rsde1eN2+lT6SQ3TZKvT092TQvIw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1acqcungzwkt807d3jt94ngtdt0vhk9kec4ps4a22cpaah57jw4xsl7q4xc
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrU1FKbjlFRzh5cmIrbzho
+            d0ptU2NuekFCS0N0eUJkZXR3b05PYzhiaDBRCnJBMUQzdlZJNmliQ1FSRmtDVUFM
+            elhQQnRkTktvZ1pkcVJKUFJJQ1pEdDgKLS0tIHRhaXhISUZGa2JDTWpCYllQUmtQ
+            MVVod29JNmxlZGJmVnhBb1M0bFZidjAKTTxxsRD5rDUb6rY+II9uc9SvnU66wCXp
+            I7BIhZ1YStk8QDOk20b6zh8h20slGK8lqIXONnKcNxfo0ffdxseGug==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1h3dmygqf4v6jg3nxk5sr9jkp27w3q83sqnqxdd5n92xf3w6fs5kshakrxn
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBma3NKVHRKY1pVclQ0cERD
+            TUQ4aW02OXp2eERJUFM4WGlZS01GVGp0VkRBCmRRWEdHK0QyYUlQNDRtU0xFNUYz
+            TVE3MTdvRHArZDVXSUEwOXQyZ3FLOVUKLS0tIGhzcGMvUmw3THZOQ2hmZTQwSHZm
+            MkxteGgyWE1uV09xN0Vodkd0Z2JDUUkKLJN7xBTlcAGiLrgr5b+QO5Lob+GTe+bq
+            YUkJ3GL+OGsGiQCrpufHCgGoNybTkYaHOFt5R6EC1rvVKmBrxt5DVw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age12khufkd7z25eqgpjjyy0zcrq6kpjxzekmff5zhq7q54tajm4e58qul35x0
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzend6cVpkaE9hSUMrZVl6
+            UjlKQkE2VjRtWUs1NGp2blhIVkNKSFNuUTJjCmpLTGI4ejZqZjV0NWd4TWN0VU84
+            R3ZpSko3NWRiYTBQZHJIVTFSTHM1S3MKLS0tIE5RK0FSWk1Ic1FmT0Q3NHBNL2RD
+            TFZSZWgzOVVvWm1jclJIMzZmR2ZycnMK/zU6K65iqtQkPsX5hVdaIP6EQG0mkawb
+            GkVrVDa1A0pw2W/A/ukRTPOb6IB05Qp5Co4P5zr5tdvBCO7yweSQgg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age16fufeddr0arrns268526gxethxgkh3g0euf8cn37kuwfmq3h23psutz4q8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2d1NQRkVKdHM3SGdHODhZ
+            Vm5SaTUveitiZjI2MEtsNnU4S09ISnA0K1g0CkthbkhjTlZPd3Fva0M1ckpYT3pm
+            Tnlwa3FLL3VGVDdjbGlPbmo3SjMzdzQKLS0tIE1OUy9Tb2k2dDhqTjNDQmxsYkw3
+            WGdUUEY0OUViaEhvMFlSaXhBTWZjTWMKc9Nj8kE4SHKHeSMn55eEUrxdjHf4xH/y
+            jH/9cWriooc9KMiz89m66u+eh12hXVJRq+GyFgAkDOoHiyO7TPNCcg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1a8e4gxw67kp27s3hssfxyem3e8jwaha3huz0sttfngeu60pk5pxqkfpg3d
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBZWZjR0ZXY20zRkRiV3JL
+            QUs2LzNWbnBoSUxMSnhyK1pXRGVveXJhbFZzCkZXUExGYis0b2E4eFlBZzFWTTZO
+            S0xqc0RUQmdIR0RsTzNwZGdtT0FIcUkKLS0tIEVSNkdBTitkUDFiUkhBaGdyTTRZ
+            SHVqQ2FmZnN1cExpZFNjNDMxUndTd28KHcKVtKBiX7thf+1LfK8j3fstuF8eUyhi
+            hqkpT16V84Gw4JsmTUIp4fkw6YQXENl2HyrFdENkucV+oPxt+Z3Bfg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-11-27T15:43:52Z"
+    mac: ENC[AES256_GCM,data:qhWhu4sEMmWvKTsxvhvrfwwG1Yw8Y6in9akrYZElEK8sbyEbHOhunFyI/yxVBaEfNll6/J6cAP15NSvNsuFJD1WAFto8IU4dPU/PV1vmPadeNxBZzBikJACzUl67wpgcZNz2rn9Vo2PYktcDnVahpfVpb5mzlAbNw9M31dbYmdg=,iv:Ga0U8Pq5ab9rQe5kxL5qUAOejLv5VSBnpKEV4eyRRyU=,tag:EfTdA23ARpSrYvPvc7ahnA==,type:str]
+    pgp: []
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    version: 3.8.1