add all sops secrets

infrastructure/controllers/cert-manager/secret.yaml

@@ -0,0 +1,22 @@
+apiVersion: v1
+data:
+    cloudflare_api_key: ENC[AES256_GCM,data:VjKNLUB3TcdHabLxT89+m7YL/QxFYXpDjEPi2dTUjwzKuA4Ynd7Po8xCW8dYkWV86YW2WA==,iv:9jZV/nEC1c3VD8fq2nVVNr43SqIk7P08SAo66Gmcf60=,tag:y6xrwTeZTfN4odpvaAbr7Q==,type:str]
+kind: Secret
+metadata:
+    name: secret
+    namespace: cert-manager
+sops:
+    age:
+        - recipient: age1s0206tnfaaw849x5xmt95axgu8qhxzlu5ywrwz09tpt8lwpx858q089nq9
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBMGVvVXdGMjQ0N3VGMlll
+            azBnLzAzd2d5WkV5ZjlkbzNickhUeFprYVNrCjdkMmtDRS9ldVI3S05hV1U4b2dm
+            MDZMMUhqS0tta0twS1JQOTZnbGd6NXcKLS0tIEpDc0JzK3lvbVpUZWpzbVJoT051
+            ZWNYV2NFUmFVS2NGUDRmUWRqQTBzbFkKjvzu0zX6KYgcU6iJfUQ5fIh7uNEwcJqC
+            1wjWCyp+D15X3Dxl7l2C6sTHEOJ7zj+HrCTlvzragt6tnbMC2VtNkw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-12-17T20:36:08Z"
+    mac: ENC[AES256_GCM,data:x33/C5T/eFNeCnjZGEOjj2LVzyFvMIu4dtd7HH0rAhSwSJxtTN7OqCNpw54SWLgQVvJjGLDd7T97BxNTJvyRSeoUsJutBrqkcAx1p41GE6eCVOOU4AkPbR6S1nPFxJveSO62KMf4UvLCvvrvEHnWz0x3b1oL/tLYdgRFmbCOHl0=,iv:MHbnL3uvVVzPXFDnKA1Qn0pZPPcY6bFDm9bZKFZVkqA=,tag:MTvoMeYB0Nc7vudyvdxD1w==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0

infrastructure/controllers/external-dns/secret.yaml

@@ -0,0 +1,22 @@
+apiVersion: v1
+data:
+    cloudflare_api_key: ENC[AES256_GCM,data:KNFMTvtHi0py+wisSr4dMA0u1MoIuckMZ0nBL2TmX0AqRv8D9BusV/cF736fymIVw8+fZg==,iv:dgvMAjl4jSVPkSUdvXhL9Ug6NCpB5ZkL2WWXQQAyB7A=,tag:otKwcgUF/asg7eKBexN1gw==,type:str]
+kind: Secret
+metadata:
+    name: secret
+    namespace: external-dns
+sops:
+    age:
+        - recipient: age1s0206tnfaaw849x5xmt95axgu8qhxzlu5ywrwz09tpt8lwpx858q089nq9
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0ZE8rQy96d1paMi9NZlY1
+            bysrUmNQcFJBM0FSZVAvYXRaWEVwU2dqN2tzCmZOemZ3N2FYUkdwS0E3a1dCR3Y2
+            anlVcnNJY1JMeVErNXRLcE5SUXJncTQKLS0tIGxZQlU1VTZ5R0ltZldCdEZwSXpC
+            dDlYNjAxa3FHaVFrZUhOMWJGWnQ0NlEKtsmpOJ8OEYGqquRnT3bm2MFfjd/AKjyH
+            lLQfpxPol6AIsbVxfJm5GexGI2WQ8lqYdwA8ada0rqzBkjQ6DttE/w==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-12-17T20:36:08Z"
+    mac: ENC[AES256_GCM,data:zyTYwIhNeBPCQCX/cNh/j3yXtftJixu/vbJnDmtQ80qQwLMUnVT6rihvsu1+19q7323YYbha5UMg0HLXcLYUvTlnmQhn708KwY2NPwVnmJpCQWXbaJ89mqJPk8Jn1EuqaLH/x4NZn7+Aj0JOK404SscoXTHLJ6SEGPLZIEefOUM=,iv:ztDN5OBcPCCy6neAlJMhCz0gLAAH5mO+fypBwuaNUaw=,tag:GG3j3kQYt7xaSAu8aDQ9AA==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0

infrastructure/controllers/longhorn/wasabi-secret.yaml

@@ -0,0 +1,24 @@
+apiVersion: v1
+data:
+    AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:blCRxZeMzIaYnGtTa0thX602+OSs1Edrn/hhGQ==,iv:fYZLbWElXoC2/9PX/DNHw8IxXult0Sai/GLz9PwJuIY=,tag:oy3mBbehTE7QMQKVz/22BA==,type:str]
+    AWS_ENDPOINTS: ENC[AES256_GCM,data:Azg8k6oWrKCToEJp/P0AC3jfw+u7t/W9oMJ/ynKfMzArDkkoSKWR0PlozcUviqZxaUvJQw==,iv:HpYimQi+e3VRpSaKXHyzePC1E1MCkl6dUBIlWdUKcFs=,tag:k15afsr8AacbO3VAyxwsMA==,type:str]
+    AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:YGIvc6Cdt6P4ZYAQKLkurl/KVUB3sYW4mTK8MeeqfrmPbnLnGCQ2gtZNaAxuzUPHzX0H4GTc2CE=,iv:0zIGmYTlM9Pe03XvBGJ4GVi4+3blzPsLckERtTpZokA=,tag:xPj1OauKppL2MS5PbDBNDw==,type:str]
+kind: Secret
+metadata:
+    name: wasabi-secret
+    namespace: longhorn-system
+sops:
+    age:
+        - recipient: age1s0206tnfaaw849x5xmt95axgu8qhxzlu5ywrwz09tpt8lwpx858q089nq9
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqQkVkcTN0cldFUmFVbHk3
+            UGkvMlhYaTZka2NWMXpyZk8zT2p2WVE4VUE4CitUNUxRUklZR2dOeG5uWTVyWmgw
+            MDAyUFhHcFJHcUFEdnRlZWFQbkJXa1kKLS0tIE81TytRNVpHejBPY2lLQkJFMzVY
+            bnhQbERkcFUzbVZRd1psVnZwTk5YclkKQ8fc+qV6/ViA1ZLBh9Yh1CFuSuVcMYfK
+            y6RMe32zh8RvXb6zGer8T1BpMGK4fd9YmOUDPUXx2jHENr84yBoT3w==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-12-17T20:36:08Z"
+    mac: ENC[AES256_GCM,data:mAiPOsRcnbLyG8hzqv2p0lVkBxGNSO1+WmK0CUkoplyql7neeTWhZIQmtufmduPO3mlPTorHMBq/ixOfrXE6H/LkOpfdQ1TLBb9Fs7hWYEj1jFdkqtDhQBVkLU0EUvdJRpYEgnJZpi0OWbwyy///um2VsVuht/l9qguaUvvv0Lg=,iv:zro+6yVcMe2M0tx7n/8eytcHMqhqd8qyMWnda1BE9nA=,tag:nZR4dF/RwIcymP8sovuSVQ==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0