From a1474579a591c17ccb6f517bfb97d2ae71893d2e Mon Sep 17 00:00:00 2001
From: Michael Thomson <michael@michaelthomson.dev>
Date: Wed, 17 Dec 2025 15:37:08 -0500
Subject: [PATCH] test: sops

---
 .../authentik-postgres-credentials.yaml       | 35 ++++++++++++-------
 1 file changed, 22 insertions(+), 13 deletions(-)

diff --git a/apps/authentik/authentik-postgres-credentials.yaml b/apps/authentik/authentik-postgres-credentials.yaml
index 571d876..822f5ab 100644
--- a/apps/authentik/authentik-postgres-credentials.yaml
+++ b/apps/authentik/authentik-postgres-credentials.yaml
@@ -1,14 +1,23 @@
----
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
+apiVersion: v1
+data:
+    password: ENC[AES256_GCM,data:a7nwc49lItIjjg6f7Vaz6Kyyb4CgwMmudHpsQAY39539fvCWtYjsoQzEqEXZdcwPyqB2qlOHewXcStBgG1B1iKKZhqE=,iv:yK9EZWhBNLm9lNs7V7Fm2MQWv3Lfb1o34P25+p00FgQ=,tag:ie24X9bcK1NdxZWhEKITHw==,type:str]
+    username: ENC[AES256_GCM,data:VmGN5YxRGZcS/EWy,iv:QKGSkxBSfMusEkl3sS1m3KQREvwUCP0aag8u7VPzWxo=,tag:zXthxvtKBex3XpRqO6Qcyg==,type:str]
+kind: Secret
 metadata:
-  name: authentik-postgres-credentials
-  namespace: authentik
-spec:
-  encryptedData:
-    password: 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
-    username: AgBr2zRZTjrLNBWWzNPwzaW5YhZ07Kg/DA7cmve4HG8ITvukSp4FO0Spd9oPWI4ESvvwjhz43AST76bFz2aKpNbIm8Z7ZpC26bfdXB5BmXXUs7+EZoutvCLBVwcnHLol9SVuyOQu09dcARYTn5l7pYWLSGUYfSa57VToJL9e3glYoMxOG6MDvfMBWPioOqMA7XeApOi8BO973OH7dxo7zqURwa9DGtunjqVSLJdj5R3XiJR+biX5Oy+iD+gSbhl7bnJzI+BRdm4gonY5XNnce/wAQlCGdIV1Uh5Cylm8VokLX70Pt+/E4uYJy1lmdiAZd3SgfdHSzPLdNLiqLGnOZSfwchc5KDRiWzWcVLWDmnTB85SBapePrxJdOihU12kiss+pKZy++I9WBvDblFe9jgal175uYhqvBuKSpmzub4saTe5VZdXidvKWMW4v4e6uG0ivFVJJULRu+oiiBtO7duLRTc3ngKK8uTtS/LT7ekARkHHQhqobvuzuyIPcOrmfuAqSNL4zKWzxzJhzHaVEOe302XACoJvBXfM1ME1Sc0hS07H/HO1P6+vmWKbe3evMHyD1jCg+aGjbXyjL01ZnE5urIPW9PUj9l/xflbGpTjVBo55WIPscbz+GyHMWbopcmeNQZCI+ieZ9Jt7m/6HtBHywA0z5dJ91mLsglhddsssAMVVj5LcjUQUlx33P+A/YbZOCWOlJ/OX/ynI=
-  template:
-    metadata:
-      name: authentik-postgres-credentials
-      namespace: authentik
+    name: authentik-postgres-credentials
+    namespace: authentik
+sops:
+    age:
+        - recipient: age1s0206tnfaaw849x5xmt95axgu8qhxzlu5ywrwz09tpt8lwpx858q089nq9
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkZFlqTWZzTVNOV294bXF5
+            MEFFWGNXZkN6YjgrdGx2NkZyMHVWN25KSm5rCmxBQzNsSk53bDZiK3RQUCtYbjRu
+            NVUwZHJPSUhZTnEvdmNYNENSR1NSTTgKLS0tIFlmMTRSOWlKU1dYT0ZQQW1yTGx5
+            dWt0TXRDZ2VVVjREYjIvdTFUcVNxYjAKVYa8GZoKORII5nN0590OWzdbyoXe6Eyi
+            mRKUxtVsbhCPtfabQGn/tu40g7A9CFcWh51geIGewkTVmVlx0ulv/Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-12-17T20:32:24Z"
+    mac: ENC[AES256_GCM,data:N81ubg0zmCZpZKa+Z/IJZunsUUT8dZrWfp48cBNLg5GPr1O2SrvFUPo+ZWSDLRWWgea5E00kU1luDHcnTuHtjSF457anCc1LpezJnIIfPHQBE7wIrWkZMW1QYsScZhtNvkDf1LhXuo2JZnRkAZ249JzzPEYxy+GjLXU3hNaaeyw=,iv:V6Op3ZA9Rw2g20gzZapZt7GfnW7TW988psIIDlwxzaE=,tag:anOAkNKfUFhmntDH/i/v2w==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0