From dce5a821214e4498786a267d380e83d6201ec88e Mon Sep 17 00:00:00 2001
From: Kat Inskip <kat@inskip.me>
Date: Sat, 20 Jan 2024 13:24:13 -0800
Subject: [PATCH] ops(k8s): cloudflare operator sops secret, not secret

---
 .../cloudflare-operator/kustomization.yaml    |  2 +-
 .../{secret.yaml => sopssecret.yaml}          | 20 +++++++++++--------
 2 files changed, 13 insertions(+), 9 deletions(-)
 rename k8s/system/cloudflare-operator/{secret.yaml => sopssecret.yaml} (65%)

diff --git a/k8s/system/cloudflare-operator/kustomization.yaml b/k8s/system/cloudflare-operator/kustomization.yaml
index 673da6ff..2de0f20e 100644
--- a/k8s/system/cloudflare-operator/kustomization.yaml
+++ b/k8s/system/cloudflare-operator/kustomization.yaml
@@ -2,4 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
 - https://github.com/adyanth/cloudflare-operator.git//config/default?ref=v0.10.2
-- secret.yaml
\ No newline at end of file
+- sopssecret.yaml
\ No newline at end of file
diff --git a/k8s/system/cloudflare-operator/secret.yaml b/k8s/system/cloudflare-operator/sopssecret.yaml
similarity index 65%
rename from k8s/system/cloudflare-operator/secret.yaml
rename to k8s/system/cloudflare-operator/sopssecret.yaml
index c15cec2e..30495abc 100644
--- a/k8s/system/cloudflare-operator/secret.yaml
+++ b/k8s/system/cloudflare-operator/sopssecret.yaml
@@ -1,12 +1,16 @@
-apiVersion: ENC[AES256_GCM,data:6tM=,iv:xSPYVxWwySOWXMDG0xYTHpIxzET23JywZF5FAkohQmU=,tag:7VB2Y8ZhbE/cXGn3KpxV8Q==,type:str]
-data:
-    CLOUDFLARE_API_KEY: ENC[AES256_GCM,data:9FWV5dWj5Qll6zq81Y0W8Wi0orctjl4XjAXFLaUfvD6utUVHIGjN+WyRTAwZd3Rvih7TdQ==,iv:rSMSf59OumsNxnsdjODwCrQpedtF/vLiIy55oBHR0+0=,tag:AhNG3Y+a/sUzq4dsWukKBg==,type:str]
-    CLOUDFLARE_API_TOKEN: ENC[AES256_GCM,data:5KFCNknZLBBNM5vpd0oMQEQIstmGFnSG+L+vKa5rmjc2oZCDkGWeI23c6W3OzDAyZMPoO4v9so0=,iv:wDT36I1wEi3oWAgmC7Bwm9PyCPh4mCdFhSghqklj6tw=,tag:+I5rOGQrPbSqxRF/9l8atw==,type:str]
-kind: ENC[AES256_GCM,data:VwEWynNq,iv:Y0IgB4CDzmFxTQ/PLhfqjMQW9w6guI/t0nNhGl2urg0=,tag:84HRARvuQW+P8ooxY4Q6/Q==,type:str]
+apiVersion: ENC[AES256_GCM,data:z8CXY+KoYM4Ywa/61nGq4D04efd/DYiwb1/v,iv:Xu++MR/dvymWoJcO419pkTdXWpAQp+tKERXbRpbVgiw=,tag:uqfnf60QJfWjFYu3Z0KSKw==,type:str]
+kind: ENC[AES256_GCM,data:ucNp0d+rq78fBQ==,iv:53hKxZl4wEbqjpI9F4mqSH2IjPdjmZMvk+VwXNE0f5I=,tag:q4iJs2IOaprhGfw97WYXoQ==,type:str]
 metadata:
     creationTimestamp: null
-    name: ENC[AES256_GCM,data:ZuNsbuZKHhhK+/bVYAkk75Jy,iv:f28cglBsB0vo6EkmnlCTK5MOHDDEcJlS29GtzY6PRgg=,tag:ZJU5vI2Q2a2t5gPfDdlDyw==,type:str]
+    name: ENC[AES256_GCM,data:5ZGPvu3anwI4CiUL5ooQ7hj+1CHEuA==,iv:VI43V5ipOdCtCxHrE3A8j16U4WltEe9ymA3SI9DNiJE=,tag:um0Ib7ATDIFMMzcoOZNDDQ==,type:str]
     namespace: ENC[AES256_GCM,data:vN1XQTOhmTJZpQ0/1skO36g+rocDAD8oADs=,iv:sbnCcahcRrP67L9ZH82y0OGxxS9zErBc45TbXp9dROI=,tag:HrR8MOu+8tqzmNOC/gEnrg==,type:str]
+spec:
+    suspend: ENC[AES256_GCM,data:+3hjqlQ=,iv:9MsEfsIZQxighaHKgW0DB8YAvy0dDhD4PcREbPv5Ufw=,tag:/07bweNe4ACRlSW7rjYMJg==,type:bool]
+    secretTemplates:
+        - name: ENC[AES256_GCM,data:qWpT9Jt3UDBpMVaAtuZexKA=,iv:9ZUT9txFPnkQ9a+ItDNf1gtofOl4MsCIsPyuXxa4hsc=,tag:a96cQq1yylT/U5Idml1JSQ==,type:str]
+          data:
+            CLOUDFLARE_API_KEY: ENC[AES256_GCM,data:nGXwUW/P875VZ35fWoApxT0SynC89cdw+m98X9v+CTurH2OaOyN+m7RHGdzH+eKAYKvYXw==,iv:noh0WaHkZYzwYR33F//sR7r1R1XrhM49DrF+Idh2U9I=,tag:1f9P1zQt+Jj/gzvwvi9oOg==,type:str]
+            CLOUDFLARE_API_TOKEN: ENC[AES256_GCM,data:+qjGyDcjxHedXtYhid2cNixWAdpYMk6fokb7pRDWGBQ/9f+DONgefQcOQnnAR8JS47XD9HUH274=,iv:dvXK7HegLja+QRi8HSawGW3RlB1K+kO4DO6UlNekwmg=,tag:dd/1IArAxujZuHmJEdkDvQ==,type:str]
 sops:
     shamir_threshold: 1
     kms: []
@@ -23,8 +27,8 @@ sops:
             eUN2ZnRaU0VzSXZDNlBBVFVyQ3lpaGMKAg7VUhl6DM3VLRwpmoIV3J9wkM96MC+r
             HapWenCJ0YXmw76JH/Poi7RQDsr1VSTTunpokASqsGexCKa7LPjNXA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-01-20T21:10:38Z"
-    mac: ENC[AES256_GCM,data:I3KxSUJa+czks5P9n8sVQe3cyGIJuwY+yS4u5p1paBiUiM3Fv22oUBNFh/+p2vCn2gKorsYLmsPfFI7XTX3QFAxD8xpsuU+v0GEXoTJ9qI5+0m6X6W3hkAr4JgULwwJMtgmeXu4ZBh2wY3YKlYS6FvOSdAIPg1O+gtVvt5+KGu0=,iv:nZ8928ocV4ZRMraXUNyaS0kYRCdrMedEuclpySd8AhA=,tag:lv1HAjX+O+S3p6Xi5AF2vA==,type:str]
+    lastmodified: "2024-01-20T21:23:43Z"
+    mac: ENC[AES256_GCM,data:0B77eabry0qs0oa696DjgvSJcdq3xjbgTI7vNwvbF1Y6EQnMQ4uYZ8x7ME9z6P2v9r8gOqpnyrs0We5ds75I+DZ4ICGeRT7PGiHFvUJxUOFf6Ot9pkI1a3/X0bj362p9a9pEH7fGEKO8J/+zHFqyd53t18XYbqdKOcsuE3neawk=,iv:lK8Btw45bdRpgVQxILq1oDjC0TjblSfDLHEDj1Nfmbo=,tag:L4N0FIEiKi8yzs43HhDm7w==,type:str]
     pgp:
         - created_at: "2024-01-20T21:10:23Z"
           enc: |-