feat(gitlab): switch to cnpg db

rxbn · Jul 21, 2024 · 7768488 · 7768488
1 parent f7ff0bd
commit 7768488
Show file tree

Hide file tree

Showing 6 changed files with 163 additions and 64 deletions.
diff --git a/apps/gitlab/gitlab/helmrelease.yaml b/apps/gitlab/gitlab/helmrelease.yaml
@@ -56,6 +56,11 @@ spec:
     gitlab-runner:
       install: false
     global:
+      psql:
+        host: gitlab-postgres-rw.gitlab.svc.cluster.local
+        password:
+          key: password
+          secret: gitlab-postgres-app
       kas:
         enabled: false
       appConfig:
@@ -110,10 +115,7 @@ spec:
     nginx-ingress:
       enabled: false
     postgresql:
-      image:
-        tag: 14.8.0
-      metrics:
-        enabled: false
+      install: false
     prometheus:
       install: false
     redis:

diff --git a/apps/gitlab/gitlab/kustomization.yaml b/apps/gitlab/gitlab/kustomization.yaml
@@ -3,4 +3,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - helmrelease.yaml
+  - postgres.yaml
+  - scheduledbackup.yaml
   - secret.yaml
diff --git a/apps/gitlab/gitlab/postgres.yaml b/apps/gitlab/gitlab/postgres.yaml
@@ -0,0 +1,33 @@
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  name: gitlab-postgres
+  namespace: gitlab
+spec:
+  instances: 1
+  imageName: ghcr.io/cloudnative-pg/postgresql:15.7
+  storage:
+    size: 20Gi
+  bootstrap:
+    initdb:
+      database: gitlabhq_production
+      owner: gitlab
+  backup:
+    barmanObjectStore:
+      destinationPath: s3://db-backups
+      endpointURL: http://minio.minio.svc.cluster.local:9000
+      s3Credentials:
+        accessKeyId:
+          name: db-backup
+          key: accessKey
+        secretAccessKey:
+          name: db-backup
+          key: secretKey
+      wal:
+        compression: gzip
+      data:
+        compression: gzip
+    retentionPolicy: 3d
+  monitoring:
+    enablePodMonitor: true
diff --git a/apps/gitlab/gitlab/scheduledbackup.yaml b/apps/gitlab/gitlab/scheduledbackup.yaml
@@ -0,0 +1,10 @@
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: ScheduledBackup
+metadata:
+  name: gitlab-postgres
+  namespace: gitlab
+spec:
+  schedule: "0 15 2 * * *"
+  cluster:
+    name: gitlab-postgres
diff --git a/apps/gitlab/gitlab/secret.template b/apps/gitlab/gitlab/secret.template
@@ -46,3 +46,13 @@ stringData:
             identifier:
             secret:
             redirect_uri: https://git.${BASE_DOMAIN}/users/auth/openid_connect/callback
+---
+apiVersion: v1
+kind: Secret
+metadata:
+    name: db-backup
+    namespace: gitlab
+type: Opaque
+stringData:
+    accessKey:
+    secretKey:
diff --git a/apps/gitlab/gitlab/secret.yaml b/apps/gitlab/gitlab/secret.yaml
@@ -5,39 +5,39 @@ metadata:
     namespace: gitlab
 type: Opaque
 stringData:
-    values.yaml: ENC[AES256_GCM,data:t9yLafbki1ZlOQvTL9lo2i5TvKrQgALc1fefrJ6glYT2Tqdmyvgn6zQeRYrs,iv:lskwYF0a5HkI7wauSHHNmHTVYvNOA/O6Kc8/yfeCEkw=,tag:Kuub2oxu1Llhes0QSThrng==,type:str]
+    values.yaml: ENC[AES256_GCM,data:Xt+mswaMXK/K1j2qP4IA1563dFGdV54/4k2qCPWNOPKR0GhRPZd2Qqd1anc6,iv:vaz59rHHpG1/YCWY8dcXfqinpjn20dZhN2ipBZG8R5Q=,tag:tL5xWQ3tmOcfooMjizSU0Q==,type:str]
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2024-01-27T09:18:43Z"
-    mac: ENC[AES256_GCM,data:YaQlGcl/PGeWiPT18hxOQA5Zz4z+svVuJFzgrFZbC8JwuXDneCn8G94FbnAJBx1NcFzaqtk/0mHkE7JPmo+oe6aegt+RSbM8GEu/qEAqs7vdBuQz9R45hFyCeXUFN2yizR7rjFxOMkhJE4GopO9JousC5b7NklU3Df1LAV93t28=,iv:tdKw73Es6NtwiWsK2m8GjQYVuwrt2kVOQJmLlR2m4l4=,tag:Q8VjpwPOPdo/jjyVw3LSug==,type:str]
+    lastmodified: "2024-07-21T15:34:10Z"
+    mac: ENC[AES256_GCM,data:2sMENRbkb+KaKhftKx+mWpH2x4bT/sknc1l1KBYjSWmHl/xvp7GqgN8Vu0tkWAzZi4tylSSb70xHZEMv5kHzmkCiax39lAWwPLqbGSXXMehnIYzGmHLQsScJvXQSoKPZdu+yVFCg4frZNc5dGac+1xx7n+2O3diSEwH1lt+Lsqk=,iv:UnxBbnrD+mf5OPu+eowrxLeu6ZYYMcpaLIW7RvMnS0U=,tag:1y6GPBejQWM5oNqUpS3f2g==,type:str]
     pgp:
-        - created_at: "2024-01-27T09:18:43Z"
+        - created_at: "2024-07-21T15:34:09Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA8LTdrN3Uc5/AQ//RIgtEW78nE2fbV4wW9EPuzzV3n5y1x+YXkntvlxcaFHW
-            0mysUmx3M8HmTmRByvfF354gIijMXOlDRKrZrZomSqoCRWg9woAZeJU3bWOREbGn
-            Sfityv5ssfHAe+gG449kKXRWybDThapZIJzuPVpZgvNc8XTYsLGCd8HEZVG9f6bU
-            hJXN/H1zq13yZWvGt5YuGjC16nRS830PiRDKb7UuYt4aNbxh+xbI35DZnqlz3ZAn
-            NIRrKsjjKxlf+OK0WxubG3j1Y+1+l1qRZr9rENebsJxxGHqZv+glHHBKDG38qcSE
-            0Hx11FtJCdAELb4H0AL5LZhBMBlKx7VMqDxQAo7SOqS1j4MuPM4AHm5jbGnXSor2
-            DiTA0W8R3GDQF+BUgV2wKQPz/X9OK1ICMomMqV4PR/n3F+AszJ6jxdhGWwU85Hwc
-            EvbCkmJqOLaM1invX72OaiXQuYVOi5ULafyMDiBqHMN4Ueo51Tu+c5x2i6GY2mZK
-            X4SPWlUCokFoMkyrBqoxLLwlIhl1bWXii1a8us/EC6tWYHMD497rTd0gojX6SMs6
-            O4eoN/9Vr6nDbLi+IG8KlqQEWPZvTEWAYFtD0x8WfOERkgW32+Pg+pSO60fu5U2C
-            vCo+kr5CJ6SdOq7qN2kkD6DIyEUy0YpWq6niBOdJMCkaVEJmtsyKJxw9Qc2FKnbU
-            aAEJAhBh4xvwH5zJ9OeK8T3l7fJiJOooCkzCs3f1hYARCt289rb3Bw1I2fIZevuq
-            0eeZS9z9XcbWSI5FCW1Ilz813NPHeYYY2Ar3yZYhbeeqB9i7AKPjVE3wBozXzIXo
-            8Z2PMJZs+tzb
-            =4h7Q
+            hQIMA8LTdrN3Uc5/AQ/9F+w4ei014TP9rS3z5DToHAfV97iWxQva02bCJYUVeIMS
+            bqY7pz+gCMlyv0s9agQklFHcOgUCY/71x+Uo08OOquP8HKpojy16vSJLWy7iN10M
+            pVQsOAi/5nII22FrQLmDr2GK4ctPU+c/7TNleDbzlaQwhbe4j+65kmtdAO6W200G
+            H/d+zOdTQT6Z0Fnm+W+a9v00Plxa0cKsWbo6J0eAwKQ+JupmwODfPynHSM0y45Iz
+            OAk7a/E69TnhK3Nvg1l5H/2f2qJlXC9PCgxSD2RhBD7sBdkujiYO16ksuTzKXOvy
+            FPiDC5QjktHw/+RN65+K+KHBy+ZLBOlDpmk3EOEtGRhau5H9R3OAa5Yz7f0riEPL
+            km0KpLNkwR5ArdE7ZUarnzpIK6xzT57q82M/3j/x4UIhzWGdyIE6yvHfrL+gCB6L
+            4wV9uxx2sAR4HKTjfSDgZbib0k6RoQ3eCHQY0GqPYMJyV2h26m9ATnn3hKKKmCtt
+            QeaJyj1No8Gw2m7tsgpokkHq15dyXQG4sN1iJRWqlhVHPzdcdM1+pHfQkgx+SEgZ
+            xV/KJzvKpz+NOO77XxSE1gcBLbw12vO5naxX222OY56am6qHN5L8CgxyiFmu8LJl
+            itqLnVp2oVZf+MxQpJDNw9668WXGv+ok4SUyfXUsR87QWrqndfB201kBeQGN6GfU
+            aAEJAhDhyTj/iXO3efdRPlHBta9swL0imAP8zCSbOi8q1vG+GAxsGWPMEWygxgFl
+            tu73GZqdZz7cF7tDw0CPp9fL0LKUkRTJnVR08dC6kD52W4q47CnjEhAqGECEScG4
+            +Qa7E2B6OyGb
+            =PoZF
             -----END PGP MESSAGE-----
           fp: 4988A3C9ED6515B2E192F0ABE42278AB326CB047
     encrypted_regex: ^(data|stringData)$
-    version: 3.8.1
+    version: 3.9.0
 ---
 apiVersion: v1
 kind: Secret
@@ -46,39 +46,39 @@ metadata:
     namespace: gitlab
 type: Opaque
 stringData:
-    password: ENC[AES256_GCM,data:XVT/3hHafpzjV/PPkTYtcXBXehlj0bZQHruQApW6,iv:melG8onKy/QlmMw9fultNyrQD3Yst7CRScWa0c5LxMs=,tag:4sP+YUQHtdlNN0F94LdxIw==,type:str]
+    password: ENC[AES256_GCM,data:2n+HoFDsAkvydBHeJZ0SNDKJacHPArjyzqwlFy06,iv:tKh4GN5MLk9dluP1+EntzRld/qPmoEdQVpqEP0k1o4s=,tag:reucfiD2m/pIAuxQpyWsIA==,type:str]
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2024-01-27T09:18:43Z"
-    mac: ENC[AES256_GCM,data:YaQlGcl/PGeWiPT18hxOQA5Zz4z+svVuJFzgrFZbC8JwuXDneCn8G94FbnAJBx1NcFzaqtk/0mHkE7JPmo+oe6aegt+RSbM8GEu/qEAqs7vdBuQz9R45hFyCeXUFN2yizR7rjFxOMkhJE4GopO9JousC5b7NklU3Df1LAV93t28=,iv:tdKw73Es6NtwiWsK2m8GjQYVuwrt2kVOQJmLlR2m4l4=,tag:Q8VjpwPOPdo/jjyVw3LSug==,type:str]
+    lastmodified: "2024-07-21T15:34:10Z"
+    mac: ENC[AES256_GCM,data:2sMENRbkb+KaKhftKx+mWpH2x4bT/sknc1l1KBYjSWmHl/xvp7GqgN8Vu0tkWAzZi4tylSSb70xHZEMv5kHzmkCiax39lAWwPLqbGSXXMehnIYzGmHLQsScJvXQSoKPZdu+yVFCg4frZNc5dGac+1xx7n+2O3diSEwH1lt+Lsqk=,iv:UnxBbnrD+mf5OPu+eowrxLeu6ZYYMcpaLIW7RvMnS0U=,tag:1y6GPBejQWM5oNqUpS3f2g==,type:str]
     pgp:
-        - created_at: "2024-01-27T09:18:43Z"
+        - created_at: "2024-07-21T15:34:09Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA8LTdrN3Uc5/AQ//RIgtEW78nE2fbV4wW9EPuzzV3n5y1x+YXkntvlxcaFHW
-            0mysUmx3M8HmTmRByvfF354gIijMXOlDRKrZrZomSqoCRWg9woAZeJU3bWOREbGn
-            Sfityv5ssfHAe+gG449kKXRWybDThapZIJzuPVpZgvNc8XTYsLGCd8HEZVG9f6bU
-            hJXN/H1zq13yZWvGt5YuGjC16nRS830PiRDKb7UuYt4aNbxh+xbI35DZnqlz3ZAn
-            NIRrKsjjKxlf+OK0WxubG3j1Y+1+l1qRZr9rENebsJxxGHqZv+glHHBKDG38qcSE
-            0Hx11FtJCdAELb4H0AL5LZhBMBlKx7VMqDxQAo7SOqS1j4MuPM4AHm5jbGnXSor2
-            DiTA0W8R3GDQF+BUgV2wKQPz/X9OK1ICMomMqV4PR/n3F+AszJ6jxdhGWwU85Hwc
-            EvbCkmJqOLaM1invX72OaiXQuYVOi5ULafyMDiBqHMN4Ueo51Tu+c5x2i6GY2mZK
-            X4SPWlUCokFoMkyrBqoxLLwlIhl1bWXii1a8us/EC6tWYHMD497rTd0gojX6SMs6
-            O4eoN/9Vr6nDbLi+IG8KlqQEWPZvTEWAYFtD0x8WfOERkgW32+Pg+pSO60fu5U2C
-            vCo+kr5CJ6SdOq7qN2kkD6DIyEUy0YpWq6niBOdJMCkaVEJmtsyKJxw9Qc2FKnbU
-            aAEJAhBh4xvwH5zJ9OeK8T3l7fJiJOooCkzCs3f1hYARCt289rb3Bw1I2fIZevuq
-            0eeZS9z9XcbWSI5FCW1Ilz813NPHeYYY2Ar3yZYhbeeqB9i7AKPjVE3wBozXzIXo
-            8Z2PMJZs+tzb
-            =4h7Q
+            hQIMA8LTdrN3Uc5/AQ/9F+w4ei014TP9rS3z5DToHAfV97iWxQva02bCJYUVeIMS
+            bqY7pz+gCMlyv0s9agQklFHcOgUCY/71x+Uo08OOquP8HKpojy16vSJLWy7iN10M
+            pVQsOAi/5nII22FrQLmDr2GK4ctPU+c/7TNleDbzlaQwhbe4j+65kmtdAO6W200G
+            H/d+zOdTQT6Z0Fnm+W+a9v00Plxa0cKsWbo6J0eAwKQ+JupmwODfPynHSM0y45Iz
+            OAk7a/E69TnhK3Nvg1l5H/2f2qJlXC9PCgxSD2RhBD7sBdkujiYO16ksuTzKXOvy
+            FPiDC5QjktHw/+RN65+K+KHBy+ZLBOlDpmk3EOEtGRhau5H9R3OAa5Yz7f0riEPL
+            km0KpLNkwR5ArdE7ZUarnzpIK6xzT57q82M/3j/x4UIhzWGdyIE6yvHfrL+gCB6L
+            4wV9uxx2sAR4HKTjfSDgZbib0k6RoQ3eCHQY0GqPYMJyV2h26m9ATnn3hKKKmCtt
+            QeaJyj1No8Gw2m7tsgpokkHq15dyXQG4sN1iJRWqlhVHPzdcdM1+pHfQkgx+SEgZ
+            xV/KJzvKpz+NOO77XxSE1gcBLbw12vO5naxX222OY56am6qHN5L8CgxyiFmu8LJl
+            itqLnVp2oVZf+MxQpJDNw9668WXGv+ok4SUyfXUsR87QWrqndfB201kBeQGN6GfU
+            aAEJAhDhyTj/iXO3efdRPlHBta9swL0imAP8zCSbOi8q1vG+GAxsGWPMEWygxgFl
+            tu73GZqdZz7cF7tDw0CPp9fL0LKUkRTJnVR08dC6kD52W4q47CnjEhAqGECEScG4
+            +Qa7E2B6OyGb
+            =PoZF
             -----END PGP MESSAGE-----
           fp: 4988A3C9ED6515B2E192F0ABE42278AB326CB047
     encrypted_regex: ^(data|stringData)$
-    version: 3.8.1
+    version: 3.9.0
 ---
 apiVersion: v1
 kind: Secret
@@ -87,36 +87,78 @@ metadata:
     namespace: gitlab
 type: Opaque
 stringData:
-    provider: ENC[AES256_GCM,data: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,iv:AxTolavl3QtRoSaTSOW8pBO3nolWhcRtCy3D0clKl1k=,tag:Iu+kzWhv2MFCF9LKYboxZg==,type:str]
+    provider: ENC[AES256_GCM,data:6nZcX3iPsbcm8iQ+OTVhu/FWxFqHhxi6DUMlH72+BJXptiEIkDsjU43lqFKR75qzveERLP5SF8ktLTc0iec4jcZe2t2SmywD4NNllgRHLWLu8YHHIt3yqfti7CZaLnBkQ9j1G5YUCqFfw9XRMoXRF/oNhmt41i9c5p/dcrMo9OflA7mh1v6ecXWXsAD4lwLAsAFuKW1QF3nax9hGDlD1odt7YT3Sb3NNO/PayUiy03E5iY0lI0MMmWnI8PBJX7/VYIcL2mz5nnEMo2uuz11S8AcBQFo+z888e+J3rgsJ5pOPGARWz9tfNwleB8FwniH5AEj57c0htpNCBa3sM4r6mYMOidRi27VLoYmtrT+vpAKlKbLG5m35uYrLt9/okUEfsCmIorslWqFIQeMO+MwVWbSQlvgkn+X7U/dBxx3C7LwYgvg/b2ddYIKC4Z9i/qg4wNpxk9Hxe1KIHDLn0t5dHhFsTUnAyWRHnja1S3Jc7FyjfjBwyTlA8fdvHhbN/uXi60hdoF/m+ECizhjfhaqFL4biXsMZgL7fo8uyzyEp6KaWASdFTBxeVWSEup0YnaXHiyYP7TuxM8BKl19WHAuDlJxJfJJscFSW8k8=,iv:CcV+j9Sd/B2l37bmGitM1v4ErPqLGiKFYGGWddUQ/Eo=,tag:WMGmCZjpGKbKOPpSEy5kdw==,type:str]
 sops:
     kms: []
     gcp_kms: []
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2024-01-27T09:18:43Z"
-    mac: ENC[AES256_GCM,data:YaQlGcl/PGeWiPT18hxOQA5Zz4z+svVuJFzgrFZbC8JwuXDneCn8G94FbnAJBx1NcFzaqtk/0mHkE7JPmo+oe6aegt+RSbM8GEu/qEAqs7vdBuQz9R45hFyCeXUFN2yizR7rjFxOMkhJE4GopO9JousC5b7NklU3Df1LAV93t28=,iv:tdKw73Es6NtwiWsK2m8GjQYVuwrt2kVOQJmLlR2m4l4=,tag:Q8VjpwPOPdo/jjyVw3LSug==,type:str]
+    lastmodified: "2024-07-21T15:34:10Z"
+    mac: ENC[AES256_GCM,data:2sMENRbkb+KaKhftKx+mWpH2x4bT/sknc1l1KBYjSWmHl/xvp7GqgN8Vu0tkWAzZi4tylSSb70xHZEMv5kHzmkCiax39lAWwPLqbGSXXMehnIYzGmHLQsScJvXQSoKPZdu+yVFCg4frZNc5dGac+1xx7n+2O3diSEwH1lt+Lsqk=,iv:UnxBbnrD+mf5OPu+eowrxLeu6ZYYMcpaLIW7RvMnS0U=,tag:1y6GPBejQWM5oNqUpS3f2g==,type:str]
     pgp:
-        - created_at: "2024-01-27T09:18:43Z"
+        - created_at: "2024-07-21T15:34:09Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA8LTdrN3Uc5/AQ//RIgtEW78nE2fbV4wW9EPuzzV3n5y1x+YXkntvlxcaFHW
-            0mysUmx3M8HmTmRByvfF354gIijMXOlDRKrZrZomSqoCRWg9woAZeJU3bWOREbGn
-            Sfityv5ssfHAe+gG449kKXRWybDThapZIJzuPVpZgvNc8XTYsLGCd8HEZVG9f6bU
-            hJXN/H1zq13yZWvGt5YuGjC16nRS830PiRDKb7UuYt4aNbxh+xbI35DZnqlz3ZAn
-            NIRrKsjjKxlf+OK0WxubG3j1Y+1+l1qRZr9rENebsJxxGHqZv+glHHBKDG38qcSE
-            0Hx11FtJCdAELb4H0AL5LZhBMBlKx7VMqDxQAo7SOqS1j4MuPM4AHm5jbGnXSor2
-            DiTA0W8R3GDQF+BUgV2wKQPz/X9OK1ICMomMqV4PR/n3F+AszJ6jxdhGWwU85Hwc
-            EvbCkmJqOLaM1invX72OaiXQuYVOi5ULafyMDiBqHMN4Ueo51Tu+c5x2i6GY2mZK
-            X4SPWlUCokFoMkyrBqoxLLwlIhl1bWXii1a8us/EC6tWYHMD497rTd0gojX6SMs6
-            O4eoN/9Vr6nDbLi+IG8KlqQEWPZvTEWAYFtD0x8WfOERkgW32+Pg+pSO60fu5U2C
-            vCo+kr5CJ6SdOq7qN2kkD6DIyEUy0YpWq6niBOdJMCkaVEJmtsyKJxw9Qc2FKnbU
-            aAEJAhBh4xvwH5zJ9OeK8T3l7fJiJOooCkzCs3f1hYARCt289rb3Bw1I2fIZevuq
-            0eeZS9z9XcbWSI5FCW1Ilz813NPHeYYY2Ar3yZYhbeeqB9i7AKPjVE3wBozXzIXo
-            8Z2PMJZs+tzb
-            =4h7Q
+            hQIMA8LTdrN3Uc5/AQ/9F+w4ei014TP9rS3z5DToHAfV97iWxQva02bCJYUVeIMS
+            bqY7pz+gCMlyv0s9agQklFHcOgUCY/71x+Uo08OOquP8HKpojy16vSJLWy7iN10M
+            pVQsOAi/5nII22FrQLmDr2GK4ctPU+c/7TNleDbzlaQwhbe4j+65kmtdAO6W200G
+            H/d+zOdTQT6Z0Fnm+W+a9v00Plxa0cKsWbo6J0eAwKQ+JupmwODfPynHSM0y45Iz
+            OAk7a/E69TnhK3Nvg1l5H/2f2qJlXC9PCgxSD2RhBD7sBdkujiYO16ksuTzKXOvy
+            FPiDC5QjktHw/+RN65+K+KHBy+ZLBOlDpmk3EOEtGRhau5H9R3OAa5Yz7f0riEPL
+            km0KpLNkwR5ArdE7ZUarnzpIK6xzT57q82M/3j/x4UIhzWGdyIE6yvHfrL+gCB6L
+            4wV9uxx2sAR4HKTjfSDgZbib0k6RoQ3eCHQY0GqPYMJyV2h26m9ATnn3hKKKmCtt
+            QeaJyj1No8Gw2m7tsgpokkHq15dyXQG4sN1iJRWqlhVHPzdcdM1+pHfQkgx+SEgZ
+            xV/KJzvKpz+NOO77XxSE1gcBLbw12vO5naxX222OY56am6qHN5L8CgxyiFmu8LJl
+            itqLnVp2oVZf+MxQpJDNw9668WXGv+ok4SUyfXUsR87QWrqndfB201kBeQGN6GfU
+            aAEJAhDhyTj/iXO3efdRPlHBta9swL0imAP8zCSbOi8q1vG+GAxsGWPMEWygxgFl
+            tu73GZqdZz7cF7tDw0CPp9fL0LKUkRTJnVR08dC6kD52W4q47CnjEhAqGECEScG4
+            +Qa7E2B6OyGb
+            =PoZF
             -----END PGP MESSAGE-----
           fp: 4988A3C9ED6515B2E192F0ABE42278AB326CB047
     encrypted_regex: ^(data|stringData)$
-    version: 3.8.1
+    version: 3.9.0
+---
+apiVersion: v1
+kind: Secret
+metadata:
+    name: db-backup
+    namespace: gitlab
+type: Opaque
+stringData:
+    accessKey: ENC[AES256_GCM,data:1y+b1E3uWh94Dg==,iv:i4ZHVpvs6IuJEIAVsnr+C8tBuSH5/0cJho68sXs5dro=,tag:hvCQPsoqehbTvBerV7TzGQ==,type:str]
+    secretKey: ENC[AES256_GCM,data:QX1v0rfUQoUIL6vcVzHAKhXEWGUUaBDpXbgc0q+bKfTz9YXmYB55UUccayEmCQz5rVcyy2W9mX/Qj9cSlKaO/A==,iv:b6vErRxBZdbe0ugSCLFpF1txjaoLTDrUiA855LEbLJo=,tag:rHD2dJk1g5XWteShGuVlcg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2024-07-21T15:34:10Z"
+    mac: ENC[AES256_GCM,data:2sMENRbkb+KaKhftKx+mWpH2x4bT/sknc1l1KBYjSWmHl/xvp7GqgN8Vu0tkWAzZi4tylSSb70xHZEMv5kHzmkCiax39lAWwPLqbGSXXMehnIYzGmHLQsScJvXQSoKPZdu+yVFCg4frZNc5dGac+1xx7n+2O3diSEwH1lt+Lsqk=,iv:UnxBbnrD+mf5OPu+eowrxLeu6ZYYMcpaLIW7RvMnS0U=,tag:1y6GPBejQWM5oNqUpS3f2g==,type:str]
+    pgp:
+        - created_at: "2024-07-21T15:34:09Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA8LTdrN3Uc5/AQ/9F+w4ei014TP9rS3z5DToHAfV97iWxQva02bCJYUVeIMS
+            bqY7pz+gCMlyv0s9agQklFHcOgUCY/71x+Uo08OOquP8HKpojy16vSJLWy7iN10M
+            pVQsOAi/5nII22FrQLmDr2GK4ctPU+c/7TNleDbzlaQwhbe4j+65kmtdAO6W200G
+            H/d+zOdTQT6Z0Fnm+W+a9v00Plxa0cKsWbo6J0eAwKQ+JupmwODfPynHSM0y45Iz
+            OAk7a/E69TnhK3Nvg1l5H/2f2qJlXC9PCgxSD2RhBD7sBdkujiYO16ksuTzKXOvy
+            FPiDC5QjktHw/+RN65+K+KHBy+ZLBOlDpmk3EOEtGRhau5H9R3OAa5Yz7f0riEPL
+            km0KpLNkwR5ArdE7ZUarnzpIK6xzT57q82M/3j/x4UIhzWGdyIE6yvHfrL+gCB6L
+            4wV9uxx2sAR4HKTjfSDgZbib0k6RoQ3eCHQY0GqPYMJyV2h26m9ATnn3hKKKmCtt
+            QeaJyj1No8Gw2m7tsgpokkHq15dyXQG4sN1iJRWqlhVHPzdcdM1+pHfQkgx+SEgZ
+            xV/KJzvKpz+NOO77XxSE1gcBLbw12vO5naxX222OY56am6qHN5L8CgxyiFmu8LJl
+            itqLnVp2oVZf+MxQpJDNw9668WXGv+ok4SUyfXUsR87QWrqndfB201kBeQGN6GfU
+            aAEJAhDhyTj/iXO3efdRPlHBta9swL0imAP8zCSbOi8q1vG+GAxsGWPMEWygxgFl
+            tu73GZqdZz7cF7tDw0CPp9fL0LKUkRTJnVR08dC6kD52W4q47CnjEhAqGECEScG4
+            +Qa7E2B6OyGb
+            =PoZF
+            -----END PGP MESSAGE-----
+          fp: 4988A3C9ED6515B2E192F0ABE42278AB326CB047
+    encrypted_regex: ^(data|stringData)$
+    version: 3.9.0