modified: deploy/act-runners/mf/app/kustomization.yaml

modified:   deploy/act-runners/myLimbo/app/kustomization.yaml

README.md

@@ -46,6 +46,17 @@ kubectl create secret generic flux-sops-age \
 --namespace=limbosolutions-com-cicd \
 --from-file=age.agekey=/dev/stdin
 
+cat deploy/flux/.env.d/age.agekey | \
+kubectl create secret generic flux-sops-age \
+--namespace=mf-cicd \
+--from-file=age.agekey=/dev/stdin
+
+
+cat deploy/flux/.env.d/age.agekey | \
+kubectl create secret generic flux-sops-age \
+--namespace=mylimbo-com-cicd \
+--from-file=age.agekey=/dev/stdin
+
 ```
 
 **Encrypt secrets:**
@@ -55,6 +66,8 @@ sops -e deploy/app/helm-values.private.dec.yaml > deploy/app/helm-values.private
 sops -e deploy/backups/secrets.dec.yaml > deploy/backups/secrets.yaml
 sops -e deploy/act-runners/kb/app/secrets.dec.yaml > deploy/act-runners/kb/app/secrets.yaml
 sops -e deploy/act-runners/limbosolutions-com/app/secrets.dec.yaml > deploy/act-runners/limbosolutions-com/app/secrets.yaml
+sops -e deploy/act-runners/mf/app/secrets.dec.yaml > deploy/act-runners/mf/app/secrets.yaml
+sops -e deploy/act-runners/myLimbo/app/secrets.dec.yaml > deploy/act-runners/myLimbo/app/secrets.yaml
 ```
 
 ## Backups

deploy/act-runners/kb/app/secrets.yaml

@@ -4,21 +4,21 @@ metadata:
     name: act-runner
 type: Opaque
 data:
-    GITEA_INSTANCE_URL: ENC[AES256_GCM,data:AJeOt1WH4k13AYCX8G2gNysDq30hp4edKLB2WA5h,iv:oUoUKhyJHIK9JypIUIzWEEhGdPakxbbofcbn7n2mv1g=,tag:uzpOdJ/ZPo5pzG5em0EC3w==,type:str]
+    GITEA_INSTANCE_URL: ENC[AES256_GCM,data:hu+3h7SrBqcg6/vJGlhfPKr0Ba/3sPLMAcB41UNTNNnq4h4Zlmy1pw==,iv:lVuWe2qSB6IovHQS0x+0Em28WhWCqvYrXRLgoZ8mc7s=,tag:YDycHwytzyQAdNL7ohQN7g==,type:str]
-    GITEA_RUNNER_NAME: ENC[AES256_GCM,data:CmDVTTgKYdt8gU05,iv:QESuJGBvJiS8ogC+Vg2TiB1jqmGANgLOxhtNVGLE2VQ=,tag:xIBN9H0qoa6SfVRudELm/g==,type:str]
+    GITEA_RUNNER_NAME: ENC[AES256_GCM,data:YFBl0zauAt4c0pbGCmE6nw==,iv:AdNNfliMcV2cigwllAZDLf1FOELDLiZ1QQ6Sfxieos4=,tag:h943Vkz/pE3psHuAjmqowg==,type:str]
-    GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:AcB64QIRmzoJv44+tHk9jCpYTxa1oAZLBpqO4CmlOZwYc2c+J0L2Jw==,iv:uwzg2FNAvbXSfAuX0YDcnS0HsWHWevXcXVY2nC/Ps+4=,tag:o46u1nDT1poH+hshs881Iw==,type:str]
+    GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:aYl9ACO+XTJyak6Zbij+iynn6Vjyk+c1jTca8nRqU1GcsBgTA1BtkOJB4xlEZSFZJD+xxh3bS6g=,iv:FV7a7KolBwfwyNpDC+FFU0COfVHvze2U/eVhXffjh9E=,tag:af5xpYsycoNFo4OhZrw8Jg==,type:str]
 sops:
     age:
         - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsV3YvR2xQMGhtbkZ2Rmlo
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUT1Q0emFPZnE5YlRhdTRD
-            RmM1eDk0clZ1SVNXd3RPeFFaUUExZ1JMWDFzCjFLazc3UjdkWmNsUlBqQ2JHUEZt
+            VU8rTVJOaXd5emZURk5wajFiWksrNXNLRzJVCkdEQjE1WXFkY21VWTMzL0w1TzFX
-            b05EaWRKN0tOVW9VWnRxVStSbUgrVUkKLS0tIE1KN3l6aVV6NU9RREwyaTAwcCtj
+            N09tRWtjQitnblU1ZFE1TE5iQzFocFkKLS0tIGU1Ukh3Wk5aVk5ZbWh4RVdIc2p1
-            UDQ5djdWWXdrOWQxU1hieEM4YmJKNVkKV/IBqH8zehlOvm2xvmNn7xehrW2axBt/
+            clJSQ09mUU5LdnR4VTFBUDY2OGpUblkKfwkVzWWmQ3GUbMLzeIs7ai/qJn0gHPpa
-            g8khMMeSkqAbbbU3ql5G+6RCqvOH4XGK7qjmhj871N2VLkdqnf6Zrg==
+            CEXd9dMotRJ12cWawN4MdagRE1UL50GPy24rsGMXfqrNGsWnJP7y0Q==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
     encrypted_regex: ^(data|stringData)$
-    lastmodified: "2026-06-04T22:12:05Z"
+    lastmodified: "2026-06-04T22:22:42Z"
-    mac: ENC[AES256_GCM,data:QX4KRhJAmHgsyBlC4LMo05/u/8Urhc9nBOS0iZ2uthtbcKKhq5I11a6xpt+1Qh+ojLABvzysLPr32orbcT6xs6/N/MXQIYl2itWZf+lT6eoSPiX8zjOwvnjomKSGUNxe4LrxLugimf/YFr9ASn+4GnOU7kvHZ2K4caVIGijhPhI=,iv:M6u2JG52TmJMjv51GyHITRBrDmIFACMh2czdGBZZIJs=,tag:Sl9I0EXf+U4DE5Q5GRLhNA==,type:str]
+    mac: ENC[AES256_GCM,data:BTJ6wKJotmvNMwP1SAqwwx3BPUkVoOmXCdvI0HTwQUWsS5y0X5fQLwW6wz46g7GgVMwuoH2SEEkIl27UViYNUM7ObYFgN3y1isBjE1Xhcp1rC7BqRqYPtQ5HHMTF1dAo1+eHBYUE9vvaud87FOvePAYiaez3dK/helvqlb7A41I=,iv:j2HOYSIlXdn3TQc936PYcmIA/6SIyVtNZVchtjCxrQU=,tag:eD9d5OIpI9V3mpo7DtsOzg==,type:str]
     version: 3.13.1

deploy/act-runners/limbosolutions-com/app/kustomization.yaml

@@ -1,5 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+namespace: limbosolutions-com
 resources:
   - configmap.yaml
   - deployment.yaml

deploy/act-runners/limbosolutions-com/app/secrets.yaml

@@ -4,21 +4,21 @@ metadata:
     name: act-runner
 type: Opaque
 data:
-    GITEA_INSTANCE_URL: ENC[AES256_GCM,data:HhBxavSkLF19cY73+gvbLuRe6KI82v/KtXuXv9rm,iv:6gyx6Zs8JiLucSqQybgs9Dz1FQR2WQ1PbELacZaCAxQ=,tag:sNRoLsxGbfV25BQqRhAK0A==,type:str]
+    GITEA_INSTANCE_URL: ENC[AES256_GCM,data:OPQWugTT+aXgNo2yy6LZ/QTs4U1CKkK/o4tR+gMNpQTLaLIPLquCDw==,iv:ZfBVdS2GKTy7DwjV7t8Fho2p1pDinfsEdwKtJ1z2o9k=,tag:x131kXwsOeE0ywOUsDE9fQ==,type:str]
-    GITEA_RUNNER_NAME: ENC[AES256_GCM,data:akEL5H5T8Z9W/Uq/zhz5gyvXENC7vVVM/IFIVQ==,iv:R0yF4pIWuxPwO1isCVGieZKY5kUYfizctXwe4pQOjwI=,tag:DM4jNkudnVdgUXPJQ34bkw==,type:str]
+    GITEA_RUNNER_NAME: ENC[AES256_GCM,data:f+3pB+TpYt8iyhhb49xva50VywtWlO0ST/v4OxPMEnxdugyz4BOVcg==,iv:ifniki5AG6VkKR3MFYOCF8G8yYrNrlq2oTgDzIDMD4E=,tag:cVOM6myolTbwczVBgrx1Qw==,type:str]
-    GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:VDucrH/tca0UUV3hLrmJZKlpTWlycnyoaIm0JzvfCpCkqgFgVwqZEw==,iv:6nEcMihavJ2iHswz4CSjkD/Yb+I42LgxGby5H9a+or8=,tag:2ZkW6wlmKOMeg9QeyEjOZw==,type:str]
+    GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:2yM7JegoIMFohpJlAj7KYMiwkYpVq4HgWcIjVbfpS07TwJa0cnuZ8kYb950An6vSKb8h27DuKjA=,iv:7mLiZYQ/HX/p8NU4mWB2P3nEUpxcsLOvP/3AcyFrhtU=,tag:UU+GSiTwtODbJNVUEmcR+A==,type:str]
 sops:
     age:
         - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1cFFkVUNZVFdOcjF3akxY
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4anZFOG5VK2FnUGxEVkh0
-            bTBYUEJwbEJxckdqQXVxc2tEdU1vakxuN0RjCkFqOGJCRk1jcnJXWVp1RjYzUU9a
+            eGJ5QWNyanVGbEJicDJXY0tsTU1PdXdoTGxFCktnOW9jVHFQVjVRc0lLT0JTbUFN
-            bElsekp3V2RxSFN3akZ1QkY3aU0zTDgKLS0tIDhWd2YxUGxDTmtyci9rUjhUbVYz
+            R3hiR0ZtUnAxc0NYeGUvNWF3SUt0cTgKLS0tIG11Qk93aDhOdGxBME1URERGazdz
-            VXNCa1ZhSW56RlJkbW5KanJlbkU3aEEK+/dQJtiy6Wsntg3F/fMdGx9Aqo/xiYZ7
+            aFRzZGVKVjdjcUE5U0FoV1c3ZVE2QTAKC9RWFz1b31kBGLe9GJHHT+96xE3QPLRH
-            gM7aoYOhQoA3nDYe/0cSLM4vExyLcqQMUcDZGKYlRaND9uq729rAaw==
+            PKHnlIaEfygSN1yss2LIgA6Ns05ge/hp4v/z3f1og+euKJdj10rd3w==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
     encrypted_regex: ^(data|stringData)$
-    lastmodified: "2026-06-04T22:12:24Z"
+    lastmodified: "2026-06-04T22:22:42Z"
-    mac: ENC[AES256_GCM,data:L2nIeJ5YaXNSBntxGcgNvJz0LQfUVvB0OtbUy+TRFO7DxRlWz4QnRuJBMcnw44+4cuHsJgXMg9Gxe9moD4R9pqa9a3uufX1hULAR5fx+DZWICj2Yopl/FQU30h0helCReklgqP+47xSlFZhZIDRZbyfiTudSU1tBIAW7OZZpC6A=,iv:uHEMG04FvDfNABX0MFuw47PpakfLXMLFo8L1u73xwsY=,tag:JQ0VO4LT1gqpTOzMQAOnkw==,type:str]
+    mac: ENC[AES256_GCM,data:+bkTNhQqZvPOxiwgrDISexjvVbssqyxH6MV2grywZlZPxNXnCLnLSlFUx7J0L9DNefMQsOp6HvH0cz3cA6+I41g2SgjXWSxxQoIAvDbHH4e12bDAOchx4ZBIljTlmzIyWEgkH6DPPvha4PH8qMXjQPCJWE8rpUohj40QqjFgUCQ=,iv:st9SsBDbmZ2FVzPPDoLouJe1zn4zOW1d0tzS0fhc+3k=,tag:n3KH71UxmmjvwjWXU9aCKA==,type:str]
     version: 3.13.1

deploy/act-runners/mf/README.md

@@ -1,13 +0,0 @@
-# mylimbo - act-runner
-
-**Deploy app:**
-
-```bash
-./ops-scripts/apply-app.sh
-```
-
-**Deploy Infra:**
-
-```bash
-./ops-scripts/apply-infra.sh
-```

deploy/act-runners/mf/app/kustomization.yaml

@@ -0,0 +1,9 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: mf-cicd
+resources:
+  - configmap.yaml
+  - deployment.yaml
+  - secrets.yaml
+
+

deploy/act-runners/mf/app/secrets.yaml

@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: act-runner
+type: Opaque
+data:
+    GITEA_INSTANCE_URL: ENC[AES256_GCM,data:Obz1y5FaUsux2DjItdnJMG+rfF3vuO9o4wmpeOU2xxs70ijWUIoEyg==,iv:TLqspEhTvo8lGSGirZMeN0ikKyKmvsuJZ3s2ePL/Hv4=,tag:ju8t2qk2Dgz63Cgte0Wmxw==,type:str]
+    GITEA_RUNNER_NAME: ENC[AES256_GCM,data:u9/zD8aDRx8OSXLZfRP8ww==,iv:tnO1oZGS1dCRGonL3KLaubUr1JtbJvaD7wjBcpCpL2Y=,tag:HtPlkQgSHKVE7Zndo+U2mA==,type:str]
+    GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:9qfwY9IjXnOOFb8SsIJ0HCBv4KlTt1QNy20v59hZt+fPI688mrGpAhzbZfdZwRbAI74H/Gm5Hfk=,iv:q38chmaHIo4nSsDUhpBeFpszTdtwFEFOFIjPTdfNX5A=,tag:tCndZLIBo6RQXQN4V6tbCQ==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTk1JVDBJQURtd0VIMlc4
+            WjR4UUp6cHExWC9CVE55UzJLT1ZNU3lFY0JBCnkvK0xvSHRuWi9mUHVMMU5LN3dQ
+            Ujh3cU9pMkNKenRza1FyZjlWaW41T1EKLS0tIGx0WFlQSmtCc3VmWGhhdWNteC9S
+            YTR3S3FpN0pjM29aNTA3NG9TYVE5VW8KguSIXnaxjzcAcvsJAnsz6VdpM6QJoWos
+            5EO8pwi1KF6q/RNv9Qg8XWpenBNJJt4BUms6Lej6xcgntxIVc8Fx5A==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
+    encrypted_regex: ^(data|stringData)$
+    lastmodified: "2026-06-04T22:26:34Z"
+    mac: ENC[AES256_GCM,data:12FZB5VqHBDoFpatMhF9wHnseW5LAHRLDDxGQGkBqRbVEq1mWKzERAwBh7emeQvUNnIIAUU9OKjrVhboDPn3t2Te9/z70CIJ/UDoPql0DTxezN6ulL4EYfrhtQvs+4m3JTcAFaF5JWL8ogh46vIL9hxaibuSdi856MnR6Zpiw2Y=,iv:KbLpaU3es78wjEqgpwn1cqqIGQdRy+PDByoJhELlO0I=,tag:62rZQkGKWkgkxAglLqyjaw==,type:str]
+    version: 3.13.1

deploy/act-runners/mf/deploy/app/.env.d/.gitignore

@@ -1,2 +0,0 @@
-**
-!.gitignore

deploy/act-runners/mf/deploy/app/kustomization.yaml

@@ -1,14 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - configmap.yaml
-  - deployment.yaml
-
-generatorOptions:
-  disableNameSuffixHash: true
-
-secretGenerator:
-  - name: act-runner
-    envs: 
-      - .env.d/.env
-

deploy/act-runners/mf/ops-scripts/apply-app.sh

@@ -1,4 +0,0 @@
-#!/bin/bash
-set -e
-NAMESPACE=mf-cicd
-kubectl kustomize deploy/app | kubectl --namespace ${NAMESPACE} apply -f - 

deploy/act-runners/mf/ops-scripts/apply-infra.sh

@@ -1,4 +0,0 @@
-#!/bin/bash
-set -e
-NAMESPACE=mf-cicd
-kubectl create namespace ${NAMESPACE} || true

deploy/act-runners/myLimbo/README.md

@@ -1,13 +0,0 @@
-# mylimbo - act-runner
-
-**Deploy app:**
-
-```bash
-./ops-scripts/apply-app.sh
-```
-
-**Deploy Infra:**
-
-```bash
-./ops-scripts/apply-infra.sh
-```

deploy/act-runners/myLimbo/app/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: mylimbo-com-cicd
+resources:
+  - configmap.yaml
+  - deployment.yaml
+  - secrets.yaml
+

deploy/act-runners/myLimbo/app/secrets.yaml

@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: act-runner
+type: Opaque
+data:
+    GITEA_INSTANCE_URL: ENC[AES256_GCM,data:BATws1oD1oaQehXZGiAWasKVWYlGUOB2xxdRe2+OdJds5LUdzXx4SA==,iv:6ox8QZJDhUdR8IVyOyk+nPa9c/lhlAYOb/pY/l+wOy0=,tag:nJVE3shYschhfhfFkwHQpQ==,type:str]
+    GITEA_RUNNER_NAME: ENC[AES256_GCM,data:P7yDwNE/bSl34HfEqSwQNmIf9OLP4ayD,iv:kDcRIaeULPF5XckCqK6qlKpZBWw2cSyGHKaKQiGlzhk=,tag:kzynWwCu4brmVRoSCemtOA==,type:str]
+    GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:P4yLgfdOTRscbU0QBaeGU4iZjHTazAAOtPzjAtinP196CFeJ177T58qU419WNSYZeutZB96Gzgw=,iv:YIbPzLSFMT+RlDkCuIfv2AkAk5v31cfmF/KRMBAV6kE=,tag:1htUmlUDedLXecT24wSIDQ==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4cEEyZmk3dnhPN2JxUytr
+            WUtCMDlrK2pmb2xJSG8yaEVSZ3FsQkFaUWpJCk5iRjZtdFUvL1ZDdXlkUG5QWVNF
+            NXFxSkQrQjJIQ3g5dmdGNXRzUEIrNUEKLS0tIEpzdlJuR1dQV2NMc1JvdmJOUlpm
+            TVpYQlY0dDNTaTE5KzNzMUdQbXFnNnMK3uirf3+95s/D5bztGWphGOGJBl7BGGHh
+            y4kwM4DzlZioy9sLT8DpEQJi9eazkwRCJfAw89HQML2waTzc3j8kDg==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
+    encrypted_regex: ^(data|stringData)$
+    lastmodified: "2026-06-04T22:31:22Z"
+    mac: ENC[AES256_GCM,data:jJQJe1C0ebtg6n2nEQHaMgC31rGOfPRDtEeBwUaE3r7JxBqPZA9zLi91wMtO2ULTiTVzEVq4uKUo21JIozkdKFcBvO7sQUPgCcxJ9p67/2zyM499I03yq9EnruvV30qVcLm7Ts+mXOt3Hnbb4hj7MR5nYAszf2ZmHNNRNLSHGwg=,iv:yjgKkJT+HQReEks7aVn2Q9besmzvTwbiDtECriCRxwU=,tag:6hyb/r21vtUI03CfrcXo4Q==,type:str]
+    version: 3.13.1

deploy/act-runners/myLimbo/deploy/app/.env.d/.gitignore

@@ -1,2 +0,0 @@
-**
-!.gitignore

deploy/act-runners/myLimbo/deploy/app/kustomization.yaml

@@ -1,14 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - configmap.yaml
-  - deployment.yaml
-
-generatorOptions:
-  disableNameSuffixHash: true
-
-secretGenerator:
-  - name: act-runner
-    envs: 
-      - .env.d/.env
-

deploy/act-runners/myLimbo/ops-scripts/apply-app.sh

@@ -1,4 +0,0 @@
-#!/bin/bash
-set -e
-NAMESPACE=mylimbo-com-cicd
-kubectl kustomize deploy/app | kubectl --namespace ${NAMESPACE} apply -f - 

deploy/act-runners/myLimbo/ops-scripts/apply-infra.sh

@@ -1,4 +0,0 @@
-#!/bin/bash
-set -e
-NAMESPACE=mylimbo-com-cicd
-kubectl create namespace ${NAMESPACE} || true

deploy/flux/act-runner-mf-sync.yaml

@@ -0,0 +1,17 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: act-runner-sync
+  namespace: mf-cicd
+spec:
+  interval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: git-limbosolutions-com
+    namespace: git-limbosolutions-com
+  path: deploy/act-runners/mf/app
+  prune: true
+  decryption:
+    provider: sops
+    secretRef:
+      name: flux-sops-age

deploy/flux/act-runner-myLimbo-sync.yaml

@@ -0,0 +1,17 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: act-runner-sync
+  namespace: mylimbo-com-cicd
+spec:
+  interval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: git-limbosolutions-com
+    namespace: git-limbosolutions-com
+  path: deploy/act-runners/myLimbo/app
+  prune: true
+  decryption:
+    provider: sops
+    secretRef:
+      name: flux-sops-age

deploy/flux/kustomization.yaml

@@ -6,6 +6,9 @@ resources:
  - gitea-sync.yaml
  - backups-sync.yaml
  - act-runner-kb-sync.yaml
+ - act-runner-limbosolutions-com-sync.yaml
+ - act-runner-mf-sync.yaml
+ - act-runner-myLimbo-sync.yaml
 secretGenerator:
   - name: flux-repo-ssh-credentials
     namespace: git-limbosolutions-com