fix scopes

decrypt.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+
+export SOPS_AGE_KEY_FILE="$(pwd)/age.agekey"
+sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh --decrypt --encrypted-regex '^(data|stringData)$' --in-place "$1"

infrastructure/controllers/oidc-secret.yaml

@@ -5,11 +5,12 @@ metadata:
     namespace: flux-system
 type: Opaque
 stringData:
-    issuerURL: ENC[AES256_GCM,data:31lcrvswL8AC6Sf/VDGxCe7l7THWSZCdAFnauzmgHdfVhIrBQpg2Os4sOLvIZO+y8Unz4jc=,iv:6ryLcYvXgzmp02cY/mi/OglLKeFUrgiH4Nchfhy4fr0=,tag:iA8pGiPlW5oj8mAIDY4y5w==,type:str]
-    clientID: ENC[AES256_GCM,data:7oBQUR8=,iv:Lin3Cler/1R1HaRmPqr5qwB4ejBR77z7hMWtfcp1hVM=,tag:ftWdHeSPAnZEhgy8Y/mHRg==,type:str]
-    clientSecret: ENC[AES256_GCM,data:u7y/1jz9WSIUANXeL4hV+paPpql3eVZYoF8c5LfuPWY=,iv:VjZlHRnHgyxSWb+XewtrpqNyrYpddWJrDWMeKLSJvzY=,tag:p54D18DlEwR83VhtMZOQ6Q==,type:str]
-    redirectURL: ENC[AES256_GCM,data:SWX72pcOQeHki+7yJ9qaH97J38EtJ7uWt8PD3dXtJEXOc9jYaFBxGbnxuh8TYMTk2hGpOw==,iv:K3xi5hFYghdcyeiheSo0XHerrJEZnPj7eXHzbKGQxrU=,tag:cNnqiQBt7MgaQHxDvon9+A==,type:str]
-    tokenDuration: ENC[AES256_GCM,data:jMTkv29n,iv:tV1QI9Wfh3wJJSPv9otImbWEUQX9YzFvv03tTp7G08A=,tag:EMSR/VvkHhXTin3E28uFeQ==,type:str]
+    issuerURL: ENC[AES256_GCM,data:+f0O5ELWCbVNcRNV5Aq0/IncFkhD/kVYIIfOrkVkNnTLTVgCn81P2kOPB81vk1w4lIL/As8=,iv:J/N82Tjb7KDPUIqJhAllIS3VfPO8TvDgvfSGuCRWTkM=,tag:d60vMdl4UJyiKqwm0SrOyw==,type:str]
+    clientID: ENC[AES256_GCM,data:8+lUSY4=,iv:ltu3X1+k3V/hXcPARPuti8D4a3qeD48LUb/A13yoyOs=,tag:D756jLBeRLs+hiPC7fVj0w==,type:str]
+    clientSecret: ENC[AES256_GCM,data:iutS5ikcw1RW0quSXEZ4cJr7aP8L97VB3A2+2x800KM=,iv:lydM3STTpvR1aYgwK1woDuP6FFtt0UYugBrmIU0b8Fs=,tag:QaZ+eqC6K8HJxeB+4VNGrQ==,type:str]
+    redirectURL: ENC[AES256_GCM,data:BjGT02dG2yYJVu5lh6g0nz49ZjAv6vT5UJPMRJDUaCkNjYZFnUenbgKvs4YyrEzlQOLQ4A==,iv:2GZTQt4MZ0ZVs9YE3j2bfCdb3zUi6jFNdoy6Fg6wGJA=,tag:Sh7VwPuxW4/gPRdMsaDcYQ==,type:str]
+    tokenDuration: ENC[AES256_GCM,data:KFNOQzkI,iv:3f+rNkKDsgpvI9VrwDZyusI5QlCLtiU833+hlKOodQ8=,tag:D+4XIW2XnXb9NS0A1sCifw==,type:str]
+    customScopes: ENC[AES256_GCM,data:+DMXoXo=,iv:pxGt5QTZcgGziS35yjkZ++8fyt1v+QaJF+JwZiiW22g=,tag:McCUskohBrrdk8pBh4Xwkw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -19,14 +20,14 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
               -----BEGIN AGE ENCRYPTED FILE-----
-              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjZHFuUmVnemZXYU11azVa
-              ZWNTZUdCVzVhdXNMTjY2dlZTTG9YMEE3VHdJCjBrMDgrUFYweExNb3Y2aUs4QUNa
-              V1hBWU9DMnY1cjY1RVUxcmRHczI5TnMKLS0tIDIyK1V0MExOTlZIMktkYmxMWDgw
-              Y1VSM0NZTFdVMmZYaVlMQXhTdkpDNEkKx4iEuFixUbvJTVAmXS2xDepDqxa8O0wQ
-              uaV/SV3Q9Ub+VK+//FygrkCiUgAs61cr+623p4vEvu4044KNR9OLRw==
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0MWN6anhNWDVyeFI3cTBO
+              RnJTdTNmT1RTQlZGRzVDTHRVZWRTWlFTa0J3CitEeGVKU3l2ZFdlWmgxdm1BdHBD
+              MEtoV1RYcmt1RHd5SW5nNTFxMExiRzAKLS0tIFhRSGlpVEFFbUFsMzJDVndNVVEy
+              VjFuY2NBQ1lsS09iSUZPbU96OVZieGMKI3Ee5I8IjLl/5i9DvOk8JGEzF2MmsdSW
+              DTIhBCXZNfe5ZKYoGQl077Ll9MNsvbJpMkbVtJudF0tP9eOcaPmITg==
               -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-03-16T22:45:15Z"
-    mac: ENC[AES256_GCM,data:zHf2SET/iNdqUqianIia2zGIwIM0HoGtWy7jbpWimRjEPB6Ofm740oGQxwovmLuoCcExjZQzU+FA9/9DKAuOtgnWWtGgDuwwHrJQf3GBZtlQg0s8TzYn2wVrEoIfqD6lOi2qscoLsvEikrJXyoQnkXFISBRjNxxfbjRWwmBibBg=,iv:DSYrQRJggoOab3br2JA4NbNy1Z2ew3crFf+jfnoTta4=,tag:oWPcvQO1XQ7ox/fWZF89QQ==,type:str]
+    lastmodified: "2023-03-16T23:19:45Z"
+    mac: ENC[AES256_GCM,data:c5+1OmcEOQjMCT/FQ+q8YkSMnjrd0wMKKu4L+At/dpVWA/1emDMqEKLoNeiF+5ryW1YC7lwgFK6vGUEfFz457YLnMireJVxT3Iz5oUwi0ObN8p27U5g/7EeVmxKdRzcVR3AacVYIsKlHQtJMEcmPlZsf5FlSUkxrvq846qTYZEY=,iv:bb+hVwDpYlOpM17TfGFB9DeQH0fK0fKth33RLcMyxG8=,tag:j91O45AoTCdqqL1xuOFIbw==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.7.3