Prepare k8s repo for making it public

[JacksonWrath]

I need to rotate anything sensitive in the repo and migrate that to the private repo.

Don't forget to check the history for anything I might've initially committed and then removed.

TODO (ongoing):

• 2

• 3

• 4

Observed, not really important:

• Cluster CIDRs
  • It's a pain to change these, and masking them doesn't mitigate very much if someone has access to my network anyway.
• Some VyOS info in BGP configs
  • the VyOS instance isn't my WAN-facing router/firewall
• Gitlab runner registration token
  • Gitlab no longer in use
• ExternalDNS config shows AD is open to insecure updates
  • AD isn't exposed, and will be decomm'd soon anyway
• PhotoPrism DB credentials
  • PhotoPrism no longer in use
• Plex Promtail configmap has insecure Loki password
  • not relevant because that's the previous cluster installation. Will be addressed in new install.
• Some NFS hosts and export paths
  • Never plan to expose NFS, but its restricted by IP anyway