feat!: Use Ansible and Terraform to provision Nodes and DNS and create configure script (#84)

tmpl/.sops.yaml

@@ -1,6 +1,11 @@
 ---
 creation_rules:
-  - encrypted_regex: "^(data|stringData)$"
+  - path_regex: provision/.*\.sops\.ya?ml
+    unencrypted_regex: "^(kind)$"
     pgp: >-
-      ${FLUX_KEY_FP},
-      ${PERSONAL_KEY_FP}
+      ${BOOTSTRAP_PERSONAL_KEY_FP}
+  - path_regex: cluster/.*\.ya?ml
+    encrypted_regex: "^(data|stringData)$"
+    pgp: >-
+      ${BOOTSTRAP_FLUX_KEY_FP},
+      ${BOOTSTRAP_PERSONAL_KEY_FP}

tmpl/ansible/kube-vip.yml

@@ -0,0 +1,5 @@
+---
+# (string) The interface on the host kube-vip should attach to
+kubevip_interface: "${BOOTSTRAP_ANSIBLE_KUBE_VIP_INTERFACE}"
+# (string) The ARP address kube-vip broadcasts
+kubevip_address: "${BOOTSTRAP_ANSIBLE_KUBE_VIP_ADDRESS}"

tmpl/cluster/cert-manager-secret.sops.yaml

@@ -2,7 +2,7 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: cloudflare-token-secret
+  name: cloudflare-api-key
   namespace: cert-manager
 stringData:
-  cloudflare-token: ${BOOTSTRAP_CLOUDFLARE_TOKEN}
+    api-key: ${BOOTSTRAP_CLOUDFLARE_APIKEY}

tmpl/cluster/cluster-secrets.sops.yaml

@@ -5,5 +5,5 @@ metadata:
   name: cluster-secrets
   namespace: flux-system
 stringData:
-  SECRET_DOMAIN: ${BOOTSTRAP_DOMAIN}
+  SECRET_DOMAIN: ${BOOTSTRAP_CLOUDFLARE_DOMAIN}
   SECRET_CLOUDFLARE_EMAIL: ${BOOTSTRAP_CLOUDFLARE_EMAIL}

tmpl/cluster/cluster-settings.yaml

@@ -6,4 +6,4 @@ metadata:
   namespace: flux-system
 data:
   METALLB_LB_RANGE: ${BOOTSTRAP_METALLB_LB_RANGE}
-  SVC_TRAEFIK_ADDR: ${BOOTSTRAP_SVC_TRAEFIK_ADDR}
+  METALLB_TRAEFIK_ADDR: ${BOOTSTRAP_METALLB_TRAEFIK_ADDR}

tmpl/cluster/gotk-sync.yaml

@@ -8,7 +8,7 @@ spec:
   interval: 1m0s
   ref:
     branch: main
-  url: ${BOOTSTRAP_GITHUB_REPOSITORY}
+  url: ${BOOTSTRAP_GIT_REPOSITORY}
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
 kind: Kustomization

tmpl/terraform/secret.sops.yaml

@@ -0,0 +1,4 @@
+kind: Secret
+cloudflare_email: ${BOOTSTRAP_CLOUDFLARE_EMAIL}
+cloudflare_apikey: ${BOOTSTRAP_CLOUDFLARE_APIKEY}
+cloudflare_domain: ${BOOTSTRAP_CLOUDFLARE_DOMAIN}