feat!: Rewrite configure script in ansible (#822)

* feat: smol changes Signed-off-by: Devin Buhl <devin@buhl.casa> * feat!: Rewrite configure script in ansible Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: add comment for real path Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: verification is done Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: do not need net common Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up old comments Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up old comments Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: finish up ansible host generation and more Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: backup/restore sops config between tasks Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up test comments Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: use ansible template on template Signed-off-by: Devin Buhl <devin@buhl.casa> * Update template/vars/config.sample.yaml Co-authored-by: Manuel Rüger <manuel@rueg.eu> * Update template/tasks/verify_cli.yaml * chore: update readme Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: update readme Signed-off-by: Devin Buhl <devin@buhl.casa> * Update README.md Co-authored-by: Manuel Rüger <manuel@rueg.eu> * fix: move bcrypt logic to template Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: derp Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa> Co-authored-by: Manuel Rüger <manuel@rueg.eu>
2023-07-04 11:36:58 -04:00
1 parent 26164c7278
commit de0ed1c70a
@@ -0,0 +1,2 @@
+---
+bootstrap_coredns_addr: "{{ bootstrap_service_cidr | ansible.utils.nthhost(10) }}"
@@ -0,0 +1,44 @@
+---
+templates:
+  # Root
+  - src: .sops.yaml.j2
+    dest: ./.sops.yaml
+    encrypt: false
+  # Ansible dir
+  - src: ansible/supplemental.yaml.j2
+    dest: ./ansible/inventory/group_vars/kubernetes/supplemental.yaml
+    encrypt: false
+  - src: ansible/hosts.yaml.j2
+    dest: ./ansible/hosts.yaml
+    encrypt: false
+  # Kubernetes dir
+  - src: kubernetes/kube-prometheus-stack-helmrelease.yaml.j2
+    dest: ./kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml
+    encrypt: false
+  - src: kubernetes/cert-manager-secret.sops.yaml.j2
+    dest: ./kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml
+    encrypt: true
+  - src: kubernetes/cloudflared-secret.sops.yaml.j2
+    dest: ./kubernetes/apps/networking/cloudflared/app/secret.sops.yaml
+    encrypt: true
+  - src: kubernetes/cluster-secrets.sops.yaml.j2
+    dest: ./kubernetes/flux/vars/cluster-secrets.sops.yaml
+    encrypt: true
+  - src: kubernetes/cluster-settings.yaml.j2
+    dest: ./kubernetes/flux/vars/cluster-settings.yaml
+    encrypt: false
+  - src: kubernetes/cluster.yaml.j2
+    dest: ./kubernetes/flux/config/cluster.yaml
+    encrypt: false
+  - src: kubernetes/external-dns-secret.sops.yaml.j2
+    dest: ./kubernetes/apps/networking/external-dns/app/secret.sops.yaml
+    encrypt: true
+  - src: kubernetes/github-webhook-token-secret.sops.yaml.j2
+    dest: ./kubernetes/apps/flux-system/addons/webhooks/github/secret.sops.yaml
+    encrypt: true
+  - src: kubernetes/grafana-admin-secret.sops.yaml.j2
+    dest: ./kubernetes/apps/monitoring/grafana/app/secret.sops.yaml
+    encrypt: true
+  - src: kubernetes/weave-gitops-secret.sops.yaml.j2
+    dest: ./kubernetes/apps/flux-system/weave-gitops/app/secret.sops.yaml
+    encrypt: true