Devin BuhlandManuel Rüger
de0ed1c70a
* feat: smol changes Signed-off-by: Devin Buhl <devin@buhl.casa> * feat!: Rewrite configure script in ansible Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: add comment for real path Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: verification is done Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: do not need net common Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up old comments Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up old comments Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: finish up ansible host generation and more Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: backup/restore sops config between tasks Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: clean up test comments Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: use ansible template on template Signed-off-by: Devin Buhl <devin@buhl.casa> * Update template/vars/config.sample.yaml Co-authored-by: Manuel Rüger <manuel@rueg.eu> * Update template/tasks/verify_cli.yaml * chore: update readme Signed-off-by: Devin Buhl <devin@buhl.casa> * chore: update readme Signed-off-by: Devin Buhl <devin@buhl.casa> * Update README.md Co-authored-by: Manuel Rüger <manuel@rueg.eu> * fix: move bcrypt logic to template Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: derp Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa> Co-authored-by: Manuel Rüger <manuel@rueg.eu>
45 lines
1.7 KiB
YAML
45 lines
1.7 KiB
YAML
---
|
|
templates:
|
|
# Root
|
|
- src: .sops.yaml.j2
|
|
dest: ./.sops.yaml
|
|
encrypt: false
|
|
# Ansible dir
|
|
- src: ansible/supplemental.yaml.j2
|
|
dest: ./ansible/inventory/group_vars/kubernetes/supplemental.yaml
|
|
encrypt: false
|
|
- src: ansible/hosts.yaml.j2
|
|
dest: ./ansible/hosts.yaml
|
|
encrypt: false
|
|
# Kubernetes dir
|
|
- src: kubernetes/kube-prometheus-stack-helmrelease.yaml.j2
|
|
dest: ./kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml
|
|
encrypt: false
|
|
- src: kubernetes/cert-manager-secret.sops.yaml.j2
|
|
dest: ./kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml
|
|
encrypt: true
|
|
- src: kubernetes/cloudflared-secret.sops.yaml.j2
|
|
dest: ./kubernetes/apps/networking/cloudflared/app/secret.sops.yaml
|
|
encrypt: true
|
|
- src: kubernetes/cluster-secrets.sops.yaml.j2
|
|
dest: ./kubernetes/flux/vars/cluster-secrets.sops.yaml
|
|
encrypt: true
|
|
- src: kubernetes/cluster-settings.yaml.j2
|
|
dest: ./kubernetes/flux/vars/cluster-settings.yaml
|
|
encrypt: false
|
|
- src: kubernetes/cluster.yaml.j2
|
|
dest: ./kubernetes/flux/config/cluster.yaml
|
|
encrypt: false
|
|
- src: kubernetes/external-dns-secret.sops.yaml.j2
|
|
dest: ./kubernetes/apps/networking/external-dns/app/secret.sops.yaml
|
|
encrypt: true
|
|
- src: kubernetes/github-webhook-token-secret.sops.yaml.j2
|
|
dest: ./kubernetes/apps/flux-system/addons/webhooks/github/secret.sops.yaml
|
|
encrypt: true
|
|
- src: kubernetes/grafana-admin-secret.sops.yaml.j2
|
|
dest: ./kubernetes/apps/monitoring/grafana/app/secret.sops.yaml
|
|
encrypt: true
|
|
- src: kubernetes/weave-gitops-secret.sops.yaml.j2
|
|
dest: ./kubernetes/apps/flux-system/weave-gitops/app/secret.sops.yaml
|
|
encrypt: true
|