Devin Buhl
e1330d734c
* feat: clean up more jinja default references Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: add additional tls sans force kube-vip on k3s Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa>
47 lines
1.0 KiB
YAML
47 lines
1.0 KiB
YAML
---
|
|
apiVersion: source.toolkit.fluxcd.io/v1
|
|
kind: GitRepository
|
|
metadata:
|
|
name: home-kubernetes
|
|
namespace: flux-system
|
|
spec:
|
|
interval: 30m
|
|
ref:
|
|
branch: "#{ bootstrap_github_repository_branch }#"
|
|
#% if bootstrap_private_github_repo %#
|
|
secretRef:
|
|
name: github-deploy-key
|
|
url: "ssh://github.com/#{ bootstrap_github_username }#/#{ bootstrap_github_repository_name }#"
|
|
#% else %#
|
|
url: "https://github.com/#{ bootstrap_github_username }#/#{ bootstrap_github_repository_name }#.git"
|
|
#% endif %#
|
|
ignore: |
|
|
# exclude all
|
|
/*
|
|
# include kubernetes directory
|
|
!/kubernetes
|
|
---
|
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: cluster
|
|
namespace: flux-system
|
|
spec:
|
|
interval: 30m
|
|
path: ./kubernetes/flux
|
|
prune: true
|
|
wait: false
|
|
sourceRef:
|
|
kind: GitRepository
|
|
name: home-kubernetes
|
|
decryption:
|
|
provider: sops
|
|
secretRef:
|
|
name: sops-age
|
|
postBuild:
|
|
substituteFrom:
|
|
- kind: ConfigMap
|
|
name: cluster-settings
|
|
- kind: Secret
|
|
name: cluster-secrets
|