diff --git a/README.md b/README.md index 5dc0ebe..e678b9a 100644 --- a/README.md +++ b/README.md @@ -30,11 +30,16 @@ ops-scripts/apply-flux.sh **sops / age:** ``` bash -age-keygen -o deploy/clusters/prod/flux-system/.env.d/age.agekey -cat deploy/clusters/prod/flux-system/.env.d/age.agekey | \ +age-keygen -o deploy/flux/.env.d/age.agekey +cat deploy/flux/.env.d/age.agekey | \ kubectl create secret generic flux-sops-age \ --namespace=git-limbosolutions-com \ --from-file=age.agekey=/dev/stdin +cat deploy/flux/.env.d/age.agekey | \ +kubectl create secret generic flux-sops-age \ +--namespace=kb-cicd \ +--from-file=age.agekey=/dev/stdin + ``` **Encrypt secrets:** diff --git a/deploy/flux/act-runner-kb-sync.yaml b/deploy/flux/act-runner-kb-sync.yaml index f2f670d..c4c3f1f 100644 --- a/deploy/flux/act-runner-kb-sync.yaml +++ b/deploy/flux/act-runner-kb-sync.yaml @@ -9,9 +9,9 @@ spec: kind: GitRepository name: git-limbosolutions-com namespace: git-limbosolutions-com - path: act-runners/kb/app + path: deploy/act-runners/kb/app prune: true decryption: provider: sops secretRef: - name: flux-sops-age \ No newline at end of file + name: flux-sops-age diff --git a/deploy/flux/kustomization.yaml b/deploy/flux/kustomization.yaml index 56f12bd..b84b560 100644 --- a/deploy/flux/kustomization.yaml +++ b/deploy/flux/kustomization.yaml @@ -8,9 +8,11 @@ resources: - act-runner-kb-sync.yaml secretGenerator: - name: flux-repo-ssh-credentials + namespace: git-limbosolutions-com files: - "identity=./.env.d/flux-repo-ssh-key" - "known_hosts=./.env.d/flux-repo-ssh-known_hosts" - "pubkey=./.env.d/flux-repo-ssh-key.pub" + generatorOptions: disableNameSuffixHash: true \ No newline at end of file