Compare commits
10 Commits
68583d19b9
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
| bdcc82273a | |||
| 638dd73d1d | |||
| 8e83205d09 | |||
| 50095dbde3 | |||
| 72f3c5dff7 | |||
| 1e26f304b6 | |||
| e3753b9647 | |||
| b7fb972c6c | |||
| 7e68e15683 | |||
| 08d7095a6c |
@@ -30,11 +30,33 @@ ops-scripts/apply-flux.sh
|
||||
**sops / age:**
|
||||
|
||||
``` bash
|
||||
age-keygen -o deploy/clusters/prod/flux-system/.env.d/age.agekey
|
||||
cat deploy/clusters/prod/flux-system/.env.d/age.agekey | \
|
||||
age-keygen -o deploy/flux/.env.d/age.agekey
|
||||
cat deploy/flux/.env.d/age.agekey | \
|
||||
kubectl create secret generic flux-sops-age \
|
||||
--namespace=git-limbosolutions-com \
|
||||
--from-file=age.agekey=/dev/stdin
|
||||
|
||||
cat deploy/flux/.env.d/age.agekey | \
|
||||
kubectl create secret generic flux-sops-age \
|
||||
--namespace=kb-cicd \
|
||||
--from-file=age.agekey=/dev/stdin
|
||||
|
||||
cat deploy/flux/.env.d/age.agekey | \
|
||||
kubectl create secret generic flux-sops-age \
|
||||
--namespace=limbosolutions-com-cicd \
|
||||
--from-file=age.agekey=/dev/stdin
|
||||
|
||||
cat deploy/flux/.env.d/age.agekey | \
|
||||
kubectl create secret generic flux-sops-age \
|
||||
--namespace=mf-cicd \
|
||||
--from-file=age.agekey=/dev/stdin
|
||||
|
||||
|
||||
cat deploy/flux/.env.d/age.agekey | \
|
||||
kubectl create secret generic flux-sops-age \
|
||||
--namespace=mylimbo-com-cicd \
|
||||
--from-file=age.agekey=/dev/stdin
|
||||
|
||||
```
|
||||
|
||||
**Encrypt secrets:**
|
||||
@@ -42,6 +64,10 @@ kubectl create secret generic flux-sops-age \
|
||||
``` bash
|
||||
sops -e deploy/app/helm-values.private.dec.yaml > deploy/app/helm-values.private.yaml
|
||||
sops -e deploy/backups/secrets.dec.yaml > deploy/backups/secrets.yaml
|
||||
sops -e deploy/act-runners/kb/app/secrets.dec.yaml > deploy/act-runners/kb/app/secrets.yaml
|
||||
sops -e deploy/act-runners/limbosolutions-com/app/secrets.dec.yaml > deploy/act-runners/limbosolutions-com/app/secrets.yaml
|
||||
sops -e deploy/act-runners/mf/app/secrets.dec.yaml > deploy/act-runners/mf/app/secrets.yaml
|
||||
sops -e deploy/act-runners/myLimbo/app/secrets.dec.yaml > deploy/act-runners/myLimbo/app/secrets.yaml
|
||||
```
|
||||
|
||||
## Backups
|
||||
|
||||
@@ -1,13 +0,0 @@
|
||||
# kb - act-runner
|
||||
|
||||
**Deploy app:**
|
||||
|
||||
```bash
|
||||
./ops-scripts/apply-app.sh
|
||||
```
|
||||
|
||||
**Deploy Infra:**
|
||||
|
||||
```bash
|
||||
./ops-scripts/apply-infra.sh
|
||||
```
|
||||
@@ -0,0 +1,7 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: kb-cicd
|
||||
resources:
|
||||
- configmap.yaml
|
||||
- deployment.yaml
|
||||
- secrets.yaml
|
||||
@@ -0,0 +1,24 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: act-runner
|
||||
type: Opaque
|
||||
data:
|
||||
GITEA_INSTANCE_URL: ENC[AES256_GCM,data:hu+3h7SrBqcg6/vJGlhfPKr0Ba/3sPLMAcB41UNTNNnq4h4Zlmy1pw==,iv:lVuWe2qSB6IovHQS0x+0Em28WhWCqvYrXRLgoZ8mc7s=,tag:YDycHwytzyQAdNL7ohQN7g==,type:str]
|
||||
GITEA_RUNNER_NAME: ENC[AES256_GCM,data:YFBl0zauAt4c0pbGCmE6nw==,iv:AdNNfliMcV2cigwllAZDLf1FOELDLiZ1QQ6Sfxieos4=,tag:h943Vkz/pE3psHuAjmqowg==,type:str]
|
||||
GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:aYl9ACO+XTJyak6Zbij+iynn6Vjyk+c1jTca8nRqU1GcsBgTA1BtkOJB4xlEZSFZJD+xxh3bS6g=,iv:FV7a7KolBwfwyNpDC+FFU0COfVHvze2U/eVhXffjh9E=,tag:af5xpYsycoNFo4OhZrw8Jg==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUT1Q0emFPZnE5YlRhdTRD
|
||||
VU8rTVJOaXd5emZURk5wajFiWksrNXNLRzJVCkdEQjE1WXFkY21VWTMzL0w1TzFX
|
||||
N09tRWtjQitnblU1ZFE1TE5iQzFocFkKLS0tIGU1Ukh3Wk5aVk5ZbWh4RVdIc2p1
|
||||
clJSQ09mUU5LdnR4VTFBUDY2OGpUblkKfwkVzWWmQ3GUbMLzeIs7ai/qJn0gHPpa
|
||||
CEXd9dMotRJ12cWawN4MdagRE1UL50GPy24rsGMXfqrNGsWnJP7y0Q==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
lastmodified: "2026-06-04T22:22:42Z"
|
||||
mac: ENC[AES256_GCM,data:BTJ6wKJotmvNMwP1SAqwwx3BPUkVoOmXCdvI0HTwQUWsS5y0X5fQLwW6wz46g7GgVMwuoH2SEEkIl27UViYNUM7ObYFgN3y1isBjE1Xhcp1rC7BqRqYPtQ5HHMTF1dAo1+eHBYUE9vvaud87FOvePAYiaez3dK/helvqlb7A41I=,iv:j2HOYSIlXdn3TQc936PYcmIA/6SIyVtNZVchtjCxrQU=,tag:eD9d5OIpI9V3mpo7DtsOzg==,type:str]
|
||||
version: 3.13.1
|
||||
@@ -1,2 +0,0 @@
|
||||
**
|
||||
!.gitignore
|
||||
@@ -1,14 +0,0 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- configmap.yaml
|
||||
- deployment.yaml
|
||||
|
||||
generatorOptions:
|
||||
disableNameSuffixHash: true
|
||||
|
||||
secretGenerator:
|
||||
- name: act-runner
|
||||
envs:
|
||||
- .env.d/.env
|
||||
|
||||
@@ -1,4 +0,0 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
NAMESPACE=kb-cicd
|
||||
kubectl kustomize deploy/app | kubectl --namespace ${NAMESPACE} apply -f -
|
||||
@@ -1,4 +0,0 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
NAMESPACE=kb-cicd
|
||||
kubectl create namespace ${NAMESPACE} || true
|
||||
@@ -1,13 +0,0 @@
|
||||
# limbosolutions.com - act-runner
|
||||
|
||||
**Deploy app:**
|
||||
|
||||
```bash
|
||||
./ops-scripts/apply-app.sh
|
||||
```
|
||||
|
||||
**Deploy Infra:**
|
||||
|
||||
```bash
|
||||
./ops-scripts/apply-infra.sh
|
||||
```
|
||||
@@ -0,0 +1,8 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: limbosolutions-com
|
||||
resources:
|
||||
- configmap.yaml
|
||||
- deployment.yaml
|
||||
- secrets.yaml
|
||||
|
||||
@@ -0,0 +1,24 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: act-runner
|
||||
type: Opaque
|
||||
data:
|
||||
GITEA_INSTANCE_URL: ENC[AES256_GCM,data:OPQWugTT+aXgNo2yy6LZ/QTs4U1CKkK/o4tR+gMNpQTLaLIPLquCDw==,iv:ZfBVdS2GKTy7DwjV7t8Fho2p1pDinfsEdwKtJ1z2o9k=,tag:x131kXwsOeE0ywOUsDE9fQ==,type:str]
|
||||
GITEA_RUNNER_NAME: ENC[AES256_GCM,data:f+3pB+TpYt8iyhhb49xva50VywtWlO0ST/v4OxPMEnxdugyz4BOVcg==,iv:ifniki5AG6VkKR3MFYOCF8G8yYrNrlq2oTgDzIDMD4E=,tag:cVOM6myolTbwczVBgrx1Qw==,type:str]
|
||||
GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:2yM7JegoIMFohpJlAj7KYMiwkYpVq4HgWcIjVbfpS07TwJa0cnuZ8kYb950An6vSKb8h27DuKjA=,iv:7mLiZYQ/HX/p8NU4mWB2P3nEUpxcsLOvP/3AcyFrhtU=,tag:UU+GSiTwtODbJNVUEmcR+A==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4anZFOG5VK2FnUGxEVkh0
|
||||
eGJ5QWNyanVGbEJicDJXY0tsTU1PdXdoTGxFCktnOW9jVHFQVjVRc0lLT0JTbUFN
|
||||
R3hiR0ZtUnAxc0NYeGUvNWF3SUt0cTgKLS0tIG11Qk93aDhOdGxBME1URERGazdz
|
||||
aFRzZGVKVjdjcUE5U0FoV1c3ZVE2QTAKC9RWFz1b31kBGLe9GJHHT+96xE3QPLRH
|
||||
PKHnlIaEfygSN1yss2LIgA6Ns05ge/hp4v/z3f1og+euKJdj10rd3w==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
lastmodified: "2026-06-04T22:22:42Z"
|
||||
mac: ENC[AES256_GCM,data:+bkTNhQqZvPOxiwgrDISexjvVbssqyxH6MV2grywZlZPxNXnCLnLSlFUx7J0L9DNefMQsOp6HvH0cz3cA6+I41g2SgjXWSxxQoIAvDbHH4e12bDAOchx4ZBIljTlmzIyWEgkH6DPPvha4PH8qMXjQPCJWE8rpUohj40QqjFgUCQ=,iv:st9SsBDbmZ2FVzPPDoLouJe1zn4zOW1d0tzS0fhc+3k=,tag:n3KH71UxmmjvwjWXU9aCKA==,type:str]
|
||||
version: 3.13.1
|
||||
@@ -1,2 +0,0 @@
|
||||
**
|
||||
!.gitignore
|
||||
@@ -1,14 +0,0 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- configmap.yaml
|
||||
- deployment.yaml
|
||||
|
||||
generatorOptions:
|
||||
disableNameSuffixHash: true
|
||||
|
||||
secretGenerator:
|
||||
- name: act-runner
|
||||
envs:
|
||||
- .env.d/.env
|
||||
|
||||
@@ -1,4 +0,0 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
NAMESPACE=limbosolutions-com-cicd
|
||||
kubectl kustomize deploy/app | kubectl --namespace ${NAMESPACE} apply -f -
|
||||
@@ -1,4 +0,0 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
NAMESPACE=limbosolutions-com-cicd
|
||||
kubectl create namespace ${NAMESPACE} || true
|
||||
@@ -1,13 +0,0 @@
|
||||
# mylimbo - act-runner
|
||||
|
||||
**Deploy app:**
|
||||
|
||||
```bash
|
||||
./ops-scripts/apply-app.sh
|
||||
```
|
||||
|
||||
**Deploy Infra:**
|
||||
|
||||
```bash
|
||||
./ops-scripts/apply-infra.sh
|
||||
```
|
||||
@@ -0,0 +1,9 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: mf-cicd
|
||||
resources:
|
||||
- configmap.yaml
|
||||
- deployment.yaml
|
||||
- secrets.yaml
|
||||
|
||||
|
||||
@@ -0,0 +1,24 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: act-runner
|
||||
type: Opaque
|
||||
data:
|
||||
GITEA_INSTANCE_URL: ENC[AES256_GCM,data:Obz1y5FaUsux2DjItdnJMG+rfF3vuO9o4wmpeOU2xxs70ijWUIoEyg==,iv:TLqspEhTvo8lGSGirZMeN0ikKyKmvsuJZ3s2ePL/Hv4=,tag:ju8t2qk2Dgz63Cgte0Wmxw==,type:str]
|
||||
GITEA_RUNNER_NAME: ENC[AES256_GCM,data:u9/zD8aDRx8OSXLZfRP8ww==,iv:tnO1oZGS1dCRGonL3KLaubUr1JtbJvaD7wjBcpCpL2Y=,tag:HtPlkQgSHKVE7Zndo+U2mA==,type:str]
|
||||
GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:9qfwY9IjXnOOFb8SsIJ0HCBv4KlTt1QNy20v59hZt+fPI688mrGpAhzbZfdZwRbAI74H/Gm5Hfk=,iv:q38chmaHIo4nSsDUhpBeFpszTdtwFEFOFIjPTdfNX5A=,tag:tCndZLIBo6RQXQN4V6tbCQ==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTk1JVDBJQURtd0VIMlc4
|
||||
WjR4UUp6cHExWC9CVE55UzJLT1ZNU3lFY0JBCnkvK0xvSHRuWi9mUHVMMU5LN3dQ
|
||||
Ujh3cU9pMkNKenRza1FyZjlWaW41T1EKLS0tIGx0WFlQSmtCc3VmWGhhdWNteC9S
|
||||
YTR3S3FpN0pjM29aNTA3NG9TYVE5VW8KguSIXnaxjzcAcvsJAnsz6VdpM6QJoWos
|
||||
5EO8pwi1KF6q/RNv9Qg8XWpenBNJJt4BUms6Lej6xcgntxIVc8Fx5A==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
lastmodified: "2026-06-04T22:26:34Z"
|
||||
mac: ENC[AES256_GCM,data:12FZB5VqHBDoFpatMhF9wHnseW5LAHRLDDxGQGkBqRbVEq1mWKzERAwBh7emeQvUNnIIAUU9OKjrVhboDPn3t2Te9/z70CIJ/UDoPql0DTxezN6ulL4EYfrhtQvs+4m3JTcAFaF5JWL8ogh46vIL9hxaibuSdi856MnR6Zpiw2Y=,iv:KbLpaU3es78wjEqgpwn1cqqIGQdRy+PDByoJhELlO0I=,tag:62rZQkGKWkgkxAglLqyjaw==,type:str]
|
||||
version: 3.13.1
|
||||
@@ -1,2 +0,0 @@
|
||||
**
|
||||
!.gitignore
|
||||
@@ -1,14 +0,0 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- configmap.yaml
|
||||
- deployment.yaml
|
||||
|
||||
generatorOptions:
|
||||
disableNameSuffixHash: true
|
||||
|
||||
secretGenerator:
|
||||
- name: act-runner
|
||||
envs:
|
||||
- .env.d/.env
|
||||
|
||||
@@ -1,4 +0,0 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
NAMESPACE=mf-cicd
|
||||
kubectl kustomize deploy/app | kubectl --namespace ${NAMESPACE} apply -f -
|
||||
@@ -1,4 +0,0 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
NAMESPACE=mf-cicd
|
||||
kubectl create namespace ${NAMESPACE} || true
|
||||
@@ -1,13 +0,0 @@
|
||||
# mylimbo - act-runner
|
||||
|
||||
**Deploy app:**
|
||||
|
||||
```bash
|
||||
./ops-scripts/apply-app.sh
|
||||
```
|
||||
|
||||
**Deploy Infra:**
|
||||
|
||||
```bash
|
||||
./ops-scripts/apply-infra.sh
|
||||
```
|
||||
@@ -0,0 +1,8 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: mylimbo-com-cicd
|
||||
resources:
|
||||
- configmap.yaml
|
||||
- deployment.yaml
|
||||
- secrets.yaml
|
||||
|
||||
@@ -0,0 +1,24 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: act-runner
|
||||
type: Opaque
|
||||
data:
|
||||
GITEA_INSTANCE_URL: ENC[AES256_GCM,data:BATws1oD1oaQehXZGiAWasKVWYlGUOB2xxdRe2+OdJds5LUdzXx4SA==,iv:6ox8QZJDhUdR8IVyOyk+nPa9c/lhlAYOb/pY/l+wOy0=,tag:nJVE3shYschhfhfFkwHQpQ==,type:str]
|
||||
GITEA_RUNNER_NAME: ENC[AES256_GCM,data:P7yDwNE/bSl34HfEqSwQNmIf9OLP4ayD,iv:kDcRIaeULPF5XckCqK6qlKpZBWw2cSyGHKaKQiGlzhk=,tag:kzynWwCu4brmVRoSCemtOA==,type:str]
|
||||
GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:P4yLgfdOTRscbU0QBaeGU4iZjHTazAAOtPzjAtinP196CFeJ177T58qU419WNSYZeutZB96Gzgw=,iv:YIbPzLSFMT+RlDkCuIfv2AkAk5v31cfmF/KRMBAV6kE=,tag:1htUmlUDedLXecT24wSIDQ==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4cEEyZmk3dnhPN2JxUytr
|
||||
WUtCMDlrK2pmb2xJSG8yaEVSZ3FsQkFaUWpJCk5iRjZtdFUvL1ZDdXlkUG5QWVNF
|
||||
NXFxSkQrQjJIQ3g5dmdGNXRzUEIrNUEKLS0tIEpzdlJuR1dQV2NMc1JvdmJOUlpm
|
||||
TVpYQlY0dDNTaTE5KzNzMUdQbXFnNnMK3uirf3+95s/D5bztGWphGOGJBl7BGGHh
|
||||
y4kwM4DzlZioy9sLT8DpEQJi9eazkwRCJfAw89HQML2waTzc3j8kDg==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
|
||||
encrypted_regex: ^(data|stringData)$
|
||||
lastmodified: "2026-06-04T22:31:22Z"
|
||||
mac: ENC[AES256_GCM,data:jJQJe1C0ebtg6n2nEQHaMgC31rGOfPRDtEeBwUaE3r7JxBqPZA9zLi91wMtO2ULTiTVzEVq4uKUo21JIozkdKFcBvO7sQUPgCcxJ9p67/2zyM499I03yq9EnruvV30qVcLm7Ts+mXOt3Hnbb4hj7MR5nYAszf2ZmHNNRNLSHGwg=,iv:yjgKkJT+HQReEks7aVn2Q9besmzvTwbiDtECriCRxwU=,tag:6hyb/r21vtUI03CfrcXo4Q==,type:str]
|
||||
version: 3.13.1
|
||||
@@ -1,2 +0,0 @@
|
||||
**
|
||||
!.gitignore
|
||||
@@ -1,14 +0,0 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- configmap.yaml
|
||||
- deployment.yaml
|
||||
|
||||
generatorOptions:
|
||||
disableNameSuffixHash: true
|
||||
|
||||
secretGenerator:
|
||||
- name: act-runner
|
||||
envs:
|
||||
- .env.d/.env
|
||||
|
||||
@@ -1,4 +0,0 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
NAMESPACE=mylimbo-com-cicd
|
||||
kubectl kustomize deploy/app | kubectl --namespace ${NAMESPACE} apply -f -
|
||||
@@ -1,4 +0,0 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
NAMESPACE=mylimbo-com-cicd
|
||||
kubectl create namespace ${NAMESPACE} || true
|
||||
@@ -0,0 +1,17 @@
|
||||
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
||||
kind: Kustomization
|
||||
metadata:
|
||||
name: act-runner-kb-sync
|
||||
namespace: kb-cicd
|
||||
spec:
|
||||
interval: 1m
|
||||
sourceRef:
|
||||
kind: GitRepository
|
||||
name: git-limbosolutions-com
|
||||
namespace: git-limbosolutions-com
|
||||
path: deploy/act-runners/kb/app
|
||||
prune: true
|
||||
decryption:
|
||||
provider: sops
|
||||
secretRef:
|
||||
name: flux-sops-age
|
||||
@@ -0,0 +1,17 @@
|
||||
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
||||
kind: Kustomization
|
||||
metadata:
|
||||
name: act-runner-sync
|
||||
namespace: limbosolutions-com-cicd
|
||||
spec:
|
||||
interval: 1m
|
||||
sourceRef:
|
||||
kind: GitRepository
|
||||
name: git-limbosolutions-com
|
||||
namespace: git-limbosolutions-com
|
||||
path: deploy/act-runners/limbosolutions-com/app
|
||||
prune: true
|
||||
decryption:
|
||||
provider: sops
|
||||
secretRef:
|
||||
name: flux-sops-age
|
||||
@@ -0,0 +1,17 @@
|
||||
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
||||
kind: Kustomization
|
||||
metadata:
|
||||
name: act-runner-sync
|
||||
namespace: mf-cicd
|
||||
spec:
|
||||
interval: 1m
|
||||
sourceRef:
|
||||
kind: GitRepository
|
||||
name: git-limbosolutions-com
|
||||
namespace: git-limbosolutions-com
|
||||
path: deploy/act-runners/mf/app
|
||||
prune: true
|
||||
decryption:
|
||||
provider: sops
|
||||
secretRef:
|
||||
name: flux-sops-age
|
||||
@@ -0,0 +1,17 @@
|
||||
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
||||
kind: Kustomization
|
||||
metadata:
|
||||
name: act-runner-sync
|
||||
namespace: mylimbo-com-cicd
|
||||
spec:
|
||||
interval: 1m
|
||||
sourceRef:
|
||||
kind: GitRepository
|
||||
name: git-limbosolutions-com
|
||||
namespace: git-limbosolutions-com
|
||||
path: deploy/act-runners/myLimbo/app
|
||||
prune: true
|
||||
decryption:
|
||||
provider: sops
|
||||
secretRef:
|
||||
name: flux-sops-age
|
||||
@@ -2,6 +2,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
|
||||
kind: Kustomization
|
||||
metadata:
|
||||
name: backups
|
||||
namespace: git-limbosolutions-com
|
||||
spec:
|
||||
interval: 1m
|
||||
sourceRef:
|
||||
|
||||
@@ -5,11 +5,17 @@ resources:
|
||||
- infra-sync.yaml
|
||||
- gitea-sync.yaml
|
||||
- backups-sync.yaml
|
||||
- act-runner-kb-sync.yaml
|
||||
- act-runner-limbosolutions-com-sync.yaml
|
||||
- act-runner-mf-sync.yaml
|
||||
- act-runner-myLimbo-sync.yaml
|
||||
secretGenerator:
|
||||
- name: flux-repo-ssh-credentials
|
||||
namespace: git-limbosolutions-com
|
||||
files:
|
||||
- "identity=./.env.d/flux-repo-ssh-key"
|
||||
- "known_hosts=./.env.d/flux-repo-ssh-known_hosts"
|
||||
- "pubkey=./.env.d/flux-repo-ssh-key.pub"
|
||||
|
||||
generatorOptions:
|
||||
disableNameSuffixHash: true
|
||||
@@ -2,6 +2,7 @@
|
||||
set -e
|
||||
echo "Executing infra deploy."
|
||||
|
||||
kubectl kustomize deploy/flux | kubectl -n git-limbosolutions-com apply -f -
|
||||
kubectl kustomize deploy/flux | kubectl apply -f -
|
||||
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user