Compare commits
3
Commits
f5c254eab4
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
44d921b670 | ||
|
|
269970d54d | ||
|
|
51a9570aa3 |
No files matched your search
@@ -1,3 +0,0 @@
|
|||||||
# Chimera - cluster
|
|
||||||
|
|
||||||
It is not this repo/kustomization’s responsibility to deploy the alloy - Age private key — that responsibility belongs to the Chimera repository.
|
|
||||||
@@ -1,11 +0,0 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
resources:
|
|
||||||
- monitoring
|
|
||||||
- repos
|
|
||||||
- nodes-mngt
|
|
||||||
generatorOptions:
|
|
||||||
disableNameSuffixHash: true
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
@@ -1,16 +0,0 @@
|
|||||||
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
||||||
kind: Kustomization
|
|
||||||
metadata:
|
|
||||||
name: myinfra-kubernetes-shared-monitoring
|
|
||||||
spec:
|
|
||||||
interval: 1m
|
|
||||||
sourceRef:
|
|
||||||
kind: GitRepository
|
|
||||||
name: myinfra-kubernetes-shared
|
|
||||||
namespace: chimera-limbosolutions-com
|
|
||||||
path: monitoring/overlays/chimera
|
|
||||||
prune: true
|
|
||||||
decryption:
|
|
||||||
provider: sops
|
|
||||||
secretRef:
|
|
||||||
name: flux-sops-age
|
|
||||||
@@ -1,10 +0,0 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
namespace: monitoring
|
|
||||||
resources:
|
|
||||||
- fluxcd-kustomization.yaml
|
|
||||||
generatorOptions:
|
|
||||||
disableNameSuffixHash: true
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
namespace: chimera-limbosolutions-com
|
|
||||||
resources:
|
|
||||||
- repos.yaml
|
|
||||||
generatorOptions:
|
|
||||||
disableNameSuffixHash: true
|
|
||||||
|
|
||||||
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
apiVersion: source.toolkit.fluxcd.io/v1
|
|
||||||
kind: GitRepository
|
|
||||||
metadata:
|
|
||||||
name: myinfra-kubernetes-shared
|
|
||||||
spec:
|
|
||||||
interval: 1m0s
|
|
||||||
url: https://git.limbosolutions.com/myLimbo/myinfra.kubernetes.shared.git
|
|
||||||
ref:
|
|
||||||
branch: main
|
|
||||||
+14
-12
@@ -17,6 +17,7 @@ spec:
|
|||||||
- name: inventory_image_reference
|
- name: inventory_image_reference
|
||||||
- name: ansible_secret_name
|
- name: ansible_secret_name
|
||||||
- name: tbot_configmap_name
|
- name: tbot_configmap_name
|
||||||
|
- name: ssh_domain
|
||||||
script:
|
script:
|
||||||
image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest
|
image: oci.limbosolutions.com/public/mylimbo.ansible.collections.global:latest
|
||||||
source: |
|
source: |
|
||||||
@@ -25,20 +26,21 @@ spec:
|
|||||||
tbot start --config=/etc/tbot/tbot.yaml --oneshot
|
tbot start --config=/etc/tbot/tbot.yaml --oneshot
|
||||||
{{ inputs.parameters.source }}
|
{{ inputs.parameters.source }}
|
||||||
env:
|
env:
|
||||||
- name: ANSIBLE_VAULT_PASSWORD_FILE
|
- name: ANSIBLE_VAULT_PASSWORD_FILE
|
||||||
value: /workspace/secrets/vault_password
|
value: /workspace/secrets/ansible_vault_password
|
||||||
|
|
||||||
|
- name: ANSIBLE_SSH_ARGS
|
||||||
|
value: -F /opt/machine-id/ssh_config
|
||||||
|
|
||||||
- name: ANSIBLE_SSH_ARGS
|
- name: ANSIBLE_BECOME_PASS
|
||||||
value: -F /opt/machine-id/ssh_config
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
- name: SSH_DOMAIN
|
name: "{{ inputs.parameters.ansible_secret_name }}"
|
||||||
value: teleport.limbosolutions.com
|
key: ansible_become_password
|
||||||
|
|
||||||
|
- name: SSH_DOMAIN
|
||||||
|
value: "{{ inputs.parameters.ssh_domain }}"
|
||||||
|
|
||||||
- name: ANSIBLE_BECOME_PASS
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: "{{ inputs.parameters.ansible_secret_name }}"
|
|
||||||
key: ansible_become_password
|
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
memory: "512Mi"
|
memory: "512Mi"
|
||||||
|
|||||||
Reference in new issue
Block a user