189 Commits

Author	SHA1	Message	Date
Khue Doan	7b744b5e92	ci: get pipeline secrets from Vault	2022-05-14 20:59:15 +07:00
Khue Doan	0e351eb81b	fix(tekton): remove Terraform service account	2022-05-14 17:50:58 +07:00
Khue Doan	e710e5814b	fix(dex): remove hard coded values	2022-05-14 12:20:16 +07:00
Khue Doan	8abee08165	chore: remove outdated TODOs	2022-05-13 22:45:16 +07:00
Khue Doan	f721976b5b	fix(external-secrets): use the correct vault secret ref	2022-05-12 12:11:27 +07:00
Khue Doan	f4447a1a3f	fix(vault): update storage class name	2022-05-12 12:11:10 +07:00
Khue Doan	651084c346	fix(vault): disable internal TLS	2022-05-11 23:44:27 +07:00
Khue Doan	50b60fa580	fix(vault): update generate secrets job to use new token	2022-05-11 23:33:58 +07:00
Khue Doan	5a22615744	refactor(vault): switch to Vault Operator	2022-05-11 22:49:58 +07:00
Khue Doan	7f1d413d92	feat(vault): add auto init job	2022-05-10 09:52:40 +07:00
Khue Doan	683282cd76	refactor(vault): disable Vault HA ... Still need manual unseal after rolling upgrade anyway	2022-05-08 22:10:55 +07:00
Khue Doan	4676650f59	refactor: switch config jobs to cron jobs	2022-05-08 21:20:07 +07:00
Khue Doan	295d43f579	refactor(vault): disable dev mode	2022-05-08 21:20:01 +07:00
Khue Doan	d94c5eb6dd	chore(external-secrets): upgrade API version to v1beta1	2022-05-08 11:41:16 +07:00
Khue Doan	5b410ceb1d	refactor(platform): replace Authentik with Dex	2022-05-07 11:55:29 +07:00
Khue Doan	71b0217a54	feat: add app name and icon for all ingress	2022-05-04 09:17:42 +07:00
Khue Doan	96216b36f3	refactor(tekton): move external tasks to .tekton	2022-04-17 12:25:26 +07:00
Khue Doan	3f8d910c4d	refactor(renovate): reduce update frequency	2022-03-24 11:08:42 +07:00
Khue Doan	4e8de6307d	refactor(renovate): get token from Vault	2022-03-24 10:51:17 +07:00
Khue Doan	99054d90c5	fix(gitea): add missing config source (again)	2022-03-24 10:16:45 +07:00
Khue Doan	01bb22cfdd	Revert "fix(gitea): add missing config source" ... This reverts commit 2748c86e5a.	2022-03-24 10:16:20 +07:00
Khue Doan	2748c86e5a	fix(gitea): add missing config source	2022-03-24 09:58:19 +07:00
Khue Doan	134c0b4902	refactor(gitea)!: switch init job to structured config as code	2022-03-24 09:54:26 +07:00
Renovate Bot	86807062b2	chore(deps): update all non-major dependencies helm releases	2022-03-23 15:07:13 +00:00
Khue Doan	3f45a5f527	feat(gitea): create or migrate repo depending on config	2022-03-22 13:47:57 +07:00
Khue Doan	f52cca560a	feat(gitea): read config from file	2022-03-22 13:08:58 +07:00
Khue Doan	ad180d24de	feat(gitea): POC config as code (WIP)	2022-03-22 12:39:22 +07:00
Khue Doan	c0375483f8	feat(gitea): basic config structure in Go	2022-03-15 00:30:17 +07:00
Khue Doan	b5b821f3b4	feat(gitea): initial config as code structure	2022-03-14 23:22:54 +07:00
Khue Doan	1dec81df4a	fix(gitea): get admin secret from new source	2022-03-10 00:36:41 +07:00
Khue Doan	a8e6189c85	refactor(vault): use address and token from env vars	2022-03-10 00:32:48 +07:00
Khue Doan	9341f436ab	fix(vault): add go.sum back ... Volume mount from config map is read-only	2022-03-10 00:29:45 +07:00
Khue Doan	3159e37302	Revert "chore: ignore go.sum" ... This reverts commit 082ae89d34.	2022-03-10 00:29:24 +07:00
Khue Doan	7ab20db660	fix(vault): update go.mod	2022-03-10 00:18:00 +07:00
Khue Doan	dded29b0bd	feat(vault): add Job to generate secrets	2022-03-10 00:13:47 +07:00
Khue Doan	6b11f7f142	fix(gitea): update correct secret path	2022-03-09 01:09:05 +07:00
Khue Doan	60b2a3e0fa	feat(vault): read random secrets config from file instead	2022-03-09 01:05:51 +07:00
Khue Doan	391ce26c63	refactor(vault): change random secret config structure	2022-03-09 01:00:51 +07:00
Khue Doan	be9817458c	feat(vault): add sample random secrets config	2022-03-03 02:54:54 +07:00
Khue Doan	4dec742406	feat(vault): generate secrets from yaml input	2022-03-03 02:37:11 +07:00
Khue Doan	19f9d44f70	feat(vault): create random secret if not exists (WIP)	2022-03-01 02:18:45 +07:00
Khue Doan	082ae89d34	chore: ignore go.sum	2022-02-27 14:07:43 +07:00
Khue Doan	f504955392	style(vault): format go mod	2022-02-27 14:05:57 +07:00
Khue Doan	e86708536a	chore(external-secrets): add test vault token as well ... Will remove later	2022-02-27 13:20:00 +07:00
Khue Doan	c290a32d96	feat(vault): initial random secret generation	2022-02-26 21:48:03 +07:00
Khue Doan	ab795ab34b	fix(gitea): use template engine v2 for external secret	2022-02-26 11:46:50 +07:00
Khue Doan	d6ea436368	fix(gitea): remove .data prefix in template	2022-02-26 11:42:30 +07:00
Khue Doan	1764039b9f	fix(gitea): escape curly braces	2022-02-26 11:29:09 +07:00
Khue Doan	e5f35f3640	fix(gitea): add missing password template in data	2022-02-26 11:21:34 +07:00
Khue Doan	552feda283	fix(gitea): add missing property for admin secret ref	2022-02-26 10:50:20 +07:00