40 Commits

Author	SHA1	Message	Date
Khue Doan	65c33f886c	docs: add more secrets management details	2022-07-24 00:14:12 +07:00
Khue Doan	d06470c3ea	fix: skip new config job run if previous job run hasn't finished yet	2022-07-20 23:12:01 +07:00
Khue Doan	7b744b5e92	ci: get pipeline secrets from Vault	2022-05-14 20:59:15 +07:00
Khue Doan	e710e5814b	fix(dex): remove hard coded values	2022-05-14 12:20:16 +07:00
Khue Doan	8abee08165	chore: remove outdated TODOs	2022-05-13 22:45:16 +07:00
Khue Doan	f4447a1a3f	fix(vault): update storage class name	2022-05-12 12:11:10 +07:00
Khue Doan	651084c346	fix(vault): disable internal TLS	2022-05-11 23:44:27 +07:00
Khue Doan	50b60fa580	fix(vault): update generate secrets job to use new token	2022-05-11 23:33:58 +07:00
Khue Doan	5a22615744	refactor(vault): switch to Vault Operator	2022-05-11 22:49:58 +07:00
Khue Doan	7f1d413d92	feat(vault): add auto init job	2022-05-10 09:52:40 +07:00
Khue Doan	683282cd76	refactor(vault): disable Vault HA ... Still need manual unseal after rolling upgrade anyway	2022-05-08 22:10:55 +07:00
Khue Doan	4676650f59	refactor: switch config jobs to cron jobs	2022-05-08 21:20:07 +07:00
Khue Doan	295d43f579	refactor(vault): disable dev mode	2022-05-08 21:20:01 +07:00
Khue Doan	71b0217a54	feat: add app name and icon for all ingress	2022-05-04 09:17:42 +07:00
Khue Doan	01bb22cfdd	Revert "fix(gitea): add missing config source" ... This reverts commit 2748c86e5a.	2022-03-24 10:16:20 +07:00
Khue Doan	2748c86e5a	fix(gitea): add missing config source	2022-03-24 09:58:19 +07:00
Khue Doan	a8e6189c85	refactor(vault): use address and token from env vars	2022-03-10 00:32:48 +07:00
Khue Doan	9341f436ab	fix(vault): add go.sum back ... Volume mount from config map is read-only	2022-03-10 00:29:45 +07:00
Khue Doan	3159e37302	Revert "chore: ignore go.sum" ... This reverts commit 082ae89d34.	2022-03-10 00:29:24 +07:00
Khue Doan	7ab20db660	fix(vault): update go.mod	2022-03-10 00:18:00 +07:00
Khue Doan	dded29b0bd	feat(vault): add Job to generate secrets	2022-03-10 00:13:47 +07:00
Khue Doan	60b2a3e0fa	feat(vault): read random secrets config from file instead	2022-03-09 01:05:51 +07:00
Khue Doan	391ce26c63	refactor(vault): change random secret config structure	2022-03-09 01:00:51 +07:00
Khue Doan	be9817458c	feat(vault): add sample random secrets config	2022-03-03 02:54:54 +07:00
Khue Doan	4dec742406	feat(vault): generate secrets from yaml input	2022-03-03 02:37:11 +07:00
Khue Doan	19f9d44f70	feat(vault): create random secret if not exists (WIP)	2022-03-01 02:18:45 +07:00
Khue Doan	082ae89d34	chore: ignore go.sum	2022-02-27 14:07:43 +07:00
Khue Doan	f504955392	style(vault): format go mod	2022-02-27 14:05:57 +07:00
Khue Doan	c290a32d96	feat(vault): initial random secret generation	2022-02-26 21:48:03 +07:00
Renovate Bot	d6a8495767	chore(deps): update all non-major dependencies helm releases	2022-01-27 18:19:34 +00:00
Khue Doan	8b31c9e9e2	fix(vault): set storage class explicitly	2022-01-22 19:21:30 +07:00
Khue Doan	bb356a41de	Revert "refactor(vault): disable dev mode" ... This reverts commit e839a96bfb. Still not ready yet	2022-01-22 08:59:57 +07:00
Khue Doan	e839a96bfb	refactor(vault): disable dev mode ... Get ready for auto init	2022-01-19 18:46:00 +07:00
Khue Doan	bde8724284	style: format YAMLs to fix yamllint	2021-12-26 12:36:14 +07:00
Khue Doan	a9f8adf746	style: use YAML anchors for all ingress hosts	2021-12-16 21:02:13 +07:00
Khue Doan	b2b5179df9	feat: switch all ingress to to letsencrypt-prod	2021-12-05 17:43:32 +07:00
Khue Doan	7c37cdb22d	feat: switch all ingress to to letsencrypt-staging	2021-12-05 17:11:00 +07:00
Khue Doan	03ac8ebc7d	fix: set ingress class explicitly	2021-11-29 21:16:27 +07:00
Khue Doan	34d2f02d3b	chore(platform): upgrade Vault to latest version	2021-11-17 20:53:08 +07:00
Khue Doan	2405f87a57	feat(platform): add vault back with dev mode on	2021-09-28 23:38:40 +07:00