Commit Graph

201 Commits

Author SHA1 Message Date
Khue Doan
3b7e8f1688 chore: upgrade Go version of config jobs to 1.19 2022-12-29 23:22:47 +07:00
Khue Doan
5cb5f822aa chore(external-secrets): upgrade to latest version 2022-12-24 14:22:45 +07:00
Khue Doan
ddeb169f7b refactor(renovate): change schedule to daily 2022-08-29 14:23:51 +07:00
Khue Doan
8447502d54 feat: add ZeroTier for remote access
- Fully open source
- Has free hosted version (my.zerotier.com)
- Can be automated with Terraform
- Pretty good performance with UDP hole punching
2022-08-29 14:01:25 +07:00
Khue Doan
65c33f886c docs: add more secrets management details 2022-07-24 00:14:12 +07:00
Khue Doan
d06470c3ea fix: skip new config job run if previous job run hasn't finished yet 2022-07-20 23:12:01 +07:00
Khue Doan
868f53c7d0 Revert "feat: install Keycloak Operator"
This reverts commit 405b3a7eee.
2022-07-06 13:07:05 +07:00
Khue Doan
952db7cbde fix(keycloak): set replica count 2022-06-18 01:48:44 +07:00
Khue Doan
0d405ddbb6 feat(keycloak): deploy Keycloak cluster 2022-06-18 00:49:25 +07:00
Khue Doan
9743cd4ada refactor(keycloak): use release channel 2022-06-18 00:28:53 +07:00
Khue Doan
405b3a7eee feat: install Keycloak Operator 2022-06-18 00:04:23 +07:00
Elliot Blackburn
a22829a060
chore(external-secrets): upgrade to 0.5.6 (#66)
0.5.2 had an issue where if the value was not found in vault there would be a panic from a nil pointer reference. This was fixed in 0.5.3 but the latest is 0.5.6 so I tested that and all seems to work well.
2022-06-08 20:23:26 +07:00
Khue Doan
7b744b5e92 ci: get pipeline secrets from Vault 2022-05-14 20:59:15 +07:00
Khue Doan
0e351eb81b fix(tekton): remove Terraform service account 2022-05-14 17:50:58 +07:00
Khue Doan
e710e5814b fix(dex): remove hard coded values 2022-05-14 12:20:16 +07:00
Khue Doan
8abee08165 chore: remove outdated TODOs 2022-05-13 22:45:16 +07:00
Khue Doan
f721976b5b fix(external-secrets): use the correct vault secret ref 2022-05-12 12:11:27 +07:00
Khue Doan
f4447a1a3f fix(vault): update storage class name 2022-05-12 12:11:10 +07:00
Khue Doan
651084c346 fix(vault): disable internal TLS 2022-05-11 23:44:27 +07:00
Khue Doan
50b60fa580 fix(vault): update generate secrets job to use new token 2022-05-11 23:33:58 +07:00
Khue Doan
5a22615744 refactor(vault): switch to Vault Operator 2022-05-11 22:49:58 +07:00
Khue Doan
7f1d413d92 feat(vault): add auto init job 2022-05-10 09:52:40 +07:00
Khue Doan
683282cd76 refactor(vault): disable Vault HA
Still need manual unseal after rolling upgrade anyway
2022-05-08 22:10:55 +07:00
Khue Doan
4676650f59 refactor: switch config jobs to cron jobs 2022-05-08 21:20:07 +07:00
Khue Doan
295d43f579 refactor(vault): disable dev mode 2022-05-08 21:20:01 +07:00
Khue Doan
d94c5eb6dd chore(external-secrets): upgrade API version to v1beta1 2022-05-08 11:41:16 +07:00
Khue Doan
5b410ceb1d refactor(platform): replace Authentik with Dex 2022-05-07 11:55:29 +07:00
Khue Doan
71b0217a54 feat: add app name and icon for all ingress 2022-05-04 09:17:42 +07:00
Khue Doan
96216b36f3 refactor(tekton): move external tasks to .tekton 2022-04-17 12:25:26 +07:00
Khue Doan
3f8d910c4d refactor(renovate): reduce update frequency 2022-03-24 11:08:42 +07:00
Khue Doan
4e8de6307d refactor(renovate): get token from Vault 2022-03-24 10:51:17 +07:00
Khue Doan
99054d90c5 fix(gitea): add missing config source (again) 2022-03-24 10:16:45 +07:00
Khue Doan
01bb22cfdd Revert "fix(gitea): add missing config source"
This reverts commit 2748c86e5a.
2022-03-24 10:16:20 +07:00
Khue Doan
2748c86e5a fix(gitea): add missing config source 2022-03-24 09:58:19 +07:00
Khue Doan
134c0b4902 refactor(gitea)!: switch init job to structured config as code 2022-03-24 09:54:26 +07:00
Renovate Bot
86807062b2 chore(deps): update all non-major dependencies helm releases 2022-03-23 15:07:13 +00:00
Khue Doan
3f45a5f527 feat(gitea): create or migrate repo depending on config 2022-03-22 13:47:57 +07:00
Khue Doan
f52cca560a feat(gitea): read config from file 2022-03-22 13:08:58 +07:00
Khue Doan
ad180d24de feat(gitea): POC config as code (WIP) 2022-03-22 12:39:22 +07:00
Khue Doan
c0375483f8 feat(gitea): basic config structure in Go 2022-03-15 00:30:17 +07:00
Khue Doan
b5b821f3b4 feat(gitea): initial config as code structure 2022-03-14 23:22:54 +07:00
Khue Doan
1dec81df4a fix(gitea): get admin secret from new source 2022-03-10 00:36:41 +07:00
Khue Doan
a8e6189c85 refactor(vault): use address and token from env vars 2022-03-10 00:32:48 +07:00
Khue Doan
9341f436ab fix(vault): add go.sum back
Volume mount from config map is read-only
2022-03-10 00:29:45 +07:00
Khue Doan
3159e37302 Revert "chore: ignore go.sum"
This reverts commit 082ae89d34.
2022-03-10 00:29:24 +07:00
Khue Doan
7ab20db660 fix(vault): update go.mod 2022-03-10 00:18:00 +07:00
Khue Doan
dded29b0bd feat(vault): add Job to generate secrets 2022-03-10 00:13:47 +07:00
Khue Doan
6b11f7f142 fix(gitea): update correct secret path 2022-03-09 01:09:05 +07:00
Khue Doan
60b2a3e0fa feat(vault): read random secrets config from file instead 2022-03-09 01:05:51 +07:00
Khue Doan
391ce26c63 refactor(vault): change random secret config structure 2022-03-09 01:00:51 +07:00