Khue Doan
3b7e8f1688
chore: upgrade Go version of config jobs to 1.19
2022-12-29 23:22:47 +07:00
Khue Doan
5cb5f822aa
chore(external-secrets): upgrade to latest version
2022-12-24 14:22:45 +07:00
Khue Doan
ddeb169f7b
refactor(renovate): change schedule to daily
2022-08-29 14:23:51 +07:00
Khue Doan
8447502d54
feat: add ZeroTier for remote access
...
- Fully open source
- Has free hosted version (my.zerotier.com)
- Can be automated with Terraform
- Pretty good performance with UDP hole punching
2022-08-29 14:01:25 +07:00
Khue Doan
65c33f886c
docs: add more secrets management details
2022-07-24 00:14:12 +07:00
Khue Doan
d06470c3ea
fix: skip new config job run if previous job run hasn't finished yet
2022-07-20 23:12:01 +07:00
Khue Doan
868f53c7d0
Revert "feat: install Keycloak Operator"
...
This reverts commit 405b3a7eee
.
2022-07-06 13:07:05 +07:00
Khue Doan
952db7cbde
fix(keycloak): set replica count
2022-06-18 01:48:44 +07:00
Khue Doan
0d405ddbb6
feat(keycloak): deploy Keycloak cluster
2022-06-18 00:49:25 +07:00
Khue Doan
9743cd4ada
refactor(keycloak): use release channel
2022-06-18 00:28:53 +07:00
Khue Doan
405b3a7eee
feat: install Keycloak Operator
2022-06-18 00:04:23 +07:00
Elliot Blackburn
a22829a060
chore(external-secrets): upgrade to 0.5.6 ( #66 )
...
0.5.2 had an issue where if the value was not found in vault there would be a panic from a nil pointer reference. This was fixed in 0.5.3 but the latest is 0.5.6 so I tested that and all seems to work well.
2022-06-08 20:23:26 +07:00
Khue Doan
7b744b5e92
ci: get pipeline secrets from Vault
2022-05-14 20:59:15 +07:00
Khue Doan
0e351eb81b
fix(tekton): remove Terraform service account
2022-05-14 17:50:58 +07:00
Khue Doan
e710e5814b
fix(dex): remove hard coded values
2022-05-14 12:20:16 +07:00
Khue Doan
8abee08165
chore: remove outdated TODOs
2022-05-13 22:45:16 +07:00
Khue Doan
f721976b5b
fix(external-secrets): use the correct vault secret ref
2022-05-12 12:11:27 +07:00
Khue Doan
f4447a1a3f
fix(vault): update storage class name
2022-05-12 12:11:10 +07:00
Khue Doan
651084c346
fix(vault): disable internal TLS
2022-05-11 23:44:27 +07:00
Khue Doan
50b60fa580
fix(vault): update generate secrets job to use new token
2022-05-11 23:33:58 +07:00
Khue Doan
5a22615744
refactor(vault): switch to Vault Operator
2022-05-11 22:49:58 +07:00
Khue Doan
7f1d413d92
feat(vault): add auto init job
2022-05-10 09:52:40 +07:00
Khue Doan
683282cd76
refactor(vault): disable Vault HA
...
Still need manual unseal after rolling upgrade anyway
2022-05-08 22:10:55 +07:00
Khue Doan
4676650f59
refactor: switch config jobs to cron jobs
2022-05-08 21:20:07 +07:00
Khue Doan
295d43f579
refactor(vault): disable dev mode
2022-05-08 21:20:01 +07:00
Khue Doan
d94c5eb6dd
chore(external-secrets): upgrade API version to v1beta1
2022-05-08 11:41:16 +07:00
Khue Doan
5b410ceb1d
refactor(platform): replace Authentik with Dex
2022-05-07 11:55:29 +07:00
Khue Doan
71b0217a54
feat: add app name and icon for all ingress
2022-05-04 09:17:42 +07:00
Khue Doan
96216b36f3
refactor(tekton): move external tasks to .tekton
2022-04-17 12:25:26 +07:00
Khue Doan
3f8d910c4d
refactor(renovate): reduce update frequency
2022-03-24 11:08:42 +07:00
Khue Doan
4e8de6307d
refactor(renovate): get token from Vault
2022-03-24 10:51:17 +07:00
Khue Doan
99054d90c5
fix(gitea): add missing config source (again)
2022-03-24 10:16:45 +07:00
Khue Doan
01bb22cfdd
Revert "fix(gitea): add missing config source"
...
This reverts commit 2748c86e5a
.
2022-03-24 10:16:20 +07:00
Khue Doan
2748c86e5a
fix(gitea): add missing config source
2022-03-24 09:58:19 +07:00
Khue Doan
134c0b4902
refactor(gitea)!: switch init job to structured config as code
2022-03-24 09:54:26 +07:00
Renovate Bot
86807062b2
chore(deps): update all non-major dependencies helm releases
2022-03-23 15:07:13 +00:00
Khue Doan
3f45a5f527
feat(gitea): create or migrate repo depending on config
2022-03-22 13:47:57 +07:00
Khue Doan
f52cca560a
feat(gitea): read config from file
2022-03-22 13:08:58 +07:00
Khue Doan
ad180d24de
feat(gitea): POC config as code (WIP)
2022-03-22 12:39:22 +07:00
Khue Doan
c0375483f8
feat(gitea): basic config structure in Go
2022-03-15 00:30:17 +07:00
Khue Doan
b5b821f3b4
feat(gitea): initial config as code structure
2022-03-14 23:22:54 +07:00
Khue Doan
1dec81df4a
fix(gitea): get admin secret from new source
2022-03-10 00:36:41 +07:00
Khue Doan
a8e6189c85
refactor(vault): use address and token from env vars
2022-03-10 00:32:48 +07:00
Khue Doan
9341f436ab
fix(vault): add go.sum back
...
Volume mount from config map is read-only
2022-03-10 00:29:45 +07:00
Khue Doan
3159e37302
Revert "chore: ignore go.sum"
...
This reverts commit 082ae89d34
.
2022-03-10 00:29:24 +07:00
Khue Doan
7ab20db660
fix(vault): update go.mod
2022-03-10 00:18:00 +07:00
Khue Doan
dded29b0bd
feat(vault): add Job to generate secrets
2022-03-10 00:13:47 +07:00
Khue Doan
6b11f7f142
fix(gitea): update correct secret path
2022-03-09 01:09:05 +07:00
Khue Doan
60b2a3e0fa
feat(vault): read random secrets config from file instead
2022-03-09 01:05:51 +07:00
Khue Doan
391ce26c63
refactor(vault): change random secret config structure
2022-03-09 01:00:51 +07:00