Khue Doan
|
f721976b5b
|
fix(external-secrets): use the correct vault secret ref
|
2022-05-12 12:11:27 +07:00 |
|
Khue Doan
|
f4447a1a3f
|
fix(vault): update storage class name
|
2022-05-12 12:11:10 +07:00 |
|
Khue Doan
|
651084c346
|
fix(vault): disable internal TLS
|
2022-05-11 23:44:27 +07:00 |
|
Khue Doan
|
50b60fa580
|
fix(vault): update generate secrets job to use new token
|
2022-05-11 23:33:58 +07:00 |
|
Khue Doan
|
5a22615744
|
refactor(vault): switch to Vault Operator
|
2022-05-11 22:49:58 +07:00 |
|
Khue Doan
|
7f1d413d92
|
feat(vault): add auto init job
|
2022-05-10 09:52:40 +07:00 |
|
Khue Doan
|
683282cd76
|
refactor(vault): disable Vault HA
Still need manual unseal after rolling upgrade anyway
|
2022-05-08 22:10:55 +07:00 |
|
Khue Doan
|
4676650f59
|
refactor: switch config jobs to cron jobs
|
2022-05-08 21:20:07 +07:00 |
|
Khue Doan
|
295d43f579
|
refactor(vault): disable dev mode
|
2022-05-08 21:20:01 +07:00 |
|
Khue Doan
|
d94c5eb6dd
|
chore(external-secrets): upgrade API version to v1beta1
|
2022-05-08 11:41:16 +07:00 |
|
Khue Doan
|
5b410ceb1d
|
refactor(platform): replace Authentik with Dex
|
2022-05-07 11:55:29 +07:00 |
|
Khue Doan
|
71b0217a54
|
feat: add app name and icon for all ingress
|
2022-05-04 09:17:42 +07:00 |
|
Khue Doan
|
96216b36f3
|
refactor(tekton): move external tasks to .tekton
|
2022-04-17 12:25:26 +07:00 |
|
Khue Doan
|
3f8d910c4d
|
refactor(renovate): reduce update frequency
|
2022-03-24 11:08:42 +07:00 |
|
Khue Doan
|
4e8de6307d
|
refactor(renovate): get token from Vault
|
2022-03-24 10:51:17 +07:00 |
|
Khue Doan
|
99054d90c5
|
fix(gitea): add missing config source (again)
|
2022-03-24 10:16:45 +07:00 |
|
Khue Doan
|
01bb22cfdd
|
Revert "fix(gitea): add missing config source"
This reverts commit 2748c86e5a .
|
2022-03-24 10:16:20 +07:00 |
|
Khue Doan
|
2748c86e5a
|
fix(gitea): add missing config source
|
2022-03-24 09:58:19 +07:00 |
|
Khue Doan
|
134c0b4902
|
refactor(gitea)!: switch init job to structured config as code
|
2022-03-24 09:54:26 +07:00 |
|
Renovate Bot
|
86807062b2
|
chore(deps): update all non-major dependencies helm releases
|
2022-03-23 15:07:13 +00:00 |
|
Khue Doan
|
3f45a5f527
|
feat(gitea): create or migrate repo depending on config
|
2022-03-22 13:47:57 +07:00 |
|
Khue Doan
|
f52cca560a
|
feat(gitea): read config from file
|
2022-03-22 13:08:58 +07:00 |
|
Khue Doan
|
ad180d24de
|
feat(gitea): POC config as code (WIP)
|
2022-03-22 12:39:22 +07:00 |
|
Khue Doan
|
c0375483f8
|
feat(gitea): basic config structure in Go
|
2022-03-15 00:30:17 +07:00 |
|
Khue Doan
|
b5b821f3b4
|
feat(gitea): initial config as code structure
|
2022-03-14 23:22:54 +07:00 |
|
Khue Doan
|
1dec81df4a
|
fix(gitea): get admin secret from new source
|
2022-03-10 00:36:41 +07:00 |
|
Khue Doan
|
a8e6189c85
|
refactor(vault): use address and token from env vars
|
2022-03-10 00:32:48 +07:00 |
|
Khue Doan
|
9341f436ab
|
fix(vault): add go.sum back
Volume mount from config map is read-only
|
2022-03-10 00:29:45 +07:00 |
|
Khue Doan
|
3159e37302
|
Revert "chore: ignore go.sum"
This reverts commit 082ae89d34 .
|
2022-03-10 00:29:24 +07:00 |
|
Khue Doan
|
7ab20db660
|
fix(vault): update go.mod
|
2022-03-10 00:18:00 +07:00 |
|
Khue Doan
|
dded29b0bd
|
feat(vault): add Job to generate secrets
|
2022-03-10 00:13:47 +07:00 |
|
Khue Doan
|
6b11f7f142
|
fix(gitea): update correct secret path
|
2022-03-09 01:09:05 +07:00 |
|
Khue Doan
|
60b2a3e0fa
|
feat(vault): read random secrets config from file instead
|
2022-03-09 01:05:51 +07:00 |
|
Khue Doan
|
391ce26c63
|
refactor(vault): change random secret config structure
|
2022-03-09 01:00:51 +07:00 |
|
Khue Doan
|
be9817458c
|
feat(vault): add sample random secrets config
|
2022-03-03 02:54:54 +07:00 |
|
Khue Doan
|
4dec742406
|
feat(vault): generate secrets from yaml input
|
2022-03-03 02:37:11 +07:00 |
|
Khue Doan
|
19f9d44f70
|
feat(vault): create random secret if not exists (WIP)
|
2022-03-01 02:18:45 +07:00 |
|
Khue Doan
|
082ae89d34
|
chore: ignore go.sum
|
2022-02-27 14:07:43 +07:00 |
|
Khue Doan
|
f504955392
|
style(vault): format go mod
|
2022-02-27 14:05:57 +07:00 |
|
Khue Doan
|
e86708536a
|
chore(external-secrets): add test vault token as well
Will remove later
|
2022-02-27 13:20:00 +07:00 |
|
Khue Doan
|
c290a32d96
|
feat(vault): initial random secret generation
|
2022-02-26 21:48:03 +07:00 |
|
Khue Doan
|
ab795ab34b
|
fix(gitea): use template engine v2 for external secret
|
2022-02-26 11:46:50 +07:00 |
|
Khue Doan
|
d6ea436368
|
fix(gitea): remove .data prefix in template
|
2022-02-26 11:42:30 +07:00 |
|
Khue Doan
|
1764039b9f
|
fix(gitea): escape curly braces
|
2022-02-26 11:29:09 +07:00 |
|
Khue Doan
|
e5f35f3640
|
fix(gitea): add missing password template in data
|
2022-02-26 11:21:34 +07:00 |
|
Khue Doan
|
552feda283
|
fix(gitea): add missing property for admin secret ref
|
2022-02-26 10:50:20 +07:00 |
|
Khue Doan
|
182a2d80b4
|
refactor(gitea)!: use admin secret from vault
|
2022-02-26 10:46:27 +07:00 |
|
Khue Doan
|
693893bcb2
|
feat(external-secrets): add test secret store
|
2022-02-26 10:37:25 +07:00 |
|
Khue Doan
|
adbb6ca247
|
feat(platform): install external secret operator
|
2022-02-26 09:28:46 +07:00 |
|
Khue Doan
|
81f0a94574
|
chore(deps): update all non-major dependencies
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [cloudflare](https://registry.terraform.io/providers/cloudflare/cloudflare) ([source](https://github.com/cloudflare/terraform-provider-cloudflare)) | required_provider | minor | `~> 3.7.0` -> `~> 3.8.0` |
| [dendrite](https://github.com/locmai/charts) | | patch | `0.0.1` -> `0.0.2` |
| [renovate](https://github.com/renovatebot/helm-charts) | | minor | `31.62.0` -> `31.63.2` |
⚠️ Release Notes retrieval for this PR were skipped because no github.com credentials were available.
If you are self-hosted, please see [this instruction](https://github.com/renovatebot/renovate/blob/master/docs/usage/examples/self-hosting.md#githubcom-token-for-release-notes).
---
📅 **Schedule**: At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, click this checkbox.
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
Reviewed-on: https://git.khuedoan.com/ops/homelab/pulls/2
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-committed-by: Renovate Bot <bot@renovateapp.com>
|
2022-01-31 23:21:52 +07:00 |
|