feat(secrets): add initial configuration for FluxCD, including sealed secrets and Helm releases

This commit is contained in:
Janis Eccarius
2026-05-30 13:23:19 +02:00
parent cc038fbb27
commit dcdcaff3b0
31 changed files with 730 additions and 0 deletions
+12
View File
@@ -0,0 +1,12 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
# Seal each secret with the htwg-1 cluster key before uncommenting:
# kubectl -n nowchess create secret generic <name> ... --dry-run=client -o yaml \
# | kubeseal --controller-namespace kube-system -o yaml > secrets/nowchess/htwg-1-prod/<name>.yaml
resources:
- ../nowchess/htwg-1-prod/ghcr-pull-secret.yaml
- ../nowchess/htwg-1-prod/ncs-jwt-keys.yaml
- ../nowchess/htwg-1-prod/ncs-db-secrets.yaml
- ../nowchess/htwg-1-prod/ncs-internal-secret.yaml
- ../nowchess/htwg-1-prod/remotek6-certs.yaml
- ../postgres-tunnel/secret.yaml