NowChess/GitOps
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
507 Commits 4 Branches 0 Tags
8f6ae5b69e868d861d3939c63cf3d42cc40626d4
Commit Graph

25 Commits

Author SHA1 Message Date
Janis Eccarius ec10c55094 chore: mode changes 2026-06-06 15:47:25 +02:00
Janis Eccarius 0dbcb1b0fa fix(secret): update INTERNAL_SECRET value in ncs-internal-secret 2026-06-02 00:28:17 +02:00
Janis Eccarius 48b11c5fcd fix(secret): update INTERNAL_SECRET value in ncs-internal-secret 2026-06-01 23:56:07 +02:00
Janis Eccarius 31a7d05804 fix(secret): update namespace from postgres to nowchess in ncs-internal-secret 2026-06-01 23:51:00 +02:00
Janis Eccarius 74a1fb8746 chore(secrets): updated secrets 2026-06-01 22:12:03 +02:00
Janis Eccarius 5d715f6c0c feat(promotion): add htwg-1-prod stage and update promotion policies 2026-05-30 15:33:27 +02:00
Janis Eccarius 821c7c256b feat(secrets): add sealed secret for GHCR image credentials 2026-05-30 15:08:03 +02:00
Janis Eccarius c530ee493b feat(secrets): add sealed secret for PostgreSQL credentials 2026-05-30 14:48:18 +02:00
Janis Eccarius 2d0c02b5e2 feat(secrets): add sealed secret for PostgreSQL credentials 2026-05-30 14:38:55 +02:00
Janis Eccarius e08bb654b5 feat(secrets): add sealed secrets for database and internal configurations 2026-05-30 14:35:06 +02:00
Janis Eccarius 1ed4fc4c33 feat(deploy): add scripts for k3d installation and SSH tunnel setup 2026-05-30 14:30:44 +02:00
Janis Eccarius dcdcaff3b0 feat(secrets): add initial configuration for FluxCD, including sealed secrets and Helm releases 2026-05-30 13:23:19 +02:00
Janis Eccarius 24b9c52e90 chore(secrets): delete duplicate sealed secret files 
git-pull-secret.yaml: duplicate of redis/github-pull-secret.yaml
gitea-secret.yaml: duplicate (empty creds) of nowchess/kargo/github-image-secret.yaml

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-30 12:42:23 +02:00
Janis Eccarius 63d0234f63 fix(secrets): remove duplicate git-pull-secret from kustomization 
github/git-pull-secret.yaml was sealed with redis namespace — same secret
as redis/github-pull-secret.yaml which was sealed from live cluster.
Keeping the correctly placed redis/ version.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-30 12:41:28 +02:00
Janis Eccarius afd88caf47 fix(secrets): remove duplicate gitea-secret from kustomization 
github-image-secret.yaml covers same name/namespace with real credentials.
gitea-secret.yaml had empty creds — was a placeholder.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-30 12:32:32 +02:00
Janis Eccarius d509ebec88 feat(secrets): seal cluster secrets missing from GitOps 
Sealed from live cluster state — no plaintext ever on disk:
- redis/github (dockerconfigjson pull secret)
- nowchess/remotek6-certs (prod, staging, kargo)

Added to kustomization:
- kargo/discord-webhook-secret
- nowchess/kargo/github-image-secret
- redis/github-pull-secret
- remotek6-certs for all three namespaces

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-30 12:29:18 +02:00
Janis Eccarius a40831d55f feat(secrets): update ghcr-pull-secret with new encrypted docker config for nowchess and nowchess-staging 2026-05-30 12:20:46 +02:00
Janis Eccarius 007846f09c fix(secrets): rename git-nowchess-image-secret to avoid duplicate SealedSecret id 2026-05-30 12:07:48 +02:00
Janis Eccarius 666aab1e70 feat(sealed-secrets): add multiple SealedSecrets for various services and configurations 2026-05-30 12:02:34 +02:00
Janis Eccarius a4d9c41c27 feat(secrets): migrate secrets to SealedSecrets format and update configurations 2026-05-30 11:55:49 +02:00
Janis 185bf8ceaf chore(secrets): clear postgres-tunnel secret value 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-30 11:01:20 +02:00
Janis 445bc23b75 feat(secrets): add postgres-tunnel secret to kustomization 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-30 11:01:03 +02:00
Janis 2022631f45 feat(nowchess): add Kargo project, Rollouts deployment, and secrets 
- 9 Kargo Warehouses (one per microservice), staging + prod stages
- PromotionTask: clone GitOps, kustomize-set-image, Gitea PR, ArgoCD sync
- BlueGreen Rollouts for all 9 services with health probes and envFrom
- staging,deployed / production,deployed Quarkus multi-profile support
- CORS_ORIGINS and QUARKUS_PROFILE injected via nowchess-env-config ConfigMap
- Plain K8s Secrets with empty values in secrets/nowchess/ (staging, prod, kargo)
- ArgoCD Applications for kargo project, staging, and prod deployments

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-30 10:58:45 +02:00
Janis 7dd020b59c feat: update ArgoCD and Rollouts configurations for eu-central-1 region 2026-04-16 20:08:35 +02:00
Janis 20d8146e8c feat: add comprehensive documentation and deployment scripts 
- Created new documentation files including TROUBLESHOOTING.md, CONFIGURATION.md, and CONTRIBUTING.md.
- Added deployment guide with automated and manual instructions.
- Introduced new YAML configurations for Kubernetes resources and Helm charts.
- Implemented a deployment script for setting up the GitOps infrastructure.
 2026-04-16 19:07:08 +02:00