Store sealed secrets in version control #2

This commit is contained in:
2022-04-06 12:07:21 +02:00
parent ec67cc3a90
commit 009256d8cb
3 changed files with 35 additions and 7 deletions

View File

@ -1,6 +1,5 @@
*TODO: Files with sensitive data; migrate to SealedSecret*
```
# line ??: services/TfState/deploy-TfState.yml
# line ??: services/Mastodon/deploy-Mastodon.yml
```
@ -299,11 +298,16 @@ kubectl apply -f services/PVR/deploy-Sonarr.yml
```shell
kubectl apply -f services/Shaarli/deploy-Shaarli.yml
```
##### 5.11) [Traefik-Certs-Dumper](https://github.com/ldez/traefik-certs-dumper) <small>(certificate tooling)</small>
##### 5.11) [Terraform backend](https://www.terraform.io/language/settings/backends/pg) <small>(supporting database)</small>
```shell
kubectl apply -f services/TfState/deploy-TfState.yml
kubectl apply -f services/TfState/sealedSecret-TfState.yml
```
##### 5.12) [Traefik-Certs-Dumper](https://github.com/ldez/traefik-certs-dumper) <small>(certificate tooling)</small>
```shell
kubectl apply -f services/TraefikCertsDumper/deploy-TraefikCertsDumper.yml
```
##### 5.12) [Unifi-Controller]() <small>(wlan AP management)</small>
##### 5.13) [Unifi-Controller]() <small>(network infrastructure management)</small>
```shell
kubectl apply -f services/Unifi/deploy-Unifi.yml
```
@ -319,6 +323,7 @@ kubectl rollout restart deployment --namespace unifi unifi
ssh <username>@<ipaddress>
sed -e 's|stun://<ipaddress>|stun://<ipaddress>:3479|' -i /etc/persistent/cfg/mgmt
```
### 6) Miscellaneous
*Various notes/useful links*