djpbessems/Packer.Images
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Install SealedSecrets;Store hypervisor credentials in secret
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse Source
This commit is contained in:
Danny Bessems
2022-09-03 17:44:44 +02:00
parent 6c4fe7a0e6
commit 1141225907
6 changed files with 42 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
ansible/vars/metacluster.yml
View File

@ -150,26 +150,6 @@ components:
configs:
secret:
argocdServerAdminPassword: "{{ vapp['guestinfo.rootpw'] | password_hash('bcrypt') }}"
# controller:
# volumeMounts:
# - name: custom-ca-certificates
# mountPath: /etc/ssl/certs/custom-ca-certificates.crt
# subPath: custom-ca-certificates.crt
# volumes:
# - name: custom-ca-certificates
# secret:
# defaultMode: 420
# secretName: step-certificates-certs
# repoServer:
# volumeMounts:
# - name: custom-ca-certificates
# mountPath: /etc/ssl/certs/custom-ca-certificates.crt
# subPath: custom-ca-certificates.crt
# volumes:
# - name: custom-ca-certificates
# secret:
# defaultMode: 420
# secretName: step-certificates-certs
server:
extraArgs:
- --insecure
@ -177,15 +157,6 @@ components:
enabled: true
hosts:
- gitops.{{ vapp['metacluster.fqdn'] }}
# volumeMounts:
# - name: custom-ca-certificates
# mountPath: /etc/ssl/certs/custom-ca-certificates.crt
# subPath: custom-ca-certificates.crt
# volumes:
# - name: custom-ca-certificates
# secret:
# defaultMode: 420
# secretName: step-certificates-certs
sealed-secrets:
helm:
@ -214,6 +185,9 @@ dependencies:
url: https://get.helm.sh/helm-v3.9.0-linux-amd64.tar.gz
archive: compressed
extra_opts: --strip-components=1
- filename: kubeseal
url: https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.18.2/kubeseal-0.18.2-linux-amd64.tar.gz
archive: compressed
- filename: skopeo
url: https://code.spamasaurus.com/api/packages/djpbessems/generic/skopeo/v1.9.1/skopeo
- filename: step