rock/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: terraform fmt — normalize formatting across all files

Browse Source
This commit is contained in:
Story Crater Bot
2026-07-15 21:01:55 -07:00
parent 7114fc8fc9
commit 72ab6b6973
5 changed files with 43 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
terraform/argocd-bootstrap.tf
+3 -3
View File
@@ -53,7 +53,7 @@ resource "helm_release" "argocd" {
} }
generate = { generate = {
command = ["sh", "-c"] command = ["sh", "-c"]
args = ["sops -d \"$ARGOCD_ENV_FILE_PATH\""] args = ["sops -d \"$ARGOCD_ENV_FILE_PATH\""]
} }
lockRepo = false lockRepo = false
} }
@@ -112,7 +112,7 @@ resource "helm_release" "argocd" {
{ {
name = "sops-age" name = "sops-age"
secret = { secret = {
secretName = "sops-age" secretName = "sops-age"
defaultMode = 384 defaultMode = 384
} }
} }
@@ -134,7 +134,7 @@ resource "helm_release" "argocd" {
{ {
name = "server-tls" name = "server-tls"
secret = { secret = {
secretName = "homelab-tls" secretName = "homelab-tls"
defaultMode = 420 defaultMode = 420
} }
} }
terraform/bootstrap-namespaces.tf
+17 -17
View File
@@ -1,22 +1,22 @@
locals { locals {
namespaces = { namespaces = {
"cert-manager" = { pod_security = "baseline" } "cert-manager" = { pod_security = "baseline" }
"reloader" = { pod_security = "baseline" } "reloader" = { pod_security = "baseline" }
"ingress-nginx" = { pod_security = "privileged" } "ingress-nginx" = { pod_security = "privileged" }
"ddb" = { pod_security = "baseline" } "ddb" = { pod_security = "baseline" }
"iam" = { pod_security = "baseline" } "iam" = { pod_security = "baseline" }
"storage" = { pod_security = "baseline" } "storage" = { pod_security = "baseline" }
"logging" = { pod_security = "baseline" } "logging" = { pod_security = "baseline" }
"monitoring" = { pod_security = "baseline" } "monitoring" = { pod_security = "baseline" }
"cicd" = { pod_security = "baseline" } "cicd" = { pod_security = "baseline" }
"dashboard" = { pod_security = "baseline" } "dashboard" = { pod_security = "baseline" }
"sqs" = { pod_security = "baseline" } "sqs" = { pod_security = "baseline" }
"temporal" = { pod_security = "baseline" } "temporal" = { pod_security = "baseline" }
"story-crater-backend" = { pod_security = "baseline" } "story-crater-backend" = { pod_security = "baseline" }
"llm" = { pod_security = "baseline" } "llm" = { pod_security = "baseline" }
"dev-tools" = { pod_security = "baseline" } "dev-tools" = { pod_security = "baseline" }
"longhorn-system" = { pod_security = "baseline" } "longhorn-system" = { pod_security = "baseline" }
"cilium-secrets" = { pod_security = "baseline" } "cilium-secrets" = { pod_security = "baseline" }
} }
} }
terraform/forgejo-runner.tf
+3 -3
View File
@@ -57,7 +57,7 @@ resource "kubernetes_network_policy" "forgejo_runner_egress" {
} }
ports { ports {
protocol = "TCP" protocol = "TCP"
port = "9000" # MinIO S3 API port = "9000" # MinIO S3 API
} }
} }
@@ -69,8 +69,8 @@ resource "kubernetes_network_policy" "forgejo_runner_egress" {
ip_block { ip_block {
cidr = "0.0.0.0/0" cidr = "0.0.0.0/0"
except = [ except = [
"192.168.1.0/24", # LAN (baremetal nodes, physical infra) "192.168.1.0/24", # LAN (baremetal nodes, physical infra)
"10.244.0.0/16" # Pod network (cluster internal) "10.244.0.0/16" # Pod network (cluster internal)
] ]
} }
} }
terraform/minio.tf
+3 -3
View File
@@ -14,10 +14,10 @@ resource "kubernetes_storage_class" "longhorn_xfs" {
volume_binding_mode = "Immediate" volume_binding_mode = "Immediate"
parameters = { parameters = {
numberOfReplicas = "2" numberOfReplicas = "2"
staleReplicaTimeout = "60" staleReplicaTimeout = "60"
fsType = "xfs" fsType = "xfs"
dataLocality = "disabled" dataLocality = "disabled"
} }
} }
terraform/terraform.tfvars
+17 -17
View File
@@ -1,21 +1,21 @@
kubeconfig_path = "/Users/rockliang/workplace/homelab/cluster-config/kubeconfig" kubeconfig_path = "/Users/rockliang/workplace/homelab/cluster-config/kubeconfig"
cluster_domain = "riotpiao.homelab.com" cluster_domain = "riotpiao.homelab.com"
authentik_secret_key = "v9TTdMxpP9XtrwH2HFUjHC8MKwfeW+fYOpa5RTyP6EniqFclFSDXWbRp6crhrkLJkFeCfIcAMN/JODyy" authentik_secret_key = "v9TTdMxpP9XtrwH2HFUjHC8MKwfeW+fYOpa5RTyP6EniqFclFSDXWbRp6crhrkLJkFeCfIcAMN/JODyy"
authentik_bootstrap_password = "8+7MFMCtAHiOxSaiBJwDiR85nnrhLyX2" authentik_bootstrap_password = "8+7MFMCtAHiOxSaiBJwDiR85nnrhLyX2"
authentik_bootstrap_token = "5a534cb785aecddac23647e11ff4d824b50b03f70c173faee7ba46f12db55dc3" authentik_bootstrap_token = "5a534cb785aecddac23647e11ff4d824b50b03f70c173faee7ba46f12db55dc3"
authentik_pg_password = "vueM/7N6bUR/j/hUUPsWTM2pRm8lCewq" authentik_pg_password = "vueM/7N6bUR/j/hUUPsWTM2pRm8lCewq"
postgres_password = "a071b1f7b721a216b57d396b8d906fa10f6db1597d68a0f2e9f95e2872e7cb0f" postgres_password = "a071b1f7b721a216b57d396b8d906fa10f6db1597d68a0f2e9f95e2872e7cb0f"
minio_root_user = "minioadmin" minio_root_user = "minioadmin"
minio_root_password = "nhKRAxwIjDBCzwFDvsAa7dNLouCXXh13LvMoxMVkUtY=" minio_root_password = "nhKRAxwIjDBCzwFDvsAa7dNLouCXXh13LvMoxMVkUtY="
minio_oidc_client_secret = "9d2867fe08c3bf7fedd7e32bbaf4456fce3b0aaf788966d7559e1955947b0219" minio_oidc_client_secret = "9d2867fe08c3bf7fedd7e32bbaf4456fce3b0aaf788966d7559e1955947b0219"
grafana_admin_password = "your-secure-password" grafana_admin_password = "your-secure-password"
grafana_oidc_client_secret = "966bad4fa43812100e7775b3c73fed2ce1d07217fa5a23fbb0f190e46d2f0fa4" grafana_oidc_client_secret = "966bad4fa43812100e7775b3c73fed2ce1d07217fa5a23fbb0f190e46d2f0fa4"
forgejo_admin_password = "stRe4cawnQH/agM0QsPaWPdKNaQ0rp4p" forgejo_admin_password = "stRe4cawnQH/agM0QsPaWPdKNaQ0rp4p"
authentik_forgejo_client_secret = "e417c1a3b3ee79b44c9d8d3490a735aae7b2c19a81afe1ba6a262775d5ae9edc" authentik_forgejo_client_secret = "e417c1a3b3ee79b44c9d8d3490a735aae7b2c19a81afe1ba6a262775d5ae9edc"
authentik_argocd_client_id = "argocd" authentik_argocd_client_id = "argocd"
authentik_argocd_client_secret = "acc51c1ab043530b84b17dc5e8128b2a656b17558ea3f93e723618ea5c6d9774" authentik_argocd_client_secret = "acc51c1ab043530b84b17dc5e8128b2a656b17558ea3f93e723618ea5c6d9774"
authentik_temporal_client_id = "temporal" authentik_temporal_client_id = "temporal"
authentik_temporal_client_secret = "6UAuC651l21fajBZQwjV+bbkD1k6uCoV6PnQxaFlPaQ=" authentik_temporal_client_secret = "6UAuC651l21fajBZQwjV+bbkD1k6uCoV6PnQxaFlPaQ="
argocd_admin_password = "placeholder" argocd_admin_password = "placeholder"
argocd_oidc_client_secret = "placeholder" argocd_oidc_client_secret = "placeholder"