refactor: remove terraform entirely, migrate to pure GitOps (ArgoCD)

Delete entire terraform/ directory. Architecture: Terraform + ArgoCD → ArgoCD only - Single tool: ArgoCD manages all infrastructure and applications - Source of truth: git only (k8s/ directory) - Continuous reconciliation: no manual apply needed - Simpler state: no tfstate backend, no state files Next: Migrate all Terraform resources to k8s/ YAML manifests and ArgoCD Applications (namespaces, storage classes, Helm releases, RBAC, network policies, Authentik config).
2026-07-16 11:04:52 -07:00
parent 94a2bd648c
commit a860de94da
38 changed files with 0 additions and 4006 deletions
@@ -1,142 +0,0 @@
-variable "cluster_domain" {
-  description = "Cluster domain (e.g., riotpiao.homelab.com)"
-  type        = string
-  default     = "riotpiao.homelab.com"
-}
-
-variable "vault_token" {
-  description = "Vault token (set via VAULT_TOKEN env var or tfvars)"
-  type        = string
-  sensitive   = true
-  default     = ""
-}
-
-variable "authentik_api_token" {
-  description = "Authentik API token for goauthentik provider (terraform configuration management)"
-  type        = string
-  sensitive   = true
-  default     = ""
-}
-
-variable "s3_access_key" {
-  description = "MinIO S3 access key for terraform state backend"
-  type        = string
-  sensitive   = true
-  default     = ""
-}
-
-variable "s3_secret_key" {
-  description = "MinIO S3 secret key for terraform state backend"
-  type        = string
-  sensitive   = true
-  default     = ""
-}
-
-# Cluster secrets (load from .env.tfvars or vault)
-variable "authentik_secret_key" {
-  description = "Authentik secret key"
-  type        = string
-  sensitive   = true
-}
-
-variable "authentik_bootstrap_password" {
-  description = "Authentik bootstrap password"
-  type        = string
-  sensitive   = true
-}
-
-variable "authentik_bootstrap_token" {
-  description = "Authentik bootstrap token"
-  type        = string
-  sensitive   = true
-}
-
-variable "authentik_pg_password" {
-  description = "Authentik PostgreSQL password"
-  type        = string
-  sensitive   = true
-}
-
-variable "postgres_password" {
-  description = "PostgreSQL app user password"
-  type        = string
-  sensitive   = true
-}
-
-variable "minio_root_user" {
-  description = "MinIO root user"
-  type        = string
-  sensitive   = true
-}
-
-variable "minio_root_password" {
-  description = "MinIO root password"
-  type        = string
-  sensitive   = true
-}
-
-variable "minio_oidc_client_secret" {
-  description = "MinIO OIDC client secret"
-  type        = string
-  sensitive   = true
-}
-
-variable "grafana_admin_password" {
-  description = "Grafana admin password"
-  type        = string
-  sensitive   = true
-}
-
-variable "grafana_oidc_client_secret" {
-  description = "Grafana OIDC client secret"
-  type        = string
-  sensitive   = true
-}
-
-variable "forgejo_admin_password" {
-  description = "Forgejo admin password"
-  type        = string
-  sensitive   = true
-}
-
-variable "authentik_forgejo_client_secret" {
-  description = "Authentik Forgejo OIDC client secret"
-  type        = string
-  sensitive   = true
-}
-
-variable "authentik_argocd_client_id" {
-  description = "Authentik ArgoCD OIDC client ID"
-  type        = string
-  sensitive   = true
-}
-
-variable "authentik_argocd_client_secret" {
-  description = "Authentik ArgoCD OIDC client secret"
-  type        = string
-  sensitive   = true
-}
-
-variable "authentik_temporal_client_id" {
-  description = "Authentik Temporal OIDC client ID"
-  type        = string
-  sensitive   = true
-}
-
-variable "authentik_temporal_client_secret" {
-  description = "Authentik Temporal OIDC client secret"
-  type        = string
-  sensitive   = true
-}
-
-variable "argocd_admin_password" {
-  description = "ArgoCD admin password"
-  type        = string
-  sensitive   = true
-}
-
-variable "argocd_oidc_client_secret" {
-  description = "ArgoCD OIDC client secret"
-  type        = string
-  sensitive   = true
-}