Phase 1 infrastructure-as-code setup: - Core providers (kubernetes, helm, null) - 15 Helm repositories (grafana, minio, prometheus, etc.) - Namespace scaffolding (15 namespaces with pod-security labels) - Storage classes (longhorn, longhorn-kafka with prevent_destroy) - TLS certificate bootstrap (selfsigned, CA, wildcard cert) - Remote state backend config (local for now, S3/GCS TODO) - Variable definitions for all secrets/OIDC clients Tested: terraform plan passes with no changes (bootstrap infrastructure ready) Next: Create 25 helm_release resources (Phase 2-4) Kept helmfile intact; network/Cilium managed via helmfile (no config risk) Co-Authored-By: Claude Haiku 4.5 <[email protected]>
21 lines
1.0 KiB
Terraform
21 lines
1.0 KiB
Terraform
# Helm chart repositories (referenced inline in helm_release resources)
|
|
locals {
|
|
helm_repos = {
|
|
jetstack = "https://charts.jetstack.io"
|
|
stakater = "https://stakater.github.io/stakater-charts"
|
|
ingress_nginx = "https://kubernetes.github.io/ingress-nginx"
|
|
cnpg = "https://cloudnative-pg.github.io/charts"
|
|
authentik = "https://charts.goauthentik.io"
|
|
hashicorp = "https://helm.releases.hashicorp.com"
|
|
minio = "https://charts.min.io"
|
|
grafana = "https://grafana.github.io/helm-charts"
|
|
prometheus_community = "https://prometheus-community.github.io/helm-charts"
|
|
portainer = "https://portainer.github.io/k8s/"
|
|
argo = "https://argoproj.github.io/argo-helm"
|
|
gitea_charts = "https://dl.gitea.com/charts/"
|
|
strimzi = "https://strimzi.io/charts/"
|
|
bitnami = "https://charts.bitnami.com/bitnami"
|
|
temporal = "https://go.temporal.io/helm-charts"
|
|
}
|
|
}
|