Story Crater Bot
9a4d486b86
Phase 1 infrastructure-as-code setup: - Core providers (kubernetes, helm, null) - 15 Helm repositories (grafana, minio, prometheus, etc.) - Namespace scaffolding (15 namespaces with pod-security labels) - Storage classes (longhorn, longhorn-kafka with prevent_destroy) - TLS certificate bootstrap (selfsigned, CA, wildcard cert) - Remote state backend config (local for now, S3/GCS TODO) - Variable definitions for all secrets/OIDC clients Tested: terraform plan passes with no changes (bootstrap infrastructure ready) Next: Create 25 helm_release resources (Phase 2-4) Kept helmfile intact; network/Cilium managed via helmfile (no config risk) Co-Authored-By: Claude Haiku 4.5 <[email protected]>
23 lines
1009 B
Plaintext
23 lines
1009 B
Plaintext
kubeconfig_path = "cluster-config/kubeconfig"
|
|
cluster_domain = "riotpiao.homelab.com"
|
|
|
|
# Load these from .env or Vault in production
|
|
authentik_secret_key = "changeme-min-32-characters-long-value"
|
|
authentik_bootstrap_password = "changeme"
|
|
authentik_bootstrap_token = "changeme"
|
|
authentik_pg_password = "changeme"
|
|
postgres_password = "changeme"
|
|
minio_root_user = "minioadmin"
|
|
minio_root_password = "changeme"
|
|
minio_oidc_client_secret = "changeme"
|
|
grafana_admin_password = "changeme"
|
|
grafana_oidc_client_secret = "changeme"
|
|
forgejo_admin_password = "changeme"
|
|
authentik_forgejo_client_secret = "changeme"
|
|
authentik_argocd_client_id = "argocd"
|
|
authentik_argocd_client_secret = "changeme"
|
|
authentik_temporal_client_id = "temporal"
|
|
authentik_temporal_client_secret = "changeme"
|
|
argocd_admin_password = "changeme"
|
|
argocd_oidc_client_secret = "changeme"
|