Story Crater Bot
4e473978b5
- ArgoCD migrated to argocd namespace - Cert-manager issuers/certs created - 20 namespaces imported with pod-security labels - S3 backend temporarily offline (MinIO), using local backup - Pending: Remove metadata drift from helm releases, re-apply
36 lines
1.5 KiB
Plaintext
36 lines
1.5 KiB
Plaintext
kubeconfig_path = "cluster-config/kubeconfig"
|
|
cluster_domain = "riotpiao.homelab.com"
|
|
|
|
# Backend S3 credentials (MinIO)
|
|
# Set via environment variables instead:
|
|
# export AWS_ACCESS_KEY_ID=$(grep MINIO_ROOT_USER .env | cut -d= -f2)
|
|
# export AWS_SECRET_ACCESS_KEY=$(grep MINIO_ROOT_PASSWORD .env | cut -d= -f2)
|
|
s3_access_key = ""
|
|
s3_secret_key = ""
|
|
|
|
# Vault token for terraform vault provider
|
|
# Set via environment variable:
|
|
# export VAULT_TOKEN=$(vault login -method=oidc ...)
|
|
vault_token = ""
|
|
|
|
# Cluster secrets loaded from .env (extract via 'vsource' alias)
|
|
# Or populate these manually from Vault/secrets manager
|
|
authentik_secret_key = "changeme-min-32-characters-long-value"
|
|
authentik_bootstrap_password = "changeme"
|
|
authentik_bootstrap_token = "changeme"
|
|
authentik_pg_password = "changeme"
|
|
postgres_password = "changeme"
|
|
minio_root_user = "minioadmin"
|
|
minio_root_password = "changeme"
|
|
minio_oidc_client_secret = "changeme"
|
|
grafana_admin_password = "changeme"
|
|
grafana_oidc_client_secret = "changeme"
|
|
forgejo_admin_password = "changeme"
|
|
authentik_forgejo_client_secret = "changeme"
|
|
authentik_argocd_client_id = "argocd"
|
|
authentik_argocd_client_secret = "changeme"
|
|
authentik_temporal_client_id = "temporal"
|
|
authentik_temporal_client_secret = "changeme"
|
|
argocd_admin_password = "changeme"
|
|
argocd_oidc_client_secret = "changeme"
|