Story Crater Bot
e71c7ad37e
- Create Phase 4 ArgoCD Application (terraform-apply) - PostSync Hook Job runs: terraform init && terraform apply -auto-approve - ServiceAccount + ClusterRole for cluster-admin RBAC - S3 credentials encrypted with SOPS (terraform-s3-secrets.enc.yaml) - Pre-commit hook blocks local 'terraform apply' — all changes via git push - True IaC: modify terraform/*.tf → git push → ArgoCD applies automatically
27 lines
655 B
YAML
27 lines
655 B
YAML
# Phase 4 — IaC (Terraform) — infrastructure-as-code via Hook Job
|
|
# ArgoCD-driven terraform apply. All changes via git push.
|
|
|
|
---
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: terraform-apply
|
|
namespace: argocd
|
|
annotations:
|
|
argocd.argoproj.io/sync-wave: "4"
|
|
spec:
|
|
project: homelab
|
|
sources:
|
|
- repoURL: https://forgejo.riotpiao.homelab.com/riotpiao.com/homelab.git
|
|
targetRevision: main
|
|
path: k8s/hooks/phase4
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: argocd
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- CreateNamespace=true
|