Add basic Kustomize build flow

.gitignore

@@ -1 +1,3 @@
 *.tgz
+
+secrets/

deploy/Makefile

@@ -0,0 +1,11 @@
+.PHONY: dev prod
+
+dev:
+	@kubectl kustomize --enable-helm dev
+
+prod: load-prod-env
+	@kubectl kustomize --enable-helm prod | envsubst
+
+load-prod-env:
+	$(eval include prod/secrets/env)
+	$(eval export)

deploy/prod/secrets/README.md

@@ -0,0 +1,7 @@
+# Secrets
+
+TODO: find a way to encrypt these secrets at rest on dev machine.
+
+### exporter-password
+
+The basic auth password required to access node-exporter endpoints. See ansible-vault.

deploy/prod/secrets/env.example

@@ -0,0 +1,2 @@
+NETFLUX_PRIVATE_IP=1.2.3.4
+POSTGRESQL_IP=1.2.3.4