Add basic Kustomize build flow
This commit is contained in:
parent
f6794b712c
commit
7944501fa2
2
.gitignore
vendored
2
.gitignore
vendored
@ -1 +1,3 @@
|
|||||||
*.tgz
|
*.tgz
|
||||||
|
|
||||||
|
secrets/
|
||||||
|
11
deploy/Makefile
Normal file
11
deploy/Makefile
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
.PHONY: dev prod
|
||||||
|
|
||||||
|
dev:
|
||||||
|
@kubectl kustomize --enable-helm dev
|
||||||
|
|
||||||
|
prod: load-prod-env
|
||||||
|
@kubectl kustomize --enable-helm prod | envsubst
|
||||||
|
|
||||||
|
load-prod-env:
|
||||||
|
$(eval include prod/secrets/env)
|
||||||
|
$(eval export)
|
7
deploy/prod/secrets/README.md
Normal file
7
deploy/prod/secrets/README.md
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
# Secrets
|
||||||
|
|
||||||
|
TODO: find a way to encrypt these secrets at rest on dev machine.
|
||||||
|
|
||||||
|
### exporter-password
|
||||||
|
|
||||||
|
The basic auth password required to access node-exporter endpoints. See ansible-vault.
|
2
deploy/prod/secrets/env.example
Normal file
2
deploy/prod/secrets/env.example
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
NETFLUX_PRIVATE_IP=1.2.3.4
|
||||||
|
POSTGRESQL_IP=1.2.3.4
|
Loading…
x
Reference in New Issue
Block a user