diff options
| author | Vincent Ambo <mail@tazj.in> | 2021-12-27T14·17+0300 |
|---|---|---|
| committer | tazjin <mail@tazj.in> | 2021-12-27T15·53+0000 |
| commit | e616f978d045ccbe62eee6403e0d93061982ae23 (patch) | |
| tree | 29ab15344356e1f105e637815f851694561617bf /ops/keycloak | |
| parent | 4f030f085d34f07eba19003ad4b951b327b075a9 (diff) | |
feat(ops/secrets): Add tf-keycloak secrets file r/3470
This file can be sourced (somehow, depending on the user) while working with //ops/keycloak to get the relevant secrets. Change-Id: Ibb3051c4b019f64824964475451c1c3996db6421 Reviewed-on: https://cl.tvl.fyi/c/depot/+/4708 Tested-by: BuildkiteCI Reviewed-by: grfn <grfn@gws.fyi>
Diffstat (limited to 'ops/keycloak')
| -rw-r--r-- | ops/keycloak/README.md | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/ops/keycloak/README.md b/ops/keycloak/README.md new file mode 100644 index 0000000000..e8ffd700b5 --- /dev/null +++ b/ops/keycloak/README.md @@ -0,0 +1,18 @@ +Terraform for Keycloak +====================== + +This contains the Terraform configuration for deploying TVL's Keycloak +instance (which lives at `auth.tvl.fyi`). + +Secrets are needed for applying this. The encrypted file +`//ops/secrets/tf-keycloak.age` contains `export` calls which should +be sourced, for example via `direnv`, by users with the appropriate +credentials. + +An example `direnv` configuration used by tazjin is this: + +``` +# //ops/secrets/.envrc +source_up +eval $(age --decrypt -i ~/.ssh/id_ed25519 $(git rev-parse --show-toplevel)/ops/secrets/tf-keycloak.age) +``` |