about summary refs log tree commit diff
path: root/infra/kubernetes/nixery/secrets.yaml
AgeCommit message (Collapse)AuthorFilesLines
2019-12-20 r/237 chore: Significantly restructure folder layoutVincent Ambo1-18/+0
This moves the various projects from "type-based" folders (such as "services" or "tools") into more appropriate semantic folders (such as "nix", "ops" or "web"). Deprecated projects (nixcon-demo & gotest) which only existed for testing/demonstration purposes have been removed. (Note: *all* builds are broken with this commit)
2019-09-04 r/82 fix(k8s): Reinsert passLookup newline after kontemplate trims itVincent Ambo1-1/+1
SSH can not read the key without the trailing newline. Ideally kontemplate would expose a toggle for this.
2019-09-04 fix(k8s): Move nixery-secrets to the correct namespaceVincent Ambo1-6/+5
2019-09-03 feat(k8s): Insert Nixery's secrets via kontemplateVincent Ambo1-0/+19
Instead of having a manually prepared secret, use Cloud KMS (as per the previous commits) to decrypt the in-repo secrets and template them into the Secret resource in Kubernetes. Not all of the values are actually secret, it has thus become a bit easier to edit the known hosts, SSH config and such now.