Skip to content
Snippets Groups Projects
Commit 0b4243ef authored by Rob Kooper's avatar Rob Kooper
Browse files

add sealed secrets

parent fd3d679e
No related branches found
No related tags found
No related merge requests found
{{ if .Values.sealedsecrets.enabled }}
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: {{ .Values.cluster.name }}-sealed-secrets
labels:
cluster: {{ .Values.cluster.name | quote }}
app: sealed-secrets
namespace: argocd
annotations:
{{- toYaml .Values.notifications | nindent 4 }}
spec:
project: {{ .Values.cluster.name }}
destination:
server: {{ .Values.cluster.url }}
namespace: kube-system
syncPolicy:
{{- if .Values.sync }}
automated:
prune: true
selfHeal: true
allowEmpty: false
{{- end }}
syncOptions:
- CreateNamespace=true
source:
repoURL: https://bitnami-labs.github.io/sealed-secrets/
chart: sealed-secrets
targetRevision: {{ .Values.sealedsecrets.version | quote }}
helm:
version: v3
releaseName: sealed-secrets
{{- end }}
...@@ -35,6 +35,10 @@ ingresscontroller: ...@@ -35,6 +35,10 @@ ingresscontroller:
traefik2: traefik2:
version: "10.*" version: "10.*"
sealedsecrets:
enabled: false
version: "0.*"
metallb: metallb:
enabled: false enabled: false
version: "0.10.*" version: "0.10.*"
......
...@@ -43,6 +43,7 @@ locals { ...@@ -43,6 +43,7 @@ locals {
traefik_dashboard = var.traefik_dashboard traefik_dashboard = var.traefik_dashboard
acme_staging = var.acme_staging acme_staging = var.acme_staging
acme_email = var.acme_email acme_email = var.acme_email
sealedsecrets_enabled = var.sealedsecrets_enabled
healthmonitor_enabled = var.healthmonitor_enabled healthmonitor_enabled = var.healthmonitor_enabled
healthmonitor_nfs = var.healthmonitor_nfs healthmonitor_nfs = var.healthmonitor_nfs
healthmonitor_notifications = var.healthmonitor_notifications healthmonitor_notifications = var.healthmonitor_notifications
......
...@@ -81,6 +81,9 @@ spec: ...@@ -81,6 +81,9 @@ spec:
#notifiers: #notifiers:
# %%{ indent(12, healthmonitor) }% # %%{ indent(12, healthmonitor) }%
sealedsecrets:
enabled: ${sealedsecrets_enabled}
longhorn: longhorn:
enabled: ${longhorn_enabled} enabled: ${longhorn_enabled}
replicas: ${longhorn_replicas} replicas: ${longhorn_replicas}
......
...@@ -160,6 +160,12 @@ variable "healthmonitor_notifications" { ...@@ -160,6 +160,12 @@ variable "healthmonitor_notifications" {
default = "" default = ""
} }
variable "sealedsecrets_enabled" {
type = bool
description = "Enable sealed secrets"
default = false
}
variable "metallb_enabled" { variable "metallb_enabled" {
type = bool type = bool
description = "Enable MetalLB" description = "Enable MetalLB"
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment