This repository serves as the single source of truth for my infrastructure.
NOTE: The repo used to contain secrets, so I decided to dump the history and start fresh. No more secrets (hopefully)!! The previous history can be found in the private "infra-archive" repository
- Spin up a cluster
- Make sure the node you're setting up can read the repository
flux bootstrap git --url=ssh://[email protected]/garritfra/infra --branch=main --private-key-file=.ssh/id_ed25519 --path=k8s/clusters/infra-k8s-01- Save age cluster key as
age-key.txt cat age.agekey kubectl create secret generic infra-sops-age-key --namespace=infra-base --from-file=age.agekey=/dev/stdin
- Create the secret like you would any other secret
sops --age=<public-key> --encrypt --in-place path/to/secret.yaml- This assumes that you have a
.sops.yamlin your directory (TODO: Or at the repo top level?)
- This assumes that you have a