monastery

My secondary K8s cluster for CPU-intensive tasks. Configured using Flux!

Directories

• cluster – a GitOps-enabled directory that contains cluster-wide resources like CustomResourseDefinitions and ClusterRoleBindings.
• workloads – a GitOps-enabled directory that contains namespaced resources and Helm releases to be run on-cluster.
• sealed-secrets – a workbench from which to create sealed secrets.
• helm – configuration related to the helm and helm-tiller cluster setup.
• flux – configuration related to the flux cluster setup.

Secrets

Configuration secrets are to be hidden using git-secret, using the make secrets-hide and make secrets-reveal commands.

K8s Secret resources should be encrypted using sealed-secrets, using a process described in sealed-secrets/README.md.