1 parent
e1026b87db
commit
1e67a5d0f9
3 files changed
+8
-6
No files matched your search
+4
-3
@@ -20,9 +20,10 @@ Configure this repository's Gitea webhook for push events only:
|
||||
- Secret: the same value as `K8SHELPER_GITOPS_WEBHOOK_SECRET`
|
||||
|
||||
Bootstrap the GitOps resources once with `kubectl apply -f gitops/`. The
|
||||
`dns` namespace is declared in the managed kustomization. Before bootstrapping,
|
||||
create `fancy-dns-apikey` in `dns` as described in `deploy/k8s/08-secret-apikey.yaml`
|
||||
and ensure the cert-manager-managed `fancy-dns-tls` Secret exists. The GitOps
|
||||
`dns` namespace is declared in the managed kustomization. Before bootstrapping, create the `fancy-dns-apikey` Secret in `dns` with an
|
||||
`api-key` entry. The ingress requests `dns.k6n.net` TLS from the
|
||||
`letsencrypt-prod` ClusterIssuer and cert-manager creates `fancy-dns-tls`. The
|
||||
StatefulSet PVCs use the `nfs-large` StorageClass. The GitOps
|
||||
kustomization intentionally excludes both example Secret manifests so it never
|
||||
replaces real credentials or TLS material with placeholders.
|
||||
|
||||
|
||||
Reference in new issue
Block a user