mirror of
https://github.com/dredx/prole.git
synced 2026-09-24 19:54:32 +00:00
knoe-auth /auth/verify not yet implemented — auth_request returns 500, blocking all Grafana access. Simplify nginx to plain passthrough; strip inbound X-WEBAUTH-USER to prevent header forgery. Disable Grafana auth.proxy until knoe-auth is ready. Google auth.google still active. |
||
|---|---|---|
| .. | ||
| argocd | ||
| manifests | ||
| main.tf | ||
| opentofu.auto.tfvars | ||
| README.md | ||
| variables.tf | ||
OpenTofu k3s Pipeline
This pipeline re-deploys the Knoe environment into a k3s cluster using OpenTofu.
Usage
- Ensure
opentofu.auto.tfvarsis populated (install.py will generate it). - Sync manifests into
deploy/opentofu/k3s/manifests. - Run:
tofu init
tofu plan
tofu apply
Files
main.tf: Applies Kubernetes manifests with the configured namespace.variables.tf: Pipeline inputs (server URL, token, namespace).opentofu.auto.tfvars: Auto-generated values from Knoe install/config.manifests/: Copy ofk8s/manifests to re-deploy.