mirror of
https://github.com/dredx/prole.git
synced 2026-09-24 15:04:31 +00:00
- monitoring/kps-values-k3s.yaml: Grafana helm values for k3s homelab with dual auth (auth.proxy Kerberos + auth.google for prole.org Workspace) - grafana-proxy-configmap.yaml: nginx passthrough for /grafana/login/google and /grafana/login to allow Google OAuth flow without knoe-auth redirect - grafana-google-oidc-secret-prole.example.yaml: Secret template for Grafana Google OAuth client (svc.prole.org, Internal consent, prole.org Workspace) - oauth2-proxy-google-oidc-secret-prole.example.yaml: Secret template for oauth2-proxy gating db.prole.org Studio - oauth2-proxy-deployment-prole.yaml: k3s oauth2-proxy deployment for db.prole.org (prole.org domain, no BackendConfig) - init_grafana_oauth_prole.sh: Bootstrap script for Grafana OAuth secret - init_oauth2_proxy_prole.sh: Bootstrap script for Studio oauth2-proxy Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| argocd | ||
| manifests | ||
| main.tf | ||
| opentofu.auto.tfvars | ||
| README.md | ||
| variables.tf | ||
OpenTofu k3s Pipeline
This pipeline re-deploys the Knoe environment into a k3s cluster using OpenTofu.
Usage
- Ensure
opentofu.auto.tfvarsis populated (install.py will generate it). - Sync manifests into
deploy/opentofu/k3s/manifests. - Run:
tofu init
tofu plan
tofu apply
Files
main.tf: Applies Kubernetes manifests with the configured namespace.variables.tf: Pipeline inputs (server URL, token, namespace).opentofu.auto.tfvars: Auto-generated values from Knoe install/config.manifests/: Copy ofk8s/manifests to re-deploy.