prole/deploy/opentofu/k3s
chrisfu 65369811f7 Harden ingress targeting and normalize HOME paths
- enforce app-cluster-only rendering for public ingress hosts with DB-cluster guardrails\n- fix Supabase/GitLab/authority ingress host ownership and ingress-class safety checks\n- normalize persisted home-directory paths to /Users/chrisfu and update gke config defaults\n- add/adjust regression tests for ingress placement/hostname and cfg path normalization

Co-authored-by: Junie <junie@jetbrains.com>
2026-04-12 12:32:09 -07:00
..
argocd feat: service layer — GitLab, Redis, DB ArgoCD app, Kong, monitoring updates 2026-04-01 20:38:57 -07:00
manifests Harden ingress targeting and normalize HOME paths 2026-04-12 12:32:09 -07:00
main.tf feat: Add GitOps (Gitea) and Supabase integration, plus database options 2026-02-26 18:32:15 -08:00
opentofu.auto.tfvars Fix installer path portability (avoid hardcoded /Users paths) 2026-03-09 16:55:49 -07:00
README.md feat: infrastructure and installer updates for k3s, OpenTofu, and prole-db 2026-02-05 21:27:18 -08:00
terraform.tfstate Add prole.spec and extend OpenTofu k3s configuration 2026-02-24 21:47:02 -08:00
variables.tf Add prole.spec and extend OpenTofu k3s configuration 2026-02-24 21:47:02 -08:00

OpenTofu k3s Pipeline

This pipeline re-deploys the Prole environment into a k3s cluster using OpenTofu.

Usage

  1. Ensure opentofu.auto.tfvars is populated (install.py will generate it).
  2. Sync manifests into deploy/opentofu/k3s/manifests.
  3. Run:
tofu init
tofu plan
tofu apply

Files

  • main.tf: Applies Kubernetes manifests with the configured namespace.
  • variables.tf: Pipeline inputs (server URL, token, namespace).
  • opentofu.auto.tfvars: Auto-generated values from Prole install/config.
  • manifests/: Copy of k8s/ manifests to re-deploy.