ian/dumpnet-argo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Refactor services heirarchically, add logging

Browse source
This commit is contained in:
Ian Keane 2026-08-17 13:05:22 -04:00
parent ec5b2ab5f1
commit 419bb286d4
11 changed files with 221 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

18
terraform/argocd.tf
View file

@ -5,18 +5,24 @@ resource "random_password" "argocd_admin" {
override_special = "!#$%&*()-_=+[]{}?"
}
# Store secrets in AWS Secrets Manager
# Single secrets manager secret for all dumpnet secrets
resource "aws_secretsmanager_secret" "dumpnet" {
name = "dumpnet/cluster"
description = "Dumpnet cluster secrets"
name = "dumpnet"
description = "All dumpnet secrets"
}
resource "aws_secretsmanager_secret_version" "dumpnet" {
secret_id = aws_secretsmanager_secret.dumpnet.id
secret_string = jsonencode({
argocd_admin_password = random_password.argocd_admin.result
talosconfig = data.talos_client_configuration.this.talos_config
kubeconfig = talos_cluster_kubeconfig.this.kubeconfig_raw
cluster = {
argocd_admin_password = random_password.argocd_admin.result
talosconfig = data.talos_client_configuration.this.talos_config
kubeconfig = talos_cluster_kubeconfig.this.kubeconfig_raw
}
fluentbit = {
aws_access_key_id = aws_iam_access_key.fluentbit.id
aws_secret_access_key = aws_iam_access_key.fluentbit.secret
}
})
}