Skip to content

Latest commit

 

History

History
51 lines (43 loc) · 3.41 KB

README.md

File metadata and controls

51 lines (43 loc) · 3.41 KB

home-infra - Home Cloud via Flux v2 | GitOps Toolkit

GitOps state for my cluster using flux v2

k8s talos nodes pods

Home infrastructure running: 3x Master Raspberry Pi 4GB + 3x Worker 8GB + 1x 11th Gen Intel Nuc:

Secret management

I use mozilla SOPS for secret encryption as it supported out of the box in Flux2. After adding a passwordless secret key to your cluster, add it to your flux-system/gotk-sync.yaml if you want to be able do decrypt secrets in the main flux-system kustomization.

I use a pre-commit hook to ensure that secrets are never pushed unencrypted. Assuming you have a .sosp.yaml the only thing you need to do is:

sops -e -i my-secret.yaml # That's it
sops my-secret.yaml # To edit it directly in your $EDITOR