Stéphane Tailland
f9511fd15d
The values that infra-n8n deliberately does not carry: our hostname, issuer, Vault path and images, plus the two things that are ours alone — the lab CA the workflows need to verify internal TLS, and the agents' Keycloak client secrets, read from the realm's own Vault entry so there is one source per secret. Self-managing after three applies, like the rest of the estate. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
21 lines
588 B
YAML
21 lines
588 B
YAML
# Watches ./deploy, so everything here — including itself — reconciles from git.
|
|
#
|
|
# Three manual applies, once. Nothing can watch ./deploy until the namespace and
|
|
# the source that serves it exist:
|
|
#
|
|
# kubectl apply -f deploy/namespace.yaml
|
|
# kubectl apply -f deploy/gitrepository-self.yaml
|
|
# kubectl apply -f deploy/bootstrap-kustomization.yaml
|
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: n8n-deploy-bootstrap
|
|
namespace: n8n
|
|
spec:
|
|
interval: 10m
|
|
sourceRef:
|
|
kind: GitRepository
|
|
name: agent-flows
|
|
path: ./deploy
|
|
prune: true
|