Repository for IaC

• Repository for IaC
  • Summary
  • Prepare env
    • Install pre-commit and sops
  • Tips
    • Work with SOPS
      • Encrypt
      • Decrypt
    • Manually install apps
    • Manually release
  • Using software
    • Gitops
    • Develop
    • Monitoring
    • Access

Summary

Right now all jobs start for main branch

Changelog

Prepare env

Install pre-commit and sops

brew install pre-commit
brew install sops
pre-commit install
pre-commit install --hook-type commit-msg

Tips

gpg key for decrypt store in DevOps team

Work with SOPS

Encrypt

## Enctrypt full of file
sops -e -i test.yaml

Decrypt

$ sops -d -i test.yaml

Manually install apps

cp $APP_DIR
helm dependency update
sops -d -i secrets.yaml
helm upgrade -i $APP_NAME . -f values.yaml -f secrets.yaml -n $APP_NAMESPACE
most of cases APP_DIR=APP_NAME=APP_NAMESPACE

Manually release

docker run -it -v $HOME/.ssh:/root/.ssh registry.gitlab.com/xom4ek/toolset/semantic-release:2.0.0 bash
export GITHUB_TOKEN=$GITHUB_TOKEN_FOR_RELEASE
git clone https://github.com/ForomePlatform/oc-iac.git
cd oc-iac
git checkout main ## or dev if prerelease
semantic-release --ci false

Using software

Gitops

Argocd

Helm

Sops

Develop

pre-commit-hooks

semantic-release

Monitoring

Grafana

Loki

prometheus-operator

Access

Teleport