Will Anderson
afe01d2ad9
Move gitea, github-runner, neuron, cloudflared, ollama, verdaccio, devpi, registry, and registry-ui deployments+services to apps/*.yaml so Argo CD manages the app layer. Terraform retains namespaces, PVCs, ConfigMaps, Secrets, and Ingresses. New Secrets in Terraform: - kubernetes_secret.github_runner_secret (ci/github-runner-secret) - kubernetes_secret.cloudflared_secret (neuron/cloudflared-secret) Hardcoded service names in ingress.tf and neuron.tf to remove dependency on removed kubernetes_service resources.
13 lines
374 B
Terraform
13 lines
374 B
Terraform
# GitHub Actions Self-Hosted Runner — org-level, serves all repos
|
|
# Deployment managed by Argo CD — see servers/legion/apps/github-runner.yaml
|
|
|
|
resource "kubernetes_secret" "github_runner_secret" {
|
|
metadata {
|
|
name = "github-runner-secret"
|
|
namespace = kubernetes_namespace.ci.metadata[0].name
|
|
}
|
|
data = {
|
|
ACCESS_TOKEN = var.github_classic_pat
|
|
}
|
|
}
|