| .. | ||
| .gitkeep | ||
| .terraform.lock.hcl | ||
| alertmanager-discord.values.yaml | ||
| kube-prometheus-stack.values.yaml | ||
| main.tf | ||
| README.md | ||
| terraform.tfvars.example | ||
| variables.tf | ||
| versions.tf | ||
Cluster platform
This stack installs Argo Rollouts, Sealed Secrets, and kube-prometheus-stack on an existing k3s cluster. Use it on a fresh cluster, or import matching Helm releases before applying it to a cluster where they already exist.
cp terraform.tfvars.example terraform.tfvars
terraform init
terraform apply
The kubeconfig stays outside the repository. Terraform records only its path.
Application and observability manifests remain under deploy/ and are applied
after the cluster-wide controllers are ready.
Discord routing is deliberately off by default so a missing webhook cannot
stop Alertmanager. After applying nereus-discord-sealed.yaml and confirming
that it produced the nereus-discord Secret, set enable_discord = true and
apply this stack again.