Nereus/terraform/platform/README.md

Cluster platform

This stack installs Argo Rollouts, Sealed Secrets, and kube-prometheus-stack on an existing k3s cluster. Use it on a fresh cluster, or import matching Helm releases before applying it to a cluster where they already exist.

cp terraform.tfvars.example terraform.tfvars
terraform init
terraform apply

The kubeconfig stays outside the repository. Terraform records only its path. Application and observability manifests remain under deploy/ and are applied after the cluster-wide controllers are ready.

Discord routing is deliberately off by default so a missing webhook cannot stop Alertmanager. After applying nereus-discord-sealed.yaml and confirming that it produced the nereus-discord Secret, set enable_discord = true and apply this stack again.