Nereus/terraform/platform
2026-08-28 00:37:52 +02:00
..
.gitkeep chore: scaffold repository layout 2026-08-20 20:09:24 +02:00
.terraform.lock.hcl feat(infra): make clean deployments reproducible 2026-08-28 00:37:52 +02:00
alertmanager-discord.values.yaml feat(infra): make clean deployments reproducible 2026-08-28 00:37:52 +02:00
kube-prometheus-stack.values.yaml feat(infra): make clean deployments reproducible 2026-08-28 00:37:52 +02:00
main.tf feat(infra): make clean deployments reproducible 2026-08-28 00:37:52 +02:00
README.md feat(infra): make clean deployments reproducible 2026-08-28 00:37:52 +02:00
terraform.tfvars.example feat(infra): make clean deployments reproducible 2026-08-28 00:37:52 +02:00
variables.tf feat(infra): make clean deployments reproducible 2026-08-28 00:37:52 +02:00
versions.tf feat(infra): make clean deployments reproducible 2026-08-28 00:37:52 +02:00

Cluster platform

This stack installs Argo Rollouts, Sealed Secrets, and kube-prometheus-stack on an existing k3s cluster. Use it on a fresh cluster, or import matching Helm releases before applying it to a cluster where they already exist.

cp terraform.tfvars.example terraform.tfvars
terraform init
terraform apply

The kubeconfig stays outside the repository. Terraform records only its path. Application and observability manifests remain under deploy/ and are applied after the cluster-wide controllers are ready.

Discord routing is deliberately off by default so a missing webhook cannot stop Alertmanager. After applying nereus-discord-sealed.yaml and confirming that it produced the nereus-discord Secret, set enable_discord = true and apply this stack again.