## Summary - Split k8s migration plan into phases folder for easier navigation - Added `tag:k8s` to Pulumi ACLs for Kubernetes workloads - Phase 1 work in progress ## Phase 1 Goals - Tailscale Kubernetes Operator - CloudNativePG Operator - PostgreSQL cluster for future app migrations ## Deployment and Testing - [ ] Review Phase 1 plan - [ ] `mise run tailnet-preview` to verify ACL changes - [ ] `mise run tailnet-up` to apply ACL changes - [ ] Create Tailscale OAuth client (manual) - [ ] Deploy operators and PostgreSQL cluster 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/29
13 lines
419 B
Smarty
13 lines
419 B
Smarty
# Template for eblume superuser password
|
|
# Apply with: op inject -i secret-eblume.yaml.tpl | kubectl apply -f -
|
|
#
|
|
# Uses the same 1Password item as the brew PostgreSQL setup on indri
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: blumeops-pg-eblume
|
|
namespace: databases
|
|
type: kubernetes.io/basic-auth
|
|
stringData:
|
|
username: eblume
|
|
password: {{ op://vg6xf6vvfmoh5hqjjhlhbeoaie/guxu3j7ajhjyey6xxl2ovsl2ui/password }}
|