blumeops/ansible
Erich Blume e032e27b66 Configure remote kubectl access with 1Password credentials
Step 0.10 implementation:
- Recreate minikube with --apiserver-names=indri --listen-address=0.0.0.0
- Add kubectl-credential-1password exec plugin for 1Password integration
- Client certs fetched from 1Password on-demand (no private keys on disk)
- CA cert stored locally (not secret - public key for server verification)

Minikube role updates:
- Add minikube_apiserver_names and minikube_listen_address variables
- Update tasks to include remote access flags

This mirrors the 1Password SSH agent pattern - biometric auth required
for each kubectl command that needs credentials.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-18 10:12:58 -08:00
..
group_vars Add grafana datasource provisioning and update workflow docs 2026-01-14 07:23:10 -08:00
inventory Add pre-commit hooks for code quality (#19) 2026-01-16 19:33:02 -08:00
playbooks Add minikube role for Kubernetes cluster on indri 2026-01-17 22:39:38 -08:00
roles Configure remote kubectl access with 1Password credentials 2026-01-18 10:12:58 -08:00
ansible.cfg
requirements.yml