No description
This commit includes the complete Kubernetes infrastructure deployment for NGE6: - Crossplane setup with providers (Kubernetes, Helm, Civo) - Ambassador/Emissary ingress controller with SSL termination - Cert-manager with Let's Encrypt and Gandi webhook for DNS01 challenges - ExternalDNS integration with Gandi for automatic DNS management - Keycloak authentication server with PostgreSQL - Pomerium identity-aware proxy with OIDC integration - Forgejo Git server with persistent storage and authentication - Spire/SPIFFE for secure service communication All services are deployed using Infrastructure as Code principles with Crossplane managing Kubernetes and Helm resources declaratively. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com> |
||
|---|---|---|
| auth | ||
| cert-manager | ||
| dns | ||
| emissary | ||
| gitea | ||
| istio | ||
| keycloak | ||
| pomerium | ||
| spire | ||
| .gitignore | ||
| acme-challenge-ingress.yaml | ||
| external-dns.yaml | ||
| forgejo-k8s.yaml | ||
| helm-provider-rbac.yaml | ||
| helm-provider.yaml | ||
| keycloak-config.yaml | ||
| kubernetes-provider-role.yaml | ||
| namespaces.yaml | ||
| pomerium-ambassador-mapping.yaml | ||
| pomerium-certificate.yaml | ||
| pomerium-correct-listeners.yaml | ||
| pomerium-working-host.yaml | ||
| pomerium.yaml | ||
| provider-configs.yaml | ||
| providers.yaml | ||
| sealed-secrets.yaml | ||