infrastructure/pomerium/templates
Infrastructure Admin d770504fa5 Initial infrastructure as code deployment
This commit includes the complete Kubernetes infrastructure deployment for NGE6:

- Crossplane setup with providers (Kubernetes, Helm, Civo)
- Ambassador/Emissary ingress controller with SSL termination
- Cert-manager with Let's Encrypt and Gandi webhook for DNS01 challenges
- ExternalDNS integration with Gandi for automatic DNS management
- Keycloak authentication server with PostgreSQL
- Pomerium identity-aware proxy with OIDC integration
- Forgejo Git server with persistent storage and authentication
- Spire/SPIFFE for secure service communication

All services are deployed using Infrastructure as Code principles with
Crossplane managing Kubernetes and Helm resources declaratively.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-09-23 08:43:06 -04:00
..
redis Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
_helpers.tpl Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
authenticate-deployment.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
authenticate-hpa.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
authenticate-ingress.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
authenticate-pdb.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
authenticate-service.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
authorize-deployment.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
authorize-hpa.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
authorize-pdb.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
authorize-service.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
clusterrole.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
clusterrolebinding.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
databroker-deployment.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
databroker-pdb.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
databroker-secret.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
databroker-service.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
databroker-tls-secrets.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
ingress-controller-deployment.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
ingress-controller-service.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
ingress.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
ingressclass.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
NOTES.txt Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
proxy-deployment.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
proxy-hpa.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
proxy-pdb.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
proxy-service.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
role.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
rolebinding.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
secret.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
serviceaccount.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
servicemonitor.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
signing-key-secret.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
tls-secrets.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
validation.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00