Commit graph

1896 commits

Author SHA1 Message Date
Vincent Ambo
2f6e008121 feat templater: Add 'pass' lookup function
This introduces support for looking up secret values in the 'pass' command line
tool (https://www.passwordstore.org/).

Values like passwords can be interpolated from pass and even more complex
structures like certificates for Kubernetes Secrets can be retrieved and base64-
encoded as necessary.

Fixes #2
2017-02-09 15:44:18 +01:00
Vincent Ambo
4713d565d3 fix templater: Don't fail with two identical stack traces 2017-02-09 15:44:18 +01:00
Vincent Ambo
25c9ed4adc feat main: Version bump to v1.0.0-beta1 2017-02-09 15:44:18 +01:00
Vincent Ambo
b58b1e3385 feat templater: Add applyLimits tests 2017-02-08 22:12:34 +01:00
Vincent Ambo
75b6199c1b feat context: Add deserialisation tests 2017-02-08 22:12:34 +01:00
Vincent Ambo
a6eb421057 docs: Update README with 'delete' command 2017-02-08 18:16:00 +01:00
Vincent Ambo
c046e5acff feat main: Add 'delete' command 2017-02-08 18:16:00 +01:00
Vincent Ambo
dd2fdd63e5 fix templater & ctx: Correctly check resource set parent 2017-02-08 17:42:06 +01:00
Vincent Ambo
756a4c745d fix templater: Guard against empty parent reference 2017-02-08 17:34:49 +01:00
Vincent Ambo
bace4dd895 fix context: Set sub resource names correctly 2017-02-08 17:34:49 +01:00
Vincent Ambo
4e8223ef34 feat context: Add support for resource set collections
A resource set collection is a resource set with an addition 'include' array
configured. It is a short-hand for importing multiple resource sets from the
same folder and for excluding/including them as a group.

See https://github.com/tazjin/kontemplate/issues/9 for more information.

Closes #9
2017-02-08 17:34:49 +01:00
Vincent Ambo
d6b16793c1 docs: Update README with new options 2017-02-08 16:53:38 +01:00
Vincent Ambo
8e08a282eb feat templater: Add ability to exclude resource sets
* renamed --limit to --include (-i)
* added --exclude (-e)

Kontemplate users can now explicitly include and exclude certain resource sets.
Excludes always override includes.

Closes #11
2017-02-08 16:53:38 +01:00
Vincent Ambo
11a5cf9e19 feat main: Add replace support & respect context setting
* Adds support for calling `kubectl replace` (necessary for resource types that do
  not support `apply`).

* Sets `kubectl` context to whatever is defined in the cluster configuration file
2017-02-08 16:19:10 +01:00
Vincent Ambo
250d01c044 docs: Update README for 'apply' command 2017-02-08 15:42:13 +01:00
Vincent Ambo
bc9fc9730d feat main: Add apply command
This integrates support for actually calling out to `kubectl apply`.

A dry-run flag is implemented, too.

The `run` command has been renamed to `template`.
2017-02-08 15:42:13 +01:00
Vincent Ambo
25f2a1616c feat template: Add additional template functions
This adds the Go template functions from [sprig][] as well as a custom `json`
function that can interpolate any data as a JSON object - very useful for adding
arrays of data in JSON format into a variable:

```
certificateDomains:
  - oslo.pub
  - tazj.in

annotations:
  acme/certificate: {{ .certificateDomains | json }}

annotations:
  acme/certificate: ["oslo.pub", "tazj.in"]
```

[sprig]: https://godoc.org/github.com/Masterminds/sprig
2017-02-08 14:40:45 +01:00
Vincent Ambo
efe49de57f docs: Add generated 'kontemplate run' help 2017-02-08 14:07:56 +01:00
Vincent Ambo
6147ea7b9b docs: Add usage & installation sections 2017-02-08 13:53:46 +01:00
Vincent Ambo
3ef0f35bfe fix templater: Guard against empty values map 2017-02-08 13:47:56 +01:00
Vincent Ambo
a1c23d7018 docs: Add YAML to docs 2017-02-08 13:15:36 +01:00
Vincent Ambo
d94a0ffc25 feat context: Add YAML loading support
Closes #5
2017-02-08 13:13:21 +01:00
Vincent Ambo
c58ce7e2ab Merge pull request #7 from tazjin/feat/travis
Enable Travis.CI builds
2017-02-08 13:04:18 +01:00
Vincent Ambo
1e80f19f7b docs: Add build status 2017-02-08 13:03:06 +01:00
Vincent Ambo
13bf8a8ba3 feat build: Add Travis.CI support 2017-02-08 13:00:34 +01:00
Vincent Ambo
7ac63613fb feat main: Add proper CLI support
Adds a basic CLI structure with a single "run" command that takes a --file (-f)
and --limit (-l) flag.

--limit can be used to only output certain resource sets.

Closes #4
2017-02-08 12:58:53 +01:00
Vincent Ambo
ad82ff3e75 chore: Add LICENSE
Open code under MIT license.
2017-02-08 11:58:26 +01:00
Vincent Ambo
8fac7c1a41 chore: Better example & gofmt 2017-02-08 11:55:59 +01:00
Vincent Ambo
8fb24f9f75 feat main: Initial program implementation & example 2017-02-08 11:51:08 +01:00
Vincent Ambo
9e3ee3f2bb feat templater: Add initial templating support 2017-02-08 11:50:49 +01:00
Vincent Ambo
bb45bfa737 feat context: Add types and loading functions 2017-02-08 11:50:39 +01:00
Vincent Ambo
aff2f7ac1d docs: Add initial WIP README 2017-02-08 11:50:26 +01:00
Vincent Ambo
b11478212a chore: Add .gitignore 2017-02-08 11:50:18 +01:00
Vincent Ambo
035c704f7b Initial commit 2017-02-08 11:50:06 +01:00
Vincent Ambo
e514f9ecff
[nginx] Use SAN certificates
Use SAN certificates from k8s LE controller 1.3
2016-09-26 01:23:29 +02:00
Vincent Ambo
421ef0a77f Question slide & movie reference 2016-09-22 16:20:16 +02:00
Vincent Ambo
631ad80af3 Add compiled presentation 2016-09-22 15:45:22 +02:00
Vincent Ambo
fac2474ac6 Add the rest of the damn presentation 2016-09-22 15:37:17 +02:00
Vincent Ambo
6c456a06c7 Initial check-in 2016-09-22 13:56:02 +02:00
Vincent Ambo
a02148d832
[tazblog] Add tazblog deployment & svc 2016-09-21 02:29:48 +02:00
Vincent Ambo
ef8846eb00
[nginx] Add gogs certificate 2016-09-21 02:29:48 +02:00
Vincent Ambo
7e12db2454
[nginx] Use Deployment resource instead of RC 2016-09-21 02:29:48 +02:00
Vincent Ambo
8bc007c7f3
[nginx/conf] Update TLS cert locations
The setup now uses my Kubernetes controller for Let's Encrypt.

This changes the nginx certificate locations to match the new secrets.
2016-09-21 02:29:47 +02:00
Vincent Ambo
cfe9387af1 [dns] Add DNS setup to git 2016-05-27 00:38:17 +02:00
Vincent Ambo
b85e5e7aca [nginx] Disable SSL tunnel for Quassel 2016-04-14 11:33:55 +02:00
Vincent Ambo
1d144c7348 [bitlbee] Fix key & crt files 2016-04-14 11:33:46 +02:00
Vincent Ambo
c4b27b41af
[quassel] Add stunnel configuration for desktop clients 2016-03-24 22:29:03 +01:00
Vincent Ambo
2dbff70567
[nginx] Add Quassel TLS tunneling 2016-03-24 22:27:54 +01:00
Vincent Ambo
1e3a90646e
[quassel] Add quassel dockerfile & RC 2016-03-24 18:18:17 +01:00
Vincent Ambo
c6feb173c5
[nginx] Open port 22 for git tunneling 2016-03-23 15:13:17 +01:00