chanwit

---
apiVersion: v1
kind: Namespace
metadata:
  name: demo
---
apiVersion: source.toolkit.fluxcd.io/v1beta2
kind: HelmRepository
metadata:
  name: kind-registry

chanwit

apiVersion: batch/v1beta1
kind: CronJob
metadata:
  name: flux-sync
spec:
  schedule: "0 0 * * *"  # This is a cron expression for once a day at midnight
  jobTemplate:
    spec:
      template:
        spec:

chanwit

docker run --pull=always -d -p 5432:5432 ghcr.io/llm-gitops/vectors:v1.0.0
docker run --pull=always -d -p 8080:8080 ghcr.io/llm-gitops/serve/bert-serve:v1.0.0

pip3 install -r requirement.txt
python3 test_chain.py

chanwit

---
apiVersion: infra.contrib.fluxcd.io/v1alpha1
kind: Terraform
metadata:
  name: foo
  namespace: default
spec:
  interval: 5m
  approvePlan: auto
  sourceRef:

chanwit

SOPS: Secrets OPerationS

sops is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, age, and PGP. (demo)

---

chanwit

SOPS: Secrets OPerationS

sops is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, age, and PGP. (demo)

---

chanwit

---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: <your helmrelease name>
  namespace: argocd
spec:
  destination:
    namespace: <your helmrelease namespace>
    server: https://kubernetes.default.svc

chanwit

---
# This is equivalent to Helm Repo command
# $ helm repo add tf-controller https://weaveworks.github.io/tf-controller/
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: HelmRepository
metadata:
  name: tf-controller
  namespace: flux-system
spec:
  interval: 1h0s

chanwit

Prepare AWS credentials

apiVersion: v1
kind: Secret
metadata:
  name: aws-credentials
  namespace: flux-system
type: Opaque
stringData:

chanwit

creation_rules:
  - path_regex: .*.yaml
    encrypted_regex: ^(data|stringData)$
    kms: arn:aws:kms:ap-southeast-1:.....