Onboarding (namespace-owner): - Add steps for sops/terragrunt install, state decrypt, apply workflow - Add flow diagram showing auth → decrypt → apply → encrypt → push - Add architecture overview with security model table - Add access control callout explaining per-stack Transit keys Architecture: - Add secrets & state encryption section with ASCII diagrams - Add request flow diagram (Cloudflare → Traefik → pods) - Add CI/CD pipeline diagram (GHA → Woodpecker → K8s) [ci skip] |
||
|---|---|---|
| .. | ||
| modules/k8s-portal | ||
| main.tf | ||
| secrets | ||
| terragrunt.hcl | ||
| tiers.tf | ||