jimleroyer commented 3 weeks ago

Description

As a developer of notify, I would like all of our kubernetes deployments to be managed by Helmfile so that all of our kubernetes code is in one location. I would also like to have all secrets automated from a single source of truth (1pass -> AWS Secrets) and remove our dependency on encrypted .env files

WHY are we building?

Provides the ability to deploy dynamic environments
Provides the ability to run "diff" commands against environments
Reduces the amount of code that Notify has to manage
Keeps code DRY

WHAT are we building?

[ ] Add Documentation entry to the helmfile
[ ] source secrets for helmfile from AWS Secrets Manager
[ ] source configuration values from helmfile overrides where necessary
[ ] adjust GitHub actions to work with these changes
[ ] This work is scoped to the DEV environment.

VALUE created by our solution

Increased reliability via reduced chance of accidental changes during releases
Increased velocity due to reduction in maintenance
better secrets management that falls in line with our OKRs

Acceptance Criteria

[x] Notify Documentation are deployed and managed with helmfile
[x] All secrets required by Documentation are sourced from 1pass -> terraform -> aws secrets manager and accessed using a kubernetes secret
[x] Notify Documentation still works