PXE boot secrets overhaul - Githubissues

randomcoww / homelab

Terraform provisioner for Kubernetes homelab

14 stars 1 forks source link

PXE boot secrets overhaul #22

Closed randomcoww closed 11 months ago

randomcoww commented 2 years ago

deploy vault to matchbox pods
configure terraform to create vault secret or CA
configure service start to include puling a vault secret or cert

Two sets of ignition configs are needed

PXE config which pulls from vault
USB boot image which includes secrets

Remaining issues

How to provide vault secret to nodes?