DON Infra

This repository contains all Kubernetes manifests for developer.overheid.nl.

Applications

The project is divided into multiple applications:

• api
• community
• frontend
• search
• static

Connect to Postgres DB

Connect to the Kubernetes cluster and start a port-forward for the pgAdmin service:

kubectl port-forward svc/don-community-pgadmin-pgadmin4 8888:80 -n tn-don-community

Open the pgAdmin UI: http://localhost:8888 (sign in with: [email protected] / SuperSecret)

SOPS public keys

All secrets are encrypted with SOPS, using the following public keys:

Test

• api: age17uzpswwz9g0frdfy7md5kvlvkcw6pkd9k3k2cad6mfe0zdvcm9pscyzd7v
• community: age122ph8qunemp7hz9hughd3nx65dlef4dcqu79c6psyn8se377w5hq486cdw
• frontend: age17n4n96sqw3rx7a5exuqascs69h8d3wux0746xvldae3x7kv4zu8q5m75pe
• search: age1vg75nw5vk2vndzzud8sdvc5w9wtjz0ztejxrsuyg3dzjlpj9n5es94kzzn
• static: age12k87tkhgdr7s309k6rcpss9x8df62tw9v0haxswtzd2mwr6jwacs858ac2

Production

• frontend: age1gpl0td68sdh0u5q5dpcdh7dh3w5uzj9n0w3j6028hv0f5hqr2ysqq9mns0
• search: age16g3k56fseufjxsh3pmt07cg7llesz2crzaw6nq7l49j9gtrv24jqu4epuk
• static: age10jzjgvj847xvaqhknc2j0dreuutrr9tjmkek9xgse6h7nxlpdshsmf2l8q

Creating secrets

Create a template file for a secret:

kubectl create secret generic <SECRET> \
--from-literal=<KEY>=<VALUE> \
--dry-run=client \
-o yaml > <SECRET>.yaml

Encrypt:

sops \
  --encrypt \
  --encrypted-regex '^(data|stringData)$' \
  --age <PUBLIC KEY> \
  --in-place \
  <SECRET>.yaml