Initial VPS operations handbook

ansible/roles/matrix_cluster_base/templates/base-resources.yaml.j2

@@ -0,0 +1,26 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: {{ matrix_namespace }}
+---
+apiVersion: v1
+kind: ResourceQuota
+metadata:
+  name: matrix-system-quota
+  namespace: {{ matrix_namespace }}
+spec:
+  hard:
+{{ matrix_resource_quota | to_nice_yaml(indent=4) | indent(4, true) }}
+---
+apiVersion: v1
+kind: LimitRange
+metadata:
+  name: matrix-system-defaults
+  namespace: {{ matrix_namespace }}
+spec:
+  limits:
+    - type: Container
+      defaultRequest:
+{{ matrix_limit_range.defaultRequest | to_nice_yaml(indent=8) | indent(8, true) }}
+      default:
+{{ matrix_limit_range.default | to_nice_yaml(indent=8) | indent(8, true) }}

ansible/roles/matrix_cluster_base/templates/letsencrypt-prod-clusterissuer.yaml.j2

@@ -0,0 +1,13 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-prod
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: letsencrypt-prod-private-key
+    solvers:
+      - http01:
+          ingress:
+            class: traefik