Ansible
Ansible setup
This archived diagram preserves the historical source topology. The Mermaid source is authoritative; Bazel renders its light and dark SVGs.
podman login harbor.alwaldend.com
SECRET_ID=$(bazel run //infra/harbor/cl:vault.secret_id | jq -r .data.secret_id)
echo "Secret id: ${SECRET_ID}"
bazel run //infra/flux/cl:sops.encrypt infra/harbor/cl/cert-manager/issuer-approle.yaml