Made secrets file configurable

.gitattributes

@@ -1 +1 @@
-secrets.yaml filter=git-crypt diff=git-crypt
+_secrets.yaml filter=git-crypt diff=git-crypt

nodes/hellas/_defaults.yaml

@@ -4,3 +4,4 @@ installDisk: /dev/sda
 cluster:
     name: hellas
     controlPlaneIp: 10.0.2.1
+    secretsFile: !realpath _secrets.yaml

nodes/testing/_defaults.yaml

@@ -4,3 +4,4 @@ installDisk: /dev/vda
 cluster:
     name: testing
     controlPlaneIp: 192.168.1.100
+    secretsFile: !realpath _secrets.yaml

templates/generate_configs.sh

@@ -1,12 +1,11 @@
 #!/usr/bin/env bash
 set -euo pipefail
-ROOT={{ root }}
+CONFIGS={{ root }}/configs
-CONFIGS=${ROOT}/configs
 
 # Generate the configuration for each node
 {% for node in nodes -%}
 talosctl gen config {{ node.cluster.name }} https://{{ node.cluster.controlPlaneIp }}:6443 -f \
-	--with-secrets ${ROOT}/secrets.yaml \
+	--with-secrets {{ node.cluster.secretsFile }} \
 	--talos-version {{ node.talosVersion }} \
 	--kubernetes-version {{ node.kubernesVersion }} \
 	--output-types {{ node.type }} \
@@ -26,7 +25,7 @@ talosctl gen config {{ node.cluster.name }} https://{{ node.cluster.controlPlane
 # Generate the talosconfig file for each cluster
 {% for cluster in clusters -%}
 talosctl gen config {{ cluster.name }} https://{{ cluster.controlPlaneIp }}:6443 -f \
-	--with-secrets ${ROOT}/secrets.yaml \
+	--with-secrets {{ cluster.secretsFile }} \
 	--output-types talosconfig \
 	-o ${CONFIGS}/{{ cluster.name }}/talosconfig
 {% endfor %}