diff --git a/kubernetes/apps/kustomization.yaml b/kubernetes/apps/kustomization.yaml index 64de80994..f69a62f4b 100644 --- a/kubernetes/apps/kustomization.yaml +++ b/kubernetes/apps/kustomization.yaml @@ -3,13 +3,13 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - - ./cert-manager - - ./default - - ./flux-system - - ./kube-system - - ./kyverno - - ./monitoring - - ./networking + # - ./cert-manager + # - ./default + # - ./flux-system + # - ./kube-system + # - ./kyverno + # - ./monitoring + # - ./networking - ./rook-ceph - - ./trivy-system - - ./volsync + # - ./trivy-system + # - ./volsync diff --git a/kubernetes/bootstrap/.gitignore b/kubernetes/bootstrap/.gitignore new file mode 100644 index 000000000..d17adace1 --- /dev/null +++ b/kubernetes/bootstrap/.gitignore @@ -0,0 +1,2 @@ +charts +clusterconfig diff --git a/kubernetes/bootstrap/README.md b/kubernetes/bootstrap/README.md new file mode 100644 index 000000000..101454db0 --- /dev/null +++ b/kubernetes/bootstrap/README.md @@ -0,0 +1,10 @@ +## :memo:  Bootstrap + +1. Deploy [cilium](https://cilium.io/) : `kubectl kustomize --enable-helm ./kubernetes/bootstrap/cilium | kubectl apply -f -` +2. Deploy [kubelet-csr-approver](https://github.com/postfinance/kubelet-csr-approver) `kubectl kustomize --enable-helm ./kubernetes/bootstrap/kubelet-csr-approver | kubectl apply -f -` to approve csr issued by talos nodes (that will allow to see pods logs). +3. Deploy [flux](https://github.com/fluxcd/flux2) `kubectl apply --server-side --kustomize ./kubernetes/bootstrap/flux` +4. Create flux github secret `sops --decrypt ./kubernetes/bootstrap/flux/github-deploy-key.sops.yaml | kubectl apply -f -` +5. Create sops secret `cat ~/.config/sops/age/keys.txt | kubectl create secret generic sops-age --namespace=flux-system --from-file=age.agekey=/dev/stdin` +6. Apply flux cluster variables `kubectl apply -k ./kubernetes/flux/vars/cluster-settings.yaml` +6. Apply flux cluster secrets `sops --decrypt ./kubernetes/flux/vars/cluster-secrets.sops.yaml | kubectl apply -f -` +7. Apply flux kustomization `kubectl apply --server-side --kustomize ./kubernetes/flux/config` diff --git a/talos/bootstrap/cilium/kustomization.yaml b/kubernetes/bootstrap/cilium/kustomization.yaml similarity index 100% rename from talos/bootstrap/cilium/kustomization.yaml rename to kubernetes/bootstrap/cilium/kustomization.yaml diff --git a/talos/bootstrap/cilium/values.yaml b/kubernetes/bootstrap/cilium/values.yaml similarity index 100% rename from talos/bootstrap/cilium/values.yaml rename to kubernetes/bootstrap/cilium/values.yaml diff --git a/talos/bootstrap/flux/github-deploy-key.sops.yaml b/kubernetes/bootstrap/flux/github-deploy-key.sops.yaml similarity index 100% rename from talos/bootstrap/flux/github-deploy-key.sops.yaml rename to kubernetes/bootstrap/flux/github-deploy-key.sops.yaml diff --git a/talos/bootstrap/flux/kustomization.yaml b/kubernetes/bootstrap/flux/kustomization.yaml similarity index 100% rename from talos/bootstrap/flux/kustomization.yaml rename to kubernetes/bootstrap/flux/kustomization.yaml diff --git a/talos/bootstrap/kubelet-csr-approver/kustomization.yaml b/kubernetes/bootstrap/kubelet-csr-approver/kustomization.yaml similarity index 100% rename from talos/bootstrap/kubelet-csr-approver/kustomization.yaml rename to kubernetes/bootstrap/kubelet-csr-approver/kustomization.yaml diff --git a/talos/bootstrap/README.md b/talos/bootstrap/README.md deleted file mode 100644 index 7ec2407bd..000000000 --- a/talos/bootstrap/README.md +++ /dev/null @@ -1,9 +0,0 @@ -## :memo:  Bootstrap - -1. Deploy [cilium](https://cilium.io/) : `kubectl kustomize --enable-helm ./kubernetes/bootsrap/cilium | kubectl apply -f -` -2. Deploy [kubelet-csr-approver](https://github.com/postfinance/kubelet-csr-approver) `kubectl kustomize --enable-helm ./talos/bootstrap/kubelet-csr-approver | kubectl apply -f -` to approve csr issued by talos nodes (that will allow to see pods logs). -3. Deploy [flux](https://github.com/fluxcd/flux2) `kubectl apply --server-side --kustomize ./talos/bootstrap/flux` -4. Create flux github secret `sops --decrypt ./talos/bootstrap/flux/github-deploy-key.sops.yaml | kubectl apply -f -` -5. Create sops secret `cat ~/.config/sops/age/keys.txt | kubectl create secret generic sops-age --namespace=flux-system --from-file=age.agekey=/dev/stdin` -6. Apply flux cluster variables `kubectl apply -f ./kubernetes/flux/vars/cluster-settings.yaml` -7. Apply flux kustomization `kubectl apply --server-side --kustomize ./kubernetes/flux/config`