mirror of
https://github.com/auricom/home-cluster.git
synced 2025-09-17 18:24:14 +02:00
♻️ kubernetes bootstrap
This commit is contained in:
@@ -1,9 +1,9 @@
|
||||
## :memo: Bootstrap
|
||||
|
||||
1. Deploy [cilium](https://cilium.io/) : `kubectl kustomize --enable-helm ./kubernetes/bootsrap/cilium | kubectl apply -f -`
|
||||
2. Deploy [kubelet-csr-approver](https://github.com/postfinance/kubelet-csr-approver) `kubectl kustomize --enable-helm ./kubernetes/bootstrap/kubelet-csr-approver | kubectl apply -f -` to approve csr issued by talos nodes (that will allow to see pods logs).
|
||||
3. Deploy [flux](https://github.com/fluxcd/flux2) `kubectl apply --server-side --kustomize ./kubernetes/bootstrap/flux`
|
||||
4. Create flux github secret `sops --decrypt ./kubernetes/bootstrap/flux/github-deploy-key.sops.yaml | kubectl apply -f -`
|
||||
2. Deploy [kubelet-csr-approver](https://github.com/postfinance/kubelet-csr-approver) `kubectl kustomize --enable-helm ./talos/bootstrap/kubelet-csr-approver | kubectl apply -f -` to approve csr issued by talos nodes (that will allow to see pods logs).
|
||||
3. Deploy [flux](https://github.com/fluxcd/flux2) `kubectl apply --server-side --kustomize ./talos/bootstrap/flux`
|
||||
4. Create flux github secret `sops --decrypt ./talos/bootstrap/flux/github-deploy-key.sops.yaml | kubectl apply -f -`
|
||||
5. Create sops secret `cat ~/.config/sops/age/keys.txt | kubectl create secret generic sops-age --namespace=flux-system --from-file=age.agekey=/dev/stdin`
|
||||
6. Apply flux cluster variables `kubectl apply -f ./kubernetes/flux/vars/cluster-settings.yaml`
|
||||
7. Apply flux kustomization `kubectl apply --server-side --kustomize ./kubernetes/flux/config`
|
@@ -70,10 +70,10 @@ controlPlane:
|
||||
rotate-server-certificates: "true"
|
||||
install:
|
||||
extraKernelArgs:
|
||||
- "talos.logging.kernel=udp://vector.${ingressDomain}:6050/"
|
||||
- "talos.logging.kernel=udp://192.168.169.108:6050/"
|
||||
logging:
|
||||
destinations:
|
||||
- endpoint: "udp://vector.${ingressDomain}:6051/"
|
||||
- endpoint: "udp://192.168.169.108:6051/"
|
||||
format: json_lines
|
||||
network:
|
||||
extraHostEntries:
|
Reference in New Issue
Block a user