♻️ kubernetes bootstrap

This commit is contained in:
auricom
2022-12-29 21:58:59 +01:00
parent 67caf2d9d6
commit f246f501be
9 changed files with 5 additions and 5 deletions

View File

@@ -1,9 +1,9 @@
## :memo:  Bootstrap
1. Deploy [cilium](https://cilium.io/) : `kubectl kustomize --enable-helm ./kubernetes/bootsrap/cilium | kubectl apply -f -`
2. Deploy [kubelet-csr-approver](https://github.com/postfinance/kubelet-csr-approver) `kubectl kustomize --enable-helm ./kubernetes/bootstrap/kubelet-csr-approver | kubectl apply -f -` to approve csr issued by talos nodes (that will allow to see pods logs).
3. Deploy [flux](https://github.com/fluxcd/flux2) `kubectl apply --server-side --kustomize ./kubernetes/bootstrap/flux`
4. Create flux github secret `sops --decrypt ./kubernetes/bootstrap/flux/github-deploy-key.sops.yaml | kubectl apply -f -`
2. Deploy [kubelet-csr-approver](https://github.com/postfinance/kubelet-csr-approver) `kubectl kustomize --enable-helm ./talos/bootstrap/kubelet-csr-approver | kubectl apply -f -` to approve csr issued by talos nodes (that will allow to see pods logs).
3. Deploy [flux](https://github.com/fluxcd/flux2) `kubectl apply --server-side --kustomize ./talos/bootstrap/flux`
4. Create flux github secret `sops --decrypt ./talos/bootstrap/flux/github-deploy-key.sops.yaml | kubectl apply -f -`
5. Create sops secret `cat ~/.config/sops/age/keys.txt | kubectl create secret generic sops-age --namespace=flux-system --from-file=age.agekey=/dev/stdin`
6. Apply flux cluster variables `kubectl apply -f ./kubernetes/flux/vars/cluster-settings.yaml`
7. Apply flux kustomization `kubectl apply --server-side --kustomize ./kubernetes/flux/config`

View File

@@ -70,10 +70,10 @@ controlPlane:
rotate-server-certificates: "true"
install:
extraKernelArgs:
- "talos.logging.kernel=udp://vector.${ingressDomain}:6050/"
- "talos.logging.kernel=udp://192.168.169.108:6050/"
logging:
destinations:
- endpoint: "udp://vector.${ingressDomain}:6051/"
- endpoint: "udp://192.168.169.108:6051/"
format: json_lines
network:
extraHostEntries: