From 8b76759ba8bf65a4b602b25fb6ca7120d493e631 Mon Sep 17 00:00:00 2001 From: Vegard Hagen Date: Sat, 8 Jul 2023 00:08:13 +0200 Subject: [PATCH] docs(readme): Updated readme with sealed secrets info --- .gitignore | 5 ++++- README.md | 24 ++++++++++++++++++++++++ infra/dashboard/kustomization.yaml | 1 - infra/dashboard/namespace.yaml | 4 ---- 4 files changed, 28 insertions(+), 6 deletions(-) delete mode 100644 infra/dashboard/namespace.yaml diff --git a/.gitignore b/.gitignore index a967792..8872292 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,5 @@ .idea -charts/example \ No newline at end of file +charts/example +**/cilium/charts +**/traefik/charts +secret.yaml \ No newline at end of file diff --git a/README.md b/README.md index 355207f..ee6922a 100644 --- a/README.md +++ b/README.md @@ -62,6 +62,10 @@ kubectl taint nodes --all node-role.kubernetes.io/control-plane- ## Install Cilium as Container Network Interface (CNI) +```shell +kubectl kustomize --enable-helm infra/cilium | kubectl apply -f - +``` + https://docs.cilium.io/en/stable/gettingstarted/k8s-install-default/ Install Cilium CLI @@ -98,6 +102,21 @@ https://metallb.universe.tf/installation/ kubectl apply -k infra/metallb ``` +# Sealed Secrets + +Used to create encrypted secrets + +```shell +kubectl apply -k infra/sealed-secrets +``` + +Be sure to store the generated sealed secret key in a safa place! +```shell +kubectl -n kube-system get secrets +``` + +*NB!*: There will be errors if you use my sealed secrets as you (hopefully) don't have the decryption key + # Traefik Install Traefik @@ -161,6 +180,11 @@ deployed using kubectl apply -k infra/dashboard ``` +Create a token +```shell +kubectl -n kubernetes-dashboard create token admin-user +``` + # ApplicationSets Once you've tested everything get the ball rolling with diff --git a/infra/dashboard/kustomization.yaml b/infra/dashboard/kustomization.yaml index 38528c9..64120b7 100644 --- a/infra/dashboard/kustomization.yaml +++ b/infra/dashboard/kustomization.yaml @@ -3,7 +3,6 @@ kind: Kustomization namespace: kubernetes-dashboard resources: - - namespace.yaml - https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/alternative.yaml - traefik-forward-auth - ingress.yaml diff --git a/infra/dashboard/namespace.yaml b/infra/dashboard/namespace.yaml deleted file mode 100644 index 47783df..0000000 --- a/infra/dashboard/namespace.yaml +++ /dev/null @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: kubernetes-dashboard \ No newline at end of file