gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 12:29:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

ops(k8s): attempt to add sops operator

Browse source
This commit is contained in:
Kat Inskip 2024-01-20 11:39:53 -08:00
parent 41ae5de394
commit 49ef4146fc
Signed by: kat
GPG key ID: 465E64DECEA8CF0F
6 changed files with 60 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

20
k8s/bootstrap/bootstrap.sh Executable file
View file

@ -0,0 +1,20 @@
#!/usr/bin/env -S nix shell nixpkgs#kubernetes-helm nixpkgs#rage --command bash
echo "Installing flannel (CNI/Network Fabric)"
kubectl create ns kube-flannel
kubectl label --overwrite ns kube-flannel pod-security.kubernetes.io/enforce=privileged
helm repo add flannel https://flannel-io.github.io/flannel/
helm install flannel --set podCidr="10.42.0.0/16" --namespace kube-flannel flannel/flannel
echo "Installing CoreDNS (Cluster DNS)"
helm repo add coredns https://coredns.github.io/helm
helm --namespace=kube-system install coredns coredns/coredns --set service.clusterIP=10.43.0.2
echo "Installing ArgoCD (GitOps)"
helm repo add argo https://argoproj.github.io/argo-helm
helm install argocd argo/argo-cd --namespace argocd --create-namespace
echo "Generating an age keyfile for sops-secrets-operator, the next line will be the public key, please add it to .sops.yaml"
rage-keygen -o keys.txt 2>&1 | awk '{ print $3 }'
kubectl create ns sops
kubectl create secret generic sops-age-key-file --from-file=keys.txt -o yaml --dry-run=client -n sops > sops-age-key-file.yaml
kubectl apply -f sops-age-key-file.yaml -n sops
echo "Installing sops-secrets-operator"
helm repo add sops-secrets-operator https://inloco.github.io/sops-secrets-operator
helm install sops-secrets-operator sops-secrets-operator/sops-secrets-operator --namespace sops --values sops-values.yaml