Files
Biohazard/kube/bootstrap
JJGadgets 5ba9c8ae7b feat!: Flux localhost bootstrap from 1P, add Sinon cluster
- installs Flux in hostNetwork mode binded to localhost to new clusters

- rework Taskfiles for new bootstrap flow, including loading secrets direct from 1Password with no SOPS for secret zero

- use 1Password for both talsecret and talenv for talhelper genconfig

- remove SOPS secrets

- add Sinon cluster, used as NAS

- cleanup ExternalSecret and 1P Connect's Flux ks for smoother bootstrap

- try out 1Password Connect as extraContainer in external-secrets deployment to avoid secrets going over network

- general cleanup
2024-05-21 13:49:50 +08:00
..

Bootstrap Kubernetes cluster

  1. Install Flux in hostNetwork mode binded to localhost
  2. Load ${CLUSTER_NAME}-vars (including 1Password and Hubble Vars) and 1Password Connect secrets (Connect credentials and ESO client token) from 1Password
  3. Load root ks (flux-repo.yaml) which installs Cilium