Files
homelab/k8s
Vegard Hagen c9ffd698c8 fix(netbird-agent): allow read root fs and add sysctl
The agent seems to assume it's running with full root privileges,
something we don't want. Accommodate by changing manually.
2025-01-05 14:56:24 +01:00
..

Manual bootstrap

CRDs

Gateway API

kubectl apply -k infra/crds

Cilium

kubectl kustomize --enable-helm infra/network/cilium | kubectl apply -f -

Sealed-secrets

kustomize build --enable-helm infra/controllers/sealed-secrets | kubectl apply -f -

Proxmox CSI Plugin

kustomize build --enable-helm infra/storage/proxmox-csi | kubectl apply -f -
kubectl get csistoragecapacities -ocustom-columns=CLASS:.storageClassName,AVAIL:.capacity,ZONE:.nodeTopology.matchLabels -A

Argo CD

kustomize build --enable-helm infra/controllers/argocd | kubectl apply -f -
kubectl -n argocd get secret argocd-initial-admin-secret -ojson | jq -r ' .data.password | @base64d'
kubectl apply -k infra
kubectl apply -k sets

SBOM

  • Cilium
  • Hubble
  • Argo CD
  • Proxmox CSI Plugin
  • Cert-manager
  • Gateway
  • Authentication (Keycloak, Authentik, ...)
  • [] CNPG - Cloud Native PostGresSQL

CRDs

  • [] Gateway
  • [] Argo CD
  • [] Sealed-secrets

TODO

  • Remotely managed cloudflared tunnel
  • Keycloak
  • [] Argo CD sync-wave
commonAnnotations:
    argocd.argoproj.io/sync-wave: "-1"