Skip to content

Latest commit

 

History

History
executable file
·
55 lines (37 loc) · 940 Bytes

kubernetes.md

File metadata and controls

executable file
·
55 lines (37 loc) · 940 Bytes

Kubernetes

Prepare

Create a VM in Proxmox named ubuntu-server and install ubuntu server 20.x. This will act as the base for the docker-registry. Ensure the username is hl and password is {PM_PASSWORD}.

Provision

yarn provision k8s prod-main.env

Secrets

yarn initialize-secrets --scope @ha/k8s

Set secrets via the Vault UI.

Additional Vault Configuration

Sign into the Vault UI. Add the following to the default policy:

path "auth/kubernetes/config" {
    capabilities = ["create", "update"]
}

path "auth/kubernetes/role/app" {
    capabilities = ["create", "update"]
}

path "sys/auth/kubernetes" {
    capabilities = ["create", "update"]
}

Then create a new policy, named app, and save the following to it:

path "kv/*" {
    capabilities = ["read"]
}

Deploy

yarn deploy --scope @ha/k8s

Post Deploy

Rebuild the devcontainer used by VS Code.