Kubernetes Configuration and Manifests

Holds the Kubernetes manifests to set up the services on a Kubernetes cluster. Designed to be synced with ArgoCD running in the same cluster.

Either apply the manifests in each directory manually, or use the CLI or UI to create a new ArgoCD Application for each directory (unless they are a base directory used by other Kustomize directories).

Check the README in each dir to see if deploying those manifests will require secrets to be set or any other set up.

Usage

git-crypt is used for sensitive files; the symmetric key is in 1Password. Suffix the name with .crypt.yaml to have git-crypt manage it.

Cookbook

Creating secrets

# Replace [SECRET] with a the sensitive value to store. Generates a base64-encoded secret to go into the secret manifest
 secret="$(echo -n '[SECRET]' | base64)"
echo "${secret}"

# Create opaque secret
cat > /tmp/k8s.secret.yaml << EOL
---
apiVersion: v1
kind: Secret
metadata:
  name: name-of-secret
data:
  SECRET: '${secret}'
EOL

kubectl apply -f /tmp/k8s.secret.yaml

# Will display newly created secret
kubectl get secrets/name-of-secret -o yaml

Modifying secrets

Base64 encode the secret:

# Replace [SECRET] with a the sensitive value to store. Generates a base64-encoded secret to go into the secret manifest
 secret="$(echo -n '[SECRET]' | base64)"
echo "${secret}"

Run:

kubectl edit secrets/name-of-secret

An editor appears. Add it to the list of secrets - remember to use the base64-encoded value obtained above.

Note

It's preferable to add the secret to the repo and encrypt it with git-crypt

Deploy a new version of an application managed by Kustomize

Go into the application directory, and run:

kustomize edit set image kustomize-managed-image-name='ghcr.io/[ACCOUNT]/[REPO]:[REVISION]'

Then commit and push the kustomization.yaml file.

Override deployed image using parameter overrides in ArgoCD

It is allowed to dynamically change the deployed dev version of an ArgoCD application. Here is how:

argocd app set [APP]-dev --kustomize-image image-name-in-manifest=[HOST_AND_ACCOUNT]/[REPO]:[REVISION]
argocd app sync [APP]-dev

This is a convenient way of deploying a different version to a dev branch for testing.

Unset with:

argocd app unset image-name-in-manifest --kustomize-image kustomize-managed-image-name

In all other cases, commit the change to the repo.

License

cloudership/infra_k8s_svc

ErrorLooks like something went wrong!

About

Resources

License

Uh oh!

Stars

Watchers

Forks

Releases

Packages 0

Error
Looks like something went wrong!

Packages