This repository has been archived by the owner on Feb 23, 2024. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: Nicolas Lamirault <nicolas.lamirault@gmail.com>
- Loading branch information
1 parent
9231ff2
commit 7c89f20
Showing
10 changed files
with
154 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,10 @@ | ||
+++ | ||
title = "Portefaix on Alibaba Cloud" | ||
description = "Running Portefaix on Alibaba Cloud ACK" | ||
weight = 50 | ||
+++ | ||
|
||
<img src="/docs/images/portefaix-alicloud-infra.svg" alt="Portefaix components" class="mt-3 mb-3 rounded"> | ||
|
||
<img src="/docs/images/portefaix-alicloud.svg" alt="Portefaix components" class="mt-3 mb-3 rounded"> | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,35 @@ | ||
+++ | ||
title = "Authentication and Authorization" | ||
description = "Authentication and authorization support for Portefaix in Alibaba Cloud" | ||
weight = 10 | ||
+++ | ||
|
||
This section shows the how to setup Portefaix with authentication and authorization support in Alibaba Cloud | ||
|
||
## Configure Alibaba Cloud | ||
|
||
```shell | ||
❯ . ./portefaix.sh alicloud | ||
[ Portefaix ] | ||
Setup credentials | ||
Done | ||
``` | ||
|
||
## Bastion | ||
|
||
{{% alert title="Work In Progress" color="warning" %}} | ||
{{% /alert %}} | ||
|
||
## Configure kubectl | ||
|
||
{{% alert title="Work In Progress" color="warning" %}} | ||
{{% /alert %}} | ||
|
||
```shell | ||
❯ make kubernetes-credentials CLOUD=alicloud ENV=staging | ||
``` | ||
|
||
```shell | ||
❯ kubectl get nodes | ||
NAME STATUS ROLES AGE VERSION | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,8 @@ | ||
+++ | ||
title = "Deployment" | ||
description = "Instructions for deploying Portefaix on Alibaba Cloud ACK" | ||
weight = 1 | ||
+++ | ||
|
||
{{% alert title="Work In Progress" color="warning" %}} | ||
{{% /alert %}} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,25 @@ | ||
+++ | ||
title = "Inspec Portefaix" | ||
description = "Instructions for check Portefaix infrastructure on Alibaba Cloud" | ||
weight = 20 | ||
+++ | ||
|
||
[Inspec](http://inspec.io/) is used to check infrastructure. | ||
|
||
Check: | ||
|
||
```shell | ||
❯ make -f hack/build/alicloud.mk inspec-alicloud-debug | ||
``` | ||
|
||
Execute tests: | ||
|
||
{{% alert title="Work In Progress" color="warning" %}} | ||
{{% /alert %}} | ||
|
||
|
||
## CIS Kubernetes Benchmark | ||
|
||
```shell | ||
❯ make -f hack/build/alicloud.mk inspec-alicloud-kubernetes ENV=staging | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,60 @@ | ||
+++ | ||
title = "Install Portefaix" | ||
description = "Instructions for deploying Portefaix on Alibaba Cloud" | ||
weight = 10 | ||
+++ | ||
|
||
<a id="alicloud"></a> | ||
|
||
## Setup | ||
|
||
Create an admin user, then API Keys. | ||
And configure Portefaix environment file `${HOME}/.config/portefaix/portefaix.sh`: | ||
|
||
```shell | ||
# Alicloud | ||
function setup_alicloud() { | ||
# Alicloud User: Portefaix Admin | ||
export ALICLOUD_ACCESS_KEY="xxxxxxxxxx" | ||
export ALICLOUD_SECRET_KEY="xxxxxxxxxxxxxxxx" | ||
export ALICLOUD_REGION="eu-central-1" | ||
# For Terraform Cloud | ||
export TF_VAR_access_key="${ALICLOUD_ACCESS_KEY}" | ||
export TF_VAR_secret_key="${ALICLOUD_SECRET_KEY}" | ||
export TF_VAR_region="${ALICLOUD_REGION}" | ||
} | ||
``` | ||
|
||
And load environment : | ||
|
||
```shell | ||
❯ . ./portefaix.sh alicloud | ||
``` | ||
|
||
## Storage for Terraform | ||
|
||
Create an OSS bucket for Terraform states: | ||
|
||
```shell | ||
❯ make -f hack/build/alicloud.mk aliyun-bucket-create ENV=staging | ||
``` | ||
|
||
Create a TableStore instance: | ||
|
||
```shell | ||
❯ make -f hack/build/alicloud.mk aliyun-tablestore-create ENV=staging | ||
``` | ||
|
||
<a id="alicloud-terraform-cloud"></a> | ||
|
||
## Terraform Cloud / Github Actions | ||
|
||
[Terraform Cloud](https://terraform.cloud) is used as the remote backend. [Github Actions](https://github.com/features/actions) perform tasks to deploy the Alibaba Cloud infrastructure. | ||
|
||
<img src="/docs/images/portefaix-alicloud-deploy.png" alt="Portefaix Alibaba Cloud deployment" class="mt-3 mb-3 rounded"> | ||
|
||
<a id="alicloud-gitops"></a> | ||
|
||
## Gitops for Kubernetes | ||
|
||
See : [Gitops with FluxCD](/docs/development/gitops-fluxcd) or [Gitops with ArgoCD](/docs/development/gitops-argocd/) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,5 @@ | ||
+++ | ||
title = "Uninstall Portefaix" | ||
description = "Instructions for uninstall Portefaix" | ||
weight = 30 | ||
+++ |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,5 @@ | ||
+++ | ||
title = "Troubleshooting Deployments on Alibaba Cloud ACK" | ||
description = "Help diagnose and fix issues you may encounter in your Portefaix deployment" | ||
weight = 100 | ||
+++ |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Large diffs are not rendered by default.
Oops, something went wrong.