Automata

Monorepo for Starjunk and subsidiaries.

Getting started

Prerequisites

• Bazel

Apply manifests

# the managed-by label is pre-applied, so pruning is safe
bazel run //clusters:objects.apply -- --prune

Creating a new cluster

Create a cluster role for GitHub Actions

Create a service account, bind to a cluster role and store the service account's token as a repository secret.

$ k -n default create serviceaccount automata
$ k create clusterrolebinding automata --clusterrole cluster-admin --serviceaccount=default:automata
$ k get secret $(k get sa automata -ojson | jq -r '.secrets[0].name') -oyaml
# token
$ k get secret $(k get sa automata -ojson | jq -r '.secrets[0].name') -ojson | jq -r '.data.token'| base64 --decode
# ca.crt
$ k get secret $(k get sa automata -ojson | jq -r '.secrets[0].name') -ojson | jq -r '.data["ca.crt"]' | base64 --decode