2022-05-05 15:42:34 +00:00
|
|
|
# Netflux on Kubernetes
|
|
|
|
|
|
2022-05-05 20:51:11 +00:00
|
|
|
This is a learning project to migrate the self-hosted services that I host at
|
|
|
|
|
netflux.io to Kubernetes.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
This repository contains the Kubernetes manifests, which are built using
|
|
|
|
|
Kustomize. Helm chart dependencies are inflated and managed in this repository
|
|
|
|
|
to improve observability. The cluster is deployed to DigitalOcean managed K8S
|
|
|
|
|
in production, but can be easily applied to a local cluster for testing.
|
|
|
|
|
|
|
|
|
|
## Building
|
|
|
|
|
|
|
|
|
|
The manifests can be built with:
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
make dev
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
and applied with:
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
make dev | kubectl apply -f -
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## Cluster setup
|
2022-05-05 15:42:34 +00:00
|
|
|
|
|
|
|
|
### cert-manager
|
|
|
|
|
|
2022-05-05 20:51:11 +00:00
|
|
|
cert-manager should only be installed in production. It is not managed inside this repository.
|
2022-05-05 15:42:34 +00:00
|
|
|
|
|
|
|
|
See: https://cert-manager.io/docs/installation/helm/
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
helm repo add jetstack https://charts.jetstack.io
|
|
|
|
|
helm repo up
|
|
|
|
|
helm install cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace --version v1.8.0 --set installCRDs=true
|
|
|
|
|
|
|
|
|
|
# create issuers
|
|
|
|
|
kubectl apply -f cert-manager/issuer-staging.yml
|
|
|
|
|
kubectl apply -f cert-manager/issuer-production.yml
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
This should be sufficient for cert-manager to issue certificates automatically when the
|
|
|
|
|
`tls.enabled` value is set to `true`.
|
