51 lines
2.0 KiB
Markdown
51 lines
2.0 KiB
Markdown
# Laptop Flux
|
|
|
|
`choco install kind`
|
|
`choco install flux`
|
|
|
|
`kind create cluster`
|
|
`flux bootstrap git --private-key-file=C:/Users/Joe/.ssh/gitea --url ssh://git@gitea.home.joemonk.co.uk:2222/joe/gitops.git --branch main --path=clusters/kind`
|
|
|
|
# Kairos
|
|
|
|
- Grab the latest image from https://github.com/kairos-io/kairos/releases, the image should have the format `kairos-debian-bookworm-standard-amd64-generic-v3.1.1-k3sv1.30.2+k3s1`.
|
|
The main things we're looking for are the latest debian, standard, amd64, then the versions of kairos (v3.1.1) and k3s (1.30.2).
|
|
- Burn to usb
|
|
- Boot from usb, live install and go to the config webui
|
|
- Add the public keys to the config (from ~/.ssh - `ssh-keygen -t ed25519 -C "joemonk@hotmail.co.uk"`)
|
|
- Put the kairos_config in, check the shutdown button and let it install
|
|
- Remove the usb, ssh in with using the specific private key (i.e. from ~/.ssh - `ssh -i ./kairos kairos@192.168.1.101` or add the following to ~/.ssh/config to just use `ssh 192.168.1.101`)
|
|
|
|
```
|
|
Host 192.168.1.101
|
|
HostName 192.168.1.101
|
|
User kairos
|
|
IdentityFile ~/.ssh/kairos
|
|
```
|
|
|
|
## Kubectl
|
|
|
|
SSH into the server, and grab the kubeconfig with `sudo cat /etc/rancher/k3s/k3s.yaml`.
|
|
Drop the user and cluster into your config and create a context to have that user and cluster
|
|
|
|
## Flux CD
|
|
|
|
Install flux and everything in this repo with the following:
|
|
|
|
- `flux bootstrap git --private-key-file=/config/.ssh/gitea --url ssh://git@gitea.home.joemonk.co.uk:2222/joe/gitops.git --branch main --path=clusters/kairos`
|
|
|
|
## DNS
|
|
|
|
We need to point a dns server to the server so we can access things via hostname rather than needing complex routing.
|
|
|
|
### In OPNSense
|
|
|
|
- Make sure Services > UnboundDNS is active and working
|
|
- In overrides, add the host as `*`, domain as `k3s` and value as the ip address of the server
|
|
|
|
You should be able to access `http://traefik.k3s:9000/dashboard#/` (at the time of writing, looking to route this properly)
|
|
|
|
## Grafana
|
|
|
|
Grab the admin user password from the `monitoring-grafana` secret
|