https://alwaldend.com/tags/flux/ Recent content in Flux on Alwaldend Hugo en https://alwaldend.com/docs/infra/flux/cl/ Mon, 01 Jan 0001 00:00:00 +0000 https://alwaldend.com/docs/infra/flux/cl/ <h2 id="links">Links<a class="td-heading-self-link" href="#links" aria-label="Heading self-link"></a></h2><ul> <li>Cert manager charts: <a href="https://artifacthub.io/packages/helm/cert-manager/cert-manager">https://artifacthub.io/packages/helm/cert-manager/cert-manager</a></li> </ul> https://alwaldend.com/docs/infra/harbor/cl/ Mon, 01 Jan 0001 00:00:00 +0000 https://alwaldend.com/docs/infra/harbor/cl/ https://alwaldend.com/docs/infra/flux/ Mon, 01 Jan 0001 00:00:00 +0000 https://alwaldend.com/docs/infra/flux/ <h2 id="links">Links<a class="td-heading-self-link" href="#links" aria-label="Heading self-link"></a></h2><ul> <li>Site: <a href="https://fluxcd.io/">https://fluxcd.io/</a></li> </ul> <h2 id="set-up-port-forwarding">Set up port forwarding<a class="td-heading-self-link" href="#set-up-port-forwarding" aria-label="Heading self-link"></a></h2><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-sh" data-lang="sh"><span style="display:flex;"><span>ssh -L 6443:127.0.0.1:6443 -N flux.alwaldend.com </span></span></code></pre></div><h2 id="run-flux-cli">Run flux CLI<a class="td-heading-self-link" href="#run-flux-cli" aria-label="Heading self-link"></a></h2><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-sh" data-lang="sh"><span style="display:flex;"><span>bazel run //infra/flux/cl:flux </span></span></code></pre></div><h2 id="show-flux-status">Show flux status<a class="td-heading-self-link" href="#show-flux-status" aria-label="Heading self-link"></a></h2><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-sh" data-lang="sh"><span style="display:flex;"><span>bazel run infra/flux/cl:flux -- get all -A </span></span></code></pre></div><h2 id="run-bootstrap">Run bootstrap<a class="td-heading-self-link" href="#run-bootstrap" aria-label="Heading self-link"></a></h2><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-sh" data-lang="sh"><span style="display:flex;"><span>bazel run //infra/flux/cl:flux.bootstrap </span></span></code></pre></div><h2 id="run-flux-operator">Run flux operator<a class="td-heading-self-link" href="#run-flux-operator" aria-label="Heading self-link"></a></h2><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-sh" data-lang="sh"><span style="display:flex;"><span>bazel run //infra/flux/cl:op </span></span></code></pre></div><h2 id="show-oidc-info">Show oidc info<a class="td-heading-self-link" href="#show-oidc-info" aria-label="Heading self-link"></a></h2><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-sh" data-lang="sh"><span style="display:flex;"><span>bazel run //infra/flux/cl:oidc </span></span></code></pre></div><h2 id="renew-certificate">Renew certificate<a class="td-heading-self-link" href="#renew-certificate" aria-label="Heading self-link"></a></h2><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-sh" data-lang="sh"><span style="display:flex;"><span>bazel run //infra/flux/cl:cmctl -- renew traefik-gateway-websecure-tls -n traefik </span></span></code></pre></div><h2 id="update-secrets">Update secrets<a class="td-heading-self-link" href="#update-secrets" aria-label="Heading self-link"></a></h2><ul> <li>Generate secret id and the token: <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-sh" data-lang="sh"><span style="display:flex;"><span>SECRET_ID<span style="color:#f92672">=</span><span style="color:#66d9ef">$(</span>bazel run //infra/flux/cl:vault.secret_id | jq -r .data.secret_id<span style="color:#66d9ef">)</span> </span></span><span style="display:flex;"><span>TOKEN<span style="color:#f92672">=</span><span style="color:#66d9ef">$(</span>echo <span style="color:#e6db74">&#34;</span><span style="color:#e6db74">${</span>SECRET_ID<span style="color:#e6db74">}</span><span style="color:#e6db74">&#34;</span> | bazel run //infra/flux/cl:vault.ops_token | jq -r .auth.client_token<span style="color:#66d9ef">)</span> </span></span><span style="display:flex;"><span>echo <span style="color:#e6db74">&#34;Secret id: </span><span style="color:#e6db74">${</span>SECRET_ID<span style="color:#e6db74">}</span><span style="color:#e6db74">, Token: </span><span style="color:#e6db74">${</span>TOKEN<span style="color:#e6db74">}</span><span style="color:#e6db74">&#34;</span> </span></span></code></pre></div></li> <li>Patch secret-id in <a href="https://github.com/alwaldend/src/blob/master/infra/flux/cl/cert-manager/issuer-approle.yaml">./cl/cert-manager/issuer-approle.yaml</a></li> <li>Patch token in <a href="https://github.com/alwaldend/src/blob/master/projects/kustomization/flux-repo/flux-sops-secret.yaml">projects/kustomization/flux-repo/flux-sops-secret.yaml</a></li> <li>Encrypt: <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-sh" data-lang="sh"><span style="display:flex;"><span>bazel run //infra/flux/cl:sops.encrypt infra/flux/cl/cert-manager/issuer-approle.yaml </span></span><span style="display:flex;"><span>bazel run //infra/flux/cl:sops.encrypt projects/kustomization/flux-repo/flux-sops-secret.yaml </span></span><span style="display:flex;"><span>bazel run //infra/flux/cl:sops.encrypt projects/kustomization/flux-repo/flux-git-src-secret.yaml </span></span></code></pre></div></li> </ul> https://alwaldend.com/docs/tools/flux_operator/ Mon, 01 Jan 0001 00:00:00 +0000 https://alwaldend.com/docs/tools/flux_operator/ <h2 id="links">Links<a class="td-heading-self-link" href="#links" aria-label="Heading self-link"></a></h2><ul> <li>Site: <a href="https://fluxoperator.dev">https://fluxoperator.dev</a></li> <li>Releases: <a href="https://github.com/controlplaneio-fluxcd/flux-operator/releases">https://github.com/controlplaneio-fluxcd/flux-operator/releases</a></li> </ul> https://alwaldend.com/docs/third_party/io_controlplane_flux_operator/ Mon, 01 Jan 0001 00:00:00 +0000 https://alwaldend.com/docs/third_party/io_controlplane_flux_operator/ <h2 id="links">Links<a class="td-heading-self-link" href="#links" aria-label="Heading self-link"></a></h2><ul> <li>Site: <a href="https://fluxoperator.dev">https://fluxoperator.dev</a></li> <li>Releases: <a href="https://github.com/controlplaneio-fluxcd/flux-operator/releases">https://github.com/controlplaneio-fluxcd/flux-operator/releases</a></li> </ul> https://alwaldend.com/docs/projects/kustomization/ Mon, 01 Jan 0001 00:00:00 +0000 https://alwaldend.com/docs/projects/kustomization/ <p>This project contains Kubernetes Kustomization resources for Flux, Traefik, and cert-manager. It is still in progress.</p> <h2 id="links">Links<a class="td-heading-self-link" href="#links" aria-label="Heading self-link"></a></h2><ul> <li>Docs: <a href="https://fluxcd.io/flux/components/kustomize/kustomizations/">https://fluxcd.io/flux/components/kustomize/kustomizations/</a></li> </ul>