-
install ingress controller
k apply -f nginx-controller-deploy.yaml
-
install cert-manager
k apply -f cert-manager.yaml
-
create ClusterIssuer
k apply -f cluster-issuer.yaml
-
install vault
helm install
-
install argocd
k create ns argocd k create -f argocd-install.yaml -n argocd
-
create ingress for argocd
k create -f argocd-server-ingress.yaml
-
install metric server(optional)
kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yaml
https://github.com/kubernetes-sigs/metrics-server#installation
-
install vault
helm repo add hashicorp https://helm.releases.hashicorp.com helm search repo hashicorp/vault -l helm install vault hashicorp/vault
-
init vault:
k exec -it vault-0 -- vault operator init k exec -it vault-0 -- vault operator unseal <key1> k exec -it vault-0 -- vault operator unseal <key2> k exec -it vault-0 -- vault operator unseal <key3> k exec -it vault-0 -- vault operator unseal <key4> k exec -it vault-0 -- vault operator unseal <key5> k get po
- setup vault
- vault auto-unseal
- setup grafana
- setup dashboard
- setup rook
- setup ELK
- setup Istio
- setup cilium
- setup yugabyte db
- setup velero
- enhance security practice
- setup minio