88 lines
6.9 KiB
Markdown
88 lines
6.9 KiB
Markdown
# Kluster setup and IaaC using argoCD
|
|
|
|
|
|
### Description
|
|
#### Requirements:
|
|
- A running k3s instance
|
|
- `sealedsecrets` deployed
|
|
|
|
#### Installing argo and the app-of-apps
|
|
```
|
|
kubectl apply -k infrastructure/argocd
|
|
```
|
|
This will install argocd and its CRDs in a dedicated namespace. The app-of-apps is configured under `kluster-deployments/` and deployed as well. This will bootstrap all other apps, as described in `./kluster-deployments`.
|
|
|
|
The app-of-apps will bootstrap a fully featured cluster with the following components
|
|
- postgres instance with backups
|
|
- backup of all nfs PVCs using restic
|
|
- traefik (along with metallb as a publicly accessible reverse proxy)
|
|
- an nfs-provisioner creating PVCs on-demand
|
|
- gitea
|
|
- a range of selfhosted apps:
|
|
- nextcloud
|
|
- jellyfin
|
|
- adguard-home
|
|
- homarr
|
|
- homeassistant
|
|
- immich
|
|
- ...
|
|
|
|
## Setup instructions
|
|
1. install sealedsecrets see [README](./infrastructure/sealedsecrets/README.md)
|
|
```bash
|
|
kubectl apply -k infrastructure/sealedsecrets
|
|
kubectl apply -f infrastructure/sealedsecrets/main.key
|
|
kubectl delete pod -n kube-system -l name=sealed-secrets-controller
|
|
```
|
|
1. install argocd and the app-of-apps bundled with it
|
|
```bash
|
|
kubectl apply -k infrastructure/argocd
|
|
```
|
|
|
|
|
|
> NOTE: The argocd kustomization already mentions some CRDs available only after the full bootstrapping (traefik). Some might fail to apply right away. Since the argo application is managed through argo as well, they will become available as all kluster applications are rolled out.
|
|
|
|
|
|
### Adding an application
|
|
1. todo
|
|
1. Don't forget to add the status badge.
|
|
|
|
|
|
|
|
### Status
|
|
[](https://argocd.kluster.moll.re/applications/authelia-application)
|
|
[](https://argocd.kluster.moll.re/applications/backup-application)
|
|
[](https://argocd.kluster.moll.re/applications/external-application)
|
|
[](https://argocd.kluster.moll.re/applications/external-dns-application)
|
|
[](https://argocd.kluster.moll.re/applications/gitea-application)
|
|
[](https://argocd.kluster.moll.re/applications/metallb-application)
|
|
[](https://argocd.kluster.moll.re/applications/monitoring-application)
|
|
[](https://argocd.kluster.moll.re/applications/nfs-provisioner-application)
|
|
[](https://argocd.kluster.moll.re/applications/pg-ha-application)
|
|
[](https://argocd.kluster.moll.re/applications/renovate-application)
|
|
[](https://argocd.kluster.moll.re/applications/sealedsecrets-application)
|
|
[](https://argocd.kluster.moll.re/applications/traefik-application)
|
|
|
|
|
|
---
|
|
[](https://argocd.kluster.moll.re/applications/adguard-application)
|
|
[](https://argocd.kluster.moll.re/applications/audiobookshelf-application)
|
|
[](https://argocd.kluster.moll.re/applications/code-server-application)
|
|
[](https://argocd.kluster.moll.re/applications/files-application)
|
|
[](https://argocd.kluster.moll.re/applications/finance-application)
|
|
[](https://argocd.kluster.moll.re/applications/grafana-application)
|
|
[](https://argocd.kluster.moll.re/applications/homeassistant-application)
|
|
[](https://argocd.kluster.moll.re/applications/immich-application)
|
|
[](https://argocd.kluster.moll.re/applications/kitchenowl-application)
|
|
[](https://argocd.kluster.moll.re/applications/linkding-application)
|
|
[](https://argocd.kluster.moll.re/applications/media-application)
|
|
[](https://argocd.kluster.moll.re/applications/minecraft-application)
|
|
[](https://argocd.kluster.moll.re/applications/ntfy-application)
|
|
[](https://argocd.kluster.moll.re/applications/paperless-application)
|
|
[](https://argocd.kluster.moll.re/applications/recipes-application)
|
|
[](https://argocd.kluster.moll.re/applications/rss-application)
|
|
---
|
|
[](https://argocd.kluster.moll.re/applications/journal-application)
|
|
[](https://argocd.kluster.moll.re/applications/physics-application)
|
|
|