https://github.com/mtrnord/cluster
Infrastructure files for Nordgedanken and Midnightthoughts.
https://github.com/mtrnord/cluster
gitops helm k8s kubernetes
Last synced: 12 months ago
JSON representation
Infrastructure files for Nordgedanken and Midnightthoughts.
- Host: GitHub
- URL: https://github.com/mtrnord/cluster
- Owner: MTRNord
- Created: 2023-03-17T00:57:10.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2025-04-09T18:22:06.000Z (12 months ago)
- Last Synced: 2025-04-09T18:36:40.936Z (12 months ago)
- Topics: gitops, helm, k8s, kubernetes
- Language: Shell
- Homepage:
- Size: 4.26 MB
- Stars: 3
- Watchers: 2
- Forks: 0
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Cluster Configs for Midnightthoughts and Nordgedanken
These are the current running setups at Midnightthoughts and Nordegedanken.
This is based on
## Prerequisites
You will need a Kubernetes cluster version 1.21 or newer.
For a quick local test, you can use [Kubernetes kind](https://kind.sigs.k8s.io/docs/user/quick-start/).
Any other Kubernetes setup will work as well though.
Install the Flux CLI on MacOS or Linux using Homebrew:
```sh
brew install fluxcd/tap/flux
```
Or install the CLI by downloading precompiled binaries using a Bash script:
```sh
curl -s https://fluxcd.io/install.sh | sudo bash
```
## Repository structure
The Git repository contains the following top directories:
- **apps** dir contains Helm releases with a custom configuration per cluster
- **infrastructure** dir contains common infra tools such as ingress-nginx and cert-manager
- **clusters** dir contains the Flux configuration per cluster (Note that staging isn't deployed anywhere at this time)
```
├── apps
│ ├── base
│ ├── production
│ └── staging
├── infrastructure
│ ├── configs
│ └── controllers
└── clusters
├── production
└── staging
```
### Applications
The apps configuration is structured into:
- **apps/base/** dir contains namespaces and Helm release definitions
- **apps/production/** dir contains the production Helm release values
- **apps/staging/** dir contains the staging values
```
./apps/
├── base
│ └── podinfo
│ ├── kustomization.yaml
│ ├── namespace.yaml
│ ├── release.yaml
│ └── repository.yaml
├── production
│ ├── kustomization.yaml
│ └── podinfo-patch.yaml
└── staging
├── kustomization.yaml
└── podinfo-patch.yaml
```
### Infrastructure
The infrastructure is structured into:
- **infrastructure/controllers/** dir contains namespaces and Helm release definitions for Kubernetes controllers
- **infrastructure/configs/** dir contains Kubernetes custom resources such as cert issuers and networks policies
```
./infrastructure/
├── configs
│ ├── cluster-issuers.yaml
│ ├── network-policies.yaml
│ └── kustomization.yaml
└── controllers
├── cert-manager.yaml
├── ingress-nginx.yaml
├── weave-gitops.yaml
└── kustomization.yaml
```
In **clusters/production/infrastructure.yaml** we replace the Let's Encrypt server value to point to the production API:
```yaml
apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
kind: Kustomization
metadata:
name: infra-configs
namespace: flux-system
spec:
# ...omitted for brevity
dependsOn:
- name: infra-controllers
patches:
- patch: |
- op: replace
path: /spec/acme/server
value: https://acme-v02.api.letsencrypt.org/directory
target:
kind: ClusterIssuer
name: letsencrypt
```
Note that with `dependsOn` we tell Flux to first install or upgrade the controllers and only then the configs.
This ensures that the Kubernetes CRDs are registered on the cluster, before Flux applies any custom resources.
## Useful things
Watch for the Helm releases being installed:
```console
$ watch flux get helmreleases --all-namespaces
NAMESPACE NAME REVISION SUSPENDED READY MESSAGE
flux-system weave-gitops 4.0.12 False True Release reconciliation succeeded
```
Watch kustomizations getting deployed:
```console
$ flux get kustomizations -w
NAME REVISION SUSPENDED READY MESSAGE
flux-system main@sha1:21ebd912 False True Applied revision: main@sha1:21ebd912
infra-controllers main@sha1:21ebd912 False True Applied revision: main@sha1:21ebd912
```
## Kube linter
`kube-linter lint . > audit.txt`