Services that are available for public usage.
On some bare-metal systems, microk8s is used to deploy Kubernetes. For all other services, Managed Kubernetes installations, provided by a Gardener instance, are used.
apt-get install -y snapcraft
snap install microk8s --classic --channel=1.23/stable
snap install kubectl --classic
microk8s enable dns dashboard storage ingressThe following command will output the kubeconfig file from microk8s:
microk8s configmicrok8s reset --destroy-storage
microk8s enable dns dashboard storage ingresssto1 is a bare-metal system with 14x 16 TByte SATA HDDs. It is used to store logs of the CI and container images. The storage is configured in a ZFS pool.
kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.7.2/cert-manager.yaml
kubectl apply -f generic/cert-manager.yamlkubectl create -f https://download.elastic.co/downloads/eck/1.8.0/crds.yaml
kubectl apply -f https://download.elastic.co/downloads/eck/1.8.0/operator.yaml
kubectl apply -f sto1/logs.yamlGet the credentials of the automatically created default user named elastic:
kubectl get secret logs-es-elastic-user -o go-template='{{.data.elastic | base64decode}}'helm repo add harbor https://helm.goharbor.iohelm install --create-namespace --namespace harbor harbor harbor/harbor --values sto1/harbor/harbor.yaml --set harborAdminPassword=passwordhelm upgrade --namespace harbor harbor harbor/harbor --reuse-valueshelm repo add gitea-charts https://dl.gitea.io/charts/helm install --create-namespace --namespace gitea gitea gitea-charts/gitea --values sto1/gitea/values.yaml --set gitea.admin.password=passwordhelm upgrade --namespace gitea gitea gitea-charts/gitea --reuse-valuessto2 is a bare-metal system with 2x 8 TByte SATA HDDs. It is used to store machine images. Different to sto1, this system is not configured with a ZFS because minio cannot handle snapshots of ZFS and refuses to start at all (within kubernetes).
kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.7.2/cert-manager.yaml
kubectl apply -f generic/cert-manager.yamlbrew install krew
kubectl krew install minioTo be able to run kubectl plugins, you need to add the following to your ~/.zshrc:
export PATH="${PATH}:${HOME}/.krew/bin"kubectl minio init --namespace-to-watch default -o > generic/minio-operator.yaml
kubectl apply -f generic/minio-operator.yamlkubectl minio tenant create -o --servers 1 --volumes 4 --capacity 400Gi --storage-class microk8s-hostpath --enable-host-sharing minio --namespace default > sto2/minio/minio.yaml
kubectl apply -f sto2/minio/minio-secrets.yaml
kubectl apply -f sto2/minio/minio.yamlkubectl minio proxy -n minio-operatorThe operator automatically updates the deployment with the newest stable versions.