theshire/kubernetes/bootstrap/readme.md

Bootstrap

Talos

Bootstrap talos cluster

omnictl cluster template sync -f ./template.yaml --omniconfig ./omniconfig.yaml

Flux

Install Flux

kubectl apply --server-side --kustomize ./kubernetes/bootstrap/flux

Apply secrets, settings, and crds.

These cannot be applied with kubectl in the regular fashion due to be encrypted with sops

sops --decrypt kubernetes/bootstrap/flux/age-key.sops.yaml | kubectl apply -f -
sops --decrypt kubernetes/bootstrap/flux/git-deploy-key.sops.yaml | kubectl apply -f -
sops --decrypt kubernetes/flux/vars/cluster-secrets.sops.yaml | kubectl apply -f -
kubectl apply -f kubernetes/flux/vars/cluster-settings.yaml
kubectl apply -k kubernetes/bootstrap/kps-crds/

Kick off Flux applying this repository

kubectl apply --server-side --kustomize ./kubernetes/flux/config