Asara/k8s
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

reorder install to get vault setup properly

Browse source
This commit is contained in:
Amarpreet Minhas 2022-12-31 03:00:11 +00:00
parent fe4c4e8f4b
commit 789e8f02a1
1 changed files with 12 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
helm/setup/003-cert-manager/install.sh
View file

@ -7,6 +7,17 @@ VAULT_AUTH_NAMESPACE="k8s-teapot"
kubectl create ns ${NAMESPACE} kubectl create ns ${NAMESPACE}
kubectl apply -n ${NAMESPACE} -f external-secrets.yaml kubectl apply -n ${NAMESPACE} -f external-secrets.yaml
HOST_IP=$(ip addr show eth0 | grep -Po 'inet \K[\d.]+')
TOKEN="$(kubectl get secret serviceaccounttoken -n cert-manager -o go-template='{{ .data.token }}' | base64 -d)"
vault write auth/${VAULT_AUTH_NAMESPACE}/role/cert-manager \
bound_service_account_names=cert-manager \
bound_service_account_namespaces=cert-manager \
policies=cert-manager \
ttl=24h
vault write auth/${VAULT_AUTH_NAMESPACE}/login role=cert-manager jwt=${TOKEN} iss=https://${HOST_IP}:6443
helm repo add jetstack https://charts.jetstack.io helm repo add jetstack https://charts.jetstack.io
helm repo update helm repo update
helm upgrade --install \ helm upgrade --install \
@ -25,23 +36,12 @@ kind: Secret
type: kubernetes.io/service-account-token type: kubernetes.io/service-account-token
metadata: metadata:
name: serviceaccounttoken name: serviceaccounttoken
namespace: cert-manager namespace: cert-manager
annotations: annotations:
kubernetes.io/service-account.name: "cert-manager" kubernetes.io/service-account.name: "cert-manager"
... ...
EOH EOH
HOST_IP=$(ip addr show eth0 | grep -Po 'inet \K[\d.]+')
TOKEN="$(kubectl get secret serviceaccounttoken -n cert-manager -o go-template='{{ .data.token }}' | base64 -d)"
vault write auth/${VAULT_AUTH_NAMESPACE}/role/cert-manager \
bound_service_account_names=cert-manager \
bound_service_account_namespaces=cert-manager \
policies=cert-manager \
ttl=24h
vault write auth/${VAULT_AUTH_NAMESPACE}/login role=cert-manager jwt=${TOKEN} iss=https://${HOST_IP}:6443
helm upgrade -install \ helm upgrade -install \
cert-manager-csi-driver \ cert-manager-csi-driver \
jetstack/cert-manager-csi-driver \ jetstack/cert-manager-csi-driver \