Generate certificates by calling the script generate-tiller-certs.sh. This will provide a CA, server certs for tiller and client certs for helm / weave flux.
Next deploy Helm with TLS and RBAC enabled;
kubectl apply -f helm-rbac.yaml| https://docs.google.com/presentation/d/1daRyJU91ByjRCZiYYAT4-GSSQjlIuV26pREBs7XiIv0/edit?usp=sharing |
| # Get editor completions based on the config schema | |
| "$schema" = 'https://starship.rs/config-schema.json' | |
| # Inserts a blank line between shell prompts | |
| add_newline = true | |
| format = '$kubernetes$custom$all' | |
| # Replace the '❯' symbol in the prompt with '➜' | |
| # [character] # The name of the module we are configuring is 'character' |
| #cloud-config | |
| package_update: false | |
| package_upgrade: false | |
| chpasswd: | |
| expire: false | |
| users: | |
| - {name: demo, password: letmein, type: text} | |
| ssh_pwauth: true | |
| users: |
| apiVersion: v1 | |
| kind: Namespace | |
| metadata: | |
| name: echoserver | |
| --- | |
| apiVersion: apps/v1 | |
| kind: Deployment | |
| metadata: | |
| name: echoserver | |
| namespace: echoserver |
Generate certificates by calling the script generate-tiller-certs.sh. This will provide a CA, server certs for tiller and client certs for helm / weave flux.
Next deploy Helm with TLS and RBAC enabled;
kubectl apply -f helm-rbac.yaml| #!/bin/bash | |
| # First generate the config file | |
| cat >ca-config.json <<EOF | |
| { | |
| "signing": { | |
| "default": { | |
| "expiry": "43800h" | |
| }, | |
| "profiles": { |
I hereby claim:
To claim this, I am signing this object: