Files

ducoterra 100e25331d Add proper templating with vault keys

Rather than copying a template to the k3os server and editing it in vim,
us yq to generate a template with values stored in vault (token and
server_url). Update the README to reflect these changes.

2021-07-18 15:15:52 -04:00

1.6 KiB

Raw Permalink Blame History

Configuration Settings

Requirements

Install kustomize
```
brew install yq
```

Configure vault variables

vault kv put secret/k3os-alpha.dnet/agent token=<token> server_url=<server_url>

Template your server or agent

# server
HOSTNAME=<HOSTNAME>; yq e ".hostname = \"$HOSTNAME\" | .k3os.token = \"$(vault kv get -field=token secret/k3os-alpha.dnet/agent)\" | .k3os.server_url = \"$(vault kv get -field=server_url secret/k3os-alpha.dnet/agent)\"" k3os_server.yaml > templates/$HOSTNAME.yaml

# agent
HOSTNAME=<HOSTNAME>; yq e ".hostname = \"$HOSTNAME\" | .k3os.token = \"$(vault kv get -field=token secret/k3os-alpha.dnet/agent)\" | .k3os.server_url = \"$(vault kv get -field=server_url secret/k3os-alpha.dnet/agent)\"" k3os_agent.yaml > templates/$HOSTNAME.yaml

Save the template to /var/lib/rancher/k3os/config.yaml

Draining

kubectl --context mainframe-admin drain mainframe --force --ignore-daemonsets --delete-local-data

Upgrading

kubectl label node k3os-alpha k3os.io/upgrade=enabled --overwrite

Mounting

mount UUID='62A28E6D-EDC1-4825-BCD9-1F58601B5E36' /local

Network

ip addr add 6.0.22.1/30 dev eth1
ip link set eth1 up
ifconfig eth1 down && ifconfig eth1 up

ifconfig ix0 6.0.22.2 netmask 255.255.255.0 broadcast 6.0.22.255 ifconfig ix0 down && ifconfig ix0 up

ifconfig eth1 6.0.22.1/30 broadcast 6.0.22.3 ifconfig eth1 down && ifconfig eth1 up

Testing

Disk

dd if=/dev/zero of=/media/nfs/output bs=16k count=100k; dd if=/media/nfs/output of=/dev/null; rm -f /media/nfs/output

1.6 KiB Raw Permalink Blame History