harbor.txt

$ helm repo add harbor https://helm.goharbor.io
$ helm repo update
$ helm install harbor1 harbor/harbor -n harbor --create-namespace \
    --set expose.type=loadBalancer \
    --set expose.tls.certSource=secret \
    --set expose.tls.secret.secretName=harbor1-certificate \
    --set expose.loadBalancer.name=harbor1alb \
    --set externalURL="https://harbor1.otherdevopsgene.com"

$ docker run --rm -v "${HOME}/.aws:/root/.aws" -v "${HOME}/.kube:/root/.kube" \
    -v "$(pwd):/work" --workdir /work weaveworks/eksctl create cluster \
    --config-file=spot-cluster.yml
    
---
apiVersion: eksctl.io/v1alpha5
kind: ClusterConfig

metadata:
  name: sandbox2
  region: us-east-1

managedNodeGroups:
  - name: sandbox2-private-1
    instanceSelector:
      vCPUs: 2
      memory: 4
    minSize: 2
    maxSize: 5
    volumeSize: 20
    amiFamily: Bottlerocket
    spot: true
  - name: sandbox2-public-1
    instanceSelector:
      vCPUs: 2
      memory: 4
    minSize: 1
    maxSize: 3
    volumeSize: 20
    amiFamily: Bottlerocket
    spot: true

cloudWatch:
  clusterLogging:
    enableTypes: 
      - all


$ helm repo add jetstack https://charts.jetstack.io
$ helm repo update
$ kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.9.1/cert-manager.crds.yaml
$ helm install \
  cert-manager jetstack/cert-manager \
  --namespace cert-manager \
  --create-namespace \
  --version v1.9.1
# https://www.howtogeek.com/devops/how-to-install-kubernetes-cert-manager-and-configure-lets-encrypt/
# https://www.thinktecture.com/en/kubernetes/ssl-certificates-with-cert-manager-in-kubernetes/