devorbitus

*** Disclaimer: Config and instructions supplied 'as is'. No suitability for use implied and by using these instructions
users assume responsibility for any outcomes of the use of these configuration files and instructions ***

Acknowledgements:
* kube-spinnaker-demo.yml has been derived from quickstart instructions and samples from the spinnaker.io site.
* service.yml, storage.yml and elasticsearch.yml have been copied (with minor modifications) from the elasticsearch instructions from the spinnaker.io site. (https://www.spinnaker.io/guides/user/tagging/)

Quick instructions for getting an environment up and running with support for k8s, CloudFoundry and entity tagging. Setup is
based on the quickstart file provided on the spinnaker.io website.
Familiarity with Kubernetes is assumed. This was tested out on GKE.

devorbitus

kubectl create ns oncall
kubectl config set-context (kubectl config current-context) --namespace=oncall
kubectl create secret generic mysql-pass --from-literal=password='1234'
kubectl apply -f oncall_config.yml
kubectl apply -f oncall_depl.yml

devorbitus

  // Available variables:
  // - Machine
  // - interpret
  // - assign
  // - send
  // - sendParent
  // - spawn
  // - raise
  // - actions

devorbitus

  // Available variables:
  // - Machine
  // - interpret
  // - assign
  // - send
  // - sendParent
  // - spawn
  // - raise
  // - actions

devorbitus

die() { echo "$*" 1>&2 ; exit 1; }
join_by() { local d=$1; shift; echo -n "$1"; shift; printf "%s" "${@/#/$d}"; }

COUNTRY_CODE="${COUNTRY_CODE:-US}"
STATE_CODE="${STATE_CODE:-GA}"
CITY="${CITY:-Atlanta}"
ORGANIZATION="${ORGANIZATION:-Spingo}"

if [ -z "$COMMA_SEPERATED_GROUPS" ]; then
	die "A List of comma separated groups is required to create the x509 certificate for those groups"

devorbitus

# This file is a template, and might need editing before it works on your project.
# This is a sample GitLab CI/CD configuration file that should run without any modifications.
# It demonstrates a basic 3 stage CI/CD pipeline. Instead of real tests or scripts,
# it uses echo commands to simulate the pipeline execution.
#
# A pipeline is composed of independent jobs that run scripts, grouped into stages.
# Stages run in sequential order, but jobs within stages run in parallel.
#
# For more information, see: https://docs.gitlab.com/ee/ci/yaml/README.html#stages

devorbitus

Setup Akeyless Gateway with Nginx Ingress and Cert Manager

Installation Instructions

• Setup Nginx Ingress Controller
• Setup Cert Manager for TLS
• Setup Akeyless Gateway into Kubernetes using helm

devorbitus

Akeyless Kubernetes Auth Setup Script

Download the script

curl -o setup-k8s-auth.sh https://gist.githubusercontent.com/devorbitus/206b2ba0192f65d678ae52dd57cbdf76/raw/3210c0f77e637df2e12cb9b4a3d43202489371bb/akeyless-k8s-auth.sh

Edit the script using your favorite text editor

devorbitus

Akeyless CLI Linux Install on Cloud Script

Copy the script onto the VM to be used

curl -o setup-cli.sh https://gist.githubusercontent.com/devorbitus/57034eabc576a63398d9575d21991ef6/raw/001ac7b7a8f55c1819209e2ccd98143ac6cf4f7b/akeyless-cloud-bin.sh

Run the script

devorbitus

Setup Akeyless Gateway through Helm using Terraform

Enter values directly into the values section of the main.tf or provide them as Terraform variables through environment variables

Initialize the Terraform

terraform init