nv

nv.sh

# helm

helm version --client --short

helm ls --all-namespaces

# cert-manager

helm repo add jetstack https://charts.jetstack.io

helm install \
  cert-manager jetstack/cert-manager \
  --namespace cert-manager \
  --version v1.7.1 \
  --set installCRDs=true \
  --create-namespace
  
kubectl -n cert-manager rollout status deploy/cert-manager
  
kubectl -n cert-manager rollout status deploy/cert-manager-webhook
  
# nv

cat <<EOF | kubectl apply -f -
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: selfsigned-cluster-issuer
spec:
  selfSigned: {}
EOF

cat <<EOF > ./neuvector-values.yaml
k3s:
  enabled: true
controller:
  replicas: 1
cve:
  scanner:
    replicas: 1
manager:
  ingress:
    enabled: true
    host: neuvector.3.139.82.240.sslip.io
    annotations:
      cert-manager.io/cluster-issuer: selfsigned-cluster-issuer
      nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
    tls: true
    secretName: neuvector-tls-secret
EOF

helm install neuvector neuvector/core \
  --namespace cattle-neuvector-system \
  -f ./neuvector-values.yaml \
  --version 2.2.2 \
  --create-namespace
  
kubectl get pods -n cattle-neuvector-system