This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
### Add and Update the Helm Repository | |
helm repo add neuvector https://neuvector.github.io/neuvector-helm | |
helm repo update | |
### Create the NeuVector Namespace and Install NeuVector | |
kubectl create namespace cattle-neuvector-system | |
helm upgrade -i neuvector neuvector/core --namespace cattle-neuvector-system --set k3s.enabled=true --set k3s.runtimePath=/run/k3s/containerd/containerd.sock --set manager.ingress.enabled=true --set manager.svc.type=ClusterIP --set controller.pvc.enabled=true --set manager.ingress.host=neuvector.10.0.0.15.sslip.io --set global.cattle.url=https://rancher.10.0.0.15.sslip.io --set controller.ranchersso.enabled=true --set rbac=true | |
### Wait for the deployment/rollout |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
### Add and Update the Helm Repository | |
helm repo add longhorn https://charts.longhorn.io | |
helm repo update | |
### Create the Longhorn Namespace and Install Longhorn | |
kubectl create namespace longhorn-system | |
helm upgrade -i longhorn longhorn/longhorn --namespace longhorn-system --set ingress.enabled=true --set ingress.host=longhorn.example.com | |
### Wait for the deployment/rollout | |
sleep 30 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
### Add and Update the Helm Repositories | |
helm repo add jetstack https://charts.jetstack.io | |
helm repo add rancher-latest https://releases.rancher.com/server-charts/latest | |
helm repo update | |
### Create the Cert Manager Namespace and Install Cert Manager | |
kubectl create namespace cert-manager | |
helm upgrade -i cert-manager jetstack/cert-manager --namespace cert-manager --set installCRDs=true | |
### Wait for the deployment/rollout |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
--- RKE2 SERVER NODES (CONTROL PLANE) --- | |
### Apply System Settings | |
cat << EOF >> /etc/sysctl.conf | |
### Modified System Settings | |
vm.swappiness=0 | |
vm.panic_on_oom=0 | |
vm.overcommit_memory=1 | |
kernel.panic=10 | |
kernel.panic_on_oops=1 | |
vm.max_map_count = 262144 |