Manual bootstrap

CRDs

Gateway API

kubectl apply -k infra/crds

Cilium

kubectl kustomize --enable-helm infra/network/cilium | kubectl apply -f -

Sealed-secrets

kustomize build --enable-helm infra/controllers/sealed-secrets | kubectl apply -f -

Proxmox CSI Plugin

kustomize build --enable-helm infra/storage/proxmox-csi | kubectl apply -f -

kubectl get csistoragecapacities -ocustom-columns=CLASS:.storageClassName,AVAIL:.capacity,ZONE:.nodeTopology.matchLabels -A

Argo CD

kustomize build --enable-helm infra/controllers/argocd | kubectl apply -f -

kubectl -n argocd get secret argocd-initial-admin-secret -ojson | jq -r ' .data.password | @base64d'

kubectl apply -k infra

kubectl apply -k sets

SBOM

• Cilium
• Hubble
• Argo CD
• Proxmox CSI Plugin
• Cert-manager
• Gateway
• Authentication (Keycloak, Authentik, ...)
• [] CNPG - Cloud Native PostGresSQL

CRDs

• [] Gateway
• [] Argo CD
• [] Sealed-secrets

TODO

• Remotely managed cloudflared tunnel
• Keycloak
• [] Argo CD sync-wave

commonAnnotations:
    argocd.argoproj.io/sync-wave: "-1"