github/container.training
1
0
Fork 0
mirror of https://github.com/jpetazzo/container.training.git synced 2026-07-28 17:21:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

📝 Add small section about SSH keypairs rotation for Flux

Browse Source
This commit is contained in:
Ludovic Piot
2025-06-12 20:23:59 +02:00
parent ca8865a10b
commit 9613589dea
2 changed files with 45 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

46
slides/k8s/M6-monitoring-stack-install.md
View File

@@ -7,7 +7,7 @@ Note:
---
## Install Monitoring components
## Creating `Github` source in Flux for monitoring components install repository
.lab[
@@ -24,7 +24,7 @@ k8s@shpod:~/fleet-config-using-flux-XXXXX$ flux create source git monitoring \
---
## Creating `kustomization` in Flux for monitoring stack
### Creating `kustomization` in Flux for monitoring stack
.lab[
@@ -40,7 +40,7 @@ k8s@shpod:~/fleet-config-using-flux-XXXXX$ flux create kustomization monitoring
---
## Install Flux Grafana dashboards
### Install Flux Grafana dashboards
.lab[
@@ -68,6 +68,46 @@ class: pic
---
## Flux repository synchro is broken😅
It seems that `Flux` on **_☁️CLOUDY_** cluster is not able to authenticate with `ssh` on its `Github` config repository!
What happened?
When we install `Flux` on **_🤘METAL_** cluster, it generates a new `ssh` keypair and override the one used by **_☁️CLOUDY_** among the "deployment keys" of the `Github` repository.
⚠️ Beware of flux bootstrap command!
We have to
- generate a new keypair (or reuse an already existing one)
- add the private key to the Flux-dedicated secrets in **_☁️CLOUDY_** cluster
- add it to the "deployment keys" of the `Github` repository
---
### the command
.lab[
- `Flux` _CLI_ helps to recreate the secret holding the `ssh` **private** key.
```bash
flux create secret git flux-system \
--url=ssh://git@github.com/container-training-fleet/fleet-config-using-flux-XXXXX \
--private-key-file=/home/k8s/.ssh/id_ed25519
```
- copy the **public** key into the deployment keys of the `Github` repository
]
---
class: pic
![Running Mario](images/M6-running-Mario.gif)
---
## Access the Grafana dashboard
.lab[

3
slides/m6.yml
View File

@@ -17,10 +17,11 @@ exclude:
content:
- k8s/M6-START-a-company-scenario.md
- k8S/M6-T02-flux-install.md
- k8s/M6-T02-flux-install.md
- k8s/M6-T03-installing-tenants.md
- k8s/M6-R01-flux_configure-ROCKY-deployment.md
- k8s/M6-T05-ingress-config.md
- k8s/M6-M01-adding-MOVY-tenant.md
- k8s/M6-K01-METAL-install.md
- k8s/M6-K03-openebs-install.md
- k8s/M6-monitoring-stack-install.md