EE Ops

GitOps everything for Efficiency Engineering

How to Setup it in you k8s cluster

Before all please fork it into you personal account or organization.

Pre require

GitOps Tools

Flux CLI

Install by bash or download release binary from Flux site

cluster secret data

required:

secrets for jenkins component

see here
secrets for prow component

kubectl -n apps create secret generic github-app-prow --from-literal domain-name=<full prow domain> --from-literal app-id=<github app id> --from-file=app-cert=<github cert file path> --from-literal webhook-secret=<github-hmac-token>
secrets for tekton component

kubectl -n apps create secret generic tekton-ingress --from-literal domain=<full tekton domain> --from-literal path_for_dashboard=/your-tekton-dashboard-path kubectl -n ci-demo create secret generic github-secret --from-literal secretToken=<hmac-token> kubectl -n ci-demo create secret generic github-app --from-literal app-id=<github app id> --from-file app-cert=<github app private key file path> --from-file app-cert-pkcs8=<github app private key with pkcs8 file path>, you can convert from pkcs1 to pkcs8 with command: openssl pkcs8 -topk8 -inform PEM -outform PEM -nocrypt -in private-key.pem -out private-key-pkcs8.key

optional:

Github private token

Create a github private token with repo permissions, copy and write it. See doc.

Setup GitOps

export GITHUB_TOKEN=<github private token>
export GITHUB_REPOSITORY_OWNER=<github org or username>
flux check --pre
flux bootstrap github \
    --owner=${GITHUB_REPOSITORY_OWNER} \
    --repository=<your repo name> \
    --branch=main \
    --path=clusters/staging # or other cluster dir.

if you repo in under personal account, you should add cli option --personal. poc poc