| 1 | == k3s |
| 2 | {{{ |
| 3 | curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC='--flannel-backend=none --disable-network-policy' sh - |
| 4 | export KUBECONFIG=/etc/rancher/k3s/k3s.yaml |
| 5 | }}} |
| 6 | |
| 7 | == cilium |
| 8 | {{{ |
| 9 | CILIUM_CLI_VERSION=$(curl -s https://raw.githubusercontent.com/cilium/cilium-cli/main/stable.txt) |
| 10 | CLI_ARCH=amd64 |
| 11 | if [ "$(uname -m)" = "aarch64" ]; then CLI_ARCH=arm64; fi |
| 12 | |
| 13 | curl -L --fail --remote-name-all https://github.com/cilium/cilium-cli/releases/download/${CILIUM_CLI_VERSION}/cilium-linux-${CLI_ARCH}.tar.gz{,.sha256sum} |
| 14 | sha256sum --check cilium-linux-${CLI_ARCH}.tar.gz.sha256sum |
| 15 | sudo tar xzvfC cilium-linux-${CLI_ARCH}.tar.gz /usr/local/bin |
| 16 | rm cilium-linux-${CLI_ARCH}.tar.gz{,.sha256sum} |
| 17 | cilium install --version 1.15.7 --set=ipam.operator.clusterPoolIPv4PodCIDRList="10.42.0.0/16" |
| 18 | |
| 19 | cilium status --wait |
| 20 | }}} |
| 21 | |
| 22 | == kubectl |
| 23 | {{{ |
| 24 | curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" |
| 25 | }}} |
| 26 | |
| 27 | == helm |
| 28 | {{{ |
| 29 | curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 |
| 30 | chmod 700 get_helm.sh |
| 31 | ./get_helm.sh |
| 32 | }}} |
| 33 | |
| 34 | == cerf-manager |
| 35 | {{{ |
| 36 | kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.15.1/cert-manager.yaml |
| 37 | kubectl apply -f self-sign-cluster-issuer.yaml |
| 38 | }}} |