Andy Clemenko clemenko

Air Gapping Vcluster from Loft.sh

This idea is from using vcluster to serve our Rancher on Harvester : https://docs.harvesterhci.io/v1.4/advanced/addons/rancher-vcluster/ and https://www.vcluster.com/docs/platform/install/advanced/air-gapped.

There are quite a few moving parts here. In addtion to Vcluster assets we need to grab Rancher's as well. Rancher adds Cert-Manager.
Here is the install yaml https://github.com/harvester/experimental-addons/blob/main/rancher-vcluster/rancher-vcluster.yaml

Parts

vcluster
certmanager

My Portworx

This is my little cheat sheet for deploying Portworx and other stuff. This includes backup and monitoring.

Docs

Portworx Install -https://docs.portworx.com/portworx-enterprise/platform/kubernetes/rancher/install
Portworx Central Install - https://docs.portworx.com/portworx-central-on-prem/install/px-central

install you k8s of choice

Coder Basic Install Guide - from a firefighter. :D

Resources

Here are a few links that I used to understand all things Coder.

https://coder.com/docs/@v2.16.0/install/kubernetes - Install Guide
https://github.com/coder/coder/blob/main/helm/coder/values.yaml - Default values yaml
https://github.com/sharkymark/v2-templates/tree/main/src/envbox - Template Repo with examples

setting up Rancher with certs - example

Docs : https://ranchermanager.docs.rancher.com/getting-started/installation-and-upgrade/resources/add-tls-secrets

install rke2

curl -sfL https://get.rke2.io |  sh -

pros and cons

Pros : clean, simple. Cons : no ingress out of the box. Needs a bit of work to get things going.

talos notes

mkdir ~/Desktop/talos cd ~/Desktop/talos

Anyone Can install RKE2 and Rancher on a Node

RKE2 - Security focused Kubernetes
Rancher - Multi-Cluster Kubernetes Management
Longhorn - Unified storage layer

We will need a few tools for this guide. We will walk through how to install helm and kubectl.

A longer version of this install : Can a 12 y/o install the Rancher Stack?

iPXE with Netboot.xyz

Leverage Docker and Netboot.xyz to host Harvester/Rocky/Liberty installers and kickstart. We have been developing an Harvester Workshop and needed a better way to boot dozens of machines. Netboot.xyz was a simple way to do it. We used https://hub.docker.com/r/linuxserver/netbootxyz to simplify the install.

Then we created a custom menu and loaded the assets. After updating the DHCP settings on the network to point to the machine we are able to boot anything.

Netboot Docker docs : https://netboot.xyz/docs/docker

	#!/usr/bin/env bash
	# @clemenko

	# rke one liner
	curl -sfL https://get.rke2.io \| sh - && systemctl enable --now rke2-server.service && echo "export KUBECONFIG=/etc/rancher/rke2/rke2.yaml PATH=$PATH:/usr/local/bin/:/var/lib/rancher/rke2/bin/" >> ~/.bashrc && source ~/.bashrc && curl -sfL https://get.hauler.dev \| bash && curl -s https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 \| bash

	yum install -y nfs-utils cryptsetup iscsi-initiator-utils; systemctl enable --now iscsid; helm repo add longhorn https://charts.longhorn.io --force-update; helm upgrade -i longhorn longhorn/longhorn -n longhorn-system --create-namespace

	#!/usr/bin/env bash
	# simple script for installing rke2, helm, and keycloak
	# clemenko

	# https://github.com/bitnami/charts/tree/main/bitnami/keycloak

	curl -sfL https://get.rke2.io \| sh - && systemctl enable --now rke2-server.service && echo "export KUBECONFIG=/etc/rancher/rke2/rke2.yaml PATH=$PATH:/usr/local/bin/:/var/lib/rancher/rke2/bin/" >> ~/.bashrc && source ~/.bashrc && curl -sfL https://get.hauler.dev \| bash && curl -s https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 \| bash


	yum install -y nfs-utils cryptsetup iscsi-initiator-utils; systemctl enable --now iscsid

	# this is for joining federated clusters within NeuVector
	# check the passwords

	export masterPassword=Pa22word
	export masterUrl=neuvector.rfed.io
	export masterApi=nv-api.rfed.io

	export manangedPassword=admin
	export managedUrl=nv2.rfed.io
	export managedApi=nv2-api.rfed.io