Added chart for cluster setup

helm/cluster_setup/Chart.yaml

@@ -0,0 +1,18 @@
+apiVersion: v2
+name: cluster_setup
+version: 0.1.0
+type: application
+description: "Initial cluster setup"
+maintainers:
+  - name: Jim Martens
+    url: https://2martens.de
+annotations:
+  artifacthub.io/changes: |
+    - kind: added
+      description: Added cluster roles and bindings to access logs and shell from kubectl
+    - kind: added
+      description: Added cluster issuer for lets encrypt
+  artifacthub.io/signKey: |
+    fingerprint: F0F153B65BAD467201D7544E47393ABD1F96B7C8
+    url: https://mafiasi.de/pks/key/47393ABD1F96B7C8.asc
+  artifacthub.io/prerelease: true

helm/cluster_setup/templates/certificate-issuer.yaml

@@ -0,0 +1,16 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: lets-encrypt
+spec:
+  acme:
+    email: {{ .Values.email }}
+    server: https://acme-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      # Secret resource that will be used to store the account's private key.
+      name: lets-encrypt-private-key
+    # Add a single challenge solver, HTTP01 using nginx
+    solvers:
+      - http01:
+          ingress:
+            class: public

helm/cluster_setup/templates/log-access-cluster-role-binding.yaml

@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: log-access-127001
+subjects:
+  - kind: User
+    apiGroup: rbac.authorization.k8s.io
+    name: 127.0.0.1
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: log-access

helm/cluster_setup/templates/log-access-cluster-role.yaml

@@ -0,0 +1,11 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: log-access
+rules:
+  - verbs:
+      - get
+    apiGroups:
+      - ''
+    resources:
+      - nodes/proxy

helm/cluster_setup/templates/shell-access-cluster-role-binding.yaml

@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: shell-access-127001
+subjects:
+  - kind: User
+    apiGroup: rbac.authorization.k8s.io
+    name: 127.0.0.1
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: shell-access

helm/cluster_setup/templates/shell-access-cluster-role.yaml

@@ -0,0 +1,11 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: shell-access
+rules:
+  - verbs:
+      - create
+    apiGroups:
+      - ''
+    resources:
+      - nodes/proxy

helm/cluster_setup/values.yaml

@@ -0,0 +1 @@
+email: admin@2martens.de