extern/trmm-awesome
1
0
Fork 1
mirror of https://github.com/amidaware/trmm-awesome.git synced 2024-12-11 17:00:49 +01:00
Code Issues Packages Projects Releases Wiki Activity
c45c8b9eeb
trmm-awesome/kubernetes
History
Joel DeTeves 4f855eafbf Fix missing namespace for network policy
2022-01-07 13:19:23 -08:00
..
deployment Don't delete secrets when re-deploying 2022-01-03 12:36:40 -08:00
certs.yaml Add Kubernetes manifests for TRMM 2022-01-02 23:37:09 -08:00
namespace.yaml Add Kubernetes manifests for TRMM 2022-01-02 23:37:09 -08:00
network-policy.yaml Fix missing namespace for network policy 2022-01-07 13:19:23 -08:00
nlb.yaml Fix DO Load Balancer health status check 2022-01-03 09:16:57 -08:00
pvc.yaml Add Kubernetes manifests for TRMM 2022-01-02 23:37:09 -08:00
README.md Fix typos in README.md, add note for externalTrafficPolicy 2022-01-03 09:22:58 -08:00
secrets.yaml Don't delete secrets when re-deploying 2022-01-03 12:36:40 -08:00

README.md

TacticalRMM Kubernetes manifests

Author: Joel DeTeves

Desription: TacticalRMM Kubernetes manifests tested & working on Digital Ocean managed Kubernetes (DOKS).

Disclaimer: These manifests rely on experimental developer images and as such are NOT SUPPORTED, at least until the required changes are merged into the main image. I have done my best to make them as secure as possible however I am NOT responsible for anything that happens to you or your data as a result of using these files. Please do your due dilligence security-wise and open a Github issue if you wish to report a problem. USE AT YOUR OWN RISK. By using these files you agree that you are the sole entity responsible for any damages that may arise as a result.

Pre-requisites

  • A working Kubernetes cluster
  • Kubernetes NFS provisioner or another storage provisioner that supports ReadWriteMany
  • cert-manager or a Lets Encrypt cert issuer of your choice. Alternatively, you can mount your own certs as secret volumes into the pods

Deploying the files

  1. kubectl apply -f namespace.yaml
  2. kubectl apply -f .
  3. kubectl apply -f deployment/ -R

Notes

The load balancer has externalTrafficPolicy: Local disabled by default, as it caused a health check issue with the Digital Ocean Load Balancer these manifests were tested on. It may need to be enabled depending on your cloud provider, see https://docs.nats.io/running-a-nats-service/introduction/running/nats-kubernetes/nats-external-nlb for more info

Questions / Concerns

Please open an issue in Github or you can also check in the Tactical RMM Discord Channel.

Note: I am not affiliated with TRMM or AmidaWare; I am a community contributor. Please direct TRMM-related issues to the appropriate channels.