README.md

KIND

CREATE

GENERATE CLUSTER CONFIG

IP=$(hostname -I | awk '{print $1}')
KUBE_API_PORT=31943
CLUSTER_NAME=kind-demo
CLUSTER_CONFIG_PATH=/tmp/${CLUSTER_NAME}-cluster.yaml

kcl run --quiet oci://ghcr.io/stuttgart-things/k8s-kind-cluster \
-D portRangeStart=32100 \
-D portRangeCount=2 \
-D clusterName=${CLUSTER_NAME} \
-D apiServerAddress=${IP} \
-D 'registryMirrors=["https://docker.harbor.idp.kubermatic.sva.dev"]' \
-D apiServerPort=${KUBE_API_PORT} > ${CLUSTER_CONFIG_PATH}

CREATE CLUSTER

KUBE_API_PORT=31943
CLUSTER_NAME=kind-demo
CLUSTER_CONFIG_PATH=/tmp/${CLUSTER_NAME}-cluster.yaml

KUBECONFIG_PATH=~/.kube/kind-${CLUSTER_NAME}

mkdir -p ~/.kube || true

kind create cluster \
--config ${CLUSTER_CONFIG_PATH} \
--kubeconfig ${KUBECONFIG_PATH}

# REPLACE IP
yq -i '.clusters[0].cluster.server = "https://'"$(hostname -I | awk '{print $1}')"':'"${KUBE_API_PORT}"'"' ${KUBECONFIG_PATH}


export KUBECONFIG=${KUBECONFIG_PATH}
kubectl get nodes

DEPLOY CLUSTER-INFRA

kcl run oci://ghcr.io/stuttgart-things/helmfile-kind \
-D apps=cilium,cert_manager \
-D cilium_configure_lb=True \
-D ciliumClusterName=bla \
-o /tmp/kind-infra.yaml

## DEPLOY CLUSTER-INFRA
export KUBECONFIG=${KUBECONFIG_PATH}
export HELMFILE_CACHE_HOME=/tmp/helm-cache

helmfile init --force

kubectl apply -k https://github.com/stuttgart-things/helm/infra/crds/cilium
kubectl apply -k https://github.com/stuttgart-things/helm/infra/crds/cert-manager

helmfile apply -f /tmp/kind-infra.yaml

kubectl get nodes

CREATE KUBECONFIG SECRET ON VAULT

curl   --header "X-Vault-Token: $VAULT_TOKEN"   --request POST   --data @<(cat <<EOF
{
  "data": {
    "kubeconfig": $(cat ${KUBECONFIG_PATH} | jq -Rs .)
  }
}
EOF

)   $VAULT_ADDR/v1/kubeconfigs/data/kv/demo-infra

READ IT BACK

curl -s   --header "X-Vault-Token: $VAULT_TOKEN"   $VAULT_ADDR/v1/kubeconfigs/data/kv/kind-demo   | jq -r .data.data.kubeconfig

ADD KIND CLUSTER TO CROSSPLANE

kcl run --quiet oci://ghcr.io/stuttgart-things/xplane-base -D 'params={
    "oxr": {
      "spec": {
        "name": "prod",
        "enableVaultSecret": {
          "enabled": true,
          "name": "kind-demo",
          "namespace": "default",
          "mount": "kubeconfigs",
          "path": "kv/kind-demo",
          "authRef": "dev",
          "refreshAfter": "10s",
          "destinationSecretName": "kind-demo"
        },
        "enableHelmProvider": {
          "enabled": true
        },
        "enableKubernetesProvider": {
          "enabled": true
        },
        "connectionSecret": {
          "namespace": "default",
          "name": "kind-demo"
        }
      }
    }
  }' --format yaml | grep -A 1000 "^items:" | sed 's/^- /---\n/' | sed '1d' | sed 's/^  //' | kubectl apply -f -

DEPLOY VAULT AUTH

kcl run oci://ghcr.io/stuttgart-things/xplane-vault-config -D params='{
  "oxr": {
    "spec": {
      "clusterName": "prod",
      "csiEnabled": true,
      "vsoEnabled": true,
      "esoEnabled": true,
      "esoChartVersion": "0.20.2",
      "k8sAuths": [
          {"name": "vault-auth-app1", "namespace": "app1"},
          {"name": "vault-auth-app2", "namespace": "app2"}
      ]
    }
  }
}' --format yaml | grep -A 1000 "^items:" | sed 's/^- /---\n/' | sed '1d' | sed 's/^  //' | kubectl apply -f -

DEPLOY VCLUSTER (HELM)

# CREATE VALUES
---
controlPlane:
  statefulSet:
    persistence:
      volumeClaim:
        storageClass: standard
  distro:
    k8s:
      enabled: true

  proxy:
    bindAddress: "0.0.0.0"
    port: 8443
    extraSANs:
      - "maverick.tiab.labda.sva.de"
      - "10.100.136.150"
      - "localhost"  # Add for local access

  service:
    enabled: true
    spec:
      type: NodePort
      ports:
        - name: https
          port: 443
          targetPort: 8443
          nodePort: 32443
          protocol: TCP

exportKubeConfig:
  server: "https://10.100.136.150:32443"
  # Or use hostname:
  # server: "https://maverick.tiab.labda.sva.de:32443"

# INSTALL
helm repo add loft https://charts.loft.sh && \
helm repo udpate

helm upgrade --install xplane  \
loft/vcluster --version 0.29.0  \
--create-namespace -n vcluster  \
--values vcluster.yaml

kcl run --quiet oci://ghcr.io/stuttgart-things/xplane-vcluster:0.29.2 -D params='{
  "oxr": {
    "spec": {
      "name": "vcluster-k3s-tink3",
      "version": "0.29.0",
      "clusterName": "k3s-tink1",
      "targetNamespace": "vcluster-k3s-tink3",
      "storageClass": "local-path",
      "bindAddress": "0.0.0.0",
      "proxyPort": 8443,
      "nodePort": 32455,
      "extraSANs": [
        "test-k3s1.labul.sva.de",
        "10.31.103.23",
        "localhost"
      ],
      "serverUrl": "https://10.31.103.23:32455",
      "additionalSecrets": [
        {
          "name": "vc-vcluster-k3s-tink3-crossplane",
          "namespace": "vcluster-k3s-tink3",
          "context": "vcluster-crossplane-context",
          "server": "https://10.31.103.23:32455"
        }
      ],
      "connectionSecret": {
        "name": "vcluster-k3s-tink3-connection",
        "namespace": "crossplane-system",
        "vclusterSecretName": "vc-vcluster-k3s-tink3",
        "vclusterSecretNamespace": "vcluster-k3s-tink3"
      },
      "pushSecret": {
        "enabled": true,
        "name": "pushsecret-vcluster-k3s-tink3",
        "namespace": "default",
        "clusterName": "k3s-tink1",
        "secretStoreRef": "vault-backend-kubeconfigs",
        "refreshInterval": "1m"
      }
    }
  }
}' --format yaml | grep -A 1000 "^items:" | sed 's/^- /---\n/' | sed '1d' | sed 's/^  //' | kubectl apply -f -

DESTROY CLUSTER

# DELETE
kind delete clusters platform-cluster