79 lines
2.9 KiB
Bash
79 lines
2.9 KiB
Bash
#!/bin/bash
|
|
# Script Maestro Final: Laboratorio Estable (ZimaOS + k3d + ArgoCD + Headlamp)
|
|
set -e
|
|
|
|
CLUSTER_NAME="lab-cluster"
|
|
APP_DATA_PATH="/DATA/AppData/k3d-lab"
|
|
|
|
echo "--- 1. Preparando entorno ---"
|
|
sudo mkdir -p $APP_DATA_PATH/{gitea,argocd}
|
|
sudo chmod -R 777 $APP_DATA_PATH/
|
|
|
|
echo "--- 2. Limpiando clúster previo ---"
|
|
k3d cluster delete $CLUSTER_NAME || true
|
|
|
|
echo "--- 3. Creando clúster ---"
|
|
k3d cluster create $CLUSTER_NAME \
|
|
--api-port 46421 \
|
|
-p "90:80@loadbalancer" \
|
|
-p "9443:443@loadbalancer" \
|
|
-v "$APP_DATA_PATH/gitea:/var/lib/gitea" \
|
|
-v "$APP_DATA_PATH/argocd:/var/lib/argocd" \
|
|
--agents 2
|
|
|
|
echo "--- 4. Configurando reinicio y Kubeconfig ---"
|
|
sudo docker update --restart=always $(sudo docker ps -a -q -f name=k3d)
|
|
sudo chown -R $USER:$USER /DATA/.kube /DATA/.config
|
|
k3d kubeconfig merge $CLUSTER_NAME --kubeconfig-switch-context
|
|
|
|
echo "--- 5. Instalando ArgoCD y RBAC ---"
|
|
kubectl create namespace argocd || true
|
|
kubectl create serviceaccount argocd-manager -n argocd || true
|
|
kubectl create clusterrolebinding argocd-manager-binding \
|
|
--clusterrole=cluster-admin \
|
|
--serviceaccount=argocd:argocd-manager || true
|
|
|
|
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml
|
|
sleep 20 # Espera técnica para que los CRDs de ArgoCD se carguen
|
|
kubectl patch configmap argocd-cmd-params-cm -n argocd --type merge -p '{"data":{"server.insecure":"true"}}'
|
|
|
|
echo "--- 6. Creando credenciales para Headlamp ---"
|
|
kubectl create namespace headlamp || true
|
|
kubectl create serviceaccount headlamp-admin -n headlamp || true
|
|
kubectl create clusterrolebinding headlamp-admin-binding --clusterrole=cluster-admin --serviceaccount=headlamp:headlamp-admin || true
|
|
kubectl create secret generic headlamp-kubeconfig --from-file=config=/DATA/.kube/config -n headlamp --dry-run=client -o yaml | kubectl apply -f -
|
|
|
|
echo "--- 7. Validando despliegue ---"
|
|
kubectl wait --for=condition=Ready pods -n argocd --all --timeout=180s
|
|
|
|
echo "--- 8. Aplicando Ingress ---"
|
|
cat <<EOF | kubectl apply -f -
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: argocd-server-ingress
|
|
namespace: argocd
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: web
|
|
spec:
|
|
ingressClassName: traefik
|
|
rules:
|
|
- host: argocd.cruzcloud.net
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: argocd-server
|
|
port:
|
|
number: 80
|
|
EOF
|
|
|
|
echo "=========================================================="
|
|
echo " LABORATORIO DESPLEGADO EXITOSAMENTE"
|
|
echo " -------------------------------------------"
|
|
echo " NOTA NPM: Fwd 192.168.68.61:90 | Scheme: http | Websockets: ON"
|
|
echo " ArgoCD Password: $(kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath='{.data.password}' | base64 -d)"
|
|
echo " Token Headlamp: $(kubectl create token headlamp-admin -n headlamp)"
|
|
echo "==========================================================" |