https://ginglis13.github.io/en/brupop/1.3.x/setup/Recent content in Setup on BottlerocketHugoenhttps://ginglis13.github.io/en/brupop/1.3.x/setup/cert-manager/Mon, 01 Jan 0001 00:00:00 +0000https://ginglis13.github.io/en/brupop/1.3.x/setup/cert-manager/<p>Brupop uses <a href="https://cert-manager.io/">cert-manager</a> to manage self-signed certificates. You can install it with <code>kubectl</code> or <a href="https://helm.sh/">helm</a>.</p> <div class="alert alert-success" role="alert"> <h4 class="alert-heading">Note</h4> <p>This guide uses the most recent release of <code>cert-manager</code>, 1.14.1, but there is no particular hard dependency on this version.</p> </div> <h2 id="installing-cert-manager-using-kubectl">Installing <code>cert-manager</code> using <code>kubectl</code></h2> <p>Use <code>kubectl</code> to install cert-manager:</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.14.1/cert-manager.yaml </span></span></code></pre></div><h2 id="installing-cert-manager-using-helm">Installing <code>cert-manager</code> using <code>helm</code></h2> <p>First, add the <code>cert-manager</code> helm chart:</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>helm repo add jetstack https://charts.jetstack.io </span></span></code></pre></div><p>Then update your local chart:</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>helm repo update </span></span></code></pre></div><p>Finally, install <code>cert-manager</code> including its CRDs:</p>https://ginglis13.github.io/en/brupop/1.3.x/setup/install/Mon, 01 Jan 0001 00:00:00 +0000https://ginglis13.github.io/en/brupop/1.3.x/setup/install/<p>Installing Brupop creates the custom resource definitions (CRDs), roles, and deployments and uses the latest operator image from <a href="https://gallery.ecr.aws/bottlerocket/bottlerocket-update-operator">Amazon ECR Public</a>.</p> <p>You can install Brupop either <a href="https://ginglis13.github.io/en/brupop/1.3.x/setup/install/#install-with-helm">with <code>helm</code></a> or a <a href="https://ginglis13.github.io/en/brupop/1.3.x/setup/install/#install-with-a-manifest">pre-baked manifest</a>.</p> <h2 id="install-with-helm">Install with <code>helm</code></h2> <p>First, using <a href="https://helm.sh/">helm</a> add the <code>bottlerocket-operator-chart</code></p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>helm repo add brupop https://bottlerocket-os.github.io/bottlerocket-update-operator </span></span></code></pre></div><p>Then update your local chart:</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>helm repo update </span></span></code></pre></div><p>Create a namespace for the operator:</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>kubectl create namespace brupop-bottlerocket-aws </span></span></code></pre></div><p>Next, install the Brupop custom resource definition:</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-shell" data-lang="shell"><span style="display:flex;"><span>helm install brupop-crd brupop/bottlerocket-shadow </span></span></code></pre></div><p>Finally, install the operator itself:</p>https://ginglis13.github.io/en/brupop/1.3.x/setup/configure/Mon, 01 Jan 0001 00:00:00 +0000https://ginglis13.github.io/en/brupop/1.3.x/setup/configure/<p>When you install Brupop, the operator comes pre-configured with reasonable defaults. <a href="https://ginglis13.github.io/en/brupop/1.3.x/setup/configure/#label-nodes">Labeling your nodes</a> is the only required configuration step.</p> <p>Aside from labeling nodes, you configure Brupop with <a href="https://helm.sh/">helm</a> or with a manifest. Helm reduces the configuration burden for Brupop substantially with few down sides, so this documentation focuses on configuration with helm. If you choose to not use helm, refer to the <a href="https://github.com/bottlerocket-os/bottlerocket-update-operator/blob/v1.3.0/bottlerocket-update-operator.yaml">pre-baked manifest for an example</a> .</p> <h2 id="required-configuration">Required Configuration</h2> <h3 id="label-nodes">Label nodes</h3> <div class="alert alert-danger" role="alert"> <h4 class="alert-heading">Warning</h4> <p>You can fully install Brupop but if you do not apply the proper node labels the operator will not update your nodes.</p>