install.md

Installation - management node

Management node is where you run Pulumi, most likely your laptop.

This software is still experimental, so breaking changes might be introduced.

In case of problems with some application updates, try disabling and enabling it again.

Note this will also remove the associated storage.

All breaking changes will be described in release notes as well as commit messages

git clone https://github.com/QC-Labs/orange-lab

Prerequisites - DevContainers (VSCode)

This method is recommended for new users as it doesn't require installing dependencies.

Make sure you have DevContainers extension installed (https://marketplace.visualstudio.com/items?itemName=ms-vscode-remote.remote-containers).

Open project in VSCode. It will install the required dependencies and recommended extensions. You can then use the terminal inside VSCode to run commands.

Prerequisites - Manual

Install dependencies on the management node:

brew install node pulumi kubectl k9s
flatpak install io.kinvolk.Headlamp
sudo tailscale up --operator=$USER --accept-routes

Pulumi

Create Pulumi access token at https://app.pulumi.com/account/tokens

pulumi login
pulumi stack init <stack-name>
pulumi stack select <stack-name>

Tailscale

# Start Tailscale service on each node
sudo tailscale up --operator=$USER --accept-routes

Add tags to your Tailnet ACLs (https://login.tailscale.com/admin/acls/file):

"tagOwners": {
    "tag:k8s-server":   [],
    "tag:k8s-agent":    [],
    "tag:k8s-operator": [],
    "tag:k8s":          ["tag:k8s-operator"],
}

Create Tailscale API access token for Pulumi (https://login.tailscale.com/admin/settings/keys) and add it to Pulumi.<stack>.yaml with:

pulumi config set tailscale:apiKey <TAILSCALE_API_KEY> --secret
pulumi config set tailscale:tailnet <TAILSCALE_TAILNET>
pulumi up

You can find Tailnet DNS name at https://login.tailscale.com/admin/dns

Enable MagicDNS and HTTPS certificates on https://login.tailscale.com/admin/dns