adapt README

README.md

@@ -8,11 +8,50 @@
   approachable format, f.e. for dealing with
   updating sealed-secrets: `gitops-tbrnt-private`
 
+## Usage
+
+### Argo CD
+
+#### Access
+
+Either
+
+`sudo -E kubefwd svc -n argocd` and then https://argocd-server/
+
+or
+
+`kubectl port-forward svc/argocd-server -n argocd 8080:443` and
+then https://localhost:8080/
+
+#### CLI
+
+* `argocd login argocd-server`
+* `argocd app list`
+* `argocd app sync <name>`
+
+### Kubeseal (Sealed Secrets)
+
+tbd
+
+## Bootstrap GitOps
+
+After installing k3s, do:
+
+```
+kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml
+```
+
+TODO:
+* private key restore
+* initial app provisioning
+* ...
+
 ## k3s on Alpine
 
 * Install k3s: `apk add k3s cni-plugins iptables`
 * Enable cgroups: `rc-update add cgroups default`
 * Adapt service file `/etc/init.d/k3s`:
+
 ```
 #!/sbin/openrc-run