GitOps for tbrnt k3s hosting

Repo structure

• Each subdirectory is a namespace
• _apps is the meta directory for Argo CD apps
• Another private repo contains stuff in a more approachable format, f.e. for dealing with updating sealed-secrets: gitops-tbrnt-private

k3s on Alpine

• Install k3s: apk add k3s cni-plugins iptables
• Enable cgroups: rc-update add cgroups default
• Adapt service file /etc/init.d/k3s:

#!/sbin/openrc-run

export PATH=/usr/share/cni-plugins/bin:$PATH

name="k3s"
command="/usr/bin/k3s"
command_args="$K3S_OPTS"
command_background="yes"
output_log="/var/log/k3s.log"
error_log="/var/log/k3s.err"

start_stop_daemon_args="server"
pidfile="/run/k3s.pid"

depend() {
	need net
	after firewall
}

Helpful links:

• https://rancher.com/docs/k3s/latest/en/advanced/#additional-preparation-for-alpine-linux-setup
• https://github.com/rancher/k3s/issues/660