Eric Cavalcanti
5e40cfb222
* Change selinux image pullpolicy and tag version Signed-off-by: Eric Cavalcanti <[email protected]> * Change image pullpolicy Signed-off-by: Eric Cavalcanti <[email protected]> * Update readme Signed-off-by: Eric Cavalcanti <[email protected]> * update examples Signed-off-by: Eric Cavalcanti <[email protected]> * Update image pullpolicy Signed-off-by: Eric Cavalcanti <[email protected]> * Fix readme as well Signed-off-by: Eric Cavalcanti <[email protected]> * Undo pullpolicy readme Signed-off-by: Eric Cavalcanti <[email protected]> * Add selinux Signed-off-by: Eric Cavalcanti <[email protected]> * Revert code block Signed-off-by: Eric Cavalcanti <[email protected]> * Change regex Signed-off-by: Eric Cavalcanti <[email protected]> --------- Signed-off-by: Eric Cavalcanti <[email protected]>
helm upgrade --install -n spire-server spire-crds spire-crds --repo https://spiffe.github.io/helm-charts-hardened/ --create-namespace --version 0.3.0
helm upgrade --install -n spire-server spire spire --repo https://spiffe.github.io/helm-charts-hardened/ --version 0.17.1 -f spire-values.yaml
kubectl apply -f mysqlclient-configmap.yaml
kubectl apply -f mysqlclient-statefulset.yaml
kubectl wait pod mysqlclient-0 --for=condition=ready --timeout=60s
# Run, and get the x500UniqueIdentifier value:
kubectl exec -it mysqlclient-0 -c main -- bash -c 'openssl x509 -in /certs/tls.crt -noout -text | grep Subject:'
# Edit mysql-values.yaml and update the x509UniqueIdentifer
vim mysql-values.yaml
helm upgrade --install -f mysql-values.yaml mysql mysql --version 9.15.0 --repo https://charts.bitnami.com/bitnami
kubectl wait pod mysql-0 --for=condition=ready --timeout=60s
kubectl exec -it mysqlclient-0 -- bash -c 'mysql -u mysqlclient --protocol tcp --ssl-key /certs/tls.key --ssl-cert /certs/tls.crt --ssl-ca /certs/ca.pem -h mysql.default.svc.cluster.local'