In the following example we will create a kubernetes cluster on a GCEProvider. All the GCEProvider needs besides a writable Git Repository is a billable Google Cloud Project and a Google Service Account with sufficient permissions.
Copy the files orbiter.yml and boom.yml to the root of a new git Repository.
# Install the latest orbctl curl -s https://api.github.com/repos/caos/orbos/releases/latest | grep "browser_download_url.*orbctl-$(uname)-$(uname -m)" | cut -d '"' -f 4 | sudo wget -i - -O /usr/local/bin/orbctl sudo chmod +x /usr/local/bin/orbctl sudo chown $(id -u):$(id -g) /usr/local/bin/orbctl # Create an orb file at ${HOME}/.orb/config orbctl configure --repourl git@github.com:me/my-orb.git --masterkey "$(openssl rand -base64 21)"MY_GCE_PROJECT="$(gcloud config get-value project)" ORBOS_SERVICE_ACCOUNT_NAME=orbiter-system ORBOS_SERVICE_ACCOUNT=${ORBOS_SERVICE_ACCOUNT_NAME}@${MY_GCE_PROJECT}.iam.gserviceaccount.com # Create a service account for the ORBITER user gcloud iam service-accounts create ${ORBOS_SERVICE_ACCOUNT_NAME} \ --description="${ORBOS_SERVICE_ACCOUNT_NAME}" \ --display-name="${ORBOS_SERVICE_ACCOUNT_NAME}" # Assign the service account the roles `Compute Admin`, `IAP-secured Tunnel User` and `Service Usage Admin` gcloud projects add-iam-policy-binding ${MY_GCE_PROJECT} \ --member=serviceAccount:${ORBOS_SERVICE_ACCOUNT} \ --role=roles/compute.admin gcloud projects add-iam-policy-binding ${MY_GCE_PROJECT} \ --member=serviceAccount:${ORBOS_SERVICE_ACCOUNT} \ --role=roles/iap.tunnelResourceAccessor gcloud projects add-iam-policy-binding ${MY_GCE_PROJECT} \ --member=serviceAccount:${ORBOS_SERVICE_ACCOUNT} \ --role=roles/serviceusage.serviceUsageAdmin # Create a JSON key for the service account gcloud iam service-accounts keys create /tmp/key.json \ --iam-account ${ORBOS_SERVICE_ACCOUNT} # Encrypt and write the created JSON key to the orbiter.yml orbctl writesecret orbiter.gce.jsonkey --file /tmp/key.json rm -f /tmp/key.jsonorbctl takeoffAs soon as the Orbiter has deployed itself to the cluster, you can decrypt the generated admin kubeconfig
mkdir -p ~/.kube orbctl readsecret orbiter.k8s.kubeconfig > ~/.kube/configWait for grafana to become running
kubectl --namespace caos-system get po -wOpen your browser at http://localhost:8080 to show your new clusters dashboards. Default username and password are both admin
kubectl --namespace caos-system port-forward svc/grafana 8080:80Delete everything created by Orbiter
# Remove all GCE compute resources orbctl destroy # Unassign all service account roles gcloud projects remove-iam-policy-binding ${MY_GCE_PROJECT} \ --member=serviceAccount:${ORBOS_SERVICE_ACCOUNT} \ --role=roles/compute.admin gcloud projects remove-iam-policy-binding ${MY_GCE_PROJECT} \ --member=serviceAccount:${ORBOS_SERVICE_ACCOUNT} \ --role=roles/iap.tunnelResourceAccessor gcloud projects remove-iam-policy-binding ${MY_GCE_PROJECT} \ --member=serviceAccount:${ORBOS_SERVICE_ACCOUNT} \ --role=roles/serviceusage.serviceUsageAdmin # Remove service account gcloud iam service-accounts delete --quiet ${ORBOS_SERVICE_ACCOUNT}The full functionality of the operator is and stays open source and free to use for everyone. We pay our wages by using ORBOS for selling further workload enterprise services like support, monitoring and forecasting, IAM, CI/CD, secrets management etc. Visit our website and get in touch.
See the exact licensing terms here
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.