Portefaix on Oracle Cloud

• 1: Deployment
• 1.1: Install Portefaix
• 1.2: Inspec Portefaix
• 1.3: Uninstall Portefaix
• 2: Authentication and Authorization
• 3: Troubleshooting Deployments on Exoscale SKS

Name	Type	Range
portefaix-dev	VirtualNet	10.0.0.0/16
portefaix-dev-aks	Subnet	10.0.0.0/20
portefaix-dev-ilb	Subnet	10.0.32.0/20
ApplicationGatewaySubnet	Subnet	10.0.64.0/24
portefaix-dev-nat-gateway	Subnet	10.0.65.0/24
portefaix-dev-hub	VirtualNet	10.10.0.0/16
AzureFirewallSubnet	Subnet	10.10.1.0/24
AzureBastionSubnet	Subnet	10.10.2.0/24
PrivateLinkEndpoints	Subnet	TODO

1 - Deployment

1.1 - Install Portefaix

Setup

Configure Oracle CLI. See https://docs.oracle.com/en-us/iaas/Content/API/Concepts/apisigningkey.htm

Load environment :

❯ . ./portefaix.sh oci

Then authentication:

❯ make -f hack/build/oci.mk oci-authenticate  ENV=staging

Create a new compartment

❯ make -f hack/build/oci.mk oci-compartment ENV=staging

Storage for Terraform

Check compartement ID from output of the previous command and create a S3 bucket for Terraform states:

❯ make -f hack/build/oci.mk oci-bucket ENV=staging COMPARTMENT_ID=ocid1.compartment.oc1....

Bootstrap:

❯ make terraform-apply SERVICE=terraform/oci/root ENV=main
❯ make terraform-apply SERVICE=terraform/oci/terraform-cloud ENV=main

Terraform Cloud / Github Actions

Terraform Cloud is used as the remote backend. Github Actions perform tasks to deploy the Oracle Cloud Infrastructure.

Configure Terraform Cloud workspaces:

❯ make terraform-apply SERVICE=terraform/oci/terraform-cloud ENV=main

Gitops for Kubernetes

Next: Gitops

1.2 - Inspec Portefaix

1.3 - Uninstall Portefaix

2 - Authentication and Authorization

This section shows the how to setup Portefaix with authentication and authorization support in Exoscale

Configure Exoscale

❯ . ./portefaix.sh exoscale
[ Portefaix ]
Setup credentials
Done

Configure kubectl

❯ make kubernetes-credentials CLOUD=exoscale ENV=dev

❯ kubectl get nodes

3 - Troubleshooting Deployments on Exoscale SKS