tigera-operator to argo (v3.28.1)

tigera-operator/.gitignore

@@ -1 +1 @@
-tigera-operator.yaml
+*.env

tigera-operator/README.md

@@ -1,20 +1,10 @@
-# Calico
+# Calico (aka Tigera)
 
-Calico implements
-[container network interface plugin](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/)
-which enables inter-pod network with BGP, also advertising Service LB IPs.
+Calico implements [container network interface plugin](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/) which enables inter-pod network with BGP, also advertising Service LB IPs.
 
-# For user
-
-Nothing specific to point out, this is standard Kubernetes feature
-
-# For administrator
-
-Tigera operator was used to deploy Calico:
+Render and apply locally:
 
-```
-curl https://raw.githubusercontent.com/projectcalico/calico/v3.28.1/manifests/tigera-operator.yaml -O
-kubectl apply --server-side --force-conflicts -f tigera-operator.yaml
-kubectl apply -f application.yaml
-kubectl -n calico-system create secret generic bgp-secrets --from-literal=password=...
+```sh
+kustomize build . | kubectl diff -f-
+kustomize build . | kubectl apply --server-side --force-conflicts -f-
 ```

tigera-operator/bgp-secrets.env.example

@@ -0,0 +1,2 @@
+# Don't be a dummy by commiting renders with secrets
+password=

tigera-operator/custom-resources.yaml

@@ -93,4 +93,4 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: calico-node
-  namespace: calico-system  
+  namespace: calico-system

tigera-operator/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- https://raw.githubusercontent.com/projectcalico/calico/v3.28.1/manifests/tigera-operator.yaml
+- ./custom-resources.yaml
+- ssh://git@git.k-space.ee/secretspace/kube/tigera-operator