cd terraform
terraform init
terraform apply

cd ansible
./bootstrap.sh
ansible-playbook install.yml

cd /root/kubespray
docker login
ansible-playbook -i inventory/prod/inventory.ini cluster.yml --become

cd ansible
ansible-playbook cp-kube-config.yml

helm repo add nfs-subdir-external-provisioner https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner/

helm install nfs-subdir-external-provisioner \
    nfs-subdir-external-provisioner/nfs-subdir-external-provisioner \
    --set nfs.server=192.168.96.102 --set nfs.path=/home/public \
    --namespace nfs-provisioner --create-namespace

istioctl operator init # Setup the operator

kubectl apply -f - <<EOF
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
  namespace: istio-system
  name: istio-control-plane
spec:
  profile: default
EOF # Default setup for istio

# Validate that it is installed
kubectl get svc -n istio-system
kubectl get pods -n istio-system

kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.3.1/cert-manager.yaml

kubectl apply -f - <<EOF
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: letsencrypt-issuer
  namespace: istio-system
spec:
  acme:
    email: rlacko99@gmail.com
    server: https://acme-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: letsencrypt-issuer-account-key
    solvers:
    - http01:
       ingress:
         class: istio
EOF

kubectl apply -f - <<EOF
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: hello-cert
  namespace: istio-system
spec:
  secretName: hello-cert
  issuerRef:
    name: letsencrypt-issuer
  commonName: hello.maze.sch.bme.hu
  dnsNames:
  - hello.maze.sch.bme.hu
EOF