# Setup Instructions

## Pre-installation

1. Create namespaces with
```bash
kubectl apply -f bootstrap/namespaces.yaml
```

2. Apply Vaultwarden deployment app
```bash
kubectl apply -f apps/default/vaultwarden.yaml
```

3. Configure required secrets in `secrets/` directory, each mapping to an entity in Vaultwarden.

## ArgoCD Installation
```sh
kubectl apply -k bootstrap/argocd-install
kubectl apply -f bootstrap/root-app.yaml
```

## Access ArgoCD
1. Get admin password
```sh
kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d; echo
```

2. Access ArgoCD and login with `admin` / password from above.

## External Secrets Operator preparation

Create this Secret manually. `BW_HOST` must have no trailing slash.

```bash
kubectl -n infra create secret generic bitwarden-cli \
  --from-literal=BW_HOST='[VAULTWARDEN_URL]' \
  --from-literal=BW_USERNAME='[VAULTWARDEN_EMAIL]' \
  --from-literal=BW_PASSWORD='[VAULTWARDEN_PASSWORD]'
```

## Apply order
1. `kubectl apply -f secrets/`
2. `kubectl apply -f apps/metalldb-system/`
3. `kubectl apply -f apps/infra/`