haven-ops/SETUP.md

Setup Instructions

Pre-installation

1. Create namespaces with

kubectl apply -f bootstrap/namespaces.yaml

2. Apply Vaultwarden deployment app

kubectl apply -f apps/default/vaultwarden.yaml

3. Configure required secrets in secrets/ directory, each mapping to an entity in Vaultwarden.

ArgoCD Installation

kubectl apply -k bootstrap/argocd-install
kubectl apply -f bootstrap/root-app.yaml

Access ArgoCD

1. Get admin password

kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d; echo

2. Access ArgoCD and login with admin / password from above.

External Secrets Operator preparation

Create this Secret manually. BW_HOST must have no trailing slash.

kubectl -n infra create secret generic bitwarden-cli \
  --from-literal=BW_HOST='[VAULTWARDEN_URL]' \
  --from-literal=BW_USERNAME='[VAULTWARDEN_EMAIL]' \
  --from-literal=BW_PASSWORD='[VAULTWARDEN_PASSWORD]'

Apply order

1. kubectl apply -f secrets/
2. kubectl apply -f apps/metalldb-system/
3. kubectl apply -f apps/infra/