Reloader Installation

Reloader is a Secret Re-injection into Pods Utility

---

Reloader can have multiple instances dedicated to each of Workload Type Kubernetes Cluster.

Note

Instructions providing here are steps for ONE External Secrets Operator (ESO) Instance of a Kubernetes Cluster.

It is meant for you to REPEAT the steps FOR EACH of Kubernetes Clusters. Please change the configuration value accordingly.

Guided Assumptions

For this Guided Assumptions,

Will install on 🟦 Non-Production Workload and 🟥 Production Workload.

Pre-Installation

Reloader Preparation

1. Create Helm Value Configurations

   Note

   All Workload Clusters can use the same Helm Values

   cat <<EOF > $HOME/opstella-installation/helm-values/reloader-full-values.yaml
   reloader:
     deployment:
       # Kubernetes Security Context
       securityContext:
         runAsNonRoot: true
         runAsUser: 65534
         seccompProfile:
           type: RuntimeDefault
       containerSecurityContext:
         allowPrivilegeEscalation: false
         seccompProfile:
           type: RuntimeDefault
         capabilities:
           drop: ["ALL"]
   EOF

Complete Prerequisites

Kubernetes Cluster

1. Export Required Shell Variables

   Before connect please load variables based on cluster.

   source $HOME/opstella-installation/shell-values/kubernetes/CHANGEME_cluster.vars.sh

   Export these variables in your terminal before proceeding with the installation.

   # Infrastructure
   export KUBECONFIG="$HOME/opstella-installation/kubeconfigs/CHANGEME_cluster.yaml"

Installation

1. Add Reloader Helm Repository.

   # Add Helm Repository
   helm repo add stakater https://stakater.github.io/stakater-charts
   helm repo update

2. Install Reloader on Kubernetes Cluster.

   • Install a Helm Release with specific Helm Chart Version --version 2.1.3 (App Version: v1.4.2)

     # Install Reloader Helm Release
     helm install reloader stakater/reloader --version 2.1.3 \
       --namespace devsecops-system \
       -f $HOME/opstella-installation/helm-values/reloader-full-values.yaml

Post-Installation

Reloader Testing

Note

Applies to All Workload Kubernetes Clusters.

1. Connect to Kubernetes Cluster ; i.e w/ Kubeconfig File

   Set Kubeconfig File

   export KUBECONFIG="$HOME/opstella-installation/kubeconfigs/CHANGEME_cluster.yaml"

2. Get Pod Status - Reloader

   kubectl get pods -n devsecops-system

   Reloader should be `Running

   NAME                   READY   STATUS    RESTARTS   AGE
   ... (deducted)
   reloader-reloader-XXXXXXX-YYYY            1/1     Running   0          XdXh