Flux version 2 without CNI

This repository is created to share an idea to deploy FluxCD without CNI without sacrificing HA.

Nowadays, some CNIs don't just provide networking but security and observability. Like other applications, you might want to manage your CNI deployment with GitOps methodology.

The challenge here is to provide connectivity between Pods without CNI. For example, you can remove Kube-proxy, which provides the service-to-service communication, or your DNS pods won't be able to start resolving DNS.

Of course, there is an option that you can have FluxCD control your CNI deployment after its deployment. So you need first to deploy CNI.

This repository provides a method to deploy FluxCD without CNI and ensure connectivity with Nginx-proxy. With this, I aim to eliminate the risk if CNI is broken or loses connectivity, your Flux will be functional to apply the resolution.

Get started

Prerequisites

• Flux CLI
• Ansible
  • kubernetes.core
• kubectl-slice
• Clone the repository

You can choose any version with flux_version variable.

    flux_version: "v0.36.0"

This setup forces the deployments to be on controller nodes since connectivity is provided with Nginx-proxy, so we need to define the IPs where deployments exist.

Install FluxCD

$ ansible-playbook install-flux.yaml
.
localhost                  : ok=16   changed=11   unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
$ kubectl get pods -n flux-system
helm-controller-7f674d57fc-2xtm7                       0/1     Running             0          68s
helm-controller-7f674d57fc-42rbv                       0/1     Running             0          68s
helm-controller-7f674d57fc-p4ctm                       0/1     Running             0          68s
kustomize-controller-5777c68db-5xjc8                   1/1     Running             0          68s
kustomize-controller-5777c68db-9pw8f                   1/1     Running             0          68s
kustomize-controller-5777c68db-wrqmg                   1/1     Running             0          68s
notification-controller-79b9cbdb96-22jwh               1/1     Running             0          68s
notification-controller-79b9cbdb96-5ktt9               1/1     Running             0          68s
notification-controller-79b9cbdb96-hlw89               1/1     Running             0          68s
notification-controller-nginx-proxy-77766dc8b8-4ft2x   1/1     Running             0          68s
notification-controller-nginx-proxy-77766dc8b8-f67g5   1/1     Running             0          68s
notification-controller-nginx-proxy-77766dc8b8-snp54   1/1     Running             0          68s
source-controller-644f65fd54-2h46q                     1/1     Running             0          68s
source-controller-644f65fd54-k7t28                     1/1     Running             0          68s
source-controller-644f65fd54-x5gmf                     1/1     Running             0          68s
source-controller-nginx-proxy-5449b79b5b-9fxbx         1/1     Running             0          68s
source-controller-nginx-proxy-5449b79b5b-dwgc7         1/1     Running             0          67s
source-controller-nginx-proxy-5449b79b5b-m57cs         1/1     Running             0          67s

Uninstall Flux

flux uninstall