GitOps with the InterSystems Kubernetes Operator

## Install Kubernetes

```python[1-19]
import random
import string
import google.auth
import google.auth.transport.requests
from google.cloud import container_v1
from google.oauth2 import service_account
from os.path import expanduser
from os import getenv
from string import punctuation

class GoogleCloudKubernetesClient(object):

def __init__(self, project_id, zone):
        file = f'/home/sween/.gcp/pidtoo-fhir.json'
        credentials = service_account.Credentials.from_service_account_file(
            filename=file)
        thinger = "/projects/pidtoo-fhir/locations/us-east4a"
        self.project_id = "pidtoo-fhir"
        self.zone = "us-east4-a"
        self.client = container_v1.ClusterManagerClient(credentials=credentials)

```

Its a small guy, about $100 USD a month

</section>

## Install Kubernetes

```python[4-12]
def cluster_spec(name, project):
    cluster_data = {
    "name": name,
    "network": "projects/pidtoo-fhir/global/networks/default",
    "addons_config": {
      "gce_persistent_disk_csi_driver_config": {
        "enabled": True
      }
    },
    "subnetwork": "projects/pidtoo-fhir/regions/us-east4/subnetworks/default",
    "node_pools": [
      {
        "name": name + "-pool",
        "config": {
          "machine_type": "g1-small",</section>

```

Adjust it to fit your wallet.

</section>

## Install ArgoCD Helm Chart
You will not regret this step.

```bash[1-3]
kubectl create namespace argocd
kubectl apply -n argocd -f \
https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml

```

</section>

## Add Namespace, Registry Secret for IKO

```markdown

kubectl create ns isc

kubectl create secret docker-registry \
pidtoo-pull-secret --namespace isc \
--docker-server=https://containers.intersystems.com \
--docker-username='ron@pidtoo.com' \
--docker-password='12345'

```

</section>

## Git Repo 
Opionionated Layout

```
.
├── argocd
│   ├── app-of-apps
│   │   ├── charts
│   │   │   └── iris-cluster-collection
│   │   │       ├── Chart.yaml
│   │   │       ├── templates
│   │   │       │   ├── iris-operator-application.yaml
│   │   │       │   └── pidtoo-iris-cluster-application.yaml
│   │   │       └── values.yaml
│   │   └── cluster-seeds
│   │       ├── engage.yaml
│   │       └── README.md
│   └── README.md
├── iko
│   ├── AIKO.pdf
│   └── iris_operator_amd-3.5.48.100
│       ├── chart
│       │   └── iris-operator
│       │       ├── Chart.yaml
│       │       ├── README.md
│       │       ├── templates
│       │       │   ├── apiregistration.yaml
│       │       │   ├── appcatalog-user-roles.yaml
│       │       │   ├── cleaner.yaml
│       │       │   ├── cluster-role-binding.yaml
│       │       │   ├── cluster-role.yaml
│       │       │   ├── deployment.yaml
│       │       │   ├── _helpers.tpl
│       │       │   ├── mutating-webhook.yaml
│       │       │   ├── service-account.yaml
│       │       │   ├── service.yaml
│       │       │   ├── user-roles.yaml
│       │       │   └── validating-webhook.yaml
│       │       └── values.yaml
│       └── pidtoo
│           ├── Chart.yaml
│           ├── common.cpf
│           ├── compute.cpf
│           ├── data.cpf
│           └── templates
│               └── pidtoo.yaml
└── README.md
```
</section>

## PasswordHash

Below generates a password for your IRIS workloads (and the Druidia AirShield) and should be included in your configmap (or cpf).

```
sween @ fhirwatch-pop-os ~/Desktop/VEGAS/gitops_iko_slides (gh_pages)
└─ $ ▶ docker run --rm -it containers.intersystems.com/intersystems/passwordhash:1.1 -algorithm SHA512 -workfactor 10000
1.1: Pulling from intersystems/passwordhash
f35eb96867aa: Pull complete 
Digest: sha256:784ee9ad3b6daf54badc0a7f57a934de7633d27da0da38e6482c2306d3d898db
Status: Downloaded newer image for containers.intersystems.com/intersystems/passwordhash:1.1
Enter password: 
Enter password again: 
PasswordHash=dd3db559360ff44afc8ad4285454923286af054bcdfe246781403de71ad671ace9db97156558e8ad51a534532f5ec4cb0050905d22268b37093ff3e79a1ea62e,2679fe891b0dffffcf8a98b58ed5778ef8bbb1da5a8754f7ff3427274608cc8ca76d332bc50308042b0895f531925fa686c7501872625e719885cfca87c2b45c,10000,SHA512
```

#  SRE 
Site Reliability Tasks for IKO Workloads

The podTemplate field can be useful in exploring deployment and startup errors; examples are provided in that section.

`kubectl explain resource`

`kubectl describe resource [instance-name]`
Lists the fields and values for all instances of the specified resource, or for the specified instance of that resource. For
example, kubectl describe pods shows you the node each pod is hosted by, the containers in the pod and the names
of their data volumes (persistent volume claims), and many other details such as the license key and pull secrets.
`kubectl get resource [instance-name] [options]`
Without options, lists basic information for all instances of the specified resource, or for a specified instance of that resource. However, kubectl get -o provides many options for formatting and selecting subsets of the possible output of the command. For example, the command 
`kubectl get IrisCluster -o yaml IrisCluster-name output option` displays
the details fields by the .yaml definition file for the specified IrisCluster in the same format with their current values.
                                                                                         
Troubleshoot IrisCluster deployment errors
`kubectl logs (pod-name | resource/instance-name) [-c container-name]`
Dislays the logs for the specified container in a pod or other specified resource instance (for example, kubectl logs deployment/intersystems-operator-name).

For example, you could use kubectl exec in these ways:

`kubectl exec pod-name -- iris list`
Displays information about the InterSystems IRIS instance running in the container.

`kubectl exec pod-name -- more /irissys/data/IRIS/mgr/messages.log`

Displays the instance’s messages log.

`kubectl exec pod-name -it -- iris terminal IRIS`

Opens the InterSystems Terminal for the instance.

`kubectl exec pod-name -it -- "/bin/bash"`

Opens a command line inside the container.

## PasswordHash

Below generates a password for your IRIS workloads (and the Druidia AirShield) and should be included in your configmap (or cpf).