apiVersion: velero.io/v1
kind: Schedule
metadata:
  name: daily-backup
  namespace: velero
spec:
  schedule: "0 2 * * *"
  template:
    includedNamespaces:
      - kube-system
      - istio-system
      - default
    ttl: 720h

velero install \
  --provider aws \
  --plugins velero/velero-plugin-for-aws:v1.8.0 \
  --bucket homelab-velero \
  --use-node-agent

helm repo add vmware-tanzu https://vmware-tanzu.github.io/helm-charts
helm repo update
 
kubectl create namespace velero
 
helm install velero vmware-tanzu/velero \
  -n velero \
  --set configuration.backupStorageLocation[0].name=default \
  --set configuration.backupStorageLocation[0].provider=aws \
  --set configuration.backupStorageLocation[0].bucket=homelab-velero \
  --set configuration.backupStorageLocation[0].config.region=us-east-1 \
  --set configuration.backupStorageLocation[0].config.s3ForcePathStyle=true \
  --set configuration.backupStorageLocation[0].config.s3Url=https://s3.example.com \
  --set credentials.useSecret=true

cat > credentials-velero <<'EOF'
[default]
aws_access_key_id=YOUR_ACCESS_KEY
aws_secret_access_key=YOUR_SECRET_KEY
EOF
kubectl -n velero create secret generic cloud-credentials --from-file=cloud=credentials-velero

velero backup create baseline-$(date +%Y%m%d) --include-namespaces kube-system,istio-system
velero backup get

helm get values cilium -n kube-system -o yaml > cilium-values.yaml
helm upgrade --install cilium cilium/cilium \
  -n kube-system \
  -f cilium-values.yaml \
  --set hubble.relay.enabled=true \
  --set hubble.ui.enabled=true

kubectl -n kube-system port-forward svc/hubble-ui 12000:80

ISTIO_VERSION=1.24
kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-${ISTIO_VERSION}/samples/addons/jaeger.yaml
kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-${ISTIO_VERSION}/samples/addons/kiali.yaml

kubectl -n istio-system port-forward svc/jaeger-query 16686:16686
kubectl -n istio-system port-forward svc/kiali 20001:20001

helm repo add tailscale https://pkgs.tailscale.com/helmcharts
helm repo update
 
kubectl create namespace tailscale
 
helm install tailscale-operator tailscale/tailscale-operator \
  -n tailscale \
  --set oauth.clientId=TS_OAUTH_CLIENT_ID \
  --set oauth.clientSecret=TS_OAUTH_CLIENT_SECRET \
  --set operatorConfig.hostname=homelab-operator

kubectl annotate svc my-service "tailscale.com/expose=true"

curl -L https://github.com/derailed/k9s/releases/latest/download/k9s_Linux_amd64.tar.gz \
  | tar -xz
sudo mv k9s /usr/local/bin/

curl -L https://github.com/derailed/k9s/releases/latest/download/k9s_Linux_arm64.tar.gz \
  | tar -xz
sudo mv k9s /usr/local/bin/

k9s

kubectl -n velero get pods
# If rg isn't installed, use: grep -E "hubble|jaeger|kiali"
kubectl -n kube-system get pods | rg hubble
kubectl -n istio-system get pods | rg "jaeger|kiali"