Configuring license secret installation

Buoyant Enterprise for Linkerd provides several ways to install and configure your license. This guide provides a quick reference for these alternate methods.

Prerequisites

• The BUOYANT_LICENSE environment variable set, with functioning BEL CLI
• Each method below assumes you have already installed the Linkerd CRDs:

curl https://enterprise.buoyant.io/install | sh

linkerd install --crds | kubectl apply -f -

helm repo add linkerd-buoyant https://helm.buoyant.cloud
helm repo update

helm install linkerd-crds \
  --create-namespace \
  --namespace linkerd \
  linkerd-buoyant/linkerd-enterprise-crds

Method 1: LicenseSecret

By default, Linkerd will create a buoyant-license secret during installation. To bring your own license secret, you can reference it in the install command. We recommend naming it buoyant-license.

kubectl create namespace linkerd
kubectl create secret generic --namespace linkerd buoyant-license \
  --from-literal=license=$BUOYANT_LICENSE

linkerd install --set licenseSecret=buoyant-license | kubectl apply -f -

helm install linkerd-control-plane \
  --namespace linkerd \
  --set licenseSecret=buoyant-license \
  --set-file linkerd-control-plane.identityTrustAnchorsPEM=ca.crt \
  --set-file linkerd-control-plane.identity.issuer.tls.crtPEM=issuer.crt \
  --set-file linkerd-control-plane.identity.issuer.tls.keyPEM=issuer.key \
  linkerd-buoyant/linkerd-enterprise-control-plane

Method 2: Custom CLI flag

The linkerd CLI automatically uses the BUOYANT_LICENSE environment variable during installation. If you want to set it to a different value, you can use the --set license flag:

linkerd install --set license=[LICENSE] | kubectl apply -f -