kubernetes

Author: Abbanapuri

DevOps/Docker/K8s/ClusterIP.yml

@@ -1,9 +1,10 @@
 apiVersion: v1
 Kind: Service
 metadata: 
-   name: clusterip
+   name: nginx 
 spec: 
   selector: 
-    app: deploy
-  type: ClusterIP  
+     web: nginx
+  ports: 
+  - port: 80  
 

DevOps/Docker/K8s/Deployment.yml

@@ -1,7 +1,7 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata: 
-  name: deployment-app 
+  name: deployment-app  
   labels: 
     deploy: app 
 spec: 

DevOps/Docker/K8s/Imparartive-declarative.md

@@ -0,0 +1,18 @@
+## Service: 
+   1. imparative: 
+      ```
+      kubectl expose deploy nginx --port 80 --type ClusterIP 
+      ```  
+   2. declarative: 
+      ```
+      apiVersion: v1
+      kind: Service
+      metadata: 
+        name: nginx 
+      spec: 
+        selector: 
+          web: nginx 
+        ports: 
+         - port: 80 
+        type: ClusterIP
+      ```

DevOps/Docker/K8s/ingress.yml

@@ -1,14 +1,19 @@
 apiVersion: networking.k8s.io/v1beta1
 kind: Ingress
 metadata:
-  name: hello-world-ingress
-  annotations:
-    kubernetes.io/ingress.class: nginx
-spec:
+  name: hello-world-ingress  
+  annotations:  
+    kubernetes.io/ingress.class: nginx 
+    cert-manager.io/issuer: letsencrypt-staging   
+spec: 
+  tls:
+  - hosts:
+    - a0bd8b92de69b44e3ab47ac3e3ada05e-629630616.us-east-1.elb.amazonaws.com
+    secretName: quickstart-example-tls
   rules:
-  - host: abb64e908098646bb9d6fb1bd154258a-2052976340.us-east-1.elb.amazonaws.com
+  - host: a0bd8b92de69b44e3ab47ac3e3ada05e-629630616.us-east-1.elb.amazonaws.com
     http:
       paths:
       - backend:
           serviceName: nginx
-          servicePort: 80
+          servicePort: 80 

DevOps/Docker/K8s/issuer.yml

@@ -0,0 +1,18 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+    name: letsencrypt-staging
+spec: 
+     acme:
+       # The ACME server URL
+       server: https://acme-staging-v02.api.letsencrypt.org/directory
+       # Email address used for ACME registration
+       email: [email protected] 
+       # Name of a secret used to store the ACME account private key
+       privateKeySecretRef:
+         name: letsencrypt-staging
+       # Enable the HTTP-01 challenge provider
+       solvers:
+       - http01:
+           ingress:
+             class:  nginx

DevOps/Docker/K8s/nginx-ingress.md

@@ -32,6 +32,10 @@
 5. service manifest
 6. ingress manifest file (in backend we need to specify service name) 
 7. apply all manifest files 
-8.  kubectl get ingress  
+8. kubectl get ingress  
+9. apply certificates using jetstack certificate controller manager  
+
+
+helm install  my-release  jetstack/cert-manager
 
 

DevOps/Docker/K8s/steps.md

@@ -41,4 +41,6 @@ rules:
      deploy
      service
      clusserissuer
-     
+      
+
+