Skip to content

thanawat1303/Kube

BranchesTags

Repository files navigation

Kubernetes

Wakatime Url

Step on Work

  1. Install tools kubernetes

    Ref
    kubectl

    • Ref

    • download Kubectl.exe to path want

      curl.exe -LO "https://dl.k8s.io/release/v1.26.0/bin/windows/amd64/kubectl.exe"

    • Add Path to environment variable

      • Search environment

      • Click Environment Variables...

      • Select Path Click Edit

      • Click New

      • Add Path that have kubectl.exe

      • Click OK

    • Test Kubectl enable

      kubectl version --client
    minikube

    • Ref

    • download minikube.exe

      New-Item -Path 'c:<path want to install>' -Name 'minikube' -ItemType Directory -Force #create folder minikube
Invoke-WebRequest -OutFile 'c:<path want to install>\minikube\minikube.exe' -Uri 'https://github.com/kubernetes/minikube/releases/latest/download/minikube-windows-amd64.exe' -UseBasicParsing #download install to path

    • Add Path to environment variable run Admin

      $oldPath = [Environment]::GetEnvironmentVariable('Path', [EnvironmentVariableTarget]::Machine)
if ($oldPath.Split(';') -inotcontains 'C:<path folder minikube.exe>'){ `
[Environment]::SetEnvironmentVariable('Path', $('{0};C:<path folder minikube.exe>' -f $oldPath), [EnvironmentVariableTarget]::Machine) `
}

    • Restart Terminal

    Docker engine

  2. Config cluster kubernetes

  3. Deploy traefik

    • Ref

    • Create traefik-dashboard.yaml

      Show code 
      apiVersion: traefik.containo.us/v1alpha1 #define api version is traefik.containo.us/v1alpha1 for revert proxy , load balance and auto set SSL/TLS option traefik
kind: Middleware #define type object is Middleware for connect service
metadata:
  name: traefik-basic-authen #define name object traefik-basic-authen
  namespace: spcn19 #define namespace want install traefik-basic-authen
spec: #define spec in traefik-basic-authen
  basicAuth: #define secure for access to traefik
    secret: dashboard-auth-secret #define pod secure this is name dashboard-auth-secret
    removeHeader: true #set remove header for upspeed and up efficiency
---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute #define type object ingressRount for setup route
metadata:
  name: traefik-dashboard
  namespace: spcn19 #define namespace want install traefik-dashboard
  annotations:
    kubernetes.io/ingress.class: traefik #define connect ingress this is traefik for set ingress
    traefik.ingress.kubernetes.io/router.middlewares: traefik-basic-authen #define middleware use in ingress by start from ingress.class
spec: #define spec in traefik-dashboard
  entryPoints:
    - websecure #define entrypoints is websecure
  routes: #define route
    - match: Host(`traefik.spcn19.local`) && (PathPrefix(`/dashboard`) || PathPrefix(`/api`)) #define condition access traefik-dashboard
      kind: Rule #define type object is Rule for access
      middlewares: #define middleware before access service api@internal
        - name: traefik-basic-authen #use middleware name traefik-basic-authen authentication
          namespace: spcn19 #this run on space spcn19
      services: #services on Traefik
        - name: api@internal #name service
          kind: TraefikService #define type object is TraefikService for service api@internal

    • Create traefik-setup.ps1

      Show code 
      #powershell

$KUBE_NAMESPACE = Read-Host -Prompt "Please enter namespace in file traefik-dashboard.yaml " #Enter name space same namespace in traefik-dashboard.yaml
Write-Output "Traefik will install to $KUBE_NAMESPACE" 

kubectl create namespace $KUBE_NAMESPACE #create namespace on cluster
kubectl config set-context --current --namespace=$KUBE_NAMESPACE #set config on kube defalt namespace

kubectl apply -f https://raw.githubusercontent.com/traefik/traefik/v2.9/docs/content/reference/dynamic-configuration/kubernetes-crd-definition-v1.yml #apply CRD define resource ingress middleware tls
kubectl apply -f https://raw.githubusercontent.com/traefik/traefik/v2.9/docs/content/reference/dynamic-configuration/kubernetes-crd-rbac.yml #apply RBAC kubernetes define role for CRD

if ( -Not (Get-Command scoop -ErrorAction Ignore)) { #check scoop already
   #install scoop
   $username = Read-Host -Prompt "Username " #Read Username computer

   Set-ExecutionPolicy RemoteSigned -Scope CurrentUser #allow powershell script use from internet and -Scope CurrentUser this is user present
   irm get.scoop.sh | iex #install scoop

   $env:Path -split ';' > $null #define environment
   $env:Path += ";C:\Users\$username\scoop\shims" > $null #define environment
}

if ( -Not (Get-Command helm -ErrorAction Ignore)) { #check helm already
   #install helm
   scoop install helm
}

helm repo add traefik https://traefik.github.io/charts # add repo traefik charts is traefik in helm
helm repo update # update repo to make prepare install traefik charts
helm install traefik traefik/traefik # Install traefik chart to make loadbalance and reverse Proxy 

kubectl get svc -l app.kubernetes.io/name=traefik #Get service label name app.kubernetes.io/ name = traefik
kubectl get po -l app.kubernetes.io/name=traefik #Get pod label name app.kubernetes.io/ name = traefik

$UserTraefik = Read-Host -Prompt "Username Traefik " #Enter Username Login Traefik

if ( -Not ("$UserTraefik" -eq " ")) { #Check emply value
   bash -c "htpasswd -nB $UserTraefik | tee auth-secret" #Create password to hash and secret of authenticat traefik
   kubectl create secret generic -n $KUBE_NAMESPACE dashboard-auth-secret --from-file=users=auth-secret -o yaml --dry-run=client | tee dashboard-secret.yaml
     #create kubernetes secure and create dashboard-secret.yaml
     # -n => namespace
     # --from-file=users=auth-secret => set secure from file auth-secret and use is key users
     # -o yaml => output file .yaml
     # --dry-run=client => create secure object not sent to kube API server but will check syntax and validation
   kubectl apply -f traefik-dashboard.yaml #Deploy traefik-dashboard.yaml for start traefik and dashboard
   kubectl apply -f dashboard-secret.yaml #Deploy dashboard-secret.yaml for start secure authentication traefik
   
   rm auth-secret #remove file auth-secret 
   rm dashboard-secret.yaml #remove file dashboard-secret.yaml

   $spinner = '/','-','\','|' #define animetion spinner
   $i = 0 #define index animetion
   while ($true) { #loop check Create container complete

       $status = Invoke-Expression -Command "kubectl get pods -l app.kubernetes.io/name=traefik --field-selector=status.phase=Running --ignore-not-found=true" #check status po is Running create container complete
         # --ignore-not-found=true => ignore error when not found resouce
       if (-Not ("$status" -eq '')){ #check when container ready
           Write-Host ""
           Write-Host ">>> Install Treafik dashboard Complete <<<" -ForegroundColor Green #show output and color text green
           break #stop loop
       }

       Write-Host -NoNewline "`r Installing Treafik dashboard ...$($spinner[$i])" #show text loading container create
       $i = ($i + 1) % $spinner.Length #loop index and when last index will return to first index
       Start-Sleep -Milliseconds 100 #delay 100 millisec
   }

}
      Step by step

      • Create namespace

        kubectl create namespace <namespace>
kubectl config set-context --current --namespace=<namespace>

      • Deploy resource CRD and RBAC

        kubectl apply -f https://raw.githubusercontent.com/traefik/traefik/v2.9/docs/content/reference/dynamic-configuration/kubernetes-crd-definition-v1.yml
kubectl apply -f https://raw.githubusercontent.com/traefik/traefik/v2.9/docs/content/reference/dynamic-configuration/kubernetes-crd-rbac.yml

      • Install helm

        Set-ExecutionPolicy RemoteSigned -Scope CurrentUser
irm get.scoop.sh | iex
$env:Path -split ';' > $null
$env:Path += ";C:\Users\<username>\scoop\shims" > $null
scoop install helm

      • Install traefik charts

        helm repo add traefik https://traefik.github.io/charts
helm repo update
helm install traefik traefik/traefik

      • Get traefik service and traefik pod

        kubectl get svc -l app.kubernetes.io/name=traefik
kubectl get po -l app.kubernetes.io/name=traefik

      • Create authenticat secret traefik dashboard

        bash -c "htpasswd -nB <user login traefik> | tee auth-secret"
kubectl create secret generic -n <namespace> dashboard-auth-secret --from-file=users=auth-secret -o yaml --dry-run=client | tee dashboard-secret.yaml

      • Deploy secret traefik and traefik dashboard

        kubectl apply -f traefik-dashboard.yaml
kubectl apply -f dashboard-secret.yaml

    • Example dashboard-secret.yaml

      Show code 
      apiVersion: v1
data:
  users: "" #genarate hash by kubectl create secret generic
kind: Secret #define type object is Secret for authentication
metadata:
  creationTimestamp: null
  name: dashboard-auth-secret
  namespace: "" #match Traefik in here genarate by powershell user enter namespace

    • Run file traefik-setup.ps1

      ./traefik-setup.ps1

    • Get detail traefik show ip

      kubectl get svc #look at EXTERNAL-IP

    • Set Domain in file host in path windows

      C:\Windows\System32\drivers\etc\hosts # ex. EXTERNAL-IP traefik.spcn19.local

    • Test Open Traefik dashboard

      https://traefik.spcn19.local/dashboard/
      Show dashboard

  4. Deploy service

    • Create rancher-deployment.yaml

      Show code 
       apiVersion: apps/v1 #define apiVersion is apps/v1
 kind: Deployment #define type object is deployment for create pod replicas and rolling update
 metadata: #define metadata for deployment
   name: rancher-deployment #define name object is rancher-deployment
   namespace: spcn19 #define namespace want install rancher-deployment
 spec:
   replicas: 1 #define node cluster want create pod
   selector: #define selector pod
     matchLabels: #define match label pod to deployment
       app: rancher #define label pod want create on deployment
   template: #define template create container
     metadata:
       labels:
         app: rancher #create on deployment matchLabels is app: rancher
     spec: #spec on pod
       containers: #create container
       - name: rancher #name container
         image: rancher/hello-world #image container
         ports: #define port need for container
         - containerPort: 80 #port 80
 ---
 apiVersion: v1
 kind: Service #define type object is Service for loadbalance
 metadata: 
   name: rancher-service
   labels:
     name: rancher-service
   namespace: spcn19 #run on namespace spcn19
 spec: #define service for access pod
   selector: #define selector pod match service will loadbalance
     app: rancher #label match pod label app: rancher => rancher-deployment
   ports:
   - name: http #name port
     port: 80 #port service running on host
     protocol: TCP #protocal that the service use
     targetPort: 80 #port that container use
 ---
 apiVersion: traefik.containo.us/v1alpha1 #define api version is traefik.containo.us/v1alpha1 for revert proxy , load balance and auto set SSL/TLS option traefik
 kind: IngressRoute #define type object ingressRount for setup route
 metadata:
   name: service-ingress
   namespace: spcn19
 spec:
   entryPoints:
     - web #http
     - websecure #https
   routes:
   - match: Host(`web.spcn19.local`) #access on url
     kind: Rule #define type object is Rule for access
     services: #define service want access
     - name: rancher-service #define service want access name rancher-service
       port: 80 #define port accesss on port 80

    • Deploy service web rancher

      kubectl apply -f rancher-deployment.yaml

    • Set Domain in file host in path windows match traefik

      C:\Windows\System32\drivers\etc\hosts # ex. EXTERNAL-IP web.spcn19.local

    • Test Open rancher-service

      web.spcn19.local
      Show service

Command

Link on local

  • traefik.spcn19.local
  • web.spcn19.local

About

No description or website provided.

Topics

kubernetes yaml powershell traefik ps1-script

Resources

Readme
Activity

Stars

1 star

Watchers

1 watching

Forks

1 fork
Report repository

Releases

No releases published

Packages

No packages published

Languages