ViaRézo
Kubernetes
Formation Kubernetes

Repository

git clone --recurse-submodules git@gitlab.viarezo.fr:ViaRezo/Kubernetes/formation-kubernetes
mkdir ~/.kube
ssh 138.195.139.40 "sudo cp ~root/.kube/config ."
scp 138.195.139.40:config ~/.kube/config
kubectl get nodes
omz plugin enable docker
omz plugin enable kubectl
omz plugin enable helm
kubectl create namespace <le nom de mon équipe géniale>
kubectl config set-context --current --namespace <le nom de mon équipe géniale>
docker run -p 8080:80 vroum-front
docker run -p 8000:8000 --env-file .env vroum-back
kubectl apply -f <myfile.yaml>
kubectl get <objet>
kubectl describe <objet> <nom de l'objet>
kubectl run mysql --image=mysql --port 3306 --env "MYSQL_USER=vroum" --env "MYSQL_PASSWORD=password" --env "MYSQL_DATABASE=vroum" --env "MYSQL_RANDOM_ROOT_PASSWORD=yes"
kubectl get pod mysql
kubectl exec -it mysql -- bash
mysql -u vroum --database vroum -p
kubectl logs mysql
kubectl get pod mysql -o wide
<registry>/<project>/<image>:<tag>
docker tag <image> registry.viarezo.fr/formation-kube/<image>:<version>
docker build . -t registry.viarezo.fr/formation-kube/<image>:<version>
# En utilisant les identifiants qui sont sur Bitwarden
docker login registry.viarezo.fr
docker push registry.viarezo.fr/formation-kube/vroum-front:<un truc rigolo unique>
apiVersion: apps/v1
kind: Deployment
metadata:
  name: myapp
spec:
  selector:
    matchLabels:
      app: myapp
  template:
    metadata:
      labels:
        app: myapp
    spec:
      containers:
      - name: myapp
        image: <Image>
        resources:
          limits:
            memory: "128Mi"
            cpu: "500m"
        ports:
        - containerPort: <Port>
type: front
app: vroum
demandé: non
ratio: probablement
patek: annulé
kubectl port-forward <nom_du_pod> <port_de_ton_pc>:<port_du_pod>
apiVersion: v1
kind: Secret
metadata:
  name: mysecret
type: Opaque
stringData:
  username: ouioui
  password: taxi123
env:
  - name: SECRET_USERNAME
    valueFrom:
      secretKeyRef:
        name: mysecret
        key: username
apiVersion: v1
kind: Service
metadata:
  name: myapp
spec:
  selector:
    app: myapp
  ports:
  - port: <Port>
    targetPort: <Target Port>
# ingressroute_front/back.yaml
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: <nom>
spec:
  entryPoints:
    - websecure
  routes:
  - kind: Rule
    match: Host(`<nom de domaine>`) && PathPrefix(`/path`)
    services:
      - kind: Service
        name: <nom du service>
        port: <port>
  tls:
    secretName: <secret du certificat>
# certificate.yaml
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: <nom du certificat>
spec:
  secretName: <nom du secret du certificat>
  dnsNames:
    - <nom de domaine>
  issuerRef:
    name: letsencrypt
    kind: ClusterIssuer
kubectl get certificate
kubectl get ingressroute
kubectl describe certificate
kubectl describe ingressroute
deployment_front.yaml
deployment_back.yaml
service_front.yaml
service_back.yaml
ingressroute_front.yaml
ingressroute_back.yaml
certificate.yaml
kubeclt delete -f le_dossier_qui_contient_tous_mes_manifestes
vroum
├── Chart.yaml
├── templates
│   ├── certificate.yaml
│   ├── deployment_back.yaml
│   ├── deployment_front.yaml
│   ├── ingressroute_back.yaml
│   ├── ingressroute_front.yaml
│   ├── service_back.yaml
│   └── service_front.yaml
└── values.yaml

# Chart.yaml
apiVersion: v2
name: <nom>
description: <description>
type: application
version: 0.0.0
appVersion: "<version>"
{{ .Values.<yaml path> }}
{{ .Values.front.deployment.name }}
coucou
front:
  deployment:
    name: coucou
{{ .Chart.<yaml path> }}
helm template <nom_de_la_chart>
helm install <nom de l'application> <chemin vers la charte>
helm upgrade <nom de l'application> <chemin vers la charte>
helm uninstall <nom_de_l'installation>
kubectl delete pod mysql
helm repo add bitnami https://charts.bitnami.com/bitnami
apiVersion: v1
kind: Secret
metadata:
  name: mysql-credentials
type: Opaque
stringData:
  mysql-root-password: verystrongpassword
  mysql-password: password
auth:
  existingSecret: mysql-credentials
  username: vroum
  database: vroum
helm install mysql bitnami/mysql -f values.yaml
kubectl get services
helm uninstall mysql
apiVersion: v2
name: vroum
description: vroum deployment with MySQL backend
type: application
version: 0.0.1
appVersion: "0.0.1"
dependencies:
  - name: mysql
    version: 9.0.0
    repository: https://charts.bitnami.com/bitnami
mysql:
  auth:
    existingSecret: mysql-credentials
    username: vroum
    database: vroum
kubectl rollout restart deployment vroum-back
helm dependency build vroum
helm install vroum vroum/
export SEALED_SECRETS_CONTROLLER_NAMESPACE=sealed-secrets
export SEALED_SECRETS_CONTROLLER_NAME=testing-sealed-secrets
export SEALED_SECRETS_FORMAT=yaml
export SEALED_SECRETS_SCOPE=cluster-wide
cat my_un_encrypted_secret.yaml | kubeseal > my_encrypted_secret.yaml
kubectl get all