ams0

apiVersion: apps/v1
kind: Deployment
metadata:
  name: azure-vote-back
spec:
  replicas: 1
  selector:
    matchLabels:
      app: azure-vote-back
  template:

ams0

#!/bin/bash

# Install kubeadm with containerd https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/install-kubeadm/ & https://kubernetes.io/docs/setup/production-environment/container-runtimes/

#Prepare system for containerd
cat <<EOF | sudo tee /etc/modules-load.d/containerd.conf
overlay
br_netfilter
EOF

ams0

CKS notes December 2020

General

Backup config files!!

alias k=kubectl

sudo runc --root /run/containerd/runc/k8s.io list

ams0

apiVersion: v1
kind: Pod
metadata:
  labels:
    run: nginx
  name: nginx
  namespace: default
spec:
  containers:
  - image: nginx

ams0

apiVersion: crd.projectcalico.org/v1
kind: GlobalNetworkPolicy
metadata:
  name: default-deny
spec:
  selector: all()
  types:
  - Egress 
  egress:    
    - action: Deny

ams0

apiVersion: crd.projectcalico.org/v1
kind: GlobalNetworkPolicy
metadata:
  name: default-deny
spec:
  selector: all()
  types:
  - Egress 
  egress:    
    - action: Deny

ams0

NAMESPACE                           NAME                                                             READY   STATUS 
capi-kubeadm-bootstrap-system       capi-kubeadm-bootstrap-controller-manager-6b69dc7fc8-76vjs        Running
capi-kubeadm-control-plane-system   capi-kubeadm-control-plane-controller-manager-5b8cf46bb6-wxvhg    Running
capi-system                         capi-controller-manager-b9b6cf5d9-sdwzq                           Running
capi-webhook-system                 capi-controller-manager-cdf6fbb98-lkfvc                           Running
capi-webhook-system                 capi-kubeadm-bootstrap-controller-manager-7b7c457d85-zmrz6        Running
capi-webhook-system                 capi-kubeadm-control-plane-controller-manager-86c44777c5-vtdp5    Running
capi-webhook-system                 capz-controller-manager-88c95756d-87rt8                           Running
capz-system                         capz-controller-manager-857dc9578d-6t7sx                          Running

ams0

#!/bin/bash

#Usage: k8sbuild <ACR> <REPO> <IMAGE> <TAG> <SOURCE (path to Dockerfile, defaults to ./Dockerfile)>

#Example: ./k8sbuild.sh theregistry ubuntu test 0.6


#Before running, create a docker-registry secret.

#kubectl create secret docker-registry theregistry --docker-username=${ACR} --docker-server=${ACR}.azurecr.io --docker-password=""

ams0

#AKS for storage

az aks create -k 1.19.3 -g k8s  -s Standard_B4ms -c 1 -n storage
az aks nodepool add -g k8s --cluster-name storage --name rook  -c 0 -s Standard_B4ms --labels storage=rook
az vmss disk attach --vmss-name aks-rook-00821560-vmss -g MC_k8s_storage_westeurope --sku StandardSSD_LRS -z 60 --lun 0
az vmss disk attach --vmss-name aks-rook-00821560-vmss -g MC_k8s_storage_westeurope --sku StandardSSD_LRS -z 60 --lun 1
az aks nodepool scale -g k8s --cluster-name storage --node-count 3 -n rook

ams0

kubectl expose deploy nginx --name nginx-internal --port 80 --type LoadBalancer --overrides='{ "metadata": { "annotations": { "service.beta.kubernetes.io/azure-load-balancer-internal": "true" } } } 'k