ams0

kubectl create ns fluxcd

GHUSER=ams0
GHREPO=rancher-home

helm upgrade -i flux fluxcd/flux --wait \
--namespace fluxcd \
--set git.url="https://github.com/${GHUSER}/${GHREPO}.git" \
--set git.readonly=true \
--set sync.state=secret \

ams0

apiVersion: v1
kind: Namespace
metadata:
  name: sock-shop
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: carts-db
  labels:

ams0

---
# Source: calico/templates/calico-config.yaml
# This ConfigMap is used to configure a self-hosted Calico installation.
kind: ConfigMap
apiVersion: v1
metadata:
  name: calico-config
  namespace: kube-system
data:
  # Typha is disabled.

ams0

apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx
  labels:
    app: nginx
spec:
  replicas: 1
  selector:
    matchLabels:

ams0

kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: dbench-pv-claim
spec:
  storageClassName: managed-premium
  # storageClassName: gp2
  # storageClassName: local-storage
  # storageClassName: ibmc-block-bronze
  # storageClassName: ibmc-block-silver

ams0

#1.16.7 works, 1.17.3 no (AKS)

#helm3

#nginx-ingress
helm repo add stable https://kubernetes-charts.storage.googleapis.com

kubectl create ns ingress

helm upgrade --install ingress stable/nginx-ingress \

ams0

kind: ServiceAccount
apiVersion: v1
metadata:
  name: datadog-agent
  namespace: datadog
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: datadog-agent

ams0

kubectl create ns ingress

#took forever to figure out
helm install nginx-ingress stable/nginx-ingress \
--namespace ingress \
--set controller.replicaCount=2 \
--set controller.service.annotations."service\.beta\.kubernetes\.io\/azure-load-balancer-internal"="true" \
--set controller.service.annotations."service\.beta\.kubernetes\.io\/azure-dns-label-name"="internal" \
--set controller.metrics.enabled=true \
--set controller.stats.enabled=true \

ams0

Every pod can do (https://github.com/cloudbooster/Azure-Instance-Metadata/blob/master/Instance-Metadata.md):

curl -H Metadata:true http://169.254.169.254/metadata/instance?api-version=2017-03-01

and get info on the node etc, even identity

az vmss identity assign -g MC_K8S_NFS_WESTEUROPE -n aks-base-11322803-vmss

curl 'http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https%3A%2F%2Fmanagement.azure.com%2F' -H Metadata:true -s

ams0

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: fluentd-elasticsearch
  namespace: kube-system
  labels:
    k8s-app: fluentd-logging
    version: v1
spec:
  selector: