csantanapr

Using Lima for the Kubernetes - Enterprise Guide book

Book Github Repo: https://github.com/PacktPublishing/Kubernetes-An-Enterprise-Guide-Third-Edition

Install Lima https://github.com/lima-vm/lima

Create Lima VM Ubuntu 22.04 using x86 (arm64 not supported yet)

limactl start --name k8sbookclub --cpus 4 --memory 16 --arch x86_64 https://gist.githubusercontent.com/csantanapr/4110517e5359b4fc139afabfcd3aa9b4/raw/47a9a128296da455c3ec82c794e6bbf17b9a824e/ubuntu-22.04.yaml

csantanapr

The GitOps Bridge

The GitOps Bridge with EKS Blueprints

CNOE

AWS ACK

Kuberentes CAPI/CAPA

csantanapr

Available Public Wildcard DNS Domains pointing to localhost (127.0.0.1)

The best way to safely and securely use local domains pointing to 127.0.0.1 is to edit your local settings (/etc/hosts) and add your own settings. Keep in mind if you want to use subdomains, you need to enter all variations.

Example:

# Adding bottom of your current file /etc/hosts
################# MY LOCAL DOMAINS
127.0.0.1 local.com admin.local.com
127.0.0.1 domain1.com

csantanapr

apiVersion: apps/v1
kind: Deployment
metadata:
  name: test
spec:
  replicas: 1
  selector:
    matchLabels:
      app: test
  template:

csantanapr

ArgoCD and ArgoWorkflows SSO config with AWS Cognito

So you have fantastic ArgoCD or mind-boggling ArgoWorkflows (this guide covers both), and if you want to secure the Authentication with AWS Cognito, let's dive right in.

I found many different sources unveiling some pieces of the required configuration but no resources where one can see the whole picture. I hope this guide will be one of such places. This guide will mean no DEX usage, just rely on Argo's built-in OpenID Connect flow.

Table of contents

csantanapr

Setting GA feature gate CSIServiceAccountToken=true. It will be removed in a future release.                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
Setting GA feature gate TTLAfterFinished=true. It will be removed in a future release. Flag --enable-logs-handler has been deprecated, This flag will be removed in v1.19 Flag --service-account-api-audiences has been deprecated, Use --api-audiences Flag --logtostderr has been deprecated, will be removed in a future release, see https://github.com/kubernetes/enhancements/tree/master/keps/sig-instrumentation/2845-deprecate-klog-specific-flags-in-k8s-components                               

csantanapr

curl -LO https://go.dev/dl/go1.17.6.linux-amd64.tar.gz
sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go1.17.6.linux-amd64.tar.gz
echo 'export PATH=$PATH:$HOME/go/bin:/usr/local/go/bin' >> $HOME/.profile
echo 'export GOPATH=$HOME/go' >> $HOME/.profile
source $HOME/.profile
go version

csantanapr

minikube ssh <-- git bash window
sudo su - <-- within the minikube environment

cat << EOF > /etc/systemd/resolved.conf
> [Resolve]
> DNS=1.1.1.1

csantanapr

#!/usr/bin/env bash

set -eo pipefail
set -u

## INSTALL OPERATOR (is install in default namespace, to use another namespace need to modify the yaml)
n=0
until [ $n -ge 3 ]; do
  kubectl apply -f https://storage.googleapis.com/knative-nightly/operator/latest/operator.yaml > /dev/null && break
  echo "Kourier failed to install on first try"

csantanapr

Trivia on ingress

Refs: https://kubernetes.io/docs/tasks/access-application-cluster/ingress-minikube/

You are tasked to deploy an application to http://hello-world.info the software is package at gcr.io/google-samples/hello-app:1.0 the app team said the software listens on port 8080. web app responds to prefix path http://hello-world.info/* Deploy only using the 3 commands, complete the commands.

1. kubectl create deployment --port **** ...
2. kubectl expose ...