Kubernetes LXD - Revision history

Busk at 20:54, 3 February 2021

2021-02-03T20:54:36Z

Busk at 20:53, 3 February 2021

2021-02-03T20:53:05Z

Busk at 22:32, 2 February 2021

2021-02-02T22:32:44Z

Busk at 22:27, 2 February 2021

2021-02-02T22:27:14Z

Busk at 22:02, 2 February 2021

2021-02-02T22:02:31Z

Busk at 21:51, 2 February 2021

2021-02-02T21:51:32Z

Busk at 21:49, 2 February 2021

2021-02-02T21:49:13Z

Busk at 03:52, 2 February 2021

2021-02-02T03:52:28Z

Busk at 03:50, 2 February 2021

2021-02-02T03:50:51Z

Busk at 03:42, 2 February 2021

2021-02-02T03:42:38Z

@@ Line 8: / Line 8: @@
 lxc config set m8s limits.cpu=8 limits.memory=16GB
 lxc config device override m8s root size=50GB
 lxc exec k0 -- snap install microk8s
 ```

@@ Line 5: / Line 5: @@
 lxc launch ubuntu:focal adc
-lxc launch ubuntu:focal k0 --vm
+lxc init ubuntu:focal k0 --vm
-lxc config set m8s limits.cpu=8 limits.memory=16GB device override m8s root size=50GB
+lxc config set m8s limits.cpu=8 limits.memory=16GB
 lxc config device override m8s root size=50GB
 lxc exec k0 -- snap install microk8s

@@ Line 77: / Line 77: @@
    # sudo iptables -t nat -I PREROUTING -p tcp --dport 443 -d $ip -j DNAT --to-destination $adcip:443
    before_file="/etc/ufw/before.rules"
-   sudo sed -i '1 i\*nat' $before_file
+   sudo sed -i "1 i\*nat" $before_file
-   sudo sed -i '2 i\-I PREROUTING -p tcp --dport 443 -d $ip -j DNAT --to-destination $adcip' $before_file
+   sudo sed -i "2 i\-I PREROUTING -p tcp --dport 443 -d $ip -j DNAT --to-destination $adcip" $before_file
-   sudo sed -i '3 i\-I PREROUTING -p tcp --dport 80 -d $ip -j DNAT --to-destination $adcip' $before_file
+   sudo sed -i "3 i\-I PREROUTING -p tcp --dport 80 -d $ip -j DNAT --to-destination $adcip" $before_file
-   sudo sed -i '4 i\COMMIT' $before_file
+   sudo sed -i "4 i\COMMIT" $before_file
    sudo systemctl restart ufw
+}

@@ Line 78: / Line 78: @@
    before_file="/etc/ufw/before.rules"
    sudo sed -i '1 i\*nat' $before_file
-   sudo sed -i '2 i\-I PREROUTING -p tcp --dport 443 -d $ip -j DNAT --to-destination $adcip\*nat' $before_file
+   sudo sed -i '2 i\-I PREROUTING -p tcp --dport 443 -d $ip -j DNAT --to-destination $adcip' $before_file
-   sudo sed -i '3 i\-I PREROUTING -p tcp --dport 80 -d $ip -j DNAT --to-destination $adcip\*nat' $before_file
+   sudo sed -i '3 i\-I PREROUTING -p tcp --dport 80 -d $ip -j DNAT --to-destination $adcip' $before_file
    sudo sed -i '4 i\COMMIT' $before_file
    sudo systemctl restart ufw

@@ Line 142: / Line 142: @@
 ```
+# Useful Commands
 # References

@@ Line 84: / Line 84: @@
+}
-clear
+# clear
 adc_nat
 sudo restart snap  # Will cause downtime but refreshes lxd iptables

@@ Line 74: / Line 74: @@
    adcip=$(lxc list adc -c 4 | awk '!/IPV4/{ if ( $2 != "" ) print $2}')
    ip=$(ip -o route get to 8.8.8.8 | sed -n 's/.*src \([0-9.]\+\).*/\1/p')
-   sudo iptables -t nat -I PREROUTING -p tcp --dport 80 -d $ip -j DNAT --to-destination $adcip:80
+   # sudo iptables -t nat -I PREROUTING -p tcp --dport 80 -d $ip -j DNAT --to-destination $adcip:80
-   sudo iptables -t nat -I PREROUTING -p tcp --dport 443 -d $ip -j DNAT --to-destination $adcip:443
+   # sudo iptables -t nat -I PREROUTING -p tcp --dport 443 -d $ip -j DNAT --to-destination $adcip:443
-   sudo iptables -L -n -t nat
+  before_file="/etc/ufw/before.rules"
+}
@@ Line 136: / Line 141: @@
 Hostname: demo-6fcfc5f6f4-llh4c
 ```
 # References
@@ Line 143: / Line 150: @@
 - https://linuxcontainers.org/lxd/getting-started-cli/
 - https://www.nginx.com/blog/using-free-ssltls-certificates-from-lets-encrypt-with-nginx/

@@ Line 1: / Line 1: @@
-# Start 1 VM for Kubernetes and one LXD container for NGINX
+# Simple Install of LXD ADC via NGINX for Fronting Kubernetes
 ```
 lxc launch ubuntu:focal adc

@@ Line 9: / Line 9: @@
 ```
-k0:~/health.yml - https://kubernetes.io/docs/tutorials/hello-minikube/
+k0:~/demo.yml
 ```
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-   name: health-ingress
+   name: demo-ingress
    annotations:
      nginx.ingress.kubernetes.io/rewrite-target: /$1
 spec:
    rules:
-     - host: health.uvoo.io
+     - host: demo.uvoo.io
        http:
          paths:
@@ Line 26: / Line 26: @@
              backend:
                service:
-                 name: health
+                 name: demo
                  port:
                    number: 8080
@@ Line 40: / Line 40: @@
 microk8s enable ingress
-microk8s kubectl delete deployment health | true
+microk8s kubectl delete deployment demo | true
-microk8s kubectl delete service health | true
+microk8s kubectl delete service demo | true
-microk8s kubectl delete -f health.yml | true
+microk8s kubectl delete -f demo.yml | true
-microk8s kubectl create deployment health --image=gcr.io/google-samples/hello-app:1.0
+microk8s kubectl create deployment demo --image=gcr.io/google-samples/hello-app:1.0
-microk8s kubectl expose deployment health --type=NodePort --port=8080
+microk8s kubectl expose deployment demo --type=NodePort --port=8080
-microk8s kubectl apply -f health.yml
+microk8s kubectl apply -f demo.yml
-curl -H "Host: health.uvoo.io" 127.0.0.1
+curl -H "Host: demo.uvoo.io" 127.0.0.1
 ```
@@ Line 87: / Line 87: @@
 ```
-adc:/etc/nginx/conf.d/health.conf
+adc:/etc/nginx/conf.d/demo.conf
 ```
 upstream kub-ingress {
@@ Line 95: / Line 95: @@
 server {
-     server_name  health.uvoo.io;
+     server_name  demo.uvoo.io;
      listen  80;
      listen  [::]:80;
@@ Line 123: / Line 123: @@
 Use letsencrypt
 ```
-curl -k -H "Host: health.uvoo.io" https://$adcip  # Make sure site is up (this can take several minutes on reboot
+curl -k -H "Host: demo.uvoo.io" https://$adcip  # Make sure site is up (this can take several minutes on reboot
 sudo apt install -y certbot python3-certbot-nginx
-sudo certbot --no-redirect --nginx -d health.uvoo.io
+sudo certbot --no-redirect --nginx -d demo.uvoo.io
 ```