Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/rurumimic/node-on-kube

db istio kubernetes nginx node

Last synced: 9 days ago
JSON representation

Host: GitHub
URL: https://github.com/rurumimic/node-on-kube
Owner: rurumimic
Created: 2020-06-22T06:46:10.000Z (over 4 years ago)
Default Branch: master
Last Pushed: 2022-12-10T09:40:08.000Z (about 2 years ago)
Last Synced: 2024-11-09T05:19:39.484Z (2 months ago)
Topics: db, istio, kubernetes, nginx, node
Language: JavaScript
Homepage:
Size: 215 KB
Stars: 2
Watchers: 3
Forks: 1
Open Issues: 6
Metadata Files:
- Readme: README.md

Awesome Lists containing this project

README

# Node on Kube

1. Setup
2. Service Mesh
- Istio
3. Database
- MariaDB
- Persistent storage
4. Backend
- app: node.js
- reverse proxy: nginx
5. Ingress
- ingress controller
- istio gateway
- ingress-nginx
- secret: certificates
- deploy ingress
- (option) mutual authentication
6. Test
7. Horizontal Pod Autoscaler
8. Destroy k8s applications
9. Tip

---

## Setup

### Docker Desktop

[Docker Desktop for Mac Edge release notes](https://docs.docker.com/docker-for-mac/edge-release-notes/)

- Docker 19+
- Docker Compose 1.26+
- Kubernetes 1.18+ (for Kubernetes Metrics Server)

Settings:

1. Resources (for Istio)
- CPUs: 4
- Memory: 8GB
1. Enable Kubernetes

### /etc/hosts

```bash
127.0.0.1 example.localhost
```

---

## Istio

### (First time only) Add label

```bash
kubectl label namespace default istio-injection=enabled
```

### (First time only) Install

```bash
curl -L https://istio.io/downloadIstio | sh -
cd istio-1.6.3
```

### Export PATH

```bash
export PATH=$PWD/bin:$PATH
```

### Install a profile

```bash
istioctl install --set profile=demo
```

---

## Database

### MariaDB

```bash
kubectl apply -f db/mariadb/configmap.yml;
kubectl apply -f db/mariadb/volume.yml;
kubectl apply -f db/mariadb/deploy.yml;
```

### Insert data from dump files

```bash
kubectl exec -i $(kubectl get pod --selector=app=mariadb --template '{{range .items}}{{.metadata.name}}{{end}}') -c db \
-- sh -c 'exec mysql -umaster -pmypw' < db/mariadb/data/dump.sql
```

Read [Setup MariaDB](db/mariadb/README.md)

---

## Backend

### Build Node.js Docker Image

```bash
docker build -t node-app backend/app
```

### Deploy Backend Service

```bash
kubectl apply -f backend/proxy/configmap.yml;
kubectl apply -f backend/deploy.yml;
```

---

## Ingress

### Istio Ingress Secure Gateway

1. [Set IP and Port](ingress/istio/README.md#set-ip-and-port)
2. [Create certificates](ingress/istio/README.md#create-certificates)
3. Create a gateway and a virtual service:

```bash
kubectl apply -f ingress/istio/gateway.yml;
```

Check ingress settings:

```bash
istioctl analyze;

✔ No validation issues found when analyzing namespace: default.
```

### NGINX Ingress Controller for Kubernetes

- [kubernetes/ingress-nginx](https://github.com/kubernetes/ingress-nginx)
- [Installation Guide](https://kubernetes.github.io/ingress-nginx/deploy/#contents)

#### (First time only) Install a ingress controller

##### Docker for Mac

```bash
kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/master/deploy/static/provider/cloud/deploy.yaml
```

Using [other platforms](#install-a-ingress-controller-with-other-platforms):
- minikube
- Helm 2

#### Verify Installation

```bash
kubectl get pods -n ingress-nginx -l app.kubernetes.io/name=ingress-nginx --watch
```

Once the ingress controller pods are running, you can cancel the command typing `Ctrl+C`.

### Basic Ingress: TLS

#### SSL Certificate

Read [Ingress Secret](ingress/ingress-nginx/basic/README.md#ingress-secret)

Create the Secret:

```bash
kubectl apply -f ingress/ingress-nginx/basic/secret.yml
```

#### Deploy Ingress

```bash
kubectl apply -f ingress/ingress-nginx/basic/ingress.yml
```

### (Option) Auth Ingress: Client Certificate Authentication

Read [Client Certificate Authentication: Mutual Authentication](ingress/ingress-nginx/mutual/README.md)

---

## Test

### CURL

```bash
curl -v -HHost:example.localhost --resolve "example.localhost:443:127.0.0.1" \
--cacert ingress/istio/certs/example.localhost.crt "https://example.localhost:443"

HTTP/2 200
```

### Open a browser

Open [http://example.localhost](http://example.localhost)

It is automatically redirected to HTTPS.

### Init containers

Read [Init Containers](docs/init.containers.md)

1. Open [http://example.localhost/wiki/bauhaus.html](http://example.localhost/wiki/bauhaus.html).
1. Compare with [Wikipedia: Bauhaus](https://en.wikipedia.org/wiki/Bauhaus).

### Kiali

- Username: admin
- Password: admin

```bash
istioctl dashboard kiali
```

1. Left menu: Graph
1. Namespace: default

---

## Horizontal Pod Autoscaler

Read [Horizontal Pod Autoscaler](docs/horizontal.pod.autoscaler.md)

---

## Destroy Kube application

### Ingress

#### Istio Gateway

```bash
kubectl delete -n istio-system secret gateway-secret;
kubectl delete -f ingress/istio/gateway.yml;
```

```bash
istioctl manifest generate --set profile=demo | kubectl delete -f -
```

#### ingress-nginx

```bash
kubectl delete -f ingress/basic/ingress.yml;
kubectl delete -f ingress/basic/secret.yml;
```

**Docker for Mac**

```bash
kubectl delete -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/master/deploy/static/provider/cloud/deploy.yaml
```

### Backend

```bash
kubectl delete -f backend/deploy.yml;
kubectl delete -f backend/proxy/configmap.yml;
```

### MariaDB

```bash
kubectl delete -f db/mariadb/deploy.yml;
kubectl delete -f db/mariadb/volume.yml;
kubectl delete -f db/mariadb/configmap.yml;
```

---

## Tip

### Object List

```bash
kubectl get deploy # deployments, deployment
kubectl get svc # services, service
kubectl get ep # endpoints,
kubectl get rs # replicasets, replicaset
kubectl get po # pods
kubectl get ing # ingress
```

### Network

```bash
curl -X GET backend-service:80;
curl -X GET backend-service.default:80;
curl -X GET backend-service.default.svc:80;
curl -X GET backend-service.default.svc.cluster.local:80;
```

---

## Appendix

### Ingress

#### Install a ingress controller with other platforms

##### minikube

For standard usage:

```bash
minikube addons enable ingress
```

For development:

```bash
# Disable the ingress addon:
minikube addons disable ingress
make dev-env
kubectl get pods -n ingress-nginx
```

##### Helm 2

```bash
helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx/
helm install --name ingress-nginx ingress-nginx/ingress-nginx
```