dreh23/k8s-demos

Kubernetes Demo Environment

Requirements

Following applications are required to execute / deploy the demo environment:

• kubectl
• HashiCorp Terraform
• Helm
• gcloud CLI Tools
• git-crypt

Decrypt Secrets

All secrets in the directory 06_secrets are encrypted using git-crypt.

To decrypt the required secrets run git-crypt unlock <Path_to_Keyfile> in the secrets directory. The key file is stored at the internal Wiki.

Installation

Create Kubernetes Cluster

Get Credentials for new Cluster

Since we have a Regional Cluster we have to use a workaround in gcloud to get the Cluster Credentials.

Run following commands:

• export CLOUDSDK_CONTAINER_USE_V1_API_CLIENT=false && export CLOUDSDK_CONTAINER_USE_V1_API=false
• gcloud beta container clusters get-credentials <cluster_name> --region <cluster_region>

Extensions

Deploy all extensions by running the Shell script using e.g. ./install.sh endocodelab-dns <your_email>@endocode.com.

Following extensions will be installed:

• ExternalDNS
• Helm
• CertManager
• Istio

Application

We use the Weave Socks Shop as an example application for our demo environment.

Kubernetes Tools

• Stern - Query Logs of multiple pods at once
• Jaeger - Trace connections between Containers using Istio
• Telepresence - Tool to debug container running in Kubernetes locally

Security Tools

Requirements

To install Security Monkey or HashiCorp Vault the third-party Terraform Provider ACME for certificate generation is required.

The provider has to be installed manually by:

• On Windows, in the sub-path terraform.d/plugins beneath your user's "Application Data" directory.
• On all other systems, in the sub-path .terraform.d/plugins in your user's home directory.

Security Monkey

HashiCorp Vault