bettercallshao / bcs-lke

bcs-lke

Infrastructure (k8s on Linode Cloud) related code for BCS (bettercallshao) website.

Set up CockroachDB

Reference: https://www.cockroachlabs.com/docs/stable/orchestrate-cockroachdb-with-kubernetes.html#manual

• Set up kubectl
• Create the pods

kubectl create ns cockroachdb
kubectl -n cockroachdb create -f cockroachdb-statefulset-secure.yaml

• Approve the CSRs

kubectl -n cockroachdb get csr
kubectl -n cockroachdb certificate approve node.cockroachdb-0
...

• Join the clusters with a Job

kubectl -n cockroachdb create -f cluster-init-secure.yaml

• Create a permanent pod for queries

kubectl -n cockroachdb create -f client-secure.yaml

• Get a SQL shell

kubectl exec -it cockroachdb-client-secure -- ./cockroach sql --certs-dir=/cockroach-certs --host=cockroachdb-public

• Create users (one for admin access, one as service account)

CREATE USER <user> WITH PASSWORD '<passwd>';
CREATE DATABASE <db>;
GRANT ALL ON DATABASE <db> TO <user>;

• Port forward for local access

kubectl -n cockroachdb port-forward svc/cockroachdb 8080:8080

• Install DBeaver which has support for CockroachDB

Set up Nginx ingress

Reference: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-nginx-ingress-with-cert-manager-on-digitalocean-kubernetes

An example of an ingress is ingress-bar.yaml.

• Create the pods and service

kubectl create -f nginx-ingress.yaml

Set up Cert Manager

Reference: https://www.getambassador.io/user-guide/cert-manager/

Note: version 0.12.0 is used.

• Create the pods

kubectl create ns cert-manager
kubectl apply -f cert-manager-no-webhook.yaml # don't specify namespace

Strapi (orc namespace)

• Create pods

kubectl create ns orc
kubectl -n orc create -f strapi.yaml

• Manually change PV's reclaim policy to retain

persistentVolumeReclaimPolicy: Retain

• Create ingress

kubectl -n orc create -f ingress-orc.yaml

Set up minio

Reference: https://github.com/minio/minio/blob/master/docs/orchestration/kubernetes/k8s-yaml.md#minio-standalone-server-deployment

• Create configmap with MINIO_ACCESS_KEY and MINIO_SECRET_KEY

kubectl create ns minio
kubectl -n minio create cm minio-keys
kubectl -n minio edit cm minio-keys

• Create PVC, deployment, service

kubectl -n minio create -f minio-standalone-deployment.yaml
kubectl -n minio create -f minio-standalone-pvc.yaml
kubectl -n minio create -f minio-standalone-service.yaml

cgar

• Create config map

kubectl create ns cgar
kubectl -n cgar create cm cgar-config --from-file=config.yaml=./secret/config.yaml

• Create resources

kubectl -n cgar create -f cgar.yaml

• Create ingress

kubectl -n cgar create -f ingress-cgar.yaml

Set up linkerd

• Run official installation

linkerd install | kubectl apply -f -

• Tap orc and nginx

kubectl -n orc get statefulset -o yaml | linkerd inject - | kubectl apply -f -
kubectl -n cgar get deployments -o yaml | linkerd inject - | kubectl apply -f -
kubectl -n ingress-nginx get deployments -o yaml | linkerd inject - | kubectl apply -f -
linkerd dashboard