Doc: https://kubernetes.io/docs/concepts/cluster-administration/networking/
Doc: https://kubernetes.io/docs/concepts/cluster-administration/networking/
Doc: https://kubernetes.io/docs/concepts/services-networking/service/
Questions:
- Create a deployment with the latest nginx image and two replicas.
- Expose it's port 80 through a service of type NodePort.
- Show all elements, including the endpoints.
- Get the nginx index page through the NodePort.
Solution
kubectl create deployment nginx --image=nginx:latest
kubectl scale deployment nginx --replicas=2
kubectl expose deployment nginx --port=80 --target-port=80 --type=NodePort
kubectl describe svc nginx
Name: nginx
Namespace: default
Labels: app=nginx
Annotations: <none>
Selector: app=nginx
Type: NodePort
IP Family Policy: SingleStack
IP Families: IPv4
IP: 10.104.222.43
IPs: 10.104.222.43
Port: <unset> 80/TCP
TargetPort: 80/TCP
NodePort: <unset> 32740/TCP
Endpoints: 10.244.1.27:80,10.244.2.26:80
Session Affinity: None
External Traffic Policy: Cluster
Events: <none>
kubectl get pods -l app=nginx -o wide
NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
nginx-55649fd747-6xvlq 1/1 Running 0 35s 10.244.2.26 k8s-node-2 <none> <none>
nginx-55649fd747-vnbjz 1/1 Running 0 35s 10.244.1.27 k8s-node-1 <none> <none>
# We are getting the page through IP address of the controlplane node and the port allocated by the NodePort service
curl http://172.16.1.11:32740
...
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>
...
Doc: https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/
Questions:
- Do the same exercice as in the previous section but use a Load Balancer service type rather than a NodePort.
Hint: If you are not running your cluster on a cloud providing a load balancer service, you can use MetalLB
Solution
# We will deploy MetalLB first to provide Load Balancer service type
mkdir metallb
cd metallb
wget https://raw.githubusercontent.com/google/metallb/v0.9.6/manifests/namespace.yaml
wget https://raw.githubusercontent.com/google/metallb/v0.9.6/manifests/metallb.yaml
# We are giving MetalLB an IP range from our cluster infra to allocate from
cat << EOF > metallb-config.yaml
apiVersion: v1
kind: ConfigMap
metadata:
namespace: metallb-system
name: config
data:
config: |
address-pools:
- name: default
protocol:
addresses:
- 172.16.1.101-172.16.1.150
EOF
# Apply the manifests
kubectl apply -f namespace.yaml
kubectl apply -f metallb-config.yaml
kubectl apply -f metallb.yaml
kubectl create secret generic -n metallb-system memberlist --from-literal=secretkey="$(openssl rand -base64 128)"
# Now we create the deployment with a Load Balancer service type
kubectl create deployment nginx-lb --image=nginx:latest
kubectl scale deployment nginx-lb --replicas=2
kubectl expose deployment nginx-lb --port=80 --target-port=80 --type=LoadBalancer
kubectl describe svc nginx-lb
Name: nginx-lb
Namespace: default
Labels: app=nginx-lb
Annotations: <none>
Selector: app=nginx-lb
Type: LoadBalancer
IP Family Policy: SingleStack
IP Families: IPv4
IP: 10.102.200.223
IPs: 10.102.200.223
LoadBalancer Ingress: 172.16.1.101
Port: <unset> 80/TCP
TargetPort: 80/TCP
NodePort: <unset> 32193/TCP
Endpoints: 10.244.1.28:80,10.244.2.30:80
Session Affinity: None
External Traffic Policy: Cluster
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal IPAllocated 46s metallb-controller Assigned IP "172.16.1.101"
Normal nodeAssigned 46s metallb-speaker announcing from node "k8s-node-2"
# We are getting the page through the IP address allocated by MetalLB from the pool we provided
curl http://172.16.1.101:80
...
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>
...
Doc: https://kubernetes.io/docs/concepts/services-networking/ingress/
Questions:
- Keep the previous deployment of nginx and add a new deployment using the image
bitnami/apachewith two replicas. - Expose its port 8080 through a service and query it.
- Deploy nginx ingress controller
- Create an ingress service that redirects /nginx to the nginx service and /apache to the apache service.
Solution
kubectl create deployment apache-lb --image=bitnami/apache:latest
kubectl scale deployment apache-lb --replicas=2
kubectl expose deployment apache-lb --port=8080 --target-port=8080 --type=LoadBalancer # Replace by NodePort if you don't have a LoadBalancer provider
kubectl describe svc apache-lb
Name: apache-lb
Namespace: default
Labels: app=apache-lb
Annotations: <none>
Selector: app=apache-lb
Type: LoadBalancer
IP Family Policy: SingleStack
IP Families: IPv4
IP: 10.101.245.9
IPs: 10.101.245.9
LoadBalancer Ingress: 172.16.1.101
Port: <unset> 8080/TCP
TargetPort: 8080/TCP
NodePort: <unset> 30174/TCP
Endpoints: 10.244.1.32:8080,10.244.2.35:8080
Session Affinity: None
External Traffic Policy: Cluster
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal IPAllocated 4s metallb-controller Assigned IP "172.16.1.101"
Normal nodeAssigned 3s (x2 over 3s) metallb-speaker announcing from node "k8s-node-1"
curl http://172.16.1.101:8080
<html><body><h1>It works!</h1></body></html>web-ingress.yaml:
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: web-ingress
spec:
ingressClassName: nginx
rules:
- host: nginx-or-apache.com
http:
paths:
- pathType: Prefix
path: /nginx
backend:
service:
name: nginx-lb
port:
number: 80
- pathType: Prefix
path: /apache
backend:
service:
name: apache-lb
port:
number: 8080Deploy nginx ingress controller:
# If using metallb or cloud deployment
kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v0.46.0/deploy/static/provider/cloud/deploy.yaml
# If using NodePort
kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v0.46.0/deploy/static/provider/baremetal/deploy.yaml
kubectl -n ingress-nginx get svc
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
ingress-nginx-controller LoadBalancer 10.97.187.125 172.16.1.103 80:31416/TCP,443:32749/TCP 15s
ingress-nginx-controller-admission ClusterIP 10.107.225.180 <none> 443/TCP 15sDeploy web-ingress.yaml:
kubectl apply -f web-ingress.yaml
kubectl describe ingress web-ingress
Name: web-ingress
Namespace: default
Address: 172.16.1.103
Default backend: default-http-backend:80 (<error: endpoints "default-http-backend" not found>)
Rules:
Host Path Backends
---- ---- --------
nginx-or-apache.com
/nginx nginx-lb:80 (10.244.1.30:80,10.244.2.32:80)
/apache apache-lb:8080 (10.244.1.32:8080,10.244.2.35:8080)
Annotations: <none>
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Sync 24s (x3 over 3m21s) nginx-ingress-controller Scheduled for sync
Doc: https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/ Doc: https://kubernetes.io/docs/tasks/administer-cluster/coredns/
Questions:
- Create a busybox pod and resolve the nginx and apache services created earlier from within the pod.
Solution
kubectl run busybox --image=busybox --rm -it --restart=Never -- sh
If you don't see a command prompt, try pressing enter.
# nslookup apache-lb
Server: 10.96.0.10
Address: 10.96.0.10:53
Name: apache-lb.default.svc.cluster.local
Address: 10.101.245.9
# nslookup nginx-lb
Server: 10.96.0.10
Address: 10.96.0.10:53
Name: nginx-lb.default.svc.cluster.local
Address: 10.108.72.239
Solution
Docs:
- https://kubernetes.io/docs/concepts/cluster-administration/networking/
- https://kubernetes.io/docs/concepts/cluster-administration/addons/#networking-and-network-policy
- https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/#pod-network
We installed flannel in Provision underlying infrastructure to deploy a Kubernetes cluster