Kubernetes - Unofficial Azure Club

Kubernetes

A collection of 17 posts

Building a WASM Serverless Solution with KEDA HTTP Add-on and Slight Containerd Shim

Building a WASM Serverless Solution with KEDA HTTP Add-on and Slight Containerd Shim

Introduction In this article, we will explore how to use KEDA, KEDA HTTP add-on, with Slight Containerd Shim to build a WASM serverless solution. The solution provides scale to/from zero support, reduced time for cold start, and cloud integration capabilities such as Azure blob, App Configuration, ServiceBus etc. The

Deploy Traefik2 Ingress with Cert-Manager and Azure AD Authentication

Kubernetes Featured

Deploy Traefik2 Ingress with Cert-Manager and Azure AD Authentication

This article discuss on how to integrate your application with traefik2 for azure ad authentcation, automatic certificate generate as well as multiple traefik instances support for community version.

Cheap Visual Studio Code(VSCode) Online Solution

VSCode Featured

Cheap Visual Studio Code(VSCode) Online Solution

Cheap Visual Studio Code(VSCode) Online Solution

Nginx Ingress Controller Debugging - Print Http Raw Header

Nginx Ingress Controller Debugging - Print Http Raw Header

1. kubectl exec YOUR_NGINX_INGRESS_CONTROLLER_POD -it -- cat /etc/nginx/template/nginx.tmpl > nginx.tmpl 2. Open nginx.tmpl, add below code block after location {{ $path }} { header_filter_by_lua_block { local h = ngx.req.get_headers() local request_headers_all = "" for k, v in pairs(h)

Useful Kubernetes Tricks

Kubernetes Featured

Useful Kubernetes Tricks

Find which RoleBinding/ClusterRoleBinding is related to a ServiceAccount kubectl get clusterrolebindings -o json | jq -r ' .items[] | select( .subjects // [] | .[] | [.kind,.namespace,.name] == ["ServiceAccount","kube-system","node-controller"] ) | .metadata.name' kubectl get clusterrolebindings -o json | jq -r '.items[] | select(.subjects // [] | .[] | [.name] == [""] ) | .metadata.name' kubectl get rolebindings --all-namespaces -o

Kubernetes Cloud Native Monitoring with TICK & Prometheus - Up and Running

Kubernetes Cloud Native Monitoring with TICK & Prometheus - Up and Running

0 Introduction This post doesn't intend to introduce prometheus or influxdb, it serves as a reference for building up a monitoring/logging system in kubernetes with open source softwares. The monitoring/logging/alerting system composes of 4 open sources softwares, refer to diagram below 1. Fluentbit [https://fluentbit.io/] is

Articles I Collected

Articles I Collected

Articles * Analyzing .NET Core memory on Linux with LLDB [http://codeblog.dotsandbrackets.com/net-core-memory-linux/] * iptables Tips & Tricks [https://serverfault.com/questions/245711/iptables-tips-tricks] * Using nginx-ingress controller to restrict access by IP (ip whitelisting) for a service deployed to a Kubernetes (AKS) cluster [https://medium.com/@maninder.bindra/using-nginx-ingress-controller-to-restrict-access-by-ip-ip-whitelisting-for-a-service-deployed-to-bd5c86dc66d

Kubernetes Services and Iptables

Kubernetes Featured

Kubernetes Services and Iptables

0 Prerequisites and Prework This post only focuses on how kubernetes leverages iptables to implement its service mode. Per official doc Services [https://kubernetes.io/docs/concepts/services-networking/service/] > A Kubernetes Service is an abstraction which defines a logical set of Pods and a policy by which to access them

Kubernetes Horizontal Pod Autoscaler

Kubernetes Horizontal Pod Autoscaler

This post just serves as a quickstart for kubernetes horizontal pod autosacler testing purpose, here are the steps git clone https://github.com/Azure-Samples/azure-voting-app-redis.git cd azure-voting-app-redis kubectl apply -f azure-vote-all-in-one-redis.yaml kubectl autoscale deployment azure-vote-front --cpu-percent=10 --min=1 --max=10 After finish above commands, you should have

Pod Security Policy Explained By Examples

Kubernetes Featured

Pod Security Policy Explained By Examples

Pod security policy enables fine-grained authorization of pod creation and updates but it also has some mysterious things behind, this article gives more insight about how it works.

Protect Kubernetes Webapps with Azure Active Directory(AAD) Authentication by Using oauth2_proxy

Protect Kubernetes Webapps with Azure Active Directory(AAD) Authentication by Using oauth2_proxy

Adding authentication to webapps sometimes is a challenging task, requires knowledge and coding for user registration, login and authentication. Specially if you are a kubernetes cluster admin, you need to take extremely care of publishing your website/web service to internet since any malicious users can access the frontend and

Kubernetes Verbose Logging

Kubernetes Verbose Logging

Kubectl Verbose Logging kubectl -v=10 get pod Kubernetes Core Components Logging From /etc/kubernetes/manifests, edit *.yaml files, add -v=10 switch

Running a K8S Cluster in Multiple Zones on Azure with Calico and IPVS

Kubernetes Featured

Running a K8S Cluster in Multiple Zones on Azure with Calico and IPVS

This post will explain how to deploy a kubernetes cluster in multiple zones on Azure with detailed steps, together with enabling IPVS for high performance and Calico network policy for secure network connectivity. We will explore some concepts in multiple zones cluter and show how they work as well.

Yet another way to troubleshoot K8S applications

Kubernetes Featured

Yet another way to troubleshoot K8S applications

There are plenty of articles explains how to debug K8S applications, for example * Troubleshoot Applications [https://kubernetes.io/docs/tasks/debug-application-cluster/debug-application/] * Connect with SSH to Azure Kubernetes Service (AKS) cluster nodes for maintenance or troubleshooting [https://docs.microsoft.com/en-us/azure/aks/ssh] Due to the nature of container's

How do I host this website in Azure K8S cluster

How do I host this website in Azure K8S cluster

Explain how I built up my website from Azure hosted K8S cluster

Flannel Networking Demystify

Flannel Featured

Flannel Networking Demystify

In my previous article Deploy a Ubuntu Based Flannel K8S Cluster in Azure with ARM Template and Kubeadm [https://msazure.club/deploy-a-ubuntu-based-flannel-k8s-cluster-in-azure-with-arm-template-and-kubeadm/] , I provided an Azure ARM template to deploy a flannel networking K8S cluster on Azure. But how flannel networking works, in this article we will discuss a little

Deploy a Ubuntu Based Flannel K8S Cluster in Azure with ARM Template and Kubeadm

Deploy a Ubuntu Based Flannel K8S Cluster in Azure with ARM Template and Kubeadm

The infomation migth be outdated here as acs-engine adds support for Flannel recently with PR 2967 [https://github.com/Azure/acs-engine/pull/2967] However, if you want to gain more control on your kubernetes cluster in Azure, in our case, by using kubeadm, this article still applies. 0. Prerequisites * Azure