Updating TKG Extensions using YTT TKG Extension install here Add the following configuration to the countour config map. name of the file doesn't matter just use the yaml extension. The kapp controller will reconcile the app approximately every 5 minutes. Update the ingress class 1#@ load("@ytt:overlay", …

Read More

Highly available Wildfly Applications on Kubernetes Migrating existing applications to Kubernetes can be tricky, especially if your application uses session replication to enable high availability. In a multi-node cluster, each node must contain details about the users' session. Replication is used so that a user can …

Read More

Enabling Pod Security Policies Build Cluster with PSP enabled. If using Kubeadm, the following config can be used. 1apiServer: 2 extraArgs: 3 authorization-mode: Node,RBAC 4 enable-admission-plugins: PodSecurityPolicy 5 timeoutForControlPlane: 4m0s 6apiVersion: kubeadm.k8s.io/v1beta2 7kind: ClusterConfiguration …

Read More

Install K8s 1# remove docker if installed via snap 2sudo snap remove docker 3 4sudo apt install -y docker.io 5sudo apt install -y apt-transport-https curl 6 7# switch to systemd 8sudo tee /etc/docker/daemon.json <<EOF 9{ 10 "exec-opts": ["native.cgroupdriver=systemd"], 11 "log-driver": …

Read More

Toolkits for Kubernetes K14s k14s Is a suite of tools for managing your Kubernetes environment. Tools in the package ytt kbld kapp imgpkg kapp-controller vendir kwt terraform-provider-k14s #terraform The one tool in the suite that I find indispensable is ytt. This tool allows easy templating of Kubernetes Yaml. This …

Read More

Choosing a Base Image Containers, along with orchestration tools such as Kubernetes, are all the rage. Choosing the base image to build your organization's containers introduces a new challenge. The choice of the base container can affect many things, including your security posture and the performance of your …

Read More

One of the tenants of Twelve Factor application design is the concept of externalizing configuration and secrets. In the past, you may have had your configuration externalized to a resource bundle or bundled directly into your application artifact. The problem with externalized resource bundles is that they tend to …

Read More

This page was converted from my old blog and hasn't been reviewed. If you see an error please let me know in the comments. Cloud SQL is a hosted SQL database similar to Amazon RDS for either Mysql or Postgres databases. It supports automated management including backup and deployment. Since the database is created via …

Read More

This page was converted from my old blog and hasn't been reviewed. If you see an error please let me know in the comments. WordPress on Kubernetes Recently I posted about creating a highly available WordPress deployment using Amazon Web Services. The focus was using Terraform and Docker to automate the deployment. With …

Read More