Tianon Gravi
cc62e19274
Fix "exemple" typo
2021-11-11 16:17:11 -08:00
Jérôme Petazzoni
92cd81b170
⏫ Update DOK version slug
2021-11-11 09:22:00 +01:00
Jérôme Petazzoni
d9e29eb4a4
♻️ Update and clarify Ingress+Kyverno+RBAC exercise
2021-11-09 08:38:14 +01:00
Jérôme Petazzoni
00b167207d
🐞 Fix a few download URLs
2021-11-08 17:12:54 +01:00
Jérôme Petazzoni
d34017cff1
⏫ Upgrade OpenStack Terraform config to Terraform 1.0
2021-11-08 17:12:31 +01:00
Jérôme Petazzoni
d53ba51a9f
🐞 Fix Sealed Secrets Helm release name
2021-11-08 15:03:24 +01:00
Jérôme Petazzoni
90ce84ace3
♻️ Update sealed secrets + RBAC + YAML exercise
2021-11-08 08:41:53 +01:00
Jérôme Petazzoni
bcbfc747a2
📝 Update YAML authoring section; add linters
2021-11-07 19:29:33 +01:00
Jérôme Petazzoni
2f83b7f256
✏️ Add IngressClass in Traefik YAML
...
This is necessary with recent version of Traefik, because
it won't pick up Ingress resources that don't have an
IngressClass. So let's add an IngressClass and make it
the default.
2021-11-07 18:33:21 +01:00
Jérôme Petazzoni
753324cc89
🔑 Update RBAC section
...
We won't always have a kubeconfig with a TLS cert in it.
Let's break down different methods to analyze kubeconfig
depending on whether there is a TLS cert or a token in it.
2021-11-07 16:23:29 +01:00
Jérôme Petazzoni
97735bafa8
➕ Mention KEDA
2021-11-05 14:19:28 +01:00
Jérôme Petazzoni
faabbb13ae
📃 Update Kyverno section
2021-11-05 13:38:38 +01:00
Jérôme Petazzoni
10b16ce9e9
🐛 Fix issues in Kyverno policies
2021-11-04 21:40:08 +01:00
Jérôme Petazzoni
055c0a304f
⏫ Update a few deprecated apiVersions
2021-11-04 12:46:29 +01:00
Jérôme Petazzoni
956b079c58
⏫ Update certbot YAML Ingress to v1
2021-11-04 12:40:58 +01:00
Jérôme Petazzoni
603d18ba2d
🧹 Clean up useless file
2021-11-04 12:37:32 +01:00
Jérôme Petazzoni
ce9fea2b23
🔑 Add cluster-admin certificate-based kubeconfig
2021-11-04 12:26:16 +01:00
Jérôme Petazzoni
4b500cd37e
⏫ Upgrade Sealed Secrets to 0.16 and add k8s 1.22 instructions
2021-11-04 08:33:58 +01:00
Jérôme Petazzoni
207845f15a
🧹 Obtain node addresses through an external source
...
Instead of doing a local-exec to 'kubectl get nodes ... > stage2/externalips.X',
we use an external provisioner. And to decouple things, the external provisioner
depends on nodes being ready, and node readiness is implemented with a null
resource. That way we don't need to re-execute the whole 'wait for nodes; dump
node addresses' dance each time we re-run that configuration.
2021-11-02 13:22:25 +01:00
Jérôme Petazzoni
f3ee3a923e
➕ Add kubeconfig in a ConfigMap in the shpod Namespace
2021-11-02 12:42:13 +01:00
Jérôme Petazzoni
f4837d9e28
🔧 Only ignore changes to spec
...
Thanks @soulshake for the tip.
2021-11-01 19:30:30 +01:00
Jérôme Petazzoni
a3a8c824c8
🔧 Do not recreate service when tailhist port gets added
2021-11-01 14:07:10 +01:00
Jérôme Petazzoni
7fc2d5e57f
🖨️ Improve Terraform outputs and install metrics-server
...
Stage2 output should now be easier to copy-paste to a Google Spreadsheet.
Add Helm support and use it to deploy metrics-server on each cluster.
2021-11-01 12:17:50 +01:00
Jérôme Petazzoni
b3bc5ccb9b
🔧 Add region hint for Linode
2021-11-01 06:54:16 +01:00
Jerome Petazzoni
fcf0296245
🔧 Standardize exercise title formatting
2021-10-31 09:12:40 +01:00
Jerome Petazzoni
cc1340801e
📃 Add descriptions for some chapters
2021-10-31 01:03:38 +02:00
Jerome Petazzoni
538d3212e4
🖼️ Update network diagrams
...
Thanks @danasaur and @tiffanyfay for the feedback!
2021-10-30 00:21:04 +02:00
Jerome Petazzoni
ec31c1fa17
🔧 Add useful debug helpers for Helm
2021-10-29 20:06:29 +02:00
Jerome Petazzoni
b9041d3d39
🔧 Mention Events in nsplease chapter
2021-10-29 18:58:06 +02:00
Jerome Petazzoni
ce0ae6e35b
🆕 Add exercise leveraging Kyverno + cert-manager + RBAC
2021-10-29 18:50:11 +02:00
Jerome Petazzoni
3b9a2113a5
♻️ Update sealed secrets exercise
2021-10-29 04:07:26 +02:00
Jerome Petazzoni
b67691c7e7
🆕 Add tiny operator example: nsplease
2021-10-28 22:45:42 +02:00
Jerome Petazzoni
081380fda8
🎥 Add settings file specifically to facilitate deployment of streaming portal
2021-10-28 20:00:18 +02:00
Jerome Petazzoni
e9e3fae21f
♻️ Update Kyverno content to Kyverno 1.5
2021-10-26 21:12:10 +02:00
Jerome Petazzoni
03c0abb182
♻️ Update Ingress TLS section
2021-10-26 19:50:36 +02:00
Jerome Petazzoni
372146a114
♻️ Update Helm basic chart content
2021-10-26 19:34:13 +02:00
Jerome Petazzoni
e7a74769b5
💡 Add Tiltfile to facilitate writing Helm charts
2021-10-26 19:25:05 +02:00
Jerome Petazzoni
2e096d85c7
🪓 Split the Helm exercises in two parts
2021-10-26 19:12:43 +02:00
Jerome Petazzoni
acbe355f1e
🔒 ️ Add link to RBAC Tool
2021-10-21 23:11:45 +02:00
Jerome Petazzoni
733166fbd7
🖼️ Add lots of diagrams for Kubernetes services
...
draw.io is awesome ♥
2021-10-21 21:42:36 +02:00
Jerome Petazzoni
5f0a57477d
🏛️ Add support for aarch64 clusters
...
The biggest pain point was the installation of all
the userland tools; for most of them, we had hard-coded
the installation URLs. This is now fixed for most of them.
2021-10-19 22:52:06 +02:00
Jerome Petazzoni
a85c8a3240
✨ Minor tweaks on VM deployment progress report
2021-10-19 19:45:02 +02:00
Jerome Petazzoni
c9820376ff
🏭 ️ Refactor deployment code; allow changing user login
...
It is now possible to set the user login (instead of
having it hardcoded to "docker"). Also, various actions
have been broken out in separate functions to facilitate
future maintenance.
2021-10-19 18:45:41 +02:00
Jerome Petazzoni
72c02c6fcf
✂️ Remove script not used anymore
2021-10-19 17:09:55 +02:00
Jerome Petazzoni
181844ebea
✂️ Remove old Scaleway-specific Terraform config
2021-10-19 13:34:13 +02:00
Jerome Petazzoni
79fe6c1f5c
🔑 Remove hardcoded SSH key in OCI module
2021-10-19 03:20:36 +02:00
Jerome Petazzoni
7180e832fe
🧹 Clean up resource names
2021-10-19 03:15:22 +02:00
Jérôme Petazzoni
ae74d9069f
🪐 Add Terraform config to provision clusters
...
This is a new provisioning mechanism. Right now, it can
provision clusters on:
- Digital Ocean
- Linode
- Oracle Cloud
- Scaleway
Others should be relatively straightforward to add.
Check the README in the prepare-tf subdirectory for details.
2021-10-19 02:44:11 +02:00
Jerome Petazzoni
8fed7a8adb
🖼️ Redraw Docker network diagrams
2021-10-18 19:05:34 +02:00
Jérôme Petazzoni
f9c7be9697
📝 Minor nits + add personal dict
...
In the long run I would love to automate spellchecking on
the slides, but there's a long way to go, with all the
custom lingo that we use... This is just the beginning of it,
on a few files.
2021-10-13 09:46:28 +02:00
