kdcllc / k8.dotnetcore.workshop

Kubernates and DotNetCore Workshop demonstrates essentials skills for DotNetCore Developer

Kubernetes DotNetCore Workshop

This workshop will provide with ability to learn the basics of the Kubernetes development from DotNetCore developer perspective.

The solution includes the following projects:

• K8.AspNetCore.HealthChecks.csproj - a simple project that demonstrates how to add custom HealthChecks.
• K8.Extensions.Configuration.csproj - a project that creates a custom Azure Key Vault Secrets retrieval.
• K8.Extensions.Hosting.csproj - a project that demonstrates how to extend hosting creation for the common K8s projects.
• K8.FrontEnd.csproj - the AspNetCore Web Api project that demonstrates usage of health and liveliness checks.
• K8.LongProcess.csproj - the DotNetCore 3.0 Worker Hosted Console App that runs custom K8s CronJobs.

Technologies

• Docker Containers
• Kubernetes Cluster
• Helm deployment
• Microsoft Azure Managed Identity (MSI)

Pre-requisites

1. Install Docker and Local Kubernetes Cluster on Windows 10

• Install Hyper-V on Windows 10

• Install Docker Desktop on Windows

• Enable Local Kubernetes Cluster: Docker --> Settings --> Kubernetes

• Install alternative K8 dashboard

This dashboard doesn't require token authentication, since the cluster is running on the local machine.

    # install
    kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/alternative/kubernetes-dashboard.yaml

    # launch the dashboard
    kubectl proxy

    # dashboard url 'http://localhost:8001/api/v1/namespaces/kube-system/services/http:kubernetes-dashboard:/proxy/#!/overview?namespace=default'

The UI dashboard is useful for learning and management purposes.

Open Local Kuberbetes Cluster Dashboard

• Install Ngnix Ingress Controller inside Local Kubernetes Cluster

This component is required for the labs.

    # installation
    kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/master/deploy/static/mandatory.yaml
    kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/master/deploy/static/provider/cloud-generic.yaml

    # validate installation
    kubectl get pods --all-namespaces -l app.kubernetes.io/name=ingress-nginx --watch

2. Install the Azure CLI

3. Install Visual Studio Code

4. Update Windows 10 Hosts file update to include C:\Windows\System32\drivers\etc\hosts

    127.0.0.1 kubernetes.docker.internal k8-frontend-app.local

This hosts entry provides with the following local development Url for the application

https://k8-frontend-app.local/weatherforecast

5. Install Local Managed Service Identity (MSI) Azure Local Authenticator

6. Create Azure Key Vault

7. Create Azure Storage Account

Labs

1. Lab: Build Docker Images
2. Lab: Kubectl commands
3. Lab: Helm simple release
4. Lab: Helm templated release

References

Windows Terminal

• Enable Copy & Paste Keybindings

General Ideas

• LIVENESS PROBES ARE DANGEROUS

• Graceful termination in Kubernetes with ASP.NET Core

• Getting external traffic into Kubernetes – ClusterIp, NodePort, LoadBalancer, and Ingress

• Kubernetes Ingress scenario

AKS specific

• Deploy a SQL Server container in Kubernetes with Azure Kubernetes Services (AKS)

• Create an ingress controller with a static public IP address in Azure Kubernetes Service (AKS)

• Deploying a Stateful Application on Azure Kubernetes Service (AKS)

• Use Azure managed identities with Azure Kubernetes Services (AKS)

• Azure/aad-pod-identity

• Control access to cluster resources using role-based access control and Azure Active Directory identities in Azure Kubernetes Service

• Key Vault FlexVolume

• Manually create and use a volume with Azure Files share in Azure Kubernetes Service (AKS)

• How to: Mount an Azure Storage File Share to containers in Azure Kubernetes Services (AKS)

• Configure agent data collection for Azure Monitor for containers

Ingress LetsEncrypt

• Service principals with Azure Kubernetes Service (AKS)- Manually create a service principal

• Create an ingress controller with a static public IP address in Azure Kubernetes Service (AKS)

• fbeltrao/aks-letsencrypt step thru

• https://dev.to/ianknighton/deploying-a-microservice-on-azure-kubernetes-with-lets-encrypt-4eon

k8.dotnetcore.workshop's Issues

Add Visual Studio Support for Dockerfile

Unfortunately, only web projects are supported with VS.NET 2019 right now.

FrontEnd.csproj modifications:

1. Enable Docker files context

  <PropertyGroup>
    <!--https://docs.microsoft.com/en-us/visualstudio/containers/container-msbuild-properties?view=vs-2019-->
    <DockerfileContext>../../.</DockerfileContext>
    <DockerfileFile>../../src/K8.FrontEnd/Dockerfile</DockerfileFile>
    <DockerDefaultTargetOS>Linux</DockerDefaultTargetOS>
  </PropertyGroup>

2. Enable tooling support

  <ItemGroup>
    <PackageReference Include="Microsoft.VisualStudio.Azure.Containers.Tools.Targets" Version="1.9.5" />
    <PackageReference Include="Swashbuckle.AspNetCore" Version="5.0.0-rc4" />
  </ItemGroup>

Add support for Visual Studio Devcontainer

Adding simple yet powerful support for Visual Studio Code Dev Containers

Add HTTP Tunneling examples

In certain cases, the uses of Azure Event Hub must be tested.

• https://medium.com/@abhishek1987/expose-kubernetes-services-with-ngrok-65280142dab4
• https://github.com/abhirockzz/ngrok-kubernetes
• https://github.com/wernight/docker-ngrok

Alternative to ngrok localtunnel

lt -p 4001 -s kdcllc

Adding documentation

1. Software Install

• Docker
• Docker Kubernetes engine
• Helm

Adding terraform examples

• https://github.com/terraform-providers/terraform-provider-azurerm/tree/master/examples
• https://gist.github.com/cwoolum/ef943ba899eb396f6b6761126bc215f7
• https://www.chriswoolum.dev/aks-with-managed-identity-and-terraform
• https://github.com/terraform-providers/terraform-provider-azurerm
• https://github.com/Azure/terraform

Installing Terramform manually on

WSL+Docker: Kubernetes on the Windows Desktop

https://registry.terraform.io/

Add HealthCheck for Azure Storage

The reason for this healtcheck is to demonstrate MSI access token authentication.

[Doc] Kubernetes Study Material

Kubernetes Learning Path

Kubernetes Up and Running e-book