killer-sh / cks-course-environment Goto Github PK

View Code? Open in Web Editor NEW

351.0 351.0 424.0 161 KB

Shell 94.50% Dockerfile 1.00% Go 1.80% Open Policy Agent 2.70%

cks-course-environment's People

Contributors

Stargazers

Watchers

Forkers

fii johnhowlett vince15dk nabarunsen ricable artisticman kratos81 kainlite vmware-ysung divyesh16 ldynia jaykuma007 nitinkansal1984 abhi15sep rock981119 rajkrishnamurthy k21academyuk niscoveanumircea vakkur ashmilhussain yuces dmilan77 quetzalcoatlg djkormo abhigadu venkat8887 bguruprasad prabhuredhat duiniwukenaihe ampacheco samarsinghal vijayrod op317q salah-lahlou evalle bapushinde yelmir chinthakahasakelum gauravbansal17 ykhadilkar emreozkangit d-expired tarun9715m decktecheu ak12a aidoudi1 prakasha4devops jmyung alirezataleghani dramasamy prabhjot806 ampacheco-kubtec usanjayv007 qiang1981cn alexandrust88 jymun ming-ddtechcg vovakaplenko rushrs2 abdennour alyragab vladislavpv jimmyadepeju sujiar37 kumardineshwar mais316 babubalagani viveknidhi dinishkr ghulevishal valentinouberti beepbooprobit prasadkadam36 andrzej-natzka mohamedibrahimabdoun deepakdubey123 hardik-id mahendra-js bahalla mnifr nilesh93 kasunsjc schoudhary22 basakil songford malston akthodu rachlenko rembj naren4b samguan2018 amitnath1991 shinomineko e-n-g-xor gopu84 monbostest nrobertio bearsir balajivelaga nikhil-thomas

cks-course-environment's Issues

kubernetes repository address need update

Hi,
https://github.com/killer-sh/cks-course-environment/blob/master/cluster-setup/latest/install_master.sh#L68
This line in cluster setup script need update following a blog post here
https://kubernetes.io/blog/2023/08/15/pkgs-k8s-io-introduction/

Missing etcd-client package from the cluster scripts

Hello,

The etcd client package on ubuntu could be added in the master setup scripts, for convenience (section 76).

apt-get install etcd-client

Regards,
Fabrice.

PS: added later manually on in section 78, however. Feel free to archive.

Use the Kubic repo for podman installation

For Ubuntu 20.04 the PPA no longer works and has been deprecated.

sudo add-apt-repository -y ppa:projectatomic/ppa
Hit:1 http://archive.ubuntu.com/ubuntu focal InRelease
Ign:2 http://ppa.launchpad.net/projectatomic/ppa/ubuntu focal InRelease
Hit:3 http://archive.ubuntu.com/ubuntu focal-updates InRelease
Hit:4 http://security.ubuntu.com/ubuntu focal-security InRelease
Hit:5 https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04  InRelease
Hit:6 http://archive.ubuntu.com/ubuntu focal-backports InRelease
Err:7 http://ppa.launchpad.net/projectatomic/ppa/ubuntu focal Release
  404  Not Found [IP: 91.189.95.85 80]
Reading package lists... Done
E: The repository 'http://ppa.launchpad.net/projectatomic/ppa/ubuntu focal Release' does not have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

The recommended way to install on Ubuntu 20.04 and earlier is now to use the Kubic repo:

. /etc/os-release
echo "deb https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_${VERSION_ID}/ /" | sudo tee /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
curl -L "https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_${VERSION_ID}/Release.key" | sudo apt-key add -
sudo apt-get update
sudo apt-get -y upgrade
sudo apt-get -y install podman containers-common

This was tested on the latest Ubuntu 20.04 installed via multipass on a Linux host with the libvirt backend.

Install_master.sh, install_worker.sh gets stuck when running them inside multipass VMs (ubuntu 20.04)

i guess, It executed up to this line
https://github.com/killer-sh/cks-course-environment/blob/master/cluster-setup/latest/install_master.sh#L54

Logs

root@cks-master:~# bash <(curl -s https://raw.githubusercontent.com/killer-sh/cks-course-environment/master/cluster-setup/latest/install_master.sh)
Hit:1 http://archive.ubuntu.com/ubuntu focal InRelease
Get:2 http://security.ubuntu.com/ubuntu focal-security InRelease [114 kB]
0% [Waiting for headers] [2 InRelease 14.1 kB/114 kB 12%]
Get:3 http://archive.ubuntu.com/ubuntu focal-updates InRelease [114 kB]
Get:4 http://security.ubuntu.com/ubuntu focal-security/main amd64 Packages [2610 kB]
Get:5 http://archive.ubuntu.com/ubuntu focal-backports InRelease [108 kB]
Get:6 http://archive.ubuntu.com/ubuntu focal/universe amd64 Packages [8628 kB]
Get:7 http://security.ubuntu.com/ubuntu focal-security/main Translation-en [402 kB]
Get:8 http://security.ubuntu.com/ubuntu focal-security/universe amd64 Packages [915 kB]                                                                                                                           
Get:9 http://security.ubuntu.com/ubuntu focal-security/universe Translation-en [192 kB]                                                                                                                           
Get:10 http://security.ubuntu.com/ubuntu focal-security/universe amd64 c-n-f Metadata [19.2 kB]                                                                                                                   
Get:11 http://security.ubuntu.com/ubuntu focal-security/multiverse amd64 Packages [23.6 kB]                                                                                                                       
Get:12 http://security.ubuntu.com/ubuntu focal-security/multiverse Translation-en [5504 B]                                                                                                                        
Get:13 http://security.ubuntu.com/ubuntu focal-security/multiverse amd64 c-n-f Metadata [548 B]                                                                                                                   
Get:14 http://archive.ubuntu.com/ubuntu focal/universe Translation-en [5124 kB]                                                                                                                                   
Get:15 http://archive.ubuntu.com/ubuntu focal/universe amd64 c-n-f Metadata [265 kB]                                                                                                                              
Get:16 http://archive.ubuntu.com/ubuntu focal/multiverse amd64 Packages [144 kB]                                                                                                                                  
Get:17 http://archive.ubuntu.com/ubuntu focal/multiverse Translation-en [104 kB]                                                                                                                                  
Get:18 http://archive.ubuntu.com/ubuntu focal/multiverse amd64 c-n-f Metadata [9136 B]                                                                                                                            
Get:19 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages [3017 kB]                                                                                                                               
Get:20 http://archive.ubuntu.com/ubuntu focal-updates/main Translation-en [487 kB]                                                                                                                                
Get:21 http://archive.ubuntu.com/ubuntu focal-updates/restricted amd64 Packages [2562 kB]                                                                                                                         
Get:22 http://archive.ubuntu.com/ubuntu focal-updates/restricted Translation-en [358 kB]                                                                                                                          
Get:23 http://archive.ubuntu.com/ubuntu focal-updates/universe amd64 Packages [1140 kB]                                                                                                                           
Get:24 http://archive.ubuntu.com/ubuntu focal-updates/universe Translation-en [273 kB]                                                                                                                            
Get:25 http://archive.ubuntu.com/ubuntu focal-updates/universe amd64 c-n-f Metadata [25.7 kB]                                                                                                                     
Get:26 http://archive.ubuntu.com/ubuntu focal-updates/multiverse amd64 Packages [25.8 kB]                                                                                                                         
Get:27 http://archive.ubuntu.com/ubuntu focal-updates/multiverse Translation-en [7484 B]                                                                                                                          
Get:28 http://archive.ubuntu.com/ubuntu focal-updates/multiverse amd64 c-n-f Metadata [620 B]                                                                                                                     
Get:29 http://archive.ubuntu.com/ubuntu focal-backports/main amd64 Packages [45.7 kB]                                                                                                                             
Get:30 http://archive.ubuntu.com/ubuntu focal-backports/main Translation-en [16.3 kB]                                                                                                                             
Get:31 http://archive.ubuntu.com/ubuntu focal-backports/main amd64 c-n-f Metadata [1420 B]                                                                                                                        
Get:32 http://archive.ubuntu.com/ubuntu focal-backports/restricted amd64 c-n-f Metadata [116 B]                                                                                                                   
Get:33 http://archive.ubuntu.com/ubuntu focal-backports/universe amd64 Packages [25.0 kB]                                                                                                                         
Get:34 http://archive.ubuntu.com/ubuntu focal-backports/universe Translation-en [16.3 kB]                                                                                                                         
Get:35 http://archive.ubuntu.com/ubuntu focal-backports/universe amd64 c-n-f Metadata [880 B]                                                                                                                     
Get:36 http://archive.ubuntu.com/ubuntu focal-backports/multiverse amd64 c-n-f Metadata [116 B]                                                                                                                   
Fetched 26.8 MB in 26s (1023 kB/s)                                                                                                                                                                                
Reading package lists... Done
Reading package lists... Done
Building dependency tree       
Reading state information... Done
bash-completion is already the newest version (1:2.10-1ubuntu1).
bash-completion set to manually installed.
The following additional packages will be installed:
  binutils-common binutils-x86-64-linux-gnu libbinutils libctf-nobfd0 libctf0
Suggested packages:
  binutils-doc
The following NEW packages will be installed:
  binutils binutils-common binutils-x86-64-linux-gnu libbinutils libctf-nobfd0 libctf0
0 upgraded, 6 newly installed, 0 to remove and 15 not upgraded.
Need to get 2390 kB of archives.
After this operation, 13.7 MB of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 binutils-common amd64 2.34-6ubuntu1.6 [207 kB]
Get:2 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 libbinutils amd64 2.34-6ubuntu1.6 [473 kB]
Get:3 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 libctf-nobfd0 amd64 2.34-6ubuntu1.6 [47.4 kB]
Get:4 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 libctf0 amd64 2.34-6ubuntu1.6 [46.6 kB]
Get:5 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 binutils-x86-64-linux-gnu amd64 2.34-6ubuntu1.6 [1613 kB]
Get:6 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 binutils amd64 2.34-6ubuntu1.6 [3376 B]
Fetched 2390 kB in 6s (434 kB/s)
Selecting previously unselected package binutils-common:amd64.
(Reading database ... 64080 files and directories currently installed.)
Preparing to unpack .../0-binutils-common_2.34-6ubuntu1.6_amd64.deb ...
Unpacking binutils-common:amd64 (2.34-6ubuntu1.6) ...
Selecting previously unselected package libbinutils:amd64.
Preparing to unpack .../1-libbinutils_2.34-6ubuntu1.6_amd64.deb ...
Unpacking libbinutils:amd64 (2.34-6ubuntu1.6) ...
Selecting previously unselected package libctf-nobfd0:amd64.
Preparing to unpack .../2-libctf-nobfd0_2.34-6ubuntu1.6_amd64.deb ...
Unpacking libctf-nobfd0:amd64 (2.34-6ubuntu1.6) ...
Selecting previously unselected package libctf0:amd64.
Preparing to unpack .../3-libctf0_2.34-6ubuntu1.6_amd64.deb ...
Unpacking libctf0:amd64 (2.34-6ubuntu1.6) ...
Selecting previously unselected package binutils-x86-64-linux-gnu.
Preparing to unpack .../4-binutils-x86-64-linux-gnu_2.34-6ubuntu1.6_amd64.deb ...
Unpacking binutils-x86-64-linux-gnu (2.34-6ubuntu1.6) ...
Selecting previously unselected package binutils.
Preparing to unpack .../5-binutils_2.34-6ubuntu1.6_amd64.deb ...
Unpacking binutils (2.34-6ubuntu1.6) ...
Setting up binutils-common:amd64 (2.34-6ubuntu1.6) ...
Setting up libctf-nobfd0:amd64 (2.34-6ubuntu1.6) ...
Setting up libbinutils:amd64 (2.34-6ubuntu1.6) ...
Setting up libctf0:amd64 (2.34-6ubuntu1.6) ...
Setting up binutils-x86-64-linux-gnu (2.34-6ubuntu1.6) ...
Setting up binutils (2.34-6ubuntu1.6) ...
Processing triggers for libc-bin (2.31-0ubuntu9.12) ...
Processing triggers for man-db (2.9.1-1) ...
/dev/fd/63: line 42: kubeadm: command not found
/dev/fd/63: line 43: crictl: command not found
/dev/fd/63: line 43: crictl: command not found
E: Unable to locate package kubelet
E: Unable to locate package kubeadm
E: Unable to locate package kubectl
E: Unable to locate package kubernetes-cni
E: No packages found
Reading package lists... Done
Building dependency tree       
Reading state information... Done
E: Unable to locate package kubelet
E: Unable to locate package kubeadm
E: Unable to locate package kubectl
E: Unable to locate package kubernetes-cni
Reading package lists... Done
Building dependency tree       
Reading state information... Done
0 upgraded, 0 newly installed, 0 to remove and 15 not upgraded.
deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04/ /
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  1093  100  1093    0     0   1624      0 --:--:-- --:--:-- --:--:--  1621
OK

The instrumenta/conftest image is deprecated and will no longer be updated.

In the lectures 115 and 116, instrumenta/conftest image is used, but it is deprecated.

NOTE: The instrumenta/conftest image is deprecated and will no longer be updated. Please use the openpolicyagent/conftest image.

https://github.com/open-policy-agent/conftest/blob/master/docs/install.md#docker

Network Polices Lecure:21

I really liked the example. It would be cool to add video with explenation of the problem and solution for kube-dns and opening port 53 as Amer pointed

apiKind: NetworkPolicy
metadata:
  name: frontend-with-kube-dns
  namespace: default
spec:
  podSelector:
    matchLabels:
      run: frontend
  policyTypes:
  - Egress
  egress:
  - to:
    - podSelector:
        matchLabels:
          run: backend
    ports:
    - protocol: TCP
      port: 80
  - to:
    ports:
    - protocol: UDP
      port: 53

OPA Gatekeeper should be updated to support Kubernetes 1.22

The current OPA Gatekeeper deploy file uses API objects that are removed in Kubernetes 1.22, specifically apiextensions.k8s.io/v1beta1. Updating the name of the API obgject to apiextensions.k8s.io/v1 is not enough since the schema has changed.

The workaround to continue the course was using the official latest release:
https://raw.githubusercontent.com/open-policy-agent/gatekeeper/v3.5.2/deploy/gatekeeper.yaml

The course YAML should be updated accordingly.

critctl stop before remove containers

The various cluster-setup scripts invoke:

crictl rm $(crictl ps -a -q).

There should be a line before to stop the containers, otherwise they can't be removed correctly:

crictl stop $(crictl ps -a -q).

Noticed the error during the cluster downgrade:

ERRO[0000] container "f85f0ab92bab95421a6069e3dae6103fc583edcd3ccbf7300a326c7c2fabb568" is running, please stop it first
ERRO[0000] container "3b2d4ad9d6c41f7d3013426a7591b472e0b04c8f9ba785f40cf29807b19e5f25" is running, please stop it first
ERRO[0000] container "290707f84e50e544f880d1b383be06cc485b9d8455753723c544ec8e10060ed9" is running, please stop it first
ERRO[0000] container "335a7afe1b3e9cd60fe5f2d0d359f04478322fa0157a14a3d7947fa6046b7184" is running, please stop it first
ERRO[0000] container "50801ad4720e1b7abc0ece7e6b26ad8a087c70ec37ddd7a330726be13a869c54" is running, please stop it first
ERRO[0000] container "2441d7be1424abc5ec70ecf23078b469605e4bc4fd7dcf49860f6c70941145e8" is running, please stop it first
FATA[0000] unable to remove container(s)

followed by errors, as the new containers weren't able to use the 6443 ports on the host.

Section 7: Cluster Setup - Secure Ingress

During the "Section 7: Cluster Setup - Secure Ingress > Practice - Create Ingress" lecture, we created an Ingress resource with 2 paths to service1 and service2.

I had an issue resolving these routes. For example, curl http://<node IP>:<node port>/service1would display the nginx standard 404 message instead of the welcome text.

To resolve this, the NGINX Ingress Controller docs state that the kubernetes.io/ingress.class: "nginx" annotation needs to be added to our Ingress resource, which makes it discoverable by NGINX Ingress:

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: secure-ingress
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /
    kubernetes.io/ingress.class: nginx
spec:
  rules:
  - http:
      paths:
      - path: /service1
        pathType: Prefix
        backend:
          service:
            name: service1
            port:
              number: 80
      - path: /service2
        pathType: Prefix
        backend:
          service:
            name: service2
            port:
              number: 80

It might be worth testing this yourself to see if it's a general problem (not just one for me).

Worker script failing with Ubuntu 20.04 Focal Fossa LTS when package were held

Hi,

I found little issue with the worker script (https://github.com/killer-sh/cks-course-environment/blob/master/cluster-setup/latest/install_worker.sh).
If packages were installed before and held the script failed.

As improvement script should remove held packages or stop and print some error msg; currently it continues and fail in later stage

LOG:
The following packages will be REMOVED:
kubeadm kubectl kubelet kubernetes-cni
The following held packages will be changed:
kubeadm
0 upgraded, 0 newly installed, 4 to remove and 34 not upgraded.
E: Held packages were changed and -y was used without --allow-change-held-packages.

BR, Silvam

killer-sh / cks-course-environment Goto Github PK

cks-course-environment's People

Contributors

Stargazers

Watchers

Forkers

cks-course-environment's Issues

kubernetes repository address need update

Missing etcd-client package from the cluster scripts

Use the Kubic repo for podman installation

Install_master.sh, install_worker.sh gets stuck when running them inside multipass VMs (ubuntu 20.04)

The instrumenta/conftest image is deprecated and will no longer be updated.

Network Polices Lecure:21

OPA Gatekeeper should be updated to support Kubernetes 1.22

critctl stop before remove containers

Section 7: Cluster Setup - Secure Ingress

Worker script failing with Ubuntu 20.04 Focal Fossa LTS when package were held

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent