wardviaene / kubernetes-course

Kubernetes Course Files

Kubernetes course

This repository contains the course files for my Kubernetes course on Udemy: https://www.udemy.com/learn-devops-the-complete-kubernetes-course/?couponCode=KUBERNETES_GITHUB

kubernetes-course's Issues

helm stucks at container creating state

Hi,

I am having a issue of installing tiller pod. I have a t2.medium master ec2 instance. After following the instructions mentioned in the helm folder in helm client and tiller in server the tiller pod goes into "Container Creating" State and the tiller-deploy deployment is not working. have used the same version of helm that is mentioned in README.md in helm folder. Any idea how to fix it?

ubuntu@kmaster:$ kubectl get pods -n kube-system
NAME READY STATUS RESTARTS AGE
coredns-5c98db65d4-bfqrw 1/1 Running 0 26h
coredns-5c98db65d4-wzlzj 1/1 Running 0 26h
etcd-kmaster 1/1 Running 0 26h
kube-apiserver-kmaster 1/1 Running 0 26h
kube-controller-manager-kmaster 1/1 Running 0 26h
kube-proxy-78646 1/1 Running 0 26h
kube-proxy-cb4fc 1/1 Running 0 26h
kube-proxy-xq748 1/1 Running 0 26h
kube-scheduler-kmaster 1/1 Running 0 26h
tiller-deploy-7674c4c47c-72s7g 0/1 ContainerCreating 0 89s
weave-net-gqwl7 2/2 Running 0 26h
weave-net-t4wjl 2/2 Running 0 26h
weave-net-v2nbr 2/2 Running 0 26h
ubuntu@kmaster:$

Regards
Sonisamal

FLUX is missing

I have bought the Kubernetes-Course in which one lesson is about Flux. Unfortunately mentioned catalogue with flux scripts is not available in this repository. Why is it missing?

Shouldn't kubernetes-course/ingress/nginx-ingress-controller.yml use a Deployment

kubernetes-course/ingress/nginx-ingress-controller.yml is using older resource type. Should it be upgraded to a Deployment?

k8s-demo image source

Where is the build procedure and source for the k8s-demo image used in the course?

kubectl describe service/helloworld gets error when trying to create service roles

When I run : kubectl describe service/helloworld
I get this output. So I believe some part of the terraform script is broken which gives correct permission to the nodes/cluster.

josh@Joshs-MacBook-Pro-2:~/$ kubectl describe service/helloworld
Name:                     helloworld
Namespace:                default
Labels:                   run=helloworld
Annotations:              <none>
Selector:                 run=helloworld
Type:                     LoadBalancer
IP:                       172.20.98.157
Port:                     <unset>  8000/TCP
TargetPort:               8000/TCP
NodePort:                 <unset>  30066/TCP
Endpoints:                10.0.102.33:8000
Session Affinity:         None
External Traffic Policy:  Cluster
Events:
  Type     Reason                      Age   From                Message
  ----     ------                      ----  ----                -------
  Warning  CreatingLoadBalancerFailed  43s   service-controller  Error creating load balancer (will retry): failed to ensure load balancer for service default/helloworld: AccessDenied: User: arn:aws:sts::375987363060:assumed-role/terraform-dev-cluster/1533050767091663441 is not authorized to perform: iam:CreateServiceLinkedRole on resource: arn:aws:iam::375987363060:role/aws-service-role/elasticloadbalancing.amazonaws.com/AWSServiceRoleForElasticLoadBalancing
           status code: 403, request id: 82a5c568-94df-11e8-a8f3-7362fe8c33ea
  Warning  CreatingLoadBalancerFailed  37s  service-controller  Error creating load balancer (will retry): failed to ensure load balancer for service default/helloworld: AccessDenied: User: arn:aws:sts::375987363060:assumed-role/terraform-dev-cluster/1533050767091663441 is not authorized to perform: iam:CreateServiceLinkedRole on resource: arn:aws:iam::375987363060:role/aws-service-role/elasticloadbalancing.amazonaws.com/AWSServiceRoleForElasticLoadBalancing
           status code: 403, request id: 85ea4203-94df-11e8-a8f3-7362fe8c33ea
  Warning  CreatingLoadBalancerFailed  27s  service-controller  Error creating load balancer (will retry): failed to ensure load balancer for service default/helloworld: AccessDenied: User: arn:aws:sts::375987363060:assumed-role/terraform-dev-cluster/1533050767091663441 is not authorized to perform: iam:CreateServiceLinkedRole on resource: arn:aws:iam::375987363060:role/aws-service-role/elasticloadbalancing.amazonaws.com/AWSServiceRoleForElasticLoadBalancing
           status code: 403, request id: 8c033bab-94df-11e8-a122-0d0a9b4b1bf0
  Normal   EnsuringLoadBalancer        7s (x4 over 44s)  service-controller  Ensuring load balancer
  Warning  CreatingLoadBalancerFailed  7s                service-controller  Error creating load balancer (will retry): failed to ensure load balancer for service default/helloworld: AccessDenied: User: arn:aws:sts::375987363060:assumed-role/terraform-dev-cluster/1533050767091663441 is not authorized to perform: iam:CreateServiceLinkedRole on resource: arn:aws:iam::375987363060:role/aws-service-role/elasticloadbalancing.amazonaws.com/AWSServiceRoleForElasticLoadBalancing
           status code: 403, request id: 980f56cb-94df-11e8-80db-afef51e9359f

Potential security issue

Hello 👋

I run a security community that finds and fixes vulnerabilities in OSS. A researcher (@arshadkazmi42) has found a potential issue, which I would be eager to share with you.

Could you add a SECURITY.md file with an e-mail address for me to send further details to? GitHub recommends a security policy to ensure issues are responsibly disclosed, and it would help direct researchers in the future.

Looking forward to hearing from you 👍

(cc @huntr-helper)

You can demo Blue/Green deployment using Flagger ?

where's the 'docker-demo' folder referred to in the course ?

Maybe I am missing something, but I cannot find the 'docker-demo' folder that is referred to in Section 1, #16 Building Docker Containers. Wanted to use the sample files to finish the lab... would rather not have to type everything from scratch :).

what would be the syntax of KOPS to deploy cluster on GCP and Openstack

what would be the syntax of KOPS to deploy cluster on GCP and Openstack

Kubernetes course

Demo: Service Discovery database connection failed

Hi, I'm following your Udemy DevOps course to learn Kubernetes. I came across the following database connection error while following the service discovery Demo.

ubuntu@DESKTOP$kubectl get pods
NAME                                     READY   STATUS    RESTARTS      AGE
database                                 1/1     Running   0             13m
helloworld-deployment-5848ddb496-62pgw   1/1     Running   0             13m
helloworld-deployment-5848ddb496-kghhz   1/1     Running   0             13m
helloworld-deployment-5848ddb496-qdfwz   1/1     Running   1 (12m ago)   13m


ubuntu@DESKTOP$kubectl logs helloworld-deployment-5848ddb496-62pgw
Example app listening at http://:::3000
Error connecting to db:  { [Error: ER_NOT_SUPPORTED_AUTH_MODE: Client does not support authentication protocol requested by server; consider upgrading MySQL client]
  code: 'ER_NOT_SUPPORTED_AUTH_MODE',
  errno: 1251,
  sqlState: '08004',
  fatal: true }

From the quick google search it looks like there is some DB error. But I tried checking the DNS using busybox image and DNS is also not working:

ubuntu@DESKTOP$kubectl get svc
NAME                    TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)          AGE
database-service        NodePort    10.104.49.168   <none>        3306:31520/TCP   24m
helloworld-db-service   NodePort    10.103.241.63   <none>        3000:30619/TCP   24m
kubernetes              ClusterIP   10.96.0.1       <none>        443/TCP          42h


/ # nslookup helloworld-db-service
Server:         10.96.0.10
Address:        10.96.0.10:53

Name:   helloworld-db-service.default.svc.cluster.local
Address: 10.103.241.63

** server can't find helloworld-db-service.svc.cluster.local: NXDOMAIN

** server can't find helloworld-db-service.cluster.local: NXDOMAIN

** server can't find helloworld-db-service.cluster.local: NXDOMAIN


** server can't find helloworld-db-service.svc.cluster.local: NXDOMAIN

/ #
/ #
/ # nslookup database-service
Server:         10.96.0.10
Address:        10.96.0.10:53

Name:   database-service.default.svc.cluster.local
Address: 10.104.49.168

** server can't find database-service.cluster.local: NXDOMAIN


** server can't find database-service.cluster.local: NXDOMAIN

** server can't find database-service.svc.cluster.local: NXDOMAIN

** server can't find database-service.svc.cluster.local: NXDOMAIN

/ #
/ # cat /etc/resolv.conf
nameserver 10.96.0.10
search default.svc.cluster.local svc.cluster.local cluster.local
options ndots:5

I enabled the "ingress-dns" addon and recreated the deployment, pod and services, however, still not working.
Could you please look into this and let me know what is going on? Thanks

How to make kubeadm/kops make use of other type of containers apart from docker

How to make KUBEADM/KOPS make use of other type of containers apart from docker & what would be the procedure to do it.

Licence missing

Hello,

Could you add a licence to your code?

Best regards

Pod Presets are removed since v1.20

Here is discussion
And alternative

postgres-operator missing secrets

In demo 79 some secrets are missing

+ ./client-setup.sh
...
Error from server (NotFound): secrets "pgouser-admin" not found
pgouser-admin Secret not found in namespace: pgo
Please ensure that the PostgreSQL Operator has been installed.
Exiting...

When I've manually created pgouser-admin secret I'm still getting

./quickstart.sh 
...
Error from server (NotFound): secrets "pgo.tls" not found