Local K8s setup using Kind

Start a local kubernetes cluster with traefik ingress and HTTPS 🚀

Prerequisites 📋

• Docker
• Kubectl
• Kind
• Helm

Getting started 🚀

# start local cluster with ingress, HTTPS and a demo app
make up

# stop
make down

make help

Access 🔑

› Done!

[💻] WhoAmI application running on: https://whoami.127.0.0.1.nip.io
[💻] Traefik dashboard accessible at http://traefik.127.0.0.1.nip.io/dashboard/ 

Debugging (for cert) 🔍 (SOON TO BE AUTOMATED)

kubectl get certificate -A


kubectl get secret cert-whoami -o jsonpath='{.data.tls\.crt}' | base64 --decode > whoami.crt ## This cert verifies all the domains atm. 

kubectl get secret cert-traefik -o jsonpath='{.data.tls\.crt}' | base64 --decode > traefik.crt


- Open keychain access (if using Mac)

- Drag the whoami.crt & traefik.crt to login or local items keychain

- Trust both certs

- Access whoami app on "https://whoami.127.0.0.1.nip.io" 

- Access Traefik HTTPS on "https://traefik.127.0.0.1.nip.io/dashboard/"

Monitoring 📊

## Prometheus

helm repo add prometheus-community https://prometheus-community.github.io/helm-charts

helm repo update

helm install prometheus prometheus-community/prometheus --namespace monitoring --create-namespace

Access prometheus on "http://prometheus.127.0.0.1.nip.io"

## Grafana

helm repo add grafana https://grafana.github.io/helm-charts
helm repo update


helm install grafana grafana/grafana --namespace monitoring --create-namespace

### Get your 'admin' user password 
kubectl get secret --namespace monitoring grafana -o jsonpath="{.data.admin-password}" | base64 --decode ; echo

# grafana.monitoring.svc.cluster.local

Access grafana on "http://grafana.127.0.0.1.nip.io"

user: admin
pass: from above secret

Grafana data source 📈

http://prometheus-server.monitoring.svc.cluster.local:80

Improvements (Platform)

• ArgoCD ✅
• Alertmanager ✅
• GitLab ✅
• K8s dashboard ✅
• Service mesh (Istio) ✅
• Drone/Jenkins (TBC)
• Loki (logging) TBC
• MinIO TBC
• PostgreSQL/MySQL DBs (TBC)

Links

[💻] WhoAmI application running on: https://whoami.127.0.0.1.nip.io:8080/ [💻] Traefik dashboard accessible at http://traefik.127.0.0.1.nip.io/dashboard/

[💻] Prometheus dashboard accessible at http://prometheus.127.0.0.1.nip.io/

[💻] Grafana dashboard accessible at http://grafana.127.0.0.1.nip.io/

[💻] ArgoCD dashboard accessible at: http://argocd.127.0.0.1.nip.io/

[💻] ArgoCD HTTPS dashboard accessible at: http://argocd.127.0.0.1.nip.io:8443/

Others

[💻] K8s dashboard accessible at: https://dashboard.127.0.0.1.nip.io:8443/

Get token kubectl -n kubernetes-dashboard create token dashboard-admin for above dashboard.

[💻] GitLab accessible at: https://gitlab.127.0.0.1.nip.io:8443/ - user: root, get password :kubectl get secret gitlab-gitlab-initial-root-password -n gitlab -o jsonpath="{.data.password}" | base64 --decode; echo