SEハンドブック（Kubernetes Service Hatoba適用指針）

kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: test-claim
spec:
  accessModes:
    - ReadWriteMany
  resources:
    requests:
      storage: 1Mi
  storageClassName: nifcloud-nas-nfs

$ kubectl create -f pvc.yml

$ kubectl get pv
NAME                CAPACITY ACCESS MODES RECLAIM POLICY STATUS CLAIM              STORAGECLASS     REASON AGE
pvc-[RANDOM STRING] 1Mi      RWX          Delete         Bound  default/test-claim nifcloud-nas-nfs 8s

apiVersion: v1
kind: Service
metadata:
  name: database
spec:
  ports:
  - protocol: TCP
    port: 3306
    targetPort: 3306

---
apiVersion: v1
kind: Endpoints
metadata:
  name: database
subsets:
  - addresses:
      - ip: XX.XX.XX.XX
    ports:
      - port: 3306

$ kubectl apply -f rdb-sv.yml
service/database created
endpoints/database created
$ kubectl get service
NAME       TYPE      CLUSTER-IP  EXTERNAL-IP PORT(S)  AGE
database   ClusterIP XX.XX.XX.XX <none>      3306/TCP XXXX
kubernetes ClusterIP XX.XX.XX.XX <none>      443/TCP  XXXX
$ kubectl  get endpoints
NAME       ENDPOINTS      AGE
database   [RDBのIP]:3306 XXXX
kubernetes XX.XX.XX.XX    XXXX

$ kubectl apply -f mysql-client.yml ← mysqlクライアントが使えるイメージをpodとして記述したコンフィグファイル
pod/mysql-client created
$ kubectl -ti exec pod/mysql-client -- /bin/bash
# mysql -u test -p -h database
Enter password:
MySQL>show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| innodb             |
| mysql              |
| performance_schema |
| sys                |
| test               |
+--------------------+
6 rows in set (0.001 sec)

apiVersion: v1
kind: Service
metadata:
  name: hellolb
  labels:
    run: hello
  annotations:
    # https://pfs.nifcloud.com/api/rest/CreateLoadBalancer.htm
    #最大流量.Mbsp
    service.beta.kubernetes.io/hatoba-load-balancer-network-volume: "10"
    #月額:1/従量:2
    service.beta.kubernetes.io/hatoba-load-balancer-accounting-type: "2"
    # ロードバランサーの種類.standard/ats
    service.beta.kubernetes.io/hatoba-load-balancer-policy-type: standard
    # 1:ound-Robin 2:Least-Connection
    service.beta.kubernetes.io/hatoba-load-balancer-balancing-type: "1"
    # https://pfs.nifcloud.com/api/rest/ConfigureHealthCheck.htm
    #count to fail.1-10
    service.beta.kubernetes.io/hatoba-load-balancer-healthcheck-unhealthy-threshold: "3"
    service.beta.kubernetes.io/hatoba-load-balancer-healthcheck-interval: "30" #helth check interval.5-300
    # https://pfs.nifcloud.com/api/rest/SetFilterForLoadBalancer.htm
    #フィルタの挙動 許可:1/拒否:2
    service.beta.kubernetes.io/hatoba-load-balancer-filter-type: "1"
spec:
  type: LoadBalancer
  ports:
    - port: 80 #ロードバランサーの待ち受けポート
      protocol: TCP #TCPのみ受け付けます
      targetPort: 8080 #Podが待ち受けているポート
      name: http
  loadBalancerSourceRanges:
    - 192.168.10.0/24 #アクセス元のグローバルIP(帯)
    - 192.168.10.254/32 #アクセス元のグローバルIP(単体)
  selector:
    run: hello

$ kubectl apply -f l4-lb.yml
service/hellolb configured
$ kubectl get service
NAME         TYPE           CLUSTER-IP  EXTERNAL-IP PORT(S)      AGE
hellolb      LoadBalancer   XX.XX.XX.XX XX.XX.XX.XX 80:32246/TCP XXs
kubernetes   ClusterIP      XX.XX.XX.XX <none>      443/TCP      XdXXs

apiVersion: apps/v1
kind: Deployment
metadata:
  name: hello
spec:
  selector:
    matchLabels:
      run: hello
  replicas: 3
  template:
    metadata:
      labels:
        run: hello
    spec:
      containers:
      - name: hello
        image: gcr.io/google-samples/node-hello:1.0
        ports:
        - containerPort: 8080

$ kubectl apply -f hello.yml
deployment.apps/hello created

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: doc-sample-ingress
spec:
  ingressClassName: nginx
  tls:
    - hosts:
        - example.com
      secretName: sample-tls
  rules:
  - host: example.com
    http:
      paths:
        - path: /
          pathType: Prefix
          backend:
            service:
              name: hello-service
              port:
                number: 443

$ kubectl apply -f https-lb.yml
ingress.networking.k8s.io/doc-sample-ingress configured
$  kubectl doctest describe ing doc-sample-ingress
Name:             doc-sample-ingress
Labels:           <none>
Namespace:        default
Address:          XXX.XXX.XXX.XXX
Ingress Class:    nginx
Default backend:  <default>
TLS:
  sample-tls terminates example.com
Rules:
  Host                Path  Backends
  ----                ----  --------
  example.com
                      /   hello-service:443 (<error: endpoints "hello-service" not found>)
Annotations:          <none>
Events:
  Type    Reason  Age      From                      Message
  ----    ------  ----     ----                      -------
  Normal  Sync    xx      nginx-ingress-controller  Scheduled for sync

$ kubectl get service -n ingress-nginx ingress-nginx-controller -o yaml > ingress-nginx-controller.yml

$ kubectl apply -f ingress-nginx-controller.yml
% kubectl get service --namespace ingress-nginx ingress-nginx-controller
NAME                       TYPE           CLUSTER-IP      EXTERNAL-IP   PORT(S)                      AGE
ingress-nginx-controller   LoadBalancer   XX.XX.XX.XX     <pending>     80:3xxxx/TCP,443:3xxxx/TCP   XXX

% kubectl get service --namespace ingress-nginx ingress-nginx-controller
NAME                       TYPE           CLUSTER-IP      EXTERNAL-IP   PORT(S)                      AGE
ingress-nginx-controller   LoadBalancer   XX.XX.XX.XX     YY.YY.YY.YY   80:3xxxx/TCP,443:3xxxx/TCP   XXX

kind: Deployment
metadata:
  name: hello-deploy-1
spec:
  selector:
    matchLabels:
      run: hello-pod
  replicas: 1
  template:
    metadata:
      labels:
        run: hello-pod
    spec:
      containers:
      - name: hello
        image: hashicorp/http-echo
        args:
          - -text=echo1
          - -listen=:80
        ports:
          - containerPort: 80
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: hello-deploy-2
spec:
  selector:
    matchLabels:
      run: hello-pod
  replicas: 1
  template:
    metadata:
      labels:
        run: hello-pod
    spec:
      containers:
      - name: hello
        image: hashicorp/http-echo
        args:
          - -text=echo2
          - -listen=:80
        ports:
          - containerPort: 80
---
apiVersion: v1
kind: Service
metadata:
  name: hello-service
spec:
  selector:
    run: hello-pod
  ports:
    - protocol: TCP
      port: 443
      targetPort: 80

$ kubectl apply -f hello.yml
deployment.apps/hello-deploy-1 created
deployment.apps/hello-deploy-2 created
service/hello-service created