#kubernetes #personal-platform #sop

idea

SOP for my Kubernetes cluster:

  1. Provision a cluster on Azure Portal
  2. (Optional) install Helm on computer using
     sudo snap install helm --classic
     helm repo add stable https://kubernetes-charts.storage.googleapis.com/
     helm repo add jetstack https://charts.jetstack.io
     helm repo update
  3. Deploy ingress controller with
     helm install my-nginx stable/nginx-ingress --set rbac.create=true
  4. Deploy cert-manager
     helm install \
       cert-manager jetstack/cert-manager \
       --namespace cert-manager \
       --version v0.13.1
  5. Change DNS records for all domains (don't forget any) to point to the IP of the ingress controller service:
     kubectl -n kube-system get services
  6. Verify all DNS records have been updated by flushing dns and pinging
  7. Deploy all, check that cert-manager is provisioning certificates properly and that the pods die out. If not, check:
    • Describe events of the certificate.
    • Logs of the cert-manager local pod
    • Logs of the cert-manager controller pods (in cert-manager namespace)

links

references