Kubernetes on Samarthya

ServiceAccount

Wed, 16 Feb 2022 12:00:00 +0000

If you have seen errors like these when deploying using a serviceAccount

Error: INSTALLATION FAILED: rendered manifests contain a resource that already exists. Unable to continue with install: could not get information about the resource ConfigMap "spinnaker-hellow-pipline" in namespace "spinnaker": configmaps "spinnaker-hellow-pipline" is forbidden: User "system:serviceaccount:jenkins:default" cannot get resource "configmaps" in API group "" in the namespace "spinnaker"

What?
#

A service account provides an identity for processes that run in a Pod.
Every namespace has a default service account
When you create a pod, if you do not specify a service account, it is automatically assigned the default service account in the same namespace.
To use a non-default service account, set the spec.serviceAccountName field of a pod to the name of the service account you wish to use.
The service account has to exist at the time the pod is created, or it will be rejected.
The service account of an already created pod cannot be updated

Default RBAC policies grant scoped permissions to control-plane components, nodes, and controllers, but grant no permissions to service accounts outside the kube-system namespace (beyond discovery permissions given to all authenticated users). — Official documentation

Example
#

apiVersion: v1
kind: ServiceAccount
metadata:
 creationTimestamp: "2021-08-27T07:52:20Z"
 name: default
 namespace: default
 resourceVersion: "XXXX"
 uid: XXXX
secrets:
- name: default-token-vcb75

Let’s add docker-registry secret to the SA. (My secret name is samarthya-docker)

`Devspace`: Managing Apps in Kubernetes

Tue, 15 Feb 2022 12:00:00 +0000

What is `devspace`?
#

devspace is a CLI tool for kubernetes, which can help you configure, deploy, debug. and test your application inside Kubernetes.

Kaniko: Jenkins Pipeline

Fri, 11 Feb 2022 12:00:00 +0000

So there are many things I have been simultaneously trying to learn & one of those is to learn how you can configure a pipeline

Objectives
#

Learn Jenkins deployment on Kubernetes
Learn Jenkins Kubernetes Plugin
Learn Jenkins Pipeline (Declarative)
How to build and deploy images in Kubernetes cluster

All right, with so many monkeys on my back I had to do things the way I know it works for me.

Cert-Manager: TLS for ingress

Wed, 09 Feb 2022 12:00:00 +0000

A common use-case for cert-manager is requesting TLS signed certificates to secure your ingress resources.

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates.

Installation
#

The easiest way is to use helm charts.

Jenkins: K8S

Wed, 02 Feb 2022 12:00:00 +0000

Deploying Jenkins on K8S cluster is as simple as

Add Repo
#

helm repo add jenkins https://charts.jenkins.io
helm repo update

Deploy instance

Kubernetes on Samarthya

ServiceAccount

What? #

Example #