Running traefikee on minikube

readme.md

• Setup minikube to your like

  • Without a VM: minikube start --vm-driver=none

  In this case if you already built the images you won't have to do anything else as it will use the docker environment from your machine.

  • With a VM:
    minikube start
    Set the docker environment to the minikube VM
    eval $(minikube docker-env)

• Proceed to build your local images

• Install traefikee on the cluster with custom values making sure the pull policy is set to 'Never':
  traefikeectl install --clustername=k8s --licensekey=$TRAEFIKEE_LICENSE_KEY --dashboard --dashboard.insecure --force --kubernetes --kubernetes.helmvaluespath=./traefikee_values.yml

• Add a label to one of the data nodes to later select it on a NetworkPolicy:
  kubectl label pods <pod-name> test=block-controller -n traefikee

• Edit the policy with the correct cidr/ip to block traffic from/to the controller to the selected data node:
  kubectl apply -f allow-except-ip.yml -n traefikee

• Remove the rule whenever you want:
  kubectl delete -f allow-except-ip.yml -n traefikee

allow-except-ip.yml

kind: NetworkPolicy
apiVersion: networking.k8s.io/v1
metadata:
  name: allow-except-ip
spec:
  podSelector: 
    matchLabels:
      app: traefikee
      component: data-nodes
      test: block-controller
  ingress:
  - from:
    - ipBlock:
        cidr: <your-k8s-net-cidr> #ex 10.244.1.0/24
        except:
        - <your-controll-node-ip> #ex 10.244.1.144/32
  egress:
  - to:
    - ipBlock:
        cidr: <your-k8s-net-cidr> #ex 10.244.1.0/24
        except:
        - <your-controll-node-ip> #ex 10.244.1.144/32
  policyTypes:
  - Ingress
  - Egress

Running traefikee on minikube

.

traefikee_values.yml

bootstrap:
  timeout: 600

image:
  name: containous/traefikee-private
  tag: latest
  pullPolicy: Never

replicas:
  dataNode:
    total: 2