VEBA Contour Deployment

03-envoy.yaml

# examples/contour/03-envoy.yaml
apiVersion: apps/v1
kind: DaemonSet
metadata:
  labels:
    app: envoy
  name: envoy
  namespace: projectcontour
spec:
  [...]
  template:
    [...]
    spec:
      ### add these lines ###
      dnsPolicy: ClusterFirstWithHostNet
      hostNetwork: true
      ###################
      containers:
      [...]

create-certs.sh

## Create SSL Certificate & Secret
KEY_FILE=/root/openfaas-gw.key
CERT_FILE=/root/openfaas-gw.crt
CN_NAME=$(hostname)
CERT_NAME=openfaas-gw-tls
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ${KEY_FILE} -out ${CERT_FILE} -subj "/CN=${CN_NAME}/O=${CN_NAME}"

deploy-secret.sh

kubectl -n openfaas create secret tls ${CERT_NAME} --key ${KEY_FILE} --cert ${CERT_FILE}

deploy.sh

kubectl create -f examples/contour/

git-clone.sh

git clone https://github.com/projectcontour/contour
cd contour
git checkout TODO:

ingressroute-gateway.yaml

apiVersion: contour.heptio.com/v1beta1
kind: IngressRoute
metadata:
  labels:
    app: openfaas
  name: ingressroute-gateway
  namespace: openfaas
spec:
  virtualhost:
    fqdn: ${HOSTNAME}
    tls:
      secretName: ${CERT_NAME}
      minimumProtocolVersion: "1.2"
  routes:
    - match: /status
      prefixRewrite: /status
      services:
      - name: tinywww
        port: 8100
    - match: /bootstrap
      prefixRewrite: /bootstrap
      services:
      - name: tinywww
        port: 8100
    - match: /
      services:
      - name: gateway
        port: 8080