johananl

FROM debian

RUN apt-get update && apt-get install -y iperf && apt-get clean
CMD exec /bin/bash -c "trap : TERM INT; sleep infinity & wait"

johananl

Requirements

• A k8s cluster deployed on Packet with 2 worker nodes.
• BGP enabled on both worker nodes.
• An IPv4 block allocated on Packet. A single address is enough for a single exposed service.

Deploy MetalLB

kubectl apply -f https://raw.githubusercontent.com/google/metallb/v0.7.3/manifests/metallb.yaml

johananl

Debugging iPXE image Download over HTTPS

Build iPXE

Get the source:

git clone git://git.ipxe.org/ipxe.git

johananl

curl https://getcaddy.com | bash -s personal

mkdir caddy
cd $_

cat <<EOF >Caddyfile
0.0.0.0:8080
browse
EOF

johananl

kubectl run -it --rm debug-$RANDOM --image-pull-policy=Always --image=alpine --restart=Never sh

johananl

provider "azurerm" {}

variable "cluster_name" {
  default = "aks-test"
}

resource "azurerm_resource_group" "test" {
  name = "${var.cluster_name}"
  location = "West Europe"
}

johananl

Privileged DaemonSet

kubectl apply -f privileged-ds.yaml
kubectl exec -it debug-xxxxx sh
chroot /host

johananl

---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: registry
---
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
  name: registry

johananl

openssl req -x509 -newkey rsa:4096 -keyout mykey.key -out mycert.pem -days 365 -nodes -subj '/CN=localhost'

johananl

[Unit]
Description=PostgreSQL
After=docker.service
Requires=docker.service

[Service]
TimeoutStartSec=0
Restart=always
ExecStartPre=-/usr/bin/docker stop %n
ExecStartPre=-/usr/bin/docker rm %n