This document is an overview of setting up a Kubernetes cluster on three Ubuntu 18.04 nodes. The three nodes are described as follows with the following components installed:
Kubernetes is made up of multiple components that make up a cluster. Many of the components are actually pods in the cluster running under kube-system. The following components make up the k8s control plane
etcd is a synchronized data store for storing and sharing the cluster state across nodes in the cluster
| # Simple Inspec control | |
| control 'cve-blah-blah-blah' do | |
| impact 1.0 | |
| title 'Ensure our systems are not vulnerable to the blah blah blah cve' | |
| desc 'Blah Blah Blah VVE is dangerous' | |
| describe file('/tmp/blahblahblah') do | |
| it { should_not exist } | |
| end | |
| end |
| curl https://raw.githubusercontent.com/habitat-sh/habitat/master/components/hab/install.sh | sudo bash | |
| hab license accept | |
| cat << EOF > /etc/systemd/system/hab-sup.service | |
| [Unit] | |
| Description=Habitat Supervisor | |
| [Service] | |
| ExecStartPre=/bin/bash -c /bin/systemctl |
| title 'Password Policy' | |
| control 'cis-enforce-password-history-1.1.1' do | |
| impact 0.7 | |
| title '1.1.1 Set Enforce password history to 24 or more passwords' | |
| desc 'Set Enforce password history to 24 or more passwords' | |
| describe security_policy do | |
| its('PasswordHistorySize') { should be >= 24 } | |
| end | |
| end |
The following document describes how to setup a Mac OS X workstation for developing Habitat Packages for Windows using Vagrant and VirtualBox
Before you begin you should have the following tools installed on your Mac workstation:
vagrant-reload plugin - Open a terminal and run the command vagrant plugin install vagrant-reload| pkg_name=national-parks | |
| pkg_origin=<YOUR ORIGIN> | |
| pkg_version="6.3.0" | |
| pkg_maintainer="The Habitat Maintainers humans@habitat.sh" | |
| pkg_license=("Apache-2.0") | |
| pkg_deps=(core/tomcat8 core/jre8 core/mongo-tools) | |
| pkg_build_deps=(core/jdk8/8u131 core/maven) | |
| pkg_svc_user="root" | |
| pkg_binds=( | |
| [database]="port" |
| #!/bin/bash | |
| ln -vsf {{pkg.svc_config_path}}/conf_server.xml {{pkgPathFor "core/tomcat8"}}/tc/conf/server.xml | |
| {{#if bind.database ~}} | |
| {{pkgPathFor "core/mongo-tools"}}/bin/mongoimport --drop -d demo -c nationalparks --type json --jsonArray --file {{pkg.path}}/national-parks.json --host={{bind.database.first.sys.ip}} --port={{bind.database.first.cfg.port}} | |
| {{/if ~}} |
| #!/bin/bash | |
| {{#if bind.database ~}} | |
| export CATALINA_OPTS="-DMONGODB_SERVICE_HOST={{bind.database.first.sys.ip}} -DMONGODB_SERVICE_PORT={{bind.database.first.cfg.port}} -DMONGODB_DATABASE={{cfg.mongodb_database}}" | |
| {{/if ~}} | |
| export JAVA_HOME="{{pkgPathFor "core/jre8"}}" | |
| export TOMCAT_HOME="{{pkgPathFor "core/tomcat8"}}/tc" | |
| cp {{pkg.path}}/*.war $TOMCAT_HOME/webapps | |
| exec ${TOMCAT_HOME}/bin/catalina.sh run |
| #!/bin/bash | |
| ln -vsf {{pkg.svc_config_path}}/conf_server.xml {{pkgPathFor "core/tomcat8"}}/tc/conf/server.xml |
| pkg_name=national-parks | |
| pkg_origin=<YOUR ORIGIN> | |
| pkg_version="6.3.0" | |
| pkg_maintainer="The Habitat Maintainers <humans@habitat.sh>" | |
| pkg_license=("Apache-2.0") | |
| pkg_deps=(core/tomcat8 core/jre8) | |
| pkg_build_deps=(core/jdk8/8u131 core/maven) | |
| pkg_svc_user="root" | |
| do_prepare(){ export JAVA_HOME=$(hab pkg path core/jdk8) ; } | |
| do_build() |