• Install microk8s using the official documentation
  • add the user to the microk8s group to run it without sudo
  • Enabled the hostpath-storage addon to be able to create pv.
    • this plugin has a default storage path specified in the default storage class.
    • to change the storage path created a storage class ronnie-local.
      • storage classes are not namespaced.
  • microk8s dashboard-proxy command can be used to proxy the dashoard to ronnie and access it
    • the command prints a token which can be used to login into the dashboard.
  • Tried looking into using auth0 for authn in microk8s.
    • TODO need to figure it out more.
  • for multi user support it is mentioned to enable the rbac addon. enabled it.
    • the dashboard had limited access after enabling this addon. Most of the access queries erroring out.
    • created a service account1 admin-user and binded it to the role cluster-admin.
      • TODO look into service accounts
      • TODO look into rolebinding.
    • created a token for the admin user to access the dashboard.
  • TODO read more about services and different kinds
  • Deployed an application to check if the setup works.
    • pvc worked fine
    • deployed to the right namespace.
    • app couldn’t reach the db using the service name.
      • DNS addon had to be enabled for obvious reasons.
  • read configuring host interface to bind to specific interface on the machine.
  • Footnotes

Footnotes

  1. https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/creating-sample-user.md