Deploy a Kunernetes cluster with a static public IP for egress using Azure CLI
Infrastructure
An Azure Kubernetes Service (AKS) with a static public IP address for egress traffic.
╔══════════════════════════════════════════════════════════════╗ ╔══════════════╗
║ Azure ║ ║ https://... ║
║ ┌────────────────────┐ ┌────────────┐ ║ ║ ║
║ │░ Kuebernetes(AKS) ░│ ┌─<─┤ Inbound IP ├<─────────────────╟<─────https───────╢ web-browser ║
║ │░░░░░░░░░░░░░░░░░░░░│ │ └────────────┘ ║ ╚═════╤══╤═════╝
║ │░░░ Ingress Nginx <─┼<──┘ ║ ═╧══╧═
║ │░░░░░░░░░░░░░░░░░░░░│ ┌────────────┐ ┌────────────┐ ║
║ │░░░░░░░░░░ secrets ░│ │LogAnalytics│ │ StorageAcc │ ║
║ │░░░░░░░░░░░░░░░░░░░░│ └────────────┘ └────────────┘ ║
║ │░░░░░░░░░░░░░░░░░░░░│ ┌─────────────╢
║ │░░░░░░░░░░░░░░░░░░░░┼>───────────────────>────┤ Outbound IP ║
║ │░░░░░░░░░░░░░░░░░░░░│ └─────────────╢
║ └────────────────────┘ ║
╚══════════════════════════════════════════════════════════════╝
- Hardcoded Kubernetes version: 1.20.5
- Hardcoded VM size for nodes: Standard_B2s (2 vCPU, 4GiB memory)
These values can be chenged in deploy.sh script.
Related documentation
Prerequsites
Source code
Access to code repository in GitHub https://github.com/mchudinov/K8sAzureAzCli.git
Tools
This instruction assumes that you use Azure Cloud Shell
In order to use this instruction from a local environment, the following tools are required:
- Azure CLI version >= 2.8
- git
- kubectl - Kubernetes command line tool
- Bash shell
How to deploy
1. Login to Cloud Shell
Open Azure Cloud Shell https://shell.azure.com in a web-browser and login.
2. Clone the repository
git clone https://github.com/mchudinov/K8sAzureAzCli.git
3. Change to source code directory
cd K8sAzureAzCli
4. Run deploy.sh script
./deploy.sh -c mytestk8s -n 3 -r westeurope
The keys are:
- c) Cluster name
- n) Number of nodes (default 3)
- r) Azure region (default WestEurope)
After a couple of minutes a new Kubernetes cluster will be ready.
Deployment script places all the created resource in a resource groups rg-<cluster_name>.
How-tos
Add Kubernetes credentials to the local .cube config file
az aks get-credentials --name <AKS_NAME> --resource-group <RESOURCE_GROUP>
Verify egress address
This command will run a tiny Alpine linux on a pode inside the cluster:
kubectl run -it --rm checkip --image alpine
Then from inside the Alpine linux install a curl program.
apk --no-cache add curl
And finally check the outging IP on the public service checkip.dyndns.org.
curl checkip.dyndns.org
<html><head><title>Current IP Check</title></head><body>Current IP Address: 40.121.183.52</body></html>The IP address must be the same as created by the template.
Then exit the Alpine:
exit
Alpine pod will be immidiately automatically destroed after exit.
How to run an interactive shell
kubectl apply -f interactive.yaml
Check CSI driver is running
kubectl get csidrivers
kubectl describe csidriver secrets-store.csi.k8s.io
kubectl get pods -l app=secrets-store-csi-driverClean up
Delete everything created in Azure:
destroy.sh
Use destroy.sh script with cluster name as parameter
For example:
./destroy.sh -c mytestk8s
Manually
If destroy.sh script fails everything that was created can be easily erased manyally. Just delete the resource group created by deployment script:
az group delete --resource-group rg-<cluster_name>
Reset changes in git
git reset --hard
Delete the source code directory in Cloud Shell
rm -rf K8sAzureAzCli