Jonas Hecht issues

Results 26 issues of


                                            Jonas Hecht

helm-tiller : Check if Hello-Helm-World Pod is running [No resources found.]

Run Hello-Helm-World Chart doesn´t seem to work as intended.

Integrate jetstack/cert-manager

Use https://github.com/jetstack/cert-manager instead of manual creation and distribution of certs in the K8s cluster

Add Prometheus & Grafana as Monitoring solution

See https://github.com/helm/charts/tree/master/stable/prometheus, https://prometheus.io/docs/visualization/grafana/, https://grafana.com/dashboards/6417

K8s Dashboard error: configmaps is forbidden

`configmaps is forbidden: User "system:serviceaccount:kube-system:ttl-controller" cannot list configmaps in the namespace "default" ` is showing up inside the Dashboard GUI, if we use `kubectl proxy` for access.

Use molecule for (Unit)Testing of all the steps

For examples and docs see https://molecule.readthedocs.io/en/latest/, https://sebiwi.github.io/blog/how-does-it-work-kube-3/ , https://github.com/sebiwi/kubernetes-coreos/blob/master/molecule.yml. This step should be done before https://github.com/jonashackt/kubernetes-the-ansible-way/issues/3

Let´s Encrypt certificates for Kubernetes (Dashboard)

To avoid ugly complains in Browsers, we want to have Let´s Encrypt certificates for the Dashboard, which means essentially for most parts of the k8s-cluster.

Include gVisor and runc - and verify the isolated execution for untrusted pods

See https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/13-smoke-test.md#verification and https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/09-bootstrapping-kubernetes-workers.md#download-and-install-worker-binaries

Jonas Hecht