CloudVersity
CloudVersity
  • Видео 5
  • Просмотров 64 582
K3S + Nginx + Cert-Manager + LetsEncrypt | HTTPS for your Kubernetes (K8s) Cluster | Tutorial
🔥 Today’s topic: A hands-on how to obtain valid certificates for your Kubernetes Cluster by using Nginx ingress controller + Cert-Manager + LetsEncrypt 🔥
If you want to follow along, setup your K3s Cluster with the Nginx ingress controller as explained in this video in advance: 📺 bit.ly/3lSWFD2
I received a request from the community to show the workflow for obtaining certificates in Kubernetes. For this purpose, I’ll leverage (again) from Linode and setup a simple k3s cluster with an Nginx ingress controller. We’ll install cert-manager, configure it accordingly to work with LetsEncrypt and finally use our certificate for our domain.
#k3s #rancher #cert-manager #ssl #tls #letsencrypt #cont...
Просмотров: 13 745

Видео

K3S (by Rancher) | Setup a lightweight Kubernetes Cluster in Minutes | Hands-on TutorialK3S (by Rancher) | Setup a lightweight Kubernetes Cluster in Minutes | Hands-on Tutorial
K3S (by Rancher) | Setup a lightweight Kubernetes Cluster in Minutes | Hands-on Tutorial
Просмотров 40 тыс.3 года назад
K3S (by Rancher) Setup a lightweight Kubernetes Cluster in Minutes | Hands-on Tutorial 🔥 Today’s topic: A hands-on session off a great Kubernetes distribution K3S 🔥 I’d like to give you a first basic hands-on guide on K3S. A lightweight Kubernetes distribution which you can install on any Linux host in minutes or even in around 30 seconds. We’ll also have a look at how we can extend our Cluster...
Kubernetes (K8s) Basics | Hands-on Tutorial | Deployments, Services, Rolling UpdatesKubernetes (K8s) Basics | Hands-on Tutorial | Deployments, Services, Rolling Updates
Kubernetes (K8s) Basics | Hands-on Tutorial | Deployments, Services, Rolling Updates
Просмотров 4773 года назад
🔥 Today’s topic: A hands-on session on Kubernetes 🔥 I’d like to give you a first basic hands-on guide for beginners on Kubernetes. Covering topics like Creating a cluster by using a cloud provider (Linode), Deploy an application onto that cluster, expose that application to the public world and perform a rolling update to release a new version of our deployed application. Kubernetes is a buzz-w...
Kubernetes (K8s) explained in 15 Minutes | Learn the basics right now!Kubernetes (K8s) explained in 15 Minutes | Learn the basics right now!
Kubernetes (K8s) explained in 15 Minutes | Learn the basics right now!
Просмотров 4183 года назад
Today's topic: Kubernetes 🔥 Kubernetes is a buzz-words since a few years and helps a lot in our new microservice oriented world. A lot of companies already use Kubernetes or are on their way to do so by breaking up their big monolithic architecture. Here is a short but detailed overview about what Kubernetes actually is, what problems does it solve and how it operates. #docker #kuberntes #k8s #...
Docker 101 - Dockerize your React app and serve your build artifacts through NginxDocker 101 - Dockerize your React app and serve your build artifacts through Nginx
Docker 101 - Dockerize your React app and serve your build artifacts through Nginx
Просмотров 10 тыс.3 года назад
🔥 Today's topic 🔥 Full hands-on tutorial about: How to put your React App into a docker image, run your app as a container and finally serve your static build artifacts through a Nginx webserver, which of course, is also dockerized. #docker​ #dockertutorial​ #cloudversity Feel free to ask any questions in the comments down below and give me your honest feedback. ⏰ Timestamps ⏰ 0:00 Agenda & Int...

Комментарии

  • @jorgealvarez4323
    @jorgealvarez4323 4 месяца назад

    Awesome video! You explained everything really well thank you! I’m looking forward to checking out more of your content

  • @codelinx
    @codelinx 4 месяца назад

    Such a great video. Very well explained and good pacing.... Thanks!

  • @RoberFrost1
    @RoberFrost1 5 месяцев назад

    i'm trying to install k3s on a Raspberry Pi 4 Model B 4Gb, but i have some problem. First problem, when i install the master node, the installation give me a this error "Job for k3s.service failed because the control process exited with error code. See "systemctl status k3s.service" and "journalctl -xeu k3s.service" for details." Second problem, when i use " cat /var/lib/rancher/k3s/server/node-token" the console give me the error "permission denied". I don't know where is the problem :(

  • @tecali39
    @tecali39 7 месяцев назад

    Thank you for this efforts I like your explanation method 😊

  • @user-xu7ng1ki3w
    @user-xu7ng1ki3w 11 месяцев назад

    😇😇😇🥰🥰😍

  • @Ealendir
    @Ealendir Год назад

    the next time, if the web and the terminal have a bigger font it will look much better! Tnx for the tutorial.

  • @whatthefunction9140
    @whatthefunction9140 Год назад

    Where to run these commands can be very confusing

  • @jananathbanuka4994
    @jananathbanuka4994 Год назад

    15:37 - Hi, how do you have the public IP's for EXTERNAL-IP? I get the private IPs instead. And also can you update this video with the newest versions? Thank you for your efforts and time <3

    • @CloudVersityOfficial
      @CloudVersityOfficial Год назад

      Hi there, I added a note a while back in the README.md Cheers :) gitlab.com/cloud-versity/rancher-k3s-first-steps#important-note-for-aws-azure-gcp

  • @chrisumali9841
    @chrisumali9841 Год назад

    thanks for the demo and info, have a great day

  • @user-rr8ph4tc1h
    @user-rr8ph4tc1h Год назад

    great video

  • @fazalmehmood6802
    @fazalmehmood6802 Год назад

    Why did you stop making videos ? You are probably one of the best teachers out there on youtube. Hope you did not die or something.

    • @CloudVersityOfficial
      @CloudVersityOfficial Год назад

      Hej dude, I'm still alive. Many thanks for your compliment, that was awesome! I can call myself a father now, this is what consumes most of the time right now. I really want to come back and create more content, but it may takes a couple of months until I've enough time again to do so ;)

    • @fazalmehmood6802
      @fazalmehmood6802 Год назад

      @@CloudVersityOfficial Thats good to hear. I am sure you are doing as good a job being a father as you did being a teacher :)

  • @rduballday
    @rduballday Год назад

    In the manifest.yaml, what IP is set for <your IP> in the Host Ingress rules? Should this me my public IP , one of the the k3s public or private IP's?

    • @CloudVersityOfficial
      @CloudVersityOfficial Год назад

      The public IP from your ingress-nginx load balancer. Time stamp around 15:15

  • @itsmenoor
    @itsmenoor Год назад

    you are a life saver.. kudos!

  • @mcdebugger
    @mcdebugger Год назад

    Thank you! Very useful video!

  • @oldcmputer
    @oldcmputer Год назад

    Great video. Will you do a DNS challenge solver tutorial soon? Would love to see that.

  • @RameshKumar-rt8xb
    @RameshKumar-rt8xb Год назад

    how to add more masters to the cluster?

  • @boatxd
    @boatxd Год назад

    HEADS UP: you have to add "ingressClassName: nginx" on the line above "rules" in ingress.yaml for this to work!

  • @mohamedyoussef8835
    @mohamedyoussef8835 Год назад

    Awesome video +++++++++++++++ Thank you 🙂

  • @mohamedyoussef8835
    @mohamedyoussef8835 Год назад

    Awesome video ++++++++++++++++++ 🙂

  • @dmmd5329
    @dmmd5329 Год назад

    2/4/2023 it still works! Amazing! Thank you man you saved my life

  • @shaheerkhan4098
    @shaheerkhan4098 Год назад

    Good video 👏 Please upload higher quality next time

  • @davidchristensen1219
    @davidchristensen1219 Год назад

    Might be good to update repo README with correct install option to "--disable" traefik". Seems the "no-deploy" flag is now deprated.

  • @eliswerekio
    @eliswerekio Год назад

    Hello I have a question.. This docker production file, is it any different from docker compose ? / better ? Because I have seen other videos with docker compose instead so I am a bit confused now.. Thank you for the video, I learned a lot !

    • @CloudVersityOfficial
      @CloudVersityOfficial Год назад

      It is just a Dockerfile ;) I just named it like that so it's clear when to use what. docker compose is different, it relies on an already existing image or points to a Dockerfile which builds the image. In a compose file you you can start multiple services at once, a Dockerfile alone is just there to build an image. Think of this little app, maybe it needs a database in the future? You need to build the image with the Dockerfile but with a compose file you can start both, the app and the db, at the same time, stop them, delete them etc. Hope that helps :)

  • @DidoMG
    @DidoMG Год назад

    if you get issues installing try to replace "--no-deploy traefik" with "--disable traefik" it may be the fix for you it did work for me

  • @ltonchis1245
    @ltonchis1245 Год назад

    Could you make more Rancher videos? it's a popular topic and there isn't much tutorials about making a self hosted Rancher setup with low end hardware specs ( load balancing )

  • @amitbhoyar5119
    @amitbhoyar5119 Год назад

    how to renew ssl certificate automatically

    • @CloudVersityOfficial
      @CloudVersityOfficial Год назад

      Damn, I really forgot to mention this part. It's done automatically, Cert-Manager will do that for you. The certificates are valid for 90 days and 30 days before expiration, Cert-Manager will start trying to renew it for you. :) You can change these values to your liking, just take a look at the documentation. For me the default is just fine.

  • @patrickmugambi7829
    @patrickmugambi7829 Год назад

    What an amazing video!

  • @tunlinaung010
    @tunlinaung010 Год назад

    Plz make more video for k3s. Thanks bro

  • @jaguarreal9116
    @jaguarreal9116 Год назад

    Good video. Is there a reason why not keep the default ingress controller (Treafik)? Also, would you give thoughts on how to approach a two-node cluster (e.g. like to Pis) where one is a redundant of the other in case the first fails. No chance to have 3rd or more.

    • @CloudVersityOfficial
      @CloudVersityOfficial Год назад

      Hej dude, I'm just more familiar with Nginx. If you like Treafik go with it ;) K8s/K3s stands for high availability, so if one node fails it'll always try its best to keep all pods running on another node. Of course you need to make sure, that your "brain" the master node is deployed in a HA setup as well, otherwise your worker nodes would be kind of "brainless". There shouldn't be a redundant server, all of them can work and balance their load in terms of deployed pods and resource management.

  • @abhishekshetty89
    @abhishekshetty89 Год назад

    Well explained 🙌

  • @nayakvinutha
    @nayakvinutha Год назад

    Thanks a lot ! Found it really very helpful !

  • @atwinemugume
    @atwinemugume Год назад

    Great video, thanks. It helped me in my project. i have already installed k3s on my two servers and up and running in less than the time I used to use installing k8s with kubeadm

  • @MaximYalagin
    @MaximYalagin 2 года назад

    Cool point I was trying to get all of this without installing the nginx ingress and spend half of week wondering why it’s not working and your video help me point on that prerequisite:) thanks

  • @nikitamingaleev6170
    @nikitamingaleev6170 2 года назад

    Hey, thanks for the video, but with that nginx setup if you have multiple routes in the app and you go to some route and refresh the page you will get 404. To fix this an nginx.conf is needed.

  • @180doman
    @180doman 2 года назад

    No offense but i think someone interested in k8s clusters, who was able to setup k3s doesn't need explanation of such basic thing like https :D

  • @3rdman99
    @3rdman99 2 года назад

    Is the process in the video only meant to work with linode VPS's, or should it work with google cloud VPS's as well? I I'm not sure why, but the process is not working for me with VPS's on google cloud. After installing ingress-nginx, "kubectl -n ingress-nginx get svc" is showing internal IP-addresses on the column "External IP" instead of the external ones. The VPS's have the port 80, 443, 6443 already open though. Did anybody have a similar problem? I checked the yaml file for installing ingress-nginx, and I couldn't find anything obvious.

    • @CloudVersityOfficial
      @CloudVersityOfficial 2 года назад

      Good question :) I ran into similar problems with AWS, Azure and GCP, that's why I like to use simple cloud providers like Linode for these kind of demos because they are easier to handle. The big cloud providers will give you a fake public ip address which seems to not be know by your actual VM. Just check it with "netstat -i" or similar. They just get NATed down the road until it hits your VM in their "private" network. This is just an assumption, I'm not 100% sure if this is a correct explanation so take it with caution. However there is a fix. You need to manually edit the ingress nginx svc "ingress-nginx-controller" and manually add spec.externalIPs: [] your public IP. A "kubectl -n ingress-nginx get svc" should now update and also list your public IP besides the private one. You can now proceed with the demo. I also updated the the ingress by adding the "spec.ingressClassName" which is necessary since v1.22. Cheerio.

    • @3rdman99
      @3rdman99 2 года назад

      @@CloudVersityOfficial Thanks. I'll give it try later.

    • @3rdman99
      @3rdman99 2 года назад

      @@CloudVersityOfficial Sorry a bit late, but.. I just tried what you suggested, and worked great! Thanks. This "problem" made me learn even more about kubernetes :) FYI, it looks like I needed to edit the services on both "ingress-nginx-controller" and "ingress-nginx-controller-admission", and add the external IPs on both. Cheers.

    • @CloudVersityOfficial
      @CloudVersityOfficial 2 года назад

      @@3rdman99 Awesome!

    • @jananathbanuka4994
      @jananathbanuka4994 Год назад

      Anyone found a better way of doing this without deleting any admission web hooks and editing service objects?

  • @Ejegz
    @Ejegz 2 года назад

    I now consider you one of my goats, thanks man. 👍😮‍💨

  • @mattsmith541
    @mattsmith541 2 года назад

    Great video thanks. I've watched a few on this subject and yours is the clearest by far. Keep up the good work.

  • @sivanandan4134
    @sivanandan4134 2 года назад

    After running docker im getting error ERR_EMPTY_RESPONSE

  • @MuhammadBilal-cq6tp
    @MuhammadBilal-cq6tp 2 года назад

    great content

  • @SanjeevKumar-nq8td
    @SanjeevKumar-nq8td 2 года назад

    👏 I see following error : Existing issued Secret is not up to date for spec: [spec.dnsNames] where could the issue be any hint. Thank you

  • @mza9738
    @mza9738 2 года назад

    Do you maybe know how do you use external IP on gcp with k3s? I tried this example on GCP and it does not work.

  • @schekaf8294
    @schekaf8294 2 года назад

    Love this! <3

  • @roniceyemeli
    @roniceyemeli 2 года назад

    As a junior really this is helping me, after an interview, the recruiter advised me to learn docker, I got any idea about it so and realized that it's very important, I started to read and did online courses, but this topic was still terrifying me, practically this is the first video I watched till the end on youtube about docker, definitely I'm your new subscriber. so please don't forget to cover more fundamentals for us beginners, btw if you have some good documentation it will help a lot.

  • @Izbogud
    @Izbogud 2 года назад

    One more fan here! I think it is really awesome that you are not editing out the problems you stumble upon while doing the demo (like the rate limit here). This is so much better than following the happy path only - not only it is more realistic but it also shows that people shouldn't be discouraged when they stumble upon some unexpected problems as this is a perfectly normal thing and it happens to others as well. And for the intro - it was great in my opinion, as it is much more helpful to explain the principle correctly instead of worrying about fancying it up. Keep those videos coming, as others have mentioned - your explanations are simple and combined with your calmness - it is pleasure to listen as you present!

  • @stefaniecarolin
    @stefaniecarolin 2 года назад

    Hey CloudVersity, thanks a lot & keep up the good work :) This tutorial really helped me through the process. No questions open. In addition, for me it would be helpful if you pasted the commands in the description, so I don't have to rewatch the video to find them again.

    • @CloudVersityOfficial
      @CloudVersityOfficial 2 года назад

      Thank you :) I'll keep that in mind and try to add the commands next time.

  • @amjds1341
    @amjds1341 2 года назад

    Lovely video. How do we setup auto cert renewal via certs manager?

    • @CloudVersityOfficial
      @CloudVersityOfficial 2 года назад

      Thank you =) Cert-Manger takes care of that. The default is a certificate which is valid for 90 days and will get a renew15 days before expiry. You can tweak those settings to your liking. Let me point you to the specific part of the documentation > cert-manager.io/docs/usage/certificate/#creating-certificate-resources

  • @deepanshubatra3235
    @deepanshubatra3235 2 года назад

    Very well Explained , Though one can find many tutorials about this topic over internet but the way you explained with calmness and simplicity is really nice... gut gemacht:)

  • @rsrini7
    @rsrini7 2 года назад

    Super Cool. Thanks.

  • @fernsmark18
    @fernsmark18 2 года назад

    Thank you. This helped me setup the cluster on gcp gce vm. Cheers.