Merge pull request #71 from phillc/examples

Examples

Author: phillc

README.md

@@ -70,41 +70,62 @@ For annotations with bool value types, `"1"`, `"t"`,  `"T"`, `"True"`, `"true"`
 #### Example usage
 
 ```yaml
-apiVersion: v1
 kind: Service
+apiVersion: v1
 metadata:
-  name: wordpress-lsmnl-wordpress
-  namespace: wordpress-lsmnl
+  name: https-lb
   annotations:
     service.beta.kubernetes.io/linode-loadbalancer-throttle: "4"
     service.beta.kubernetes.io/linode-loadbalancer-default-protocol: "http"
     service.beta.kubernetes.io/linode-loadbalancer-port-443: |
       {
-        "tls-secret-name": "prod-app-tls",
+        "tls-secret-name": "example-secret",
         "protocol": "https"
       }
-  labels:
-    app: wordpress-lsmnl-wordpress
 spec:
   type: LoadBalancer
-  clusterIP: 10.97.58.169
-  externalTrafficPolicy: Cluster
+  selector:
+    app: nginx-https-example
   ports:
-  - name: http
-    nodePort: 32660
-    port: 80
-    protocol: TCP
-    targetPort: http
-  - name: https
-    nodePort: 30806
-    port: 443
-    protocol: TCP
-    targetPort: https
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: http
+    - name: https
+      protocol: TCP
+      port: 443
+      targetPort: https
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-https-deployment
+spec:
+  replicas: 2
   selector:
-    app: wordpress-lsmnl-wordpress
-  sessionAffinity: None
+    matchLabels:
+      app: nginx-https-example
+  template:
+    metadata:
+      labels:
+        app: nginx-https-example
+    spec:
+      containers:
+      - name: nginx
+        image: nginx
+        ports:
+          - name: http
+            containerPort: 80
+            protocol: TCP
+          - name: https
+            containerPort: 80
+            protocol: TCP
+
 ```
 
+See more in the [examples directory](examples)
+
 ## Why `stickiness` and `algorithm` annotations don't exit
 
 As kube-proxy will simply double-hop the traffic to a random backend Pod anyway, it doesn't matter which backend Node traffic is forwarded-to for the sake of session stickiness.

examples/.gitignore

@@ -0,0 +1,2 @@
+example.key
+example.crt

examples/http-nginx.yaml

@@ -4,11 +4,11 @@ apiVersion: v1
 metadata:
   name: http-lb
   annotations:
-    service.beta.kubernetes.io/linode-loadbalancer-protocol: "http"
+    service.beta.kubernetes.io/linode-loadbalancer-default-protocol: "http"
 spec:
   type: LoadBalancer
   selector:
-    app: nginx-example
+    app: nginx-http-example
   ports:
     - name: http
       protocol: TCP
@@ -19,22 +19,20 @@ spec:
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nginx-example
-  labels:
-    app: nginx
+  name: nginx-http-deployment
 spec:
   replicas: 2
   selector:
     matchLabels:
-      app: nginx
+      app: nginx-http-example
   template:
     metadata:
       labels:
-        app: nginx-example
+        app: nginx-http-example
     spec:
       containers:
       - name: nginx
         image: nginx
         ports:
         - containerPort: 80
-          protocol: TCP
+          protocol: TCP

examples/https-nginx.yaml

@@ -0,0 +1,52 @@
+---
+kind: Service
+apiVersion: v1
+metadata:
+  name: https-lb
+  annotations:
+    service.beta.kubernetes.io/linode-loadbalancer-throttle: "4"
+    service.beta.kubernetes.io/linode-loadbalancer-default-protocol: "http"
+    service.beta.kubernetes.io/linode-loadbalancer-port-443: |
+      {
+        "tls-secret-name": "example-secret",
+        "protocol": "https"
+      }
+spec:
+  type: LoadBalancer
+  selector:
+    app: nginx-https-example
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: http
+    - name: https
+      protocol: TCP
+      port: 443
+      targetPort: https
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-https-deployment
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: nginx-https-example
+  template:
+    metadata:
+      labels:
+        app: nginx-https-example
+    spec:
+      containers:
+      - name: nginx
+        image: nginx
+        ports:
+          - name: http
+            containerPort: 80
+            protocol: TCP
+          - name: https
+            containerPort: 80
+            protocol: TCP

examples/tcp-nginx.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   type: LoadBalancer
   selector:
-    app: nginx-example
+    app: nginx-tcp-example
   ports:
     - name: http
       protocol: TCP
@@ -17,22 +17,20 @@ spec:
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: nginx-example
-  labels:
-    app: nginx
+  name: nginx-tcp-deployment
 spec:
   replicas: 2
   selector:
     matchLabels:
-      app: nginx
+      app: nginx-tcp-example
   template:
     metadata:
       labels:
-        app: nginx-example
+        app: nginx-tcp-example
     spec:
       containers:
       - name: nginx
         image: nginx
         ports:
         - containerPort: 80
-          protocol: TCP
+          protocol: TCP

examples/test.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+set -euxo pipefail
+
+kubectl apply -f ./http-nginx.yaml
+kubectl apply -f ./tcp-nginx.yaml
+
+openssl req -newkey rsa:4096 \
+            -x509 \
+            -sha256 \
+            -days 3650 \
+            -nodes \
+            -out example.crt \
+            -keyout example.key \
+            -subj "/C=na/ST=na/L=na/O=na/OU=na/CN=na"
+
+kubectl delete secret example-secret || true
+kubectl create secret tls example-secret --cert=example.crt --key=example.key
+kubectl apply -f ./https-nginx.yaml
+