[Help] Canary Deployment question about ckad-exercises HOT 7 CLOSED

@jolly701 it is related to new CKAD curriculum updates (blue/green and canary deployments)

1. Total amount of pods: 8
2. canary-krill-deployment: 20% which is 0.2 x 8 ~= 2
3. It gives us: current-krill-deployment: 6
4. Scale each deployment to the calculated value

Canary deployment gives us a possibility to deploy two versions of the same deployment, so the traffic is being split accordingly. The client is not affected as the service is working, but from the backend perspective - we are able to see how the new version behaves.

from ckad-exercises.

Thanks @bavlayan would you please explain a little bit more? I thought it is resource quote related oR something

It is not related to resource quote or something. This question is just related to how you can scale deployment. You can only play on amount of pods of deployment. @janekmichalik explains it well

from ckad-exercises.

@jolly701

1. As you are not able to verbs some kind of resources, it means that a Role/ClusterRole does not allow you to.
   The process with connecting the Role/ClusterRole with the dedicated Pod is as follows: Role/ClusterRole -> RoleBinding/ClusterRoleBinding -> ServiceAccount -> Pod. As you are asked to change the deployment only it means that your changes will be related to the ServiceAccount within the deployment. I have deleted the serviceAccountName field from the deployment, so the deployment used the default one, which has proper permissions.

2. It is related to Security Context. All you have to do is to add (at the container level):

   securityContext:
     allowPrivilegeEscalation: false
     runAsUser: 1000
   

3. It is related to Network Policy. There was also an default-deny network policy as well. I do not know, if I have done it correctly, but the only thing I had done, was to add the label (I do not remember the label, but it was provided in access-api and access-storage NetworkPolicies) to the newpod. And after that, the storage and api pods, will be able to communicate only with the newpod (bi-directional communication, can only communicates with api and storage) as default-deny blocks everything else. But not sure about this one.

from ckad-exercises.

Hi,
I took CKAD exam twice. I faced similar same question in all of them. Actually, solution is quite simple.
There are two things that you should do.

1. Scale current-krill-deployment to 6 pods with kubectl -n test scale deployment current-krill-deployment --replicas=6
2. Create deployment canary-krill-deployment or scale it. In the exam, I created the deployment with given yaml file.
   -> If deployment exists, kubectl -n test scale deployment canary-krill-deployment --replicas=2
   -> Set replicas count to 2 in given yaml file. Don't forget set namespace

from ckad-exercises.

Thanks @bavlayan would you please explain a little bit more? I thought it is resource quote related or something

from ckad-exercises.

N/A

from ckad-exercises.

A million thanks for the detailed answer @janekmichalik It really helps

from ckad-exercises.