murphye / cheap-gke-cluster Goto Github PK
View Code? Open in Web Editor NEWHow to Run a GKE Cluster on the Cheap
How to Run a GKE Cluster on the Cheap
Allow adding more ports beside http and https
For example I would like to have access to ssh, mongo or postgres from outside cluster.
I'm wondering if there is an option to limit incoming traffic only from some ips
What I want to achieve is to allow traffic only coming from Cloudflare servers
When I try to run tf apply for the istio branch, if I set the persistent nodes to 0 I get a "minimum required nodes 1" error :(
│ Error: Error waiting for Deleting Network: The network resource 'projects/murphye/global/networks/my-network' is already being used by 'projects/murphye/zones/us-west4-a/networkEndpointGroups/ingressgateway'
Didn't fix the issue
Plan: 5 to add, 0 to change, 0 to destroy.
helm_release.gloo: Creating...
╷
│ Error: failed to download "https://storage.googleapis.com/solo-public-helm/charts/gloo-1.10.2.tgz"
│
│ with helm_release.gloo,
│ on gloo.tf line 11, in resource "helm_release" "gloo":
│ 11: resource "helm_release" "gloo" {
│
╵
Sporadically, even while working, the Gloo Edge jumps back to "no healthy upstream". I do not think this is a configuration issue, since the config itself is basically working. The container is just a simple nginx and the virtual service is set up like in the guide. I have tried to restart the gloo-system and the l7 lb, that seems to make it work for a while, until it fails again. Could you please point me to what configs in the l7 LB to tweak?
THX!
How to do with gcloud
gcloud beta compute url-maps create regional-l7-xlb-map-https \
--default-service=l7-xlb-backend-service-http \
--region=us-west4
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout tls.key -out tls.crt -subj "/CN=*"
gcloud beta compute ssl-certificates create l7-xlb-cert \
--certificate=tls.crt \
--private-key=tls.key \
--region=us-west4
gcloud beta compute target-https-proxies create l7-xlb-proxy-https \
--url-map=regional-l7-xlb-map-https \
--region=us-west4 \
--ssl-certificates=l7-xlb-cert
gcloud beta compute forwarding-rules create l7-xlb-forwarding-rule-https \
--load-balancing-scheme=EXTERNAL_MANAGED \
--network-tier=STANDARD \
--network=my-network \
--ports=443 \
--region=us-west4 \
--target-https-proxy=l7-xlb-proxy-https \
--target-https-proxy-region=us-west4 \
--address=my-static-ip
"Use a Regional (rather than Global) HTTP Load Balancer which is currently free as a Beta preview"
That isn't free and adds around $20 monthly.
I used us-west4
CloudFlare can provide a forever free https certificate in front of your app.
The requirements are:
When trying to deploy an application I am getting image pullback off. The docker image is stored in Google Artifact Registry. Normally the compute engine default service account has read access to storage in the same project.
Is there something different with this configuration ?
There is a new istio
branch that needs to have the documentation linked from the main README
null_resource.gloo: Creation complete after 46s [id=4905779099210855260]
google_compute_region_backend_service.default: Creating...
google_compute_region_backend_service.default: Still creating... [10s elapsed]
google_compute_region_backend_service.default: Still creating... [20s elapsed]
google_compute_region_backend_service.default: Still creating... [30s elapsed]
google_compute_region_backend_service.default: Still creating... [40s elapsed]
google_compute_region_backend_service.default: Still creating... [50s elapsed]
google_compute_region_backend_service.default: Still creating... [1m0s elapsed]
google_compute_region_backend_service.default: Still creating... [1m10s elapsed]
google_compute_region_backend_service.default: Still creating... [1m20s elapsed]
google_compute_region_backend_service.default: Still creating... [1m30s elapsed]
google_compute_region_backend_service.default: Still creating... [1m40s elapsed]
google_compute_region_backend_service.default: Still creating... [1m50s elapsed]
google_compute_region_backend_service.default: Still creating... [2m0s elapsed]
google_compute_region_backend_service.default: Still creating... [2m10s elapsed]
google_compute_region_backend_service.default: Still creating... [2m20s elapsed]
google_compute_region_backend_service.default: Still creating... [2m30s elapsed]
google_compute_region_backend_service.default: Still creating... [2m40s elapsed]
google_compute_region_backend_service.default: Still creating... [2m50s elapsed]
google_compute_region_backend_service.default: Still creating... [3m0s elapsed]
google_compute_region_backend_service.default: Still creating... [3m10s elapsed]
google_compute_region_backend_service.default: Still creating... [3m20s elapsed]
google_compute_region_backend_service.default: Still creating... [3m30s elapsed]
╷
│ Error: Error waiting to create RegionBackendService: Error waiting for Creating RegionBackendService: couldn't find resource (21 retries)
│
│ with google_compute_region_backend_service.default,
│ on load-balancer.tf line 21, in resource "google_compute_region_backend_service" "default":
│ 21: resource "google_compute_region_backend_service" "default" {
│
Error: Error waiting for Deleting Network: The network resource 'projects/murphye/global/networks/my-network' is already being used by 'projects/murphye/zones/us-west4-a/networkEndpointGroups/ingressgateway'
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.