Skip to main content

Kubernetes: 19. Configure Application

Configuring application consists of
  1. Configuring commands and arguments on applications
  2. Configuring environment variables
  3. Configuring secrets

Docker Commands
docker run ubuntu 
-> Runs ubuntu container and exit, container CMD is set to [bash], so the container quitely exits

docker run ubuntu echo "Hello World"
-> Runs ubuntu container, prints "Hello World" exits quitely.

To update the default settings, create your own image from the base image
lets call this ubuntu-sleeper image

FROM ubuntu
CMD sleep 5

CMD can also be mentioned in the JSON format like CMD ["sleep", "5"]
Note that with JSON format the first element should always be the command to execute, 
for eg, it CANNOT be ["sleep 5"]

Run build the new ubuntu-sleeper image and run the new image
docker build -t ubuntu-sleeper . 
-> Build the image

docker run ubuntu-sleeper
-> Run the new image


So the new image will launch ubuntu container, sleep for 5 seconds and quitely exits.
What if we want to overwrite the inputs sent to the container, we can do as below


docker run ubuntu-sleeper sleep 10
-> Looks ugly, but does the job, CMD is overwritten with the input values sent to container


Now to send just the input for the sleep command and not overwrite the command itself, 
we can build the image as

FROM ubuntu
ENTRYPOINT ["sleep"]

docker run ubuntu-sleeper 10
-> Entrypoint appends sleep and the input 10 is appended to sleep command

docker run ubuntu-sleeper
-> Error operand is missing!

Update the image with default sleep
FROM ubuntu
ENTRYPOINT ["sleep"]
CMD ["5"]

docker run ubuntu-sleeper
-> This now gets executed with default 5 seconds sleep

docker run --entrypoint sleep2.0 ubuntu-sleeper 10
-> Overwrite the entrypoint command

docker run -e APP_COLOR=pink simple-webapp-color
-> Create a environment variable in the container

Kubernetes Commands
  • The same container can be transferred into a Kubernetes pod
  • Entrypoint in docker will correspond to command in kubernetes
  • Command in docker will correspond to args in kubernetes
  • Note that args is an array

pod-definition.yaml
apiVersion: v1
kind: Pod
metadata:
    name: ubuntu-sleeper-pod

spec:
    containers:
    - image: ubuntu-sleeper
      name: ubuntu-sleeper-pod
      command: ["sleep"]
      args: ["5"]

Environment Variables
They can be set in different ways
  • key: value pair
  • ConfigMap
  • Secrets

pod-definition.yaml
apiVersion: v1
kind: Pod
metadata:
    name: ubuntu-sleeper-pod

spec:
    containers:
    - image: ubuntu-sleeper
      name: ubuntu-sleeper-pod
      env:
      - name: APP_COLOR
        value: pink

Comments

Popular posts from this blog

Kubernetes: 6. Imperative Commands

Imperative commands are useful in quickly creating the resources on Kubernetes kubectl --dry-run -> When created with this option, Kubernetes just validates the definition and does not actually create the resource -o=yaml -> Gets the output in YAML format kubectl run nginx-pod --image=nginx:alpine  -> Create a pod with name nginx-pod and image nginx:alpine kubectl run httpd --image=httpd:alpine  -> By default, run implies run-a-pod kubectl run redis --image=redis:alpine --labels=tier=db  -> Create a pod with name redis and image redis:alpine and labels set to tier=db kubectl run custom-nginx --image=nginx --port=8080  -> Create a pod with name custom-nginx and image nginx to run on port 8080 kubectl expose pod redis --port=6379 --name=redis-service  -> Create a service with name redis-service to expose pod named redis on service-port 6379 kubectl create deployment webapp --image=kodekloud/webapp-color --replicas=3  -> Create a depl...

Kubernetes: 21. Secrets

Passwords In the webapps we store the properties file for storing and retrieving the data required by application But we never store the application passwords, truststore, keystore passwords etc here We might store them in an encrypted format, but storing them as plain text is not the correct way In Kubernetes we store these sensitive information in Secrets https://medium.com/avmconsulting-blog/secrets-management-in-kubernetes-378cbf8171d0 Secrets Secrets are used to store the sensitive information They are similar to ConfigMaps, except that they are stored in hashed or encoded format Note that they are only encoded (using base64) but are not encrypted So secrets are a safe option to store sensitive information but infact they are not the safest option As such secret objects should be not checked into source code tools, its best to store them encrypted at REST in ETCD Again as in ConfigMaps, we have to create the secrets object first and then inject them into the pods There are 2 ways ...