25-Practice-Test-CKA-Ingress-Net-2.md

Practice Test CKA Ingress 2

• Take me to Practice Test

Solution

1. Check the Solution

   OK
   

2. Check the Solution

   kubectl create namespace ingress-nginx
   

3. Check the Solution

   kubectl create configmap ingress-nginx-controller --namespace ingress-nginx
   

4. Check the Solution

   kubectl create serviceaccount ingress-nginx --namespace ingress-nginx
   kubectl create serviceaccount ingress-nginx-admission --namespace ingress-nginx
   

5. Check the Solution

   Ok
   
   kubectl get roles,rolebindings --namespace ingress-nginx
   

6. Check the Solution

   Fix the issues

   vi /root/ingress-controller.yaml
   

   There is a Deployment and a Service in this file, There are issues with each.

   1. The namespace of the deployment is incorrect.
   2. indentation error at line 74 (use :set nu in vi to turn on line numbers)
   3. name of the service is incorrect
   4. nodeport on service is incorrect case. Should be nodePort

   apiVersion: apps/v1
   kind: Deployment
   metadata:
     labels:
       app.kubernetes.io/component: controller
       app.kubernetes.io/instance: ingress-nginx
       app.kubernetes.io/managed-by: Helm
       app.kubernetes.io/name: ingress-nginx
       app.kubernetes.io/part-of: ingress-nginx
       app.kubernetes.io/version: 1.1.2
       helm.sh/chart: ingress-nginx-4.0.18
     name: ingress-nginx-controller
     namespace: ingress-nginx
   spec:
     minReadySeconds: 0
     revisionHistoryLimit: 10
     selector:
       matchLabels:
         app.kubernetes.io/component: controller
         app.kubernetes.io/instance: ingress-nginx
         app.kubernetes.io/name: ingress-nginx
     template:
       metadata:
         labels:
           app.kubernetes.io/component: controller
           app.kubernetes.io/instance: ingress-nginx
           app.kubernetes.io/name: ingress-nginx
       spec:
         containers:
         - args:
           - /nginx-ingress-controller
           - --publish-service=$(POD_NAMESPACE)/ingress-nginx-controller
           - --election-id=ingress-controller-leader
           - --watch-ingress-without-class=true
           - --default-backend-service=app-space/default-http-backend
           - --controller-class=k8s.io/ingress-nginx
           - --ingress-class=nginx
           - --configmap=$(POD_NAMESPACE)/ingress-nginx-controller
           - --validating-webhook=:8443
           - --validating-webhook-certificate=/usr/local/certificates/cert
           - --validating-webhook-key=/usr/local/certificates/key
           env:
           - name: POD_NAME
             valueFrom:
               fieldRef:
                 fieldPath: metadata.name
           - name: POD_NAMESPACE
             valueFrom:
               fieldRef:
                 fieldPath: metadata.namespace
           - name: LD_PRELOAD
             value: /usr/local/lib/libmimalloc.so
           image: registry.k8s.io/ingress-nginx/controller:v1.1.2@sha256:28b11ce69e57843de44e3db6413e98d09de0f6688e33d4bd384002a44f78405c
           imagePullPolicy: IfNotPresent
           lifecycle:
             preStop:
               exec:
                 command:
                 - /wait-shutdown
           livenessProbe:
             failureThreshold: 5
             httpGet:
               path: /healthz
               port: 10254
               scheme: HTTP
             initialDelaySeconds: 10
             periodSeconds: 10
             successThreshold: 1
             timeoutSeconds: 1
           name: controller
           ports:
           - name: http
             containerPort: 80
             protocol: TCP
           - containerPort: 443
             name: https
             protocol: TCP
           - containerPort: 8443
             name: webhook
             protocol: TCP
           readinessProbe:
             failureThreshold: 3
             httpGet:
               path: /healthz
               port: 10254
               scheme: HTTP
             initialDelaySeconds: 10
             periodSeconds: 10
             successThreshold: 1
             timeoutSeconds: 1
           resources:
             requests:
               cpu: 100m
               memory: 90Mi
           securityContext:
             allowPrivilegeEscalation: true
             capabilities:
               add:
               - NET_BIND_SERVICE
               drop:
               - ALL
             runAsUser: 101
           volumeMounts:
           - mountPath: /usr/local/certificates/
             name: webhook-cert
             readOnly: true
         dnsPolicy: ClusterFirst
         nodeSelector:
           kubernetes.io/os: linux
         serviceAccountName: ingress-nginx
         terminationGracePeriodSeconds: 300
         volumes:
         - name: webhook-cert
           secret:
             secretName: ingress-nginx-admission
   
   ---
   
   apiVersion: v1
   kind: Service
   metadata:
     creationTimestamp: null
     labels:
       app.kubernetes.io/component: controller
       app.kubernetes.io/instance: ingress-nginx
       app.kubernetes.io/managed-by: Helm
       app.kubernetes.io/name: ingress-nginx
       app.kubernetes.io/part-of: ingress-nginx
       app.kubernetes.io/version: 1.1.2
       helm.sh/chart: ingress-nginx-4.0.18
     name: ingress-nginx-controller
     namespace: ingress-nginx
   spec:
     ports:
     - port: 80
       protocol: TCP
       targetPort: 80
       nodePort: 30080
     selector:
       app.kubernetes.io/component: controller
       app.kubernetes.io/instance: ingress-nginx
       app.kubernetes.io/name: ingress-nginx
     type: NodePort      

7. Check the Solution

   apiVersion: networking.k8s.io/v1
   kind: Ingress
   metadata:
     name: ingress-wear-watch
     namespace: app-space
     annotations:
       nginx.ingress.kubernetes.io/rewrite-target: /
       nginx.ingress.kubernetes.io/ssl-redirect: "false"
   spec:
     rules:
     - http:
         paths:
         - path: /wear
           pathType: Prefix
           backend:
             service:
             name: wear-service
             port: 
               number: 8080
         - path: /watch
           pathType: Prefix
           backend:
             service:
             name: video-service
             port:
               number: 8080

8. Check the Solution

   Press the Ingress button above the terminal pane. In the browser tab that opens, try appending /wear or /watch after labs.kodekloud.com in the browser address bar.