vi ~/.bashrc

• Add the following lines at the end of the file that matches your proxy server:

export http_proxy=username:password@proxy-server-ip:8080
export https_proxy=username:password@proxy-server-ip:8082
export ftp_proxy=username:password@proxy-server-ip:8080
export no_proxy=localhost, 127.0.0.1

source ~/.bashrc

Install Docker (Jumphost)

sudo apt-get remove docker docker-engine docker.io containerd runc

sudo apt-get update
sudo apt-get install \
    ca-certificates \
    curl \
    gnupg \
    lsb-release

sudo mkdir -p /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg

• Use the following command to set up the repository:

echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu \
  $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

Install Docker Engine

sudo apt-get update

• Next command:

sudo apt-get install docker-ce docker-ce-cli containerd.io docker-compose-plugin

• Verify that Docker Engine is installed correctly by running the hello-world image. This might not work, depending on whether connectivity can be established to https://hub.docker.com

sudo docker run hello-world 

Install Azure CLI (Jumphost)

sudo apt install azure-cli

• Authenticate the Azure CLI client with your credentials. This will also store the credentials for all subsequent commands used:

az login

Install helm (Jumphost)

curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3
chmod 700 get_helm.sh
./get_helm.sh

Install kubectl (Jumphost)

sudo apt-get update
sudo apt-get install -y ca-certificates curl

• Download the Google Cloud public signing key:

sudo curl -fsSLo /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg

• Add the Kubernetes apt repository:

echo "deb [signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.list

• Update apt package index with the new repository and install kubectl:

sudo apt-get update
sudo apt-get install -y kubectl

# kubectl version --client --output=yaml
clientVersion:
  buildDate: "2022-08-23T17:44:59Z"
  compiler: gc
  gitCommit: a866cbe2e5bbaa01cfd5e969aa3e033f3282a8a2
  gitTreeState: clean
  gitVersion: v1.25.0
  goVersion: go1.19
  major: "1"
  minor: "25"
  platform: linux/amd64
kustomizeVersion: v4.5.7

az group create --name <resource-group> --location <location>

where:

az group create --name direktivResourceGroup --location westus2
{
  "id": "/subscriptions/40eb3cb3-a114-4cd1-b584-5bbedd2126a2/resourceGroups/direktivResourceGroup",
  "location": "westus2",
  "managedBy": null,
  "name": "direktivResourceGroup",
  "properties": {
    "provisioningState": "Succeeded"
  },
  "tags": null,
  "type": "Microsoft.Resources/resourceGroups"
}

Azure AKS Cluster Build

{
  "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
      "resourceName": {
          "type": "string",
          "metadata": {
              "description": "The name of the Managed Cluster resource."
          }
      },
      "location": {
          "type": "string",
          "metadata": {
              "description": "The location of AKS resource."
          }
      },
      "dnsPrefix": {
          "type": "string",
          "metadata": {
              "description": "Optional DNS prefix to use with hosted Kubernetes API server FQDN."
          }
      },
      "osDiskSizeGB": {
          "type": "int",
          "defaultValue": 0,
          "metadata": {
              "description": "Disk size (in GiB) to provision for each of the agent pool nodes. This value ranges from 0 to 1023. Specifying 0 will apply the default disk size for that agentVMSize."
          },
          "minValue": 0,
          "maxValue": 1023
      },
      "kubernetesVersion": {
          "type": "string",
          "defaultValue": "1.7.7",
          "metadata": {
              "description": "The version of Kubernetes."
          }
      },
      "networkPlugin": {
          "type": "string",
          "allowedValues": [
              "azure",
              "kubenet"
          ],
          "metadata": {
              "description": "Network plugin used for building Kubernetes network."
          }
      },
      "enableRBAC": {
          "type": "bool",
          "defaultValue": true,
          "metadata": {
              "description": "Boolean flag to turn on and off of RBAC."
          }
      },
      "vmssNodePool": {
          "type": "bool",
          "defaultValue": false,
          "metadata": {
              "description": "Boolean flag to turn on and off of virtual machine scale sets"
          }
      },
      "windowsProfile": {
          "type": "bool",
          "defaultValue": false,
          "metadata": {
              "description": "Boolean flag to turn on and off of virtual machine scale sets"
          }
      },
      "nodeResourceGroup": {
          "type": "string",
          "metadata": {
              "description": "The name of the resource group containing agent pool nodes."
          }
      },
      "adminGroupObjectIDs": {
          "type": "array",
          "defaultValue": [],
          "metadata": {
              "description": "An array of AAD group object ids to give administrative access."
          }
      },
      "azureRbac": {
          "type": "bool",
          "defaultValue": false,
          "metadata": {
              "description": "Enable or disable Azure RBAC."
          }
      },
      "disableLocalAccounts": {
          "type": "bool",
          "defaultValue": false,
          "metadata": {
              "description": "Enable or disable local accounts."
          }
      },
      "enablePrivateCluster": {
          "type": "bool",
          "defaultValue": false,
          "metadata": {
              "description": "Enable private network access to the Kubernetes cluster."
          }
      },
      "enableHttpApplicationRouting": {
          "type": "bool",
          "defaultValue": true,
          "metadata": {
              "description": "Boolean flag to turn on and off http application routing."
          }
      },
      "enableAzurePolicy": {
          "type": "bool",
          "defaultValue": false,
          "metadata": {
              "description": "Boolean flag to turn on and off Azure Policy addon."
          }
      },
      "enableSecretStoreCSIDriver": {
          "type": "bool",
          "defaultValue": false,
          "metadata": {
              "description": "Boolean flag to turn on and off secret store CSI driver."
          }
      }
  },
  "resources": [
      {
          "apiVersion": "2022-06-01",
          "dependsOn": [],
          "type": "Microsoft.ContainerService/managedClusters",
          "location": "[parameters('location')]",
          "name": "[parameters('resourceName')]",
          "properties": {
              "kubernetesVersion": "[parameters('kubernetesVersion')]",
              "enableRBAC": "[parameters('enableRBAC')]",
              "dnsPrefix": "[parameters('dnsPrefix')]",
              "nodeResourceGroup": "[parameters('nodeResourceGroup')]",
              "agentPoolProfiles": [
                  {
                      "name": "agentpool",
                      "osDiskSizeGB": "[parameters('osDiskSizeGB')]",
                      "count": 2,
                      "enableAutoScaling": true,
                      "minCount": 1,
                      "maxCount": 2,
                      "vmSize": "Standard_DS2_v2",
                      "osType": "Linux",
                      "storageProfile": "ManagedDisks",
                      "type": "VirtualMachineScaleSets",
                      "mode": "System",
                      "maxPods": 110,
                      "availabilityZones": null,
                      "nodeTaints": [],
                      "enableNodePublicIP": false,
                      "tags": {}
                  }
              ],
              "networkProfile": {
                  "loadBalancerSku": "standard",
                  "networkPlugin": "[parameters('networkPlugin')]"
              },
              "disableLocalAccounts": "[parameters('disableLocalAccounts')]",
              "apiServerAccessProfile": {
                  "enablePrivateCluster": "[parameters('enablePrivateCluster')]"
              },
              "addonProfiles": {
                  "httpApplicationRouting": {
                      "enabled": "[parameters('enableHttpApplicationRouting')]"
                  },
                  "azurepolicy": {
                      "enabled": "[parameters('enableAzurePolicy')]"
                  },
                  "azureKeyvaultSecretsProvider": {
                      "enabled": "[parameters('enableSecretStoreCSIDriver')]",
                      "config": null
                  }
              }
          },
          "tags": {},
          "sku": {
              "name": "Basic",
              "tier": "Free"
          },
          "identity": {
              "type": "SystemAssigned"
          }
      }
  ],
  "outputs": {
      "controlPlaneFQDN": {
          "type": "string",
          "value": "[reference(concat('Microsoft.ContainerService/managedClusters/', parameters('resourceName'))).fqdn]"
      }
  }
}

Install Linkerd

az aks get-credentials --resource-group <resource-group> --name <aks-cluster-name>

            Example output is shown below:

# az aks get-credentials --resource-group direktivResourceGroup --name direktiv-cluster
Merged "direktiv-cluster" as current context in /home/wwonigkeit/.kube/config

Install PostgreSQL Database

# helm repo add direktiv https://chart.direktiv.io
"direktiv" has been added to your repositories

• Run the install operator:

$ helm install -n postgres --create-namespace postgres direktiv/pgo
NAME: postgres
LAST DEPLOYED: Wed Jun 14 23:02:52 2023
NAMESPACE: postgres
STATUS: deployed
REVISION: 1
TEST SUITE: None
NOTES:
Thank you for deploying PGO v5.3.1!

                          ((((((((((((((((((((((
                    (((((((((((((%%%%%%%(((((((((((((((
                (((((((((((%%%             %%%%((((((((((((
            (((((((((((%%(   (((( (            %%%(((((((((((
          (((((((((((((%%     (( ,((               %%%(((((((((((
        (((((((((((((((%%         *%%/            %%%%%%%((((((((((
      (((((((((((((((((((%%(( %%%%%%%%%%#(((((%%%%%%%%%%#((((((((((((
    ((((((((((((((((((%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%((((((((((((((
  *((((((((((((((((((((%%%%%%     /%%%%%%%%%%%%%%%%%%%((((((((((((((((
  (((((((((((((((((((((((%%%/      .%,             %%%((((((((((((((((((,
  ((((((((((((((((((((((%                             %#(((((((((((((((((
(((((((((((((((%%%%%%                                 #%(((((((((((((((((
((((((((((((((%%                                         %%(((((((((((((((,
((((((((((((%%%#%                                     %   %%(((((((((((((((
((((((((((((%.                      %                 %     #((((((((((((((
(((((((((((%%                        %               %%*     %(((((((((((((
#(###(###(#%%                      %%%    %%        %%%      #%%#(###(###(#
###########%%%%%   /%%%%%%%%%%%%%       %%       %%%%%         ,%%#######
###############%%       %%%%%%        %%%    %%%%%%%%             %%#####
  ################%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%   %%               %%##
  ################%%        %%%%%%%%%%%%%%%%%      %%%%               %
    ##############%#        %%   (%%%%%%%           %%%%%%
    #############%     %%%%%                      %%%%%%%%%%%
      ###########%       %%%%%%%%%%%            %%%%%%%%%
        #########%%     %%            %%%%%%%%%%%%%%%#
          ########%%   %%                  %%%%%%%%%
              ######%% %%                      %%%%%%
                ####%%%                        %%%%%  %
                      %%                         %%%%

• After that install the actual Database for Direktiv:

kubectl apply -f https://raw.githubusercontent.com/direktiv/direktiv/main/kubernetes/install/db/basic.yaml

# kubectl get pods -n postgres
NAME                         READY   STATUS    RESTARTS   AGE
direktiv-backup-6qjs-fd9g2   1/1     Running   0          15s
direktiv-instance1-wp2g-0    3/3     Running   0          105s
direktiv-repo-host-0         1/1     Running   0          104s
pgo-8659687c97-bsqcq         1/1     Running   0          13m

$ kubectl apply -f https://github.com/knative/operator/releases/download/knative-v1.9.4/operator.yaml

$ kubectl create ns knative-serving
$ kubectl apply -f https://raw.githubusercontent.com/direktiv/direktiv/main/kubernetes/install/knative/basic.yaml

$ kubectl apply --filename https://github.com/knative/net-contour/releases/download/knative-v1.9.3/contour.yaml

$ kubectl delete namespace contour-external

Install Direktiv

$ echo "database:
  host: \"$(kubectl get secrets -n postgres direktiv-pguser-direktiv -o 'go-template={{index .data "host"}}' | base64 --decode)\"
  port: $(kubectl get secrets -n postgres direktiv-pguser-direktiv -o 'go-template={{index .data "port"}}' | base64 --decode)
  user: \"$(kubectl get secrets -n postgres direktiv-pguser-direktiv -o 'go-template={{index .data "user"}}' | base64 --decode)\"
  password: \"$(kubectl get secrets -n postgres direktiv-pguser-direktiv -o 'go-template={{index .data "password"}}' | base64 --decode)\"
  name: \"$(kubectl get secrets -n postgres direktiv-pguser-direktiv -o 'go-template={{index .data "dbname"}}' | base64 --decode)\"
  sslmode: require" > direktiv.yaml

echo 'apikey: "12345"' >> direktiv.yaml

            The following output is an example of the direktiv.yaml file:

# cat direktiv.yaml 
database:
  host: "direktiv-primary.postgres.svc"
  port: 5432
  user: "direktiv"
  password: ";Pr<}[^SegXWXM/1qO07cktl"
  name: "direktiv"
  sslmode: require
ingress-nginx:
  install: false
apikey: "12345"

$ helm install -f direktiv.yaml -n direktiv direktiv direktiv/direktiv

$ kubectl -n direktiv get services direktiv-ingress-nginx-controller --output jsonpath='{.status.loadBalancer.ingress[0].ip}'

• The login is the configured API key.