Nondual IT demo site

The purpose of this repository is to learn Kubernetes (K8s). This manifest shares the source A source code for my website, nondualit.com, so you can experiment with setting it up on your own Kubernetes cluster. For example, you can use DigitalOcean or TransIP K8s Stack, which are among the most affordable options available online.

What You’ll Need:

• An account with DigitalOcean or TransIP K8s Stack
• A valid domain
• A working email address
• At least $24/month for a 2-node cluster

Optional:

• Add the token as a secret
• Make the repository private

Feel free to replace my website with your own code if you prefer.

Hace fun and use it if you want! k8s rulez

Run this manifest for example on DigitalOcean k8s

apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx-deployment
spec:
  replicas: 2
  selector:
    matchLabels:
      app: nginx
  template:
    metadata:
      labels:
        app: nginx
    spec:
      volumes:
        - name: site-content
          emptyDir: {}
      initContainers:
        - name: git-clone-repository
          image: bitnami/git:latest
          command:
            - /bin/bash
            - '-ec'
            - >
              [[ -f "/opt/bitnami/scripts/git/entrypoint.sh" ]] && source "/opt/bitnami/scripts/git/entrypoint.sh";
              git clone https://github.com/nondualit/nondualit.com.git --branch master /app
          volumeMounts:
            - name: site-content
              mountPath: /app
      containers:
        - name: git-repo-syncer
          image: bitnami/git:latest
          command:
            - /bin/bash
            - '-ec'
            - >
              [[ -f "/opt/bitnami/scripts/git/entrypoint.sh" ]] && source "/opt/bitnami/scripts/git/entrypoint.sh";
              while true; do
                  cd /app && git pull origin master;
                  sleep 60;
              done
          volumeMounts:
            - name: site-content
              mountPath: /app
        - name: nginx
          image: nginx:latest
          ports:
            - containerPort: 80
          volumeMounts:
            - name: site-content
              mountPath: /usr/share/nginx/html
---
apiVersion: v1
kind: Service
metadata:
  name: nginx-service
  annotations:
    service.beta.kubernetes.io/do-loadbalancer-size-slug: "lb-small"
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: ClusterIP
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: nginx-ingress
  annotations:
    kubernetes.io/ingress.class: "nginx"
    cert-manager.io/cluster-issuer: "letsencrypt"
spec:
  tls:
  - hosts:
    - YOURDOMAIN
    secretName: DOMAIN-tls
  rules:
  - host: YOURDOMAIN
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: nginx-service
            port:
              number: 80
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt
spec:
  acme:
    email: MAIL  # Ensure this email is correct
    server: https://acme-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: letsencrypt-private-key
    solvers:
    - http01:
        ingress:
          class: nginx
 

To get your ingress IP (after manifest)

kubectl get ingress nginx-ingress

Image on DockerHub if you feel experimenting more

https://hub.docker.com/r/nondualit/nondualit.com

Use tokens

 kubectl create secret generic github-credentials \
  --from-literal=GITHUB_USERNAME=USER \
  --from-literal=GITHUB_TOKEN=KEY 
 

 apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx-deployment
spec:
  replicas: 2
  selector:
    matchLabels:
      app: nginx
  template:
    metadata:
      labels:
        app: nginx
    spec:
      volumes:
        - name: site-content
          emptyDir: {}
      initContainers:
        - name: git-clone-repository
          image: bitnami/git:latest
          env:
            - name: GITHUB_USERNAME
              valueFrom:
                secretKeyRef:
                  name: github-credentials
                  key: GITHUB_USERNAME
            - name: GITHUB_TOKEN
              valueFrom:
                secretKeyRef:
                  name: github-credentials
                  key: GITHUB_TOKEN
          command:
            - /bin/bash
            - '-ec'
            - >
              [[ -f "/opt/bitnami/scripts/git/entrypoint.sh" ]] && source "/opt/bitnami/scripts/git/entrypoint.sh";
              git clone https://${GITHUB_USERNAME}:${GITHUB_TOKEN}@github.com/REPO.git --branch main /app
          volumeMounts:
            - name: site-content
              mountPath: /app
      containers:
        - name: git-repo-syncer
          image: bitnami/git:latest
          env:
            - name: GITHUB_USERNAME
              valueFrom:
                secretKeyRef:
                  name: github-credentials
                  key: GITHUB_USERNAME
            - name: GITHUB_TOKEN
              valueFrom:
                secretKeyRef:
                  name: github-credentials
                  key: GITHUB_TOKEN
          command:
            - /bin/bash
            - '-ec'
            - >
              [[ -f "/opt/bitnami/scripts/git/entrypoint.sh" ]] && source "/opt/bitnami/scripts/git/entrypoint.sh";
              while true; do
                  cd /app && git pull https://${GITHUB_USERNAME}:${GITHUB_TOKEN}@github.com/REPO.git main;
                  sleep 60;
              done
          volumeMounts:
            - name: site-content
              mountPath: /app
        - name: nginx
          image: nginx:latest
          ports:
            - containerPort: 80
          volumeMounts:
            - name: site-content
              mountPath: /usr/share/nginx/html