This repo aims at summarizing the configuration needed to deploy a flask application in a docker container and then run it with a kubernetes cluster.
More in details the interesting objective of the repo is to explore the different implementations to expose a flask service with or without a secured connection with TLS.
To have a better understanding there are more branches available each one with a different configuration implemented:
- http: the flask exposes a simple http service, and this is exposed with a LoadBalancer service
- https: the flask exposes a http over tls service, and this is exposed with a LoadBalancer service
- http-ingress: the flask exposes a simple http service, and this is exposed with an ingress
- https-ingress: the flask exposes a http over tls service, and this is exposed with an ingress
- http-ingress-tls: the flask exposes a simple http service, and this is exposed with an ingress that accept ciphred over tls connection
- https-ingress-tls: the flask exposes a https service, and this is exposed with an ingress that accept ciphred over tls connection
For each branch a different README will give more details about the implemented solution.
To be sure not to miss any step, my suggestion is to follow the docs of all the branches following the order above, starting with the http branch to the https-ingress-tls one.
On the other side, to have a quick idea, these are the key steps:
- A simple flask (without tls) is implemented
- It is dockerized with
docker build -f ../docker/Dockerfile -t atoserik/flask-kube-example:http . - A couple of key/cert is created with
openssl req -x509 -newkey rsa:4096 -nodes -out cert.pem -keyout key.pem -days 365 - The key/cert is used in the flask app adding the proper
ssl_context() - The new version of the app is dockerized
docker build -f ../docker/Dockerfile -t atoserik/flask-kube-example:https . - As ingress, I've choosen the nginx one. To deploy the nginx ingress-controller on your cluster follow this guide
- To better manage the ingress and to go deeper in the annotations of the nginx ingress this repo and in particular [this page] (https://github.com/kubernetes/ingress-nginx/blob/master/docs/user-guide/nginx-configuration/annotations.md) is what you are looking for.
Any contribute or feedback is appreciated.
Hope this will be useful for those who are approaching to deploy some simple applications in a non-production environment.