Adding a basic kubernetes example.
This commit is contained in:
Brandon Wulf
parent
c231aa97a1
commit
df9bc3886a
20
README.md
20
README.md
|
|
@ -108,6 +108,26 @@ Please also consider [the advice about running NetBox in production](#production
|
||||||
[k8s-secrets]: https://kubernetes.io/docs/concepts/configuration/secret/
|
[k8s-secrets]: https://kubernetes.io/docs/concepts/configuration/secret/
|
||||||
[k8s-config]: https://kubernetes.io/docs/tasks/configure-pod-container/configure-pod-configmap/
|
[k8s-config]: https://kubernetes.io/docs/tasks/configure-pod-container/configure-pod-configmap/
|
||||||
|
|
||||||
|
#### Example Kubernetes Deployment
|
||||||
|
|
||||||
|
Check out the project:
|
||||||
|
```
|
||||||
|
git clone https://github.com/ninech/netbox-docker.git
|
||||||
|
cd netbox-docker/kubernetes
|
||||||
|
```
|
||||||
|
|
||||||
|
Fill in the configuration parameters:
|
||||||
|
* In `netbox.yaml`,
|
||||||
|
* Set environment variables in the `netbox-netbox-env` ConfigMap and the `netbox-netbox-secrets` Secret. Secrets must be base64 encoded first (see the inline comments).
|
||||||
|
* Change the `DB_HOST` environment parameter to be the DNS name (from inside the cluster) for the postgres db. This probably just involves adding the namespace.
|
||||||
|
* Set the `storageClassName` if required in your cluster.
|
||||||
|
* In `postgres,yaml`, set the `POSTGRES_PASSWORD` to match `netbox.yaml`.
|
||||||
|
|
||||||
|
Deploy to kubernetes:
|
||||||
|
```
|
||||||
|
kubectl apply -f .
|
||||||
|
```
|
||||||
|
|
||||||
### NAPALM Configuration
|
### NAPALM Configuration
|
||||||
|
|
||||||
Since v2.1.0 NAPALM has been tightly integrated into NetBox.
|
Since v2.1.0 NAPALM has been tightly integrated into NetBox.
|
||||||
|
|
|
||||||
|
|
@ -0,0 +1,115 @@
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: netbox-netbox-env
|
||||||
|
data:
|
||||||
|
ALLOWED_HOSTS: '*'
|
||||||
|
DB_HOST: netbox-postgres.default.svc.cluster.local # default should be changed to deploymenent namespace
|
||||||
|
DB_NAME: netbox
|
||||||
|
DB_USER: netbox
|
||||||
|
EMAIL_FROM: netbox@bar.com
|
||||||
|
EMAIL_PORT: "25"
|
||||||
|
EMAIL_SERVER: localhost
|
||||||
|
EMAIL_TIMEOUT: "10"
|
||||||
|
EMAIL_USERNAME: foo
|
||||||
|
NETBOX_USERNAME: guest
|
||||||
|
SUPERUSER_EMAIL: admin@example.com
|
||||||
|
SUPERUSER_NAME: admin
|
||||||
|
NAPALM_USERNAME: rancid
|
||||||
|
NAPALM_TIMEOUT: '30'
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: netbox-netbox-secrets
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
SUPERUSER_PASSWORD: YWRtaW4= # echo -n 'admin' | base64
|
||||||
|
SUPERUSER_API_TOKEN: MDEyZWU4NzY4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWYwMTIzNDU2Nw== # echo -n '012ee87689abcdef0123456789abcdef01234567' | base64
|
||||||
|
DB_PASSWORD: SjVickhyb2RqZHU0aWYwSw== # echo -n 'J5brHrodjdu4if0K' | base64
|
||||||
|
SECRET_KEY: cjhPd0QkJWohRkdjaQ== # echo -n 'r8OwD$%j!FGci' | base64
|
||||||
|
EMAIL_PASSWORD: YWRtaW4= # echo -n 'admin' | base64
|
||||||
|
NETBOX_PASSWORD: YWRtaW4= # echo -n 'admin' | base64
|
||||||
|
NAPALM_PASSWORD: YWRtaW4= # echo -n 'admin' | base64
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: PersistentVolumeClaim
|
||||||
|
metadata:
|
||||||
|
name: netbox-static-files
|
||||||
|
labels:
|
||||||
|
pvcname: netbox-static-files
|
||||||
|
spec:
|
||||||
|
accessModes:
|
||||||
|
- ReadWriteMany
|
||||||
|
# storageClassName: gluster-storage # May neet to be removed/changed
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
storage: 100Mi
|
||||||
|
---
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: netbox
|
||||||
|
labels:
|
||||||
|
backend: netbox
|
||||||
|
app: netbox
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
revisionHistoryLimit: 2
|
||||||
|
strategy:
|
||||||
|
type: RollingUpdate
|
||||||
|
rollingUpdate:
|
||||||
|
maxSurge: 50%
|
||||||
|
maxUnavailable: 0
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
backend: netbox
|
||||||
|
app: netbox
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
backend: netbox
|
||||||
|
app: netbox
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: netbox
|
||||||
|
image: ninech/netbox:latest-ldap
|
||||||
|
ports:
|
||||||
|
- containerPort: 8001
|
||||||
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: netbox-netbox-secrets
|
||||||
|
- configMapRef:
|
||||||
|
name: netbox-netbox-env
|
||||||
|
volumeMounts:
|
||||||
|
- name: netbox-nginx-config
|
||||||
|
mountPath: /etc/netbox-nginx/
|
||||||
|
- name: netbox-static-files
|
||||||
|
mountPath: /opt/netbox/netbox/static
|
||||||
|
restartPolicy: Always
|
||||||
|
dnsPolicy: ClusterFirst
|
||||||
|
volumes:
|
||||||
|
- name: netbox-nginx-config
|
||||||
|
configMap:
|
||||||
|
name: netbox-nginx-conf
|
||||||
|
- name: netbox-static-files
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: netbox-static-files
|
||||||
|
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: netbox
|
||||||
|
labels:
|
||||||
|
backend: netbox
|
||||||
|
app: netbox
|
||||||
|
spec:
|
||||||
|
ports:
|
||||||
|
- name: nbox
|
||||||
|
port: 8001
|
||||||
|
targetPort: 8001
|
||||||
|
selector:
|
||||||
|
app: netbox
|
||||||
|
backend: netbox
|
||||||
|
|
@ -0,0 +1,99 @@
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: netbox-nginx-conf
|
||||||
|
data:
|
||||||
|
nginx.conf: |
|
||||||
|
worker_processes 1;
|
||||||
|
events {
|
||||||
|
worker_connections 1024;
|
||||||
|
}
|
||||||
|
http {
|
||||||
|
include /etc/nginx/mime.types;
|
||||||
|
default_type application/octet-stream;
|
||||||
|
sendfile on;
|
||||||
|
tcp_nopush on;
|
||||||
|
keepalive_timeout 65;
|
||||||
|
gzip on;
|
||||||
|
server_tokens off;
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
server_name localhost;
|
||||||
|
access_log off;
|
||||||
|
location /static/ {
|
||||||
|
alias /opt/netbox/netbox/static/;
|
||||||
|
}
|
||||||
|
location / {
|
||||||
|
# default should be changed to deploymenent namespace
|
||||||
|
proxy_pass http://netbox.dev.svc.cluster.local:8001;
|
||||||
|
proxy_set_header X-Forwarded-Host $http_host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
add_header P3P 'CP="ALL DSP COR PSAa PSDa OUR NOR ONL UNI COM NAV"';
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
---
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: netbox-nginx
|
||||||
|
labels:
|
||||||
|
frontend: nginx
|
||||||
|
app: netbox
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
revisionHistoryLimit: 2
|
||||||
|
strategy:
|
||||||
|
type: RollingUpdate
|
||||||
|
rollingUpdate:
|
||||||
|
maxSurge: 50%
|
||||||
|
maxUnavailable: 0
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
frontend: nginx
|
||||||
|
app: netbox
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
frontend: nginx
|
||||||
|
app: netbox
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: nginx
|
||||||
|
image: nginx:1.12-alpine
|
||||||
|
ports:
|
||||||
|
- containerPort: 80
|
||||||
|
command: ["nginx"]
|
||||||
|
args: ["-c", "/etc/netbox-nginx/nginx.conf","-g", "daemon off;"]
|
||||||
|
volumeMounts:
|
||||||
|
- name: netbox-static-files
|
||||||
|
mountPath: /opt/netbox/netbox/static
|
||||||
|
- name: netbox-nginx-config
|
||||||
|
mountPath: /etc/netbox-nginx
|
||||||
|
restartPolicy: Always
|
||||||
|
volumes:
|
||||||
|
- name: netbox-static-files
|
||||||
|
persistentVolumeClaim:
|
||||||
|
claimName: netbox-static-files
|
||||||
|
- name: netbox-nginx-config
|
||||||
|
configMap:
|
||||||
|
name: netbox-nginx-conf
|
||||||
|
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: netbox-nginx
|
||||||
|
labels:
|
||||||
|
frontend: nginx
|
||||||
|
app: netbox
|
||||||
|
spec:
|
||||||
|
type: ClusterIP
|
||||||
|
ports:
|
||||||
|
- name: "80"
|
||||||
|
port: 80
|
||||||
|
targetPort: 80
|
||||||
|
selector:
|
||||||
|
frontend: nginx
|
||||||
|
|
@ -0,0 +1,67 @@
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: netbox-postgres-env
|
||||||
|
data:
|
||||||
|
POSTGRES_DB: netbox
|
||||||
|
POSTGRES_USER: netbox
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: netbox-postgres-secrets
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
POSTGRES_PASSWORD: SjVickhyb2RqZHU0aWYwSw== # echo -n 'J5brHrodjdu4if0K' | base64
|
||||||
|
---
|
||||||
|
apiVersion: apps/v1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: netbox-postgres
|
||||||
|
labels:
|
||||||
|
backend: postgres
|
||||||
|
app: netbox
|
||||||
|
spec:
|
||||||
|
replicas: 1
|
||||||
|
revisionHistoryLimit: 2
|
||||||
|
strategy:
|
||||||
|
type: Recreate
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
backend: postgres
|
||||||
|
app: netbox
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
backend: postgres
|
||||||
|
app: netbox
|
||||||
|
spec:
|
||||||
|
restartPolicy: Always
|
||||||
|
containers:
|
||||||
|
- image: postgres:9.6-alpine
|
||||||
|
name: postgres
|
||||||
|
ports:
|
||||||
|
- containerPort: 5432
|
||||||
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: netbox-postgres-secrets
|
||||||
|
- configMapRef:
|
||||||
|
name: netbox-postgres-env
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: netbox-postgres
|
||||||
|
labels:
|
||||||
|
backend: postgres
|
||||||
|
app: netbox
|
||||||
|
spec:
|
||||||
|
clusterIP: None
|
||||||
|
ports:
|
||||||
|
- name: headless
|
||||||
|
port: 5432
|
||||||
|
targetPort: 5432
|
||||||
|
selector:
|
||||||
|
backend: postgres
|
||||||
|
app: netbox
|
||||||
Loading…
Reference in New Issue