Pre-requisites

Pre-requisites

1. Major League Cyber

2. Capture The Flag

  • Connect to Capture The Flag server using your Major League Cyber’s credentials

  • Authorize this workshop to access your profile

  • You are redirected to Challenges that are questions asked during Exercises in each Lab.

3. Site ID and region

  • A dedicated environment is created for each user

  • Ask F5 instructor for your {{site_ID}} and your {{region}}

  • During Labs, reuse those variables in command lines. For example replace {{site_ID}} by 1

4. Jumphost

Logging into your lab System:

  • Copy-paste private SSH key here to a local file jumphost.key

  • On Mac/Linux, modify the rights of your local file jumphost.key with the command: below:

chmod 600 jumphost.key
  • On Windows use SecureCRT or Putty: download jumphost.ppk for Putty.

  • Open an SSH session to jumphost-aksdistrict{{site_ID}}.{{region}}.cloudapp.azure.com. Log in as user cyber authenticated with private key jumphost.key.

ssh -i jumphost.key cyber@jumphost-aksdistrict{{site_ID}}.{{region}}.cloudapp.azure.com
  • Elevate your privilege:

sudo su -
  • Get your kubeconfig:

cat .kube/config

5. Lens

  • Donwload Lens here

  • Install and run Lens

  • Add your AKS cluster in Catalog by copy-paste the output of cat .kube/config get in the previous step

add K8S cluster
  • If you see any charts for CPU, Memory as shown in the picture below, stop here. If not, you are running an older version of Lens, so continue further steps.

Metrics
  • Edit cluster settings

set K8S cluster settings
  • Edit metrics:
    • PROMETHEUS: Prometheus Operator

    • PROMETHEUS SERVICE ADDRESS: monitoring/prometheus-kube-prometheus-prometheus:9090

set PROMETHEUS setting
  • Connect to cluster

K8S cluster
  • Browse into your cluster

K8S cluster

6. NGINX Controller

7. Knowledge

The architecture of labs shows microservices application deployed to Azure Kubernetes Service (AKS). It uses a basic AKS configuration that can be the starting point for most deployments. Participating to this lab assumes a basic knowledge of Kubernetes as described in this Kubernetes Networking 101 lesson.

Optionaly, you can also read this article that introduce you to infrastructure and DevOps considerations of running a microservices architecture on AKS.

Kubernetes components

K8S cluster

Container, POD, Service

K8S Service

Ingress Service

K8S Ingress