Skip to main content

Check the Children's Barred List - Azure Kubernetes Service / AKS cheatsheet

Requirements

Azure CIP account and access to the s189 subscription

azure-cli installed locally

kubectl installed locally

All examples below show qa usage and you should adapt accordingly.

Cluster and app info

There are several AKS clusters, but only 2 are relevant for this service.

s189t01-tsc-test-aks

  • in s189-teacher-services-cloud-test subscription
  • in s189t01-tsc-ts-rg resource group
  • contains tra-development and tra-test namespaces
  • will hold review and non-prod envs
  • PIM self approval required

s189p01-tsc-production-aks

  • in s189-teacher-services-cloud-production subscription
  • in s189p01-tsc-pd-rg resource group
  • contains tra-production namespace
  • will hold production envs
  • PIM approval required

Authentication

Raising a PIM request

You need to activate the role in the desired cluster below: https://portal.azure.com/?Microsoft_Azure_PIMCommon=true#view/Microsoft_Azure_PIMCommon/ActivationMenuBlade/~/azurerbac

Example: Activate s189-teacher-services-cloud-test. It will be approved automatically after a few seconds

Azure setup

az login

Get access credentials for a managed Kubernetes cluster (passing the environment name):

make review get-cluster-credentials

Show namespaces

kubectl get namespaces

Show deployments

kubectl -n tra-development get deployments

Show pods

kubectl -n tra-development get pods

Get logs from a pod

Without tail:

kubectl -n tra-development logs check-childrens-barred-list-qa-some-number

Tail:

kubectl -n tra-development logs check-childrens-barred-list-qa-some-number -f

Logs from the ingress:

kubectl logs deployment/ingress-nginx-controller -f

Alternatively you can install kubetail and run:

kubetail -n tra-development check-childrens-barred-list-qa-*

You can also get logs from a deployed app using make with logs:

make review logs APP_NAME=pr-1234
make qa logs

Open a shell

kubectl -n tra-development get deployments
kubectl -n tra-development exec -ti deployment/check-childrens-barred-list-pr-1234 -- sh

Alternatively you can enter directly on a pod:

kubectl -n tra-development exec -ti check-childrens-barred-list-qa-some-number -- sh

You can run a rails console on a deployed app using make with console:

make review console APP_NAME=pr-1234
make qa console

You can connect using ssh on a deployed app using make with ssh

make review ssh APP_NAME=pr-1234
make qa ssh

Show CPU / Memory Usage

All pods in a namespace:

kubectl -n tra-development top pod

All pods:

kubectl top pod -A

More info on a pod

kubectl -n tra-development describe pods check-childrens-barred-list-somenumber-of-the-pod

Scaling

The app:

kubectl -n tra-development scale deployment/check-childrens-barred-list-loadtest --replicas 2

Enter on console

kubectl -n tra-development exec -ti check-childrens-barred-lists-loadtest-some-pod-number -- bundle exec rails c

Running tasks

kubectl -n tra-development exec -ti check-childrens-barred-list-loadtest-some-pod-number -- bundle exec rake -T

Access the DB

make install-konduit
bin/konduit.sh app-name -- psql

Example of loading test:

bin/konduit.sh check-childrens-barred-list-loadtest -- psql

More info

For more info see Kubernetes cheatsheet