Kubernetes
==========

Install notes
~~~~~~~~~~~~~


Setup notes
~~~~~~~~~~~

Dashboard
---------

**Easy authentication for local testing**

Giving the Dashboard service account admin rights is the easiest method
for testing out the service. This allows any unauthenticated user with access
to the dashboard to use it. [#f1]_ 

Update the Dashboard deployment with the ``--enable-skip-login`` flag:

``kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/recommended/kubernetes-dashboard.yaml``


**Hacky local authentication method**

This method involves manually fetching a service's account secret token and pasting into the webhook.
The major downside is loging sessions get invalidated after 15mins. https://stackoverflow.com/a/49992698


**How to kill a namespace that is stuck terminating**

.. code:: bash
   
   (
   NAMESPACE=your-rogue-namespace
   kubectl proxy &
   kubectl get namespace $NAMESPACE -o json |jq '.spec = {"finalizers":[]}' >temp.json
   curl -k -H "Content-Type: application/json" -X PUT --data-binary @temp.json 127.0.0.1:8001/api/v1/namespaces/$NAMESPACE/finalize
   ) 

Reference: https://stackoverflow.com/questions/52369247/namespace-stuck-as-terminating-how-do-i-remove-it

.. rubric:: References

.. [#f1] https://www.reddit.com/r/kubernetes/comments/bybxwm/trying_to_understand_kubernetes_user/