- 🐳 dockerify the app
- ☸ write a deployment and deploy to minikube
- 🍪 provide inbound access to the app
Considerations / discussion points:
- The app is pretty flakey, so a:
- small image will be important to improve startup time on rescheduling
- aggressive checks will be needed to minimize bounced requests
- multiple replicas will be needed to minimize dropped requests
- Network policy deny-all policy
- internal+external TLS, auth - how sidecar pattern might help with this
- How to run the app as non-privileged user
- Readonly FS
- How to inject secrets via env vars / files, which is better
- memory + cpu allocation right sizing
- autoscaling
use minikube with ingress
minikube start --memory=4096 --addons=ingress
maybe if one can find a way to make ingress work with network policies and a cni:
minikube start --network-plugin=cni --memory=4096 --addons=ingress
kubectl create -f https://raw.githubusercontent.com/cilium/cilium/v1.6/install/kubernetes/quick-install.yaml
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot]")
![the-repository-manager[bot] avatar](https://avatars.githubusercontent.com/in/89571?v=4 "the-repository-manager[bot]")
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent