Rancherのカスタムカタログの作成

リスト25：chart/todoserver/templates/todoserver-ingress.yaml

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: ingress-todoserver-{{ .Release.Name }}
  labels:
    app: todoserver-{{ .Release.Name }}
spec:
  rules:
  - host: {{ .Values.host }}.{{ .Values.domain }}
    http:
      paths:
      - path: /
        backend:
          serviceName: service-todoserver-{{ .Release.Name }}
          servicePort: 8000

リスト26：chart/todoserver/templates/todoserver-service.yaml

apiVersion: v1
kind: Service
metadata:
  name: service-todoserver-{{ .Release.Name }}
  labels:
    app: todoserver-{{ .Release.Name }}
spec:
  type: ClusterIP
  selector:
    app: todoserver-{{ .Release.Name }}
  ports:
  - name: http
    port: 8000
    protocol: TCP
    targetPort: 8000

リスト27：chart/todoserver/templates/todoserver-deployments.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: deployment-todoserver-{{ .Release.Name }}
  labels:
    app: todoserver-{{ .Release.Name }}
spec:
  replicas: {{ .Values.todo.server.replicas }}
  selector:
    matchLabels:
      app: todoserver-{{ .Release.Name }}
  template:
    metadata:
      labels:
        app: todoserver-{{ .Release.Name }}
    spec:
      containers:
      - name: todoserver
        image: {{ .Values.todo.server.image }}:{{ .Values.todo.server.tag }}
      imagePullSecrets:
        - name: secret-todoserver-{{ .Release.Name }}

リスト28：chart/todoserver/templates/todoserver-secret.yaml

apiVersion: v1
kind: Secret
type: kubernetes.io/dockerconfigjson
metadata:
  name: secret-todoserver-{{ .Release.Name }}
data:
  .dockerconfigjson: {{ template "imagePullSecret" . }}

リスト29：chart/todoserver/templates/_helpers.tpl

{{- define "imagePullSecret" }}
{{- printf "{\"auths\":{\"%s\":{\"auth\":\"%s\"}}}" .Values.imageCredentials.registry (printf "%s:%s" .Values.imageCredentials.username .Values.imageCredentials.password | b64enc ) | b64enc }}
{{- end }}

リスト30：サーバアプリケーションをhelmチャートとしてインストールして動作確認する

# dummy passwordの部分には、アクセストークンの値を設定します。
$ helm install . --name todoserver --set imageCredentials.password='xxxxxxxxx'

リスト31：動作確認後にアプリケーションを削除

$ helm delete --purge todoserver

リスト32：サーバアプリケーションのパッケージング

$ helm package todoserver

リスト33：index.yamlの更新

$ helm repo index chart

リスト34：chart/index.yaml

apiVersion: v1
entries:
  repository:
  - apiVersion: v1
    appVersion: "1.0"
    created: 2019-04-03T07:50:52.00229518+09:00
    description: Helm chart repository
    digest: fab582793588171ab089df0a14966f5e3c60c1750365341c30db961d282c9f25
    name: repository
    urls:
    - repository-0.1.0.tgz
    version: 0.1.0
  todoserver:
  - apiVersion: v1
    appVersion: "1.0"
    created: 2019-04-03T07:50:52.002665589+09:00
    description: A Helm chart for Kubernetes
    digest: c0a564d745d604bdbec72389838b5dab2c862105bee454ad1f51ffec7b86ab54
    name: todoserver
    urls:
    - todoserver-0.1.0.tgz
    version: 0.1.0
generated: 2019-04-03T07:50:52.00178667+09:00

リスト35：.gitlab-ci.yml

stages:
  - build
  - test
todoserver_image_build:
  stage: build
  image: docker:latest
  services:
    - docker:dind
  before_script:
    - docker login -u gitlab-ci-token -p $CI_JOB_TOKEN registry.gitlab.com
  script:
    - docker build -t registry.gitlab.com/fufuhu/ti_rancher_k8s_sampleapp/todo/server:${CI_COMMIT_SHA} server
    - docker push registry.gitlab.com/fufuhu/ti_rancher_k8s_sampleapp/todo/server:${CI_COMMIT_SHA}
  tags:
    - docker
# Rancherカスタムカタログのイメージのビルド
repository_image_build:
  stage: build
  image: docker:latest
  services:
    - docker:dind
  before_script:
    - docker login -u gitlab-ci-token -p $CI_JOB_TOKEN registry.gitlab.com
  script:
    - docker build -t registry.gitlab.com/fufuhu/ti_rancher_k8s_sampleapp/todo/repository:${CI_COMMIT_SHA} chart
    - docker push registry.gitlab.com/fufuhu/ti_rancher_k8s_sampleapp/todo/repository:${CI_COMMIT_SHA}
  tags:
    - docker
todoserver_test:
  stage: test
  image: registry.gitlab.com/fufuhu/ti_rancher_k8s_sampleapp/todo/server:${CI_COMMIT_SHA}
  script:
    - |
      cd server/sampleapp
      python manage.py test

リスト36：server/Dockerfileの抜粋

CMD ["python", "manage.py" , "runserver", "0.0.0.0:8000"]

リスト37：Gunicornのインストール

$ pip install gunicorn

リスト38：server/requirements.txt

Django==2.1.5
djangorestframework==3.9.1
Markdown==3.0.1
# Gunicornを利用するために追加
gunicorn==19.9.0

リスト39：server/Dockerfile

FROM python:3.6-alpine

EXPOSE 8000
RUN adduser -D django
USER django
RUN mkdir -p /home/django/.local/bin
ENV PATH=$PATH:/home/django/.local/bin
COPY --chown=django:django requirements.txt ./
RUN pip install --user -r requirements.txt
COPY --chown=django:django ./sampleapp /home/django/sampleapp
WORKDIR /home/django/sampleapp

# Gunicorn利用のためにCMDを変更
CMD ["gunicorn", "-w" , "2", "-b", "0.0.0.0:8000", "sampleapp.wsgi"]

リスト40：server/sampleapp/sampleapp/urls.py

from django.contrib import admin
from django.urls import path
from django.urls import include
# 静的ファイルの読み込みができるように追記
from django.contrib.staticfiles.urls import staticfiles_urlpatterns

urlpatterns = [
    path('admin/', admin.site.urls),
    path('api/', include('rest.urls')),
]

# 静的ファイルの読み込み
urlpatterns += staticfiles_urlpatterns()