It’s essential to consider the security implications before allowing direct access to cloud services and resources, particularly as the latter expands. Some individuals get around this problem by setting up a virtual machine within the virtual cloud network and linking it to all the cloud services. This cuts down on publicly accessible services while facilitating connections for developers and system administrators. This virtual machine (VM) is like a manual bastion or leap box.
Create a Bastion
Connect to Oracle’s cloud service. To access the main menu, choose the hamburger icon in the upper left corner.
On the menu select “Identity & Security > Bastion”.
Select the compartment and click the “Create bastion” button.
Enter the bastion name and select the VCN and subnet for the bastion. We need to enter a CIDR block allowlist. In this case I’ve used the subnet for my IP address from my internet service provider. Click the “Create bastion” button.
Click on the “Create session” button.
Connect
Our previously copied connection information should look something like this at this point.
The Object Storage service provides reliable, secure, and scalable object storage. Object storage is a storage architecture that stores and manages data as objects. Some typical use cases include data backup, file sharing, and storing unstructured data like logs and sensor-generated data.
Creating a Bucket
Open the navigation menu and click Storage. Under Object Storage, click Buckets.A list of the buckets in the compartment you’re viewing is displayed.
Select a compartment from the Compartment list on the left side of the page.A list of existing buckets is displayed.
Click Create Bucket.
Bucket Name
Default Storage Tier: Select the default tier in which you want to store your data
Standard is the primary, default storage tier Use the Standard tier for storing frequently accessed data that requires fast and immediate access.
Archive is the default storage tier used for archive storage, Use the Archive tier for storing rarely accessed data that requires long retention periods. Access to data in the Archive tier is not immediate. Archived data must be restored before the data is accessible.
Object Events: Select Emit Object Events if you want to enable the bucket to emit events for object state changes. For more information about events.
Encryption: Buckets are encrypted with keys managed by Oracle by default, but you can optionally encrypt the data in this bucket using your own Vault encryption key. To use Vault for your encryption needs, select Encrypt Using Customer-Managed Keys
Uploading Files to a Bucket
To upload files to your bucket using the Console:
From the Object Storage Buckets screen, click the bucket name to view its details.
Click Upload.
In the Object Name Prefix field, optionally specify a file name prefix for the files that you plan to upload.
If the Storage Tier field displays Standard, you can optionally change the storage tier to upload objects to.
In this post I will show you how to launch and connect to a Windows instance.
Create a cloud network and subnet that enables internet access
Launch an instance
Connect to the instance
Add and attach a block volume
I already posted a post how to Launch Linux Instance on OCI here, in the post you will have to follow the first two steps which is creating
Choose a compartment for your resources.
Create a cloud network.
Once you are done, you can start with steps #3 which will allow you to launch a instance – windows one.
Open the navigation menu and click Compute. Under Compute, click Instances.
Click Create instance.
In the Placement section, accept the default Availability domain.
In the Image and shape section, do the following:
In the Image source list, select Platform images.
Select Windows. Then, in the OS version list, select Server 2019 Standard.
Review and accept the terms of use, and then click Select image.
In the Shape section, click Change Shape. Then, do the following:
For Instance type, accept the default, Virtual machine.
For Shape series, select AMD, and then choose either the VM.Standard.E4.Flex shape or the VM.Standard.E3.Flex shape (it doesn’t matter which). Accept the default values for OCPUs and memory.
The shape defines the number of CPUs and amount of memory allocated to the instance.
In the Networking section, configure the network details for the instance. Do not accept the defaults.
For Primary network, leave Select existing virtual cloud network selected.
Select the cloud network that you created. If necessary, click Change Compartment to switch to the compartment containing the cloud network that you created.
In the Boot volume section, leave all the options cleared.
Your instance now is ready.
Connect to the windows instance done by using Remote desktop, enter the public ip, username which is (opc), and the password.
PersistentVolumes provide a way to treat storage as a dynamic resource in Kubernetes. This lab will allow you to demonstrate your knowledge of PersistentVolumes. You will mount some persistent storage to a container using a PersistentVolume and a PersistentVolumeClaim.
Create a custom Storage Class by using “`vi localdisk.yml`.
Kubernetes volumes offer a simple way to mount external storage to containers. This lab will test your knowledge of volumes as you provide storage to some containers according to a provided specification. This will allow you to practice what you know about using Kubernetes volumes.
Create a Pod That Outputs Data to the Host Using a Volume
Create a Pod that will interact with the host file system by using vi maintenance-pod.yml.
Create a Multi-Container Pod That Shares Data Between Containers Using a Volume
Create another YAML file for a shared-data multi-container Pod by using vi shared-data-pod.yml
Start with the basic Pod definition and add multiple containers, where the first container will write the output.txt file and the second container will read the output.txt file:
Set up the volumes, again at the same level as containers with an emptyDir volume that only exists to share data between two containers in a simple way:
volumes:
- name: shared-vol
emptyDir: {}
Mount that volume between the two containers by adding the following lines under command for the busybox1 container:
Note:- you should not perform upgrades on all worker nodes at the same time. Make sure enough nodes are available at any given time to provide uninterrupted service.
Worker nodes
Run the following on the control plane node to drain worker node 1:
In the control plane node, create the token and copy the kubeadm join command (NOTE:The join command can also be found in the output from kubeadm init command):
kubeadm token create --print-join-command
Copy the output
Worker node Setup.
from the above command of Kubeadm join run it using sudo command.
In the control plane node, view cluster status (Note: You may have to wait a few moments to allow all nodes to become ready)
The Australian Oracle User Group, AUSOUG, have a focus on bringing together our Oracle community and servicing their core technical, development and applications needs. A balanced program is aimed at all levels of skill and experience within a forum of User led independent knowledge sharing.
The best Oracle blogs from thousands of blogs on the web ranked by traffic, social media followers, domain authority & freshness.
Happy to share that my blog has been choosen for another year as the Top 100 Blogs around the world, the list contains talened, experience and professional people 🎉🎉🎉