<div id="readability-page-1" class="page"><section>
<h2 id="openfaasonkubernetescheapestoptions">Openfaas on Kubernetes - cheapest options</h2>
<p><strong>update(3 Sep 2018)</strong> : updated installing openfaas on local kube part.</p>
<p><strong>Update(26 Aug 2018)</strong> : I talked with Alex. He told me, "A single node on DigitalOcean with 4GB RAM should be quite cost effective, same with Scaleway using kubeadm. Minikube on your own system is also a good option or with Docker for Mac. (EKS is not cheap) - GKE might be one of the cheaper managed options"</p>
<p>There are many options to use openfaas. Mainly, docker swarm or kubernetes. Kubernetes formed into <a href="https://www.cncf.io/">Cloud Native Computing Foundation</a>. They also have <a href="https://github.com/cncf/curriculum">exam materials</a> for <a href="https://github.com/walidshaari/Kubernetes-Certified-Administrator">certified admin</a> / dev. There are still lots of companies out there using docker swarm as their container orchestration tool. But the trend clearly shows us that kubernetes won the battle. CNCF is the result. It's explicit and configurable. But the problem is installing and maintaining kubernetes on AWS is quite complicated. it takes some time to get used to all setup. With digitalocean, it's fairly easy compare to aws. And after september of 2018, they would release kubernetes as a service. At this point, the pricing page is not there. They might charge it based on droplets.</p>
<p>Then, what would be the optiono to get used to openfaas on kubernetes without spending any money? There are 2 options. local setup and ibm cloud. There are pros and cons. With local setup, it will eat up your resource. And you would not be able to show what you've been playing to other people. As long as you have enough resource, then this is ok. With IBM cloud, you need to switch to pay as you go plan. basically, you need to give them your credit card number. but the "lite" plan doesn't charge you for it. 4GB ram. and it expires in a month. And you can't use ingress. just NodePort. Public IP exists.</p>
<p>The ugly part of serverless thingy is the hidden cost as described <a href="https://medium.com/coryodaniel/from-erverless-to-elixir-48752db4d7bc">here</a>. Openfaas can limit the maximum cost while having the scalability. You have the control. No vendor lock in.</p>
<h2 id="option1openfaasonlocalkuberneres">Option1. Openfaas on local kuberneres</h2>
<p>I assume you're using OS X.</p>
<pre><code>brew install kubernetes-cli
brew install kubectx
</code></pre>
<p>Install kubernetes and dashboard by following this <a href="https://github.com/kubernetes/dashboard/wiki/Accessing-Dashboard---1.7.X-and-above#api-server">github wiki page</a></p>
<pre><code>kubectl config set-context docker-for-desktop
kubectl config use-context docker-for-desktop
kubectx
kubectl get all
kubectl cluster-info
kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/master/src/deploy/recommended/kubernetes-dashboard.yaml

kubectl describe services kubernetes-dashboard --namespace=kube-system
kubectl -n kube-system edit service kubernetes-dashboard
# edit .spec.type to NodePort
sudo kubectl proxy
</code></pre>
<p>visit <a href="http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/">the local dashboard</a></p>
<p>get your token to login to the dashboard</p>
<pre><code>kubectl create serviceaccount jaigouk
kubectl get serviceaccounts jaigouk -o yaml
apiVersion: v1
kind: ServiceAccount
metadata:
  # ...
secrets:
- name: jaigouk-token-1yvwg
kubectl get secret jaigouk-token-6dztl -o yaml

echo xxxxx== | base64 --decode
</code></pre>
<p>install openfaas</p>
<p>The faas-netes controller is the most tested, stable and supported version of the OpenFaaS integration with Kubernetes. In contrast the OpenFaaS Operator is based upon the codebase and features from faas-netes, but offers a tighter integration with Kubernetes through CustomResourceDefinitions. This means you can type in kubectl get functions for instance.</p>
<pre><code>kubectl apply -f https://raw.githubusercontent.com/openfaas/faas-netes/master/namespaces.yml

helm repo add openfaas https://openfaas.github.io/faas-netes/

helm repo update \
 &amp;&amp; helm upgrade openfaas --install openfaas/openfaas \
    --namespace openfaas  \
    --set functionNamespace=openfaas-fn \
    --set operator.create=true

# generate a random password
export GW_PASS=$(head -c 16 /dev/random |shasum | cut -d ' ' -f1)

kubectl -n openfaas create secret generic basic-auth \
--from-literal=basic-auth-user=admin \
--from-literal=basic-auth-password=$GW_PASS

helm upgrade --reuse-values openfaas openfaas/openfaas \
    --set basic_auth=true

# verify it's running
kubectl --namespace=openfaas get deployments -l "release=openfaas, app=openfaas"

kubectl proxy

echo $GW_PASS | faas-cli login --gateway="127.0.0.1:31112" -u admin --password-stdin
</code></pre>
<p>visit <a href="http://localhost:31112/ui/">http://localhost:31112/ui/</a><br>
username is admin and password is $GW_PASS value</p>
<p>if you have trouble, visit <a href="https://github.com/openfaas/faas-netes/blob/master/chart/openfaas/README.md">https://github.com/openfaas/faas-netes/blob/master/chart/openfaas/README.md</a> for details</p>
<h2 id="option2usingkubernetesonibmcloud">Option2. Using kubernetes on IBM cloud</h2>
<p>the IBM cloud gives us free 1 node kubernetes instance that expires in a month. As long as you automated everything then, it wouldn't be a big problem to play with it. For example, you can try <a href="https://www.youtube.com/watch?v=WYyonInGNsw">"GitLab + OpenFaaS for Serverless CI/CD on Kubernetes"</a>. Check their free versus stand plan features from <a href="https://console.bluemix.net/docs/containers/cs_why.html#cluster_types">this doc</a>.</p>
<pre><code># Download and install a few CLI tools and the IBM Kubernetes Service plug-in.

curl -sL https://ibm.biz/idt-installer | bash
ibmcloud login -a https://api.eu-de.bluemix.net
ibmcloud cs region-set eu-central
ibmcloud cs cluster-config gunship

export KUBECONFIG=/Users/$USER/.bluemix/plugins/container-service/clusters/gunship/kube-config-mil01-gunship.yml

kubectl get nodes
</code></pre>
<p>let's deploy openfaas.</p>
<pre><code>git clone https://github.com/openfaas/faas-netes
# create name space

kubectl apply -f https://raw.githubusercontent.com/openfaas/faas-netes/master/namespaces.yml

cd faas-netes &amp;&amp; \kubectl apply -f ./yaml
# memory usage is 327MB
</code></pre>
<p>check your cluster's public ip. visit kubernetes dashboard and find the openfaas namespace. in <code>Discovery and load balancing &gt; Services &gt; gateway</code>, you will be able to see port that is exposed.</p>
<p>running 2x4(2 CPUs, 4 GB RAM, 100 GB HDD) cluster costs $77.76 for 744 hours(31 days). it's worth waiting for digital ocean's kubernetes solution at this point.</p>
<pre><code>brew install kubernetes-helm
helm init --canary-image --upgrade
</code></pre>
<hr>

<h3 id="krex">krex</h3>
<p>Kubernetes Resource Explorer</p>
<p><a href="https://github.com/kris-nova/krex">https://github.com/kris-nova/krex</a></p>
<p>krex in action - tail logs<br>
<img src="https://files.jaigouk.com/2018/08/krex-in-action1.gif" alt="krex-in-action1" loading="lazy"></p>
<p>krex in action - describe &amp; tail logs<br>
<img src="https://files.jaigouk.com/2018/08/krex-in-action2.gif" alt="krex-in-action2" loading="lazy"></p>
<p>krex in action - sh into pod<br>
<img src="https://files.jaigouk.com/2018/08/krex-in-action3.gif" alt="krex-in-action3" loading="lazy"></p>
<pre><code># installing
brew install ncurses
export PKG_CONFIG_PATH=/usr/local/opt/ncurses/lib/pkgconfig

ln -s /usr/local/opt/ncurses/lib/pkgconfig/formw.pc /usr/local/opt/ncurses/lib/pkgconfig/form.pc
ln -s /usr/local/opt/ncurses/lib/pkgconfig/menuw.pc /usr/local/opt/ncurses/lib/pkgconfig/menu.pc
ln -s /usr/local/opt/ncurses/lib/pkgconfig/panelw.pc /usr/local/opt/ncurses/lib/pkgconfig/panel.pc

go get -u github.com/kris-nova/krex
cd $GOPATH/src/github.com/kris-nova/krex
make all
</code></pre>
<h3 id="kubectx">kubectx</h3>
<p>Fast way to switch between clusters and namespaces in kubectl</p>
<p><a href="https://github.com/ahmetb/kubectx">https://github.com/ahmetb/kubectx</a></p>
<p>kubectx in action</p>
<p><img src="https://github.com/ahmetb/kubectx/raw/master/img/kubectx-demo.gif" alt="kubectx" loading="lazy"></p>
<p>kubens in action</p>
<p><img src="https://github.com/ahmetb/kubectx/raw/master/img/kubens-demo.gif" alt="kubectx" loading="lazy"></p>
<pre><code># installing
brew install kubectx
</code></pre>

</section></div>

Jaigouk.Kim

Openfaas on Kubernetes - cheapest options
update(3 Sep 2018) : updated installing openfaas on local kube part.
Update(26 Aug 2018) : I talked with Alex. He told me, "A single node on DigitalOcean with 4GB RAM should be quite cost effective, same with Scaleway using kubeadm. Minikube on your own system is also a good option or with Docker for Mac. (EKS is not cheap) - GKE might be one of the cheaper managed options"
There are many options to use openfaas. Mainly, docker swarm or kubernetes. Kubernetes formed into Cloud Native Computing Foundation. They also have exam materials for certified admin / dev. There are still lots of companies out there using docker swarm as their container orchestration tool. But the trend clearly shows us that kubernetes won the battle. CNCF is the result. It's explicit and configurable. But the problem is installing and maintaining kubernetes on AWS is quite complicated. it takes some time to get used to all setup. With digitalocean, it's fairly easy compare to aws. And after september of 2018, they would release kubernetes as a service. At this point, the pricing page is not there. They might charge it based on droplets.
Then, what would be the optiono to get used to openfaas on kubernetes without spending any money? There are 2 options. local setup and ibm cloud. There are pros and cons. With local setup, it will eat up your resource. And you would not be able to show what you've been playing to other people. As long as you have enough resource, then this is ok. With IBM cloud, you need to switch to pay as you go plan. basically, you need to give them your credit card number. but the "lite" plan doesn't charge you for it. 4GB ram. and it expires in a month. And you can't use ingress. just NodePort. Public IP exists.
The ugly part of serverless thingy is the hidden cost as described here. Openfaas can limit the maximum cost while having the scalability. You have the control. No vendor lock in.
Option1. Openfaas on local kuberneres
I assume you're using OS X.
brew install kubernetes-cli
brew install kubectx
Install kubernetes and dashboard by following this github wiki page
kubectl config set-context docker-for-desktop
kubectl config use-context docker-for-desktop
kubectx
kubectl get all
kubectl cluster-info
kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/master/src/deploy/recommended/kubernetes-dashboard.yaml
kubectl describe services kubernetes-dashboard --namespace=kube-system
kubectl -n kube-system edit service kubernetes-dashboard
# edit .spec.type to NodePort
sudo kubectl proxy
visit the local dashboard
get your token to login to the dashboard
kubectl create serviceaccount jaigouk
kubectl get serviceaccounts jaigouk -o yaml
apiVersion: v1
kind: ServiceAccount
metadata:
  # ...
secrets:
- name: jaigouk-token-1yvwg
kubectl get secret jaigouk-token-6dztl -o yaml
echo xxxxx== | base64 --decode
install openfaas
The faas-netes controller is the most tested, stable and supported version of the OpenFaaS integration with Kubernetes. In contrast the OpenFaaS Operator is based upon the codebase and features from faas-netes, but offers a tighter integration with Kubernetes through CustomResourceDefinitions. This means you can type in kubectl get functions for instance.
kubectl apply -f https://raw.githubusercontent.com/openfaas/faas-netes/master/namespaces.yml
helm repo add openfaas https://openfaas.github.io/faas-netes/
helm repo update \
 && helm upgrade openfaas --install openfaas/openfaas \
    --namespace openfaas  \
    --set functionNamespace=openfaas-fn \
    --set operator.create=true
# generate a random password
export GW_PASS=$(head -c 16 /dev/random |shasum | cut -d ' ' -f1)
kubectl -n openfaas create secret generic basic-auth \
--from-literal=basic-auth-user=admin \
--from-literal=basic-auth-password=$GW_PASS
helm upgrade --reuse-values openfaas openfaas/openfaas \
    --set basic_auth=true
# verify it's running
kubectl --namespace=openfaas get deployments -l "release=openfaas, app=openfaas"
kubectl proxy
echo $GW_PASS | faas-cli login --gateway="127.0.0.1:31112" -u admin --password-stdin
visit http://localhost:31112/ui/
if you have trouble, visit https://github.com/openfaas/faas-netes/blob/master/chart/openfaas/README.md for details
Option2. Using kubernetes on IBM cloud
the IBM cloud gives us free 1 node kubernetes instance that expires in a month. As long as you automated everything then, it wouldn't be a big problem to play with it. For example, you can try "GitLab + OpenFaaS for Serverless CI/CD on Kubernetes". Check their free versus stand plan features from this doc.
# Download and install a few CLI tools and the IBM Kubernetes Service plug-in.
curl -sL https://ibm.biz/idt-installer | bash
ibmcloud login -a https://api.eu-de.bluemix.net
ibmcloud cs region-set eu-central
ibmcloud cs cluster-config gunship
export KUBECONFIG=/Users/$USER/.bluemix/plugins/container-service/clusters/gunship/kube-config-mil01-gunship.yml
kubectl get nodes
let's deploy openfaas.
git clone https://github.com/openfaas/faas-netes
# create name space
kubectl apply -f https://raw.githubusercontent.com/openfaas/faas-netes/master/namespaces.yml
cd faas-netes && \kubectl apply -f ./yaml
# memory usage is 327MB
check your cluster's public ip. visit kubernetes dashboard and find the openfaas namespace. in Discovery and load balancing > Services > gateway, you will be able to see port that is exposed.
running 2x4(2 CPUs, 4 GB RAM, 100 GB HDD) cluster costs $77.76 for 744 hours(31 days). it's worth waiting for digital ocean's kubernetes solution at this point.
brew install kubernetes-helm
helm init --canary-image --upgrade
Useful tools
krex
Kubernetes Resource Explorer
https://github.com/kris-nova/krex
krex in action - tail logs
krex in action - describe & tail logs
krex in action - sh into pod
# installing
brew install ncurses
export PKG_CONFIG_PATH=/usr/local/opt/ncurses/lib/pkgconfig
ln -s /usr/local/opt/ncurses/lib/pkgconfig/formw.pc /usr/local/opt/ncurses/lib/pkgconfig/form.pc
ln -s /usr/local/opt/ncurses/lib/pkgconfig/menuw.pc /usr/local/opt/ncurses/lib/pkgconfig/menu.pc
ln -s /usr/local/opt/ncurses/lib/pkgconfig/panelw.pc /usr/local/opt/ncurses/lib/pkgconfig/panel.pc
go get -u github.com/kris-nova/krex
cd $GOPATH/src/github.com/kris-nova/krex
make all
kubectx
Fast way to switch between clusters and namespaces in kubectl
https://github.com/ahmetb/kubectx
kubectx in action
kubens in action
# installing
brew install kubectx

OpenFaaS on IBM Cloud

댓글