Assign FQDN to GCLB

In this section you will assign an FQDN to your Google Cloud Load Balancer (GCLB).

Fast Forward

If you have already assigned an FQDN for your serving domain to GCLB, expand this box to fast-forward:

1. Proceed to the Verify section.

What You’ll Need

• A configured management environment.
• Your clone of the Arrikto GitOps repository.
• An existing GKE cluster.
• A working NGINX Ingress Controller deployment.
• A working ExternalDNS deployment (if you are using Cloud DNS).

Procedure

1. Go to your GitOps repository, inside your rok-tools management environment:

   

   root@rok-toos:~/# cd ~/ops/deployments

2. Decide on the desired FQDN for your Google Cloud Load Balancer and print its value. Choose one of the following options based on your DNS method.

   Cloud DNS

   Cloud Endpoints

   Edit /etc/hosts

   Specify the name for your FQDN:

   

   root@rok-tools:~# export FQDN=<FQDN_SUBDOMAIN>.${SERVING_DOMAIN?}

   Replace <FQDN_SUBDOMAIN> with your desired subdomain. For example:

   

   root@rok-tools:~# export FQDN=${GKE_CLUSTER?}-serving.${SERVING_DOMAIN?} && echo ${FQDN?} arrikto-cluster-serving.serving.example.com

   Specify the name for your FQDN:

   

   root@rok-tools:~# export FQDN=<FQDN_SUBDOMAIN>.endpoints.${PROJECT_ID?}.cloud.goog

   Replace <FQDN_SUBDOMAIN> with your desired subdomain. For example:

   

   root@rok-tools:~# export FQDN=${GKE_CLUSTER?}-serving.endpoints.${PROJECT_ID?}.cloud.goog && echo ${FQDN?} arrikto-cluster-serving.endpoints.myproject.cloud.goog

   Specify the name for your FQDN:

   

   root@rok-tools:~# export FQDN=<FQDN>

   Replace <FQDN> with your desired FQDN name. For example:

   

   root@rok-tools:~# export FQDN=${GKE_CLUSTER?}-serving.serving.example.com && echo ${FQDN?} arrikto-cluster-serving.serving.example.com

3. Obtain the IP address of your Load Balancer and print its value. Choose one of the following options based on the NGINX you are using:

   Serving NGINX

   EKF NGINX

   

   root@rok-tools:~# export ADDRESS=$(kubectl get services -n ingress-nginx-serving ingress-nginx \ > -o jsonpath={.status.loadBalancer.ingress[].ip}) && echo ${ADDRESS?} 10.42.42.42

   

   root@rok-tools:~# export ADDRESS=$(kubectl get services -n ingress-nginx ingress-nginx \ > -o jsonpath={.status.loadBalancer.ingress[].ip}) && echo ${ADDRESS?} 10.42.42.42

4. Create the DNS record. Choose one of the following options based on your DNS method.

   Cloud DNS

   Cloud Endpoints

   Edit /etc/hosts

   ExternalDNS will create the DNS record automatically once you create the Ingress resource. You will find instructions to create the Ingress resource in the guides that follow.

   1. Render the OpenAPI template to use your FQDN and ADDRESS:

      

      root@rok-tools:~/ops/deployments# j2 rok/gcp/openapi.yaml.j2 -o rok/gcp/openapi-serving.yaml

   2. Commit the generated YAML:

      

      root@rok-tools:~/ops/deployments# git add rok/gcp/openapi-serving.yaml root@rok-tools:~/ops/deployments# git commit -am "Generate OpenAPI for Cloud Endpoints"

   3. Deploy the service configuration:

      

      root@rok-tools:~/ops/deployments# gcloud endpoints services deploy rok/gcp/openapi-serving.yaml --verbosity debug

   In your machine, edit /etc/hosts and add an entry for your Load Balancer IP and FQDN:

   

   $ grep -q "^${ADDRESS?}" /etc/hosts || \ > echo -e "\n${ADDRESS?} ${FQDN?}" | \ > sudo tee -a /etc/hosts $ sudo sed -i "/^${ADDRESS?}/c ${ADDRESS?} ${FQDN?}" /etc/hosts

Verify

1. Ensure that your desired FQDN resolves to the IP of the Load Balancer. Choose one of the following options based on your DNS method.

   Cloud DNS

   Cloud Endpoints

   Edit /etc/hosts

   ExternalDNS will create the DNS record automatically once you create the Ingress resource. For the time being, it should not resolve to anything.

   

   root@rok-tools:~# host ${FQDN?} arrikto-cluster-serving.endpoints.myproject.cloud.goog has address 10.42.42.42

   Ensure that /etc/hosts is up-to-date:

   

   $ getent hosts ${FQDN?} 10.42.42.42 arrikto-cluster-serving.serving.example.com

   Ensure that your DNS configuration sees /etc/hosts:

   

   $ host ${FQDN?} arrikto-cluster-serving.serving.example.com has address 10.42.42.42

Summary

You have successfully assigned an FQDN to your Load Balancer.

What’s Next

The next step is to configure and install cert-manager.

• Deploy cert-manager