GKE - DockerHub
This Quickstart shows how to create a Kubernettes Cluster using Google Cloud Platform's GKE and WebGoat's Docker Image.
To be Successfull with this Quickstart
- You have a Google Cloud Platform account and have enough access rights to create Compute Engine and Container Engine Resources
- You know how to
git clone
- You have the gcloud SDK install and initialized somewhere ( Or just use the Google Cloud Shell)
Create Kubernettes Cluster
Using the cloud console the default settings will suffice. The following is the commandline you would use to create the cluster using the gcloud command. For this QuickStart the cluster name used is owaspbasiccluster
. The PROJECTNAME
is whatever your project is. The REGION
is a region near you.
gcloud container --project "PROJECTNAME" clusters create "owaspbasiccluster" --zone "REGION" --machine-type "n1-standard-1" --image-type "COS" --disk-size "100" --scopes "https://www.googleapis.com/auth/compute","https://www.googleapis.com/auth/devstorage.read_only","https://www.googleapis.com/auth/logging.write","https://www.googleapis.com/auth/cloud-platform","https://www.googleapis.com/auth/servicecontrol","https://www.googleapis.com/auth/service.management.readonly","https://www.googleapis.com/auth/trace.append","https://www.googleapis.com/auth/source.read_only" --num-nodes "3" --network "default" --enable-cloud-logging --no-enable-cloud-monitoring
Set up Kubectl
Using either Google Cloud Shell or other commandline gcloud SDK environment you need to set-up 'kubectl'
If you have not already installed 'Kubectl' you can do so with the following command using gcloud
gcloud components install kubectl
Then you just run:
gcloud container clusters get-credentials owaspbasiccluster --zone REGION --project PROJECTNAME
Deploy WebGoat Deployment
Time to deploy the latest DockerImage for WebGoat!
Let's First Make a namespace for this:
kubectl create namespace webgoat
Now it is time to make the magic happen!
kubectl create -f /where_you_git_cloned_webgoat/platformQuickStart/GCP/GKE-Docker/webgoat_noDNSnoTLS.yml
This should complete with no errors.
Use the following command to see information/status about the deployment
kubectl describe deployment webgoat-dpl --namespace=webgoat
After a few minutes the service endpoint should be ready. You can check the status with
kubectl describe service webgoatsvc --namespace=webgoat
In the output you should see a message like "Created load..." after a "Creating load..." which means that the public facing loadbalancer (even thou there is just one container running!) is ready.
Test Deployment
From the previous describe service
command the LoadBalancer Ingress:
line should have the external IP. The line below should give the port.
So.....
[IP]:[PORT]/WebGoat in your browser!
DONE