Deploy an Image from Harbor

In this tutorial, you will learn to deploy the image in the K8s cluster.

This is a two step process:

1. Create a secret that holds the Harbor registry user ID and password.
2. Apply a deployment to the cluster. Refer to the secret and the image name from
   the deployment YAML.

Part 1 – Create the Secret

There are several different ways to create a secret that holds the Harbor user ID and
password. We will use the Docker’s config.json approach.
1. Log into the registry if you haven’t already done so:
docker login -u projectadmin core.harbor.domain
[Enter Project1Admin as the password]
Once you successfully login using the “docker login” command, your user ID and
password are stored in the .docker/config.json file. We can create a secret straight out of
that file.

2. Review the config.json file by running this command:
cd ~/
cat .docker/config.json
3. Run this command to create the secret. It must be run from your home directory:
kubectl create secret generic harbor-login-secret \
–from-file=.dockerconfigjson=.docker/config.json \
–type=kubernetes.io/dockerconfigjson

You should see:
secret/harbor-login-secret created
Now K8s can start to pull images from Harbor. It will use the credentials stored in the secret to authenticate. If the user ID and password changes in the future then you will need to recreate this secret.
4. Run this command to verify that the secret was created:
kubectl get secret harbor-login-secret -o yaml
The entire contents of the config.json file is base 64 encoded and stored in the
.dockerconfigjson: property.
You should see:

Part 2 – Prepare the Deployment YAML

To save time, a starter YAML file is given to you. You will make a few changes and then apply it to the cluster.

1. Open a web browser and enter this URL:
   https://webage-downloads.s3.amazonaws.com/Files/WA3241-deployment-yaml.zip
2. Make sure the file was downloaded inside your VM.
3. Extract the zip.
4. Create ~/LabFiles.
5. Copy the deployment.yaml that was just extracted to ~/LabFiles replacing the
   existing deployment.yaml file.
6. Open ~/LabFiles/deployment.yaml in an editor.
7. Make sure you have the following content:

We will now enter the image name and secret name in the placeholders shown below.

7. In the container definition, replace <IMAGE NAME> with:
   core.harbor.domain/my-harbor-project/gitops-demo-webapp:latest
8. In the imagePullSecret node, replace <SECRET NAME> with:
   harbor-login-secret
   This is the secret we have created previously.

Verify your file looks like this:

9. Save and close the file.

Part 3 – Deploy the Application

1. Run this command to apply the YAML file:
kubectl apply -f ~/LabFiles/deployment.yaml
2. Run this command to check the status of our application’s pod:
kubectl get pods
You should see, you may to wait a minute and run the command again until shows READ as 1/1:

Part 4 – Test the Application

1. Run this command to get the URL for the application:
minikube service gitops-demo –url
2. Run the /hello endpoint using curl [Your IP address may be different]:
curl http://192.168.49.2:32286/hello
Make sure that you see this response.
{“requestCount”:1,”greeting”:”Hello!”}

Part 5 – Review

In this tutorial, we deployed an application to K8s that has its Docker image stored in a
Harbor registry. We had to create a secret that holds the Harbor user ID and password. We
had to refer to this secret and the image name from the deployment YAML file.