modified: README.md
This commit is contained in:
parent
f212ade865
commit
e3637d2241
41
README.md
41
README.md
|
@ -1,2 +1,43 @@
|
||||||
# juiceshop
|
# juiceshop
|
||||||
|
|
||||||
|
http://origin-juiceshop.akamai-lab.com
|
||||||
|
|
||||||
|
https://origin-juiceshop.akamai-lab.com
|
||||||
|
|
||||||
|
**docker image:** [bkimminish/juice-shop](https://hub.docker.com/r/bkimminich/juice-shop/dockerfile)
|
||||||
|
|
||||||
|
## Prerequisites ##
|
||||||
|
1. Deploy traefik with [kubernetes IngressRoute provider](https://doc.traefik.io/traefik/providers/kubernetes-crd/).
|
||||||
|
- [sample yaml files](https://gitea-ptl.akamai-lab.com/akamai/akashop/src/branch/main/traefik)
|
||||||
|
|
||||||
|
2. Get traefik-web external IP.
|
||||||
|
```
|
||||||
|
$ kubectl get services -n default
|
||||||
|
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
|
||||||
|
kubernetes ClusterIP 10.128.0.1 <none> 443/TCP 24d
|
||||||
|
traefik-dashboard-service LoadBalancer 10.128.147.145 172.233.168.26 8080:30238/TCP 27h
|
||||||
|
traefik-web LoadBalancer 10.128.216.128 172.233.169.31 80:32634/TCP,443:31012/TCP 27h
|
||||||
|
```
|
||||||
|
|
||||||
|
3. Create a namespace.
|
||||||
|
```
|
||||||
|
$ kubectl create namespace juiceshop
|
||||||
|
```
|
||||||
|
|
||||||
|
## Deploy ##
|
||||||
|
1. Apply yaml files.
|
||||||
|
```
|
||||||
|
$ kubectl apply -f juiceshop/deployment.yml -f juiceshop/service.yml -f juiceshop/traefik-ingressR.yaml
|
||||||
|
```
|
||||||
|
|
||||||
|
2. DNS spoofing test.
|
||||||
|
```
|
||||||
|
$ http http://172.233.169.31 Host:origin-juiceshop.akamai-lab.com
|
||||||
|
|
||||||
|
$ http https://172.233.169.31 Host:origin-juiceshop.akamai-lab.com --verify=no
|
||||||
|
```
|
||||||
|
|
||||||
|
3. Update DNS record with traefik-web external IP.
|
||||||
|
```
|
||||||
|
origin-juiceshop.akamai-lab.com 172.233.169.31
|
||||||
|
```
|
|
@ -4,7 +4,7 @@ metadata:
|
||||||
name: juiceshop
|
name: juiceshop
|
||||||
namespace: juiceshop
|
namespace: juiceshop
|
||||||
spec:
|
spec:
|
||||||
replicas: 1
|
replicas: 3
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app: juiceshop
|
app: juiceshop
|
||||||
|
|
|
@ -27,8 +27,8 @@ spec:
|
||||||
- name: juiceshop
|
- name: juiceshop
|
||||||
port: 3000
|
port: 3000
|
||||||
|
|
||||||
# middlewares:
|
middlewares:
|
||||||
# - name: juiceshop-redir
|
- name: juiceshop-redir
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
|
@ -57,6 +57,3 @@ spec:
|
||||||
# name: cookie
|
# name: cookie
|
||||||
# secure: true
|
# secure: true
|
||||||
# sameSite: none
|
# sameSite: none
|
||||||
# strategy: RoundRobin
|
|
||||||
# weight: 10
|
|
||||||
# nativeLB: true
|
|
||||||
|
|
Loading…
Reference in New Issue