add dns add-on lab

README.md

@@ -34,5 +34,6 @@ The resulting cluster will be missing the following items:
 * [Bootstrapping Kubernetes Workers](docs/05-kubernetes-worker.md)
 * [Configuring the Kubernetes Client - Remote Access](docs/06-kubectl.md)
 * [Managing the Container Network Routes](docs/07-network.md)
-* [Smoke Test](docs/08-smoke-test.md)
+* [Deploying the DNS Add-on](docs/08-dns-addon.md)
-* [Cleaning Up](docs/09-cleanup.md)
+* [Smoke Test](docs/09-smoke-test.md)
+* [Cleaning Up](docs/10-cleanup.md)

authorization-policy.jsonl

@@ -2,3 +2,4 @@
 {"apiVersion": "abac.authorization.kubernetes.io/v1beta1", "kind": "Policy", "spec": {"user":"admin", "namespace": "*", "resource": "*", "apiGroup": "*"}}
 {"apiVersion": "abac.authorization.kubernetes.io/v1beta1", "kind": "Policy", "spec": {"user":"scheduler", "namespace": "*", "resource": "*", "apiGroup": "*"}}
 {"apiVersion": "abac.authorization.kubernetes.io/v1beta1", "kind": "Policy", "spec": {"user":"kubelet", "namespace": "*", "resource": "*", "apiGroup": "*"}}
+{"apiVersion": "abac.authorization.kubernetes.io/v1beta1", "kind": "Policy", "spec": {"group":"system:serviceaccounts", "namespace": "*", "resource": "*", "apiGroup": "*", "nonResourcePath": "*"}}

docs/08-dns-addon.md

@@ -0,0 +1,16 @@
+# Deploying the DNS Add-on
+
+In this lab you will deploy the DNS add-on which is required for every Kubernetes cluster. Without the DNS add-on the following things will not work:
+
+* DNS based service discovery 
+* DNS lookups from containers running in pods
+
+## Deploy the Cluster DNS Add-on
+
+```
+kubectl create -f https://raw.githubusercontent.com/kelseyhightower/kubernetes-the-hard-way/master/skydns-svc.yaml
+```
+
+```
+kubectl create -f https://raw.githubusercontent.com/kelseyhightower/kubernetes-the-hard-way/master/skydns-rc.yaml
+```