[QUESTION] OME in Kubernetes

[MateusDornelles]

Hi, can someone point me to some documentation on how to set OME in a kubernetes cluster ?

[cwpenhale]

Hi Mateus!

Here's how I put an Edge server in K8S:

---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: cdn-mysite-com-cert
  namespace: mysite-dev
spec:
  secretName: cdn-mysite-com-cert
  commonName: cdn.mysite.com
  dnsNames:
    - cdn.mysite.com
  issuerRef:
    name: letsencrypt-prod-dns
    kind: ClusterIssuer
---
kind: ConfigMap
apiVersion: v1
metadata:
  name: ovm-edge-config
  namespace: mysite-dev
data:
  Server.xml: |
    <?xml version="1.0" encoding="UTF-8"?>
    <Server version="8">
        <Name>OvenMediaEngine</Name>
        <!-- Host type (origin/edge) -->
        <Type>edge</Type>
        <!-- Specify IP address to bind (* means all IPs) -->
        <IP>*</IP>
        <PrivacyProtection>false</PrivacyProtection>
        <Modules>
            <HTTP2>
                <Enable>true</Enable>
            </HTTP2>
            <LLHLS>
                <Enable>true</Enable>
            </LLHLS>
        </Modules>
        <!-- Settings for the ports to bind -->
        <Bind>
            <Managers>
                <API>
                    <Port>80</Port>
                </API>
            </Managers>
            <Publishers>
                <LLHLS>
                    <TLSPort>443</TLSPort>
                    <WorkerCount>1</WorkerCount>
                </LLHLS>
                <Thumbnail>
                    <TLSPort>443</TLSPort>
                    <WorkerCount>1</WorkerCount>
                </Thumbnail>
            </Publishers>
        </Bind>
        <Managers>
            <Host>
                <Names>
                    <Name>cdn.mysite.com</Name>
                </Names>
            </Host>
            <API>
                <AccessToken>my-token</AccessToken>
                <CrossDomains>
                    <Url>*</Url>
                </CrossDomains>
            </API>
        </Managers>
        <VirtualHosts>
            <!-- You can use wildcard like this to include multiple XMLs -->
            <VirtualHost include="VHost*.xml" />
            <VirtualHost>
                <Name>default</Name>
                <Distribution>cdn.mysite.com</Distribution>
                <Host>
                    <Names>
                        <Name>cdn.mysite.com</Name>
                    </Names>
                    <TLS>
                        <CertPath>/etc/ssl/tls.crt</CertPath>
                        <KeyPath>/etc/ssl/tls.key</KeyPath>
                    </TLS>
                </Host>
                <Origins>
                    <Properties>
                        <NoInputFailoverTimeout>3000</NoInputFailoverTimeout>
                        <UnusedStreamDeletionTimeout>60000</UnusedStreamDeletionTimeout>
                    </Properties>
                    <Origin>
                        <Location>/edge/</Location>
                        <Pass>
                            <Scheme>ovt</Scheme>
                            <Urls><Url>my-origin.mysite.com:9000/app/</Url></Urls>
                        </Pass>
                    </Origin>
                </Origins>
                <Applications>
                    <Application>
                        <Name>edge</Name>
                        <Type>live</Type>
                        <Providers>
                            <OVT />
                        </Providers>
                        <Publishers>
                            <Thumbnail>
                            </Thumbnail>
                            <LLHLS>
                                <ChunkDuration>0.5</ChunkDuration>
                                <SegmentDuration>6</SegmentDuration>
                                <SegmentCount>10</SegmentCount>
                            </LLHLS>
                        </Publishers>
                    </Application>
                </Applications>
            </VirtualHost>
        </VirtualHosts>
    </Server>

  Logger.xml: |
    <?xml version="1.0" encoding="UTF-8"?>
    <Logger version="2">
      <Path>/var/log/ovenmediaengine</Path>
      <Tag name="SRT" level="debug" />
      <Tag name="HttpServer" level="debug" />
      <Tag name=".*\.Stat" level="debug" />
      <Tag name=".*" level="debug" />
    </Logger>
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: cdn-mysite-com
  namespace: mysite-dev
  labels:
    app.kubernetes.io/name: cdn-mysite-com
    app.kubernetes.io/instance: cdn-mysite-com-us-lax
    app.kubernetes.io/version: "1.0.0"
    version: "1.0.0"
    app: cdn-mysite-com
spec:
  selector:
    matchLabels:
      app: cdn-mysite-com
  replicas: 1
  template:
    metadata:
      annotations:
        sidecar.istio.io/inject: "false"
      labels:
        app.kubernetes.io/name: cdn-mysite-com
        app.kubernetes.io/instance: cdn-mysite-com-us-lax
        app.kubernetes.io/version: "1.0.0"
        app: cdn-mysite-com
        version: "1.0.0"
    spec:
      volumes:
        - name: ssl
          secret:
            secretName: cdn-mysite-com-cert
        - name: config
          configMap:
            name: ovm-edge-config
      containers:
        - name: ovm-edge
          imagePullPolicy: Always
          image: airensoft/ovenmediaengine:0.14.17
          volumeMounts:
            - mountPath: "/etc/ssl"
              name: ssl
              readOnly: true
            - mountPath: "/opt/ovenmediaengine/bin/origin_conf"
              name: config
              readOnly: true
          ports:
            - containerPort: 443
              name: http2
            - containerPort: 80
              name: http
          resources:
            limits:
              cpu: 1000m
              memory: 1024Mi
            requests:
              cpu: 1000m
              memory: 512Mi
      imagePullSecrets:
        - name: regcred
---
apiVersion: v1
kind: Service
metadata:
  namespace: mysite-dev
  name: cdn-mysite-com
  labels:
    app.kubernetes.io/name: cdn-mysite-com
    app.kubernetes.io/instance: cdn-mysite-com-us-lax
    app.kubernetes.io/version: "1.0.0"
    app: cdn-mysite-com
    version: "1.0.0"
    service: cdn-mysite-com
spec:
  type: LoadBalancer
  ports:
    - port: 443
      targetPort: 443
      name: http2
      protocol: TCP
  selector:
    app: cdn-mysite-com

I'm using Istio, so I wanted to remove the envoy sidecar, hence the annotation for the removal of the istio sidecar. I'm exposing the edge through a LoadBalancer so that I can use native HTTP2.

Let me know if you have any questions!

HTH,
Connor