GKE NFS with Google Cloud Single Node Filer and Google Cloud FileStore
Sometime ago, a customer of mine asked me how they can setup a simple GKE cluster with a shared NFS filer. Back then I put together a small demo with GKE+Single Node File as provided by Google Cloud Marketplace. However, there are now two ways to do this: use the ‘single node filer’ and GCP’s managed Cloud Filestore (hint, the latter is strongly recommended!!).
Google Cloud provides an easy to deploy Single Node Filer which with a couple of clicks, you’ve got your very own NFS server. While there are some very clear issues with the single node filer such as being a single point of failure (i.,e it only runs on one VM), its much easier to setup than GlusterFS or other systems on GCP. Even GKE Persistent Volumes
come with their limits where only one node can write while many can read.
However, just as easily with the same number or clicks, you can create a _managed_ NFS server on GCP as Cloud FileStore.
Ofcourse both offer a standard NFS host:/share to for your application to bind to and the steps outlined below describe how to deploy a simple GKE service that mounts the filer for read-write by all instances.
This article also describes two variations for NFS Storage on k8s and you can choose one of them during this tutorial. If you would rather just understand GKE+NFS, use the SingleNode Filer. If you’d rather setup Filestore as a managed service, use that. Finally, this article demonstrates two ways to mount the NFS type you chosse: direct Volumes or as a StorageClass.
NFS as direct Volumes
A direct volume mount will simply map a voume to the root mountpoint. In this example, its 10.128.0.9/data. Any files read or written to by any deployment will be under /data.
NFS Client Provisioner (StorageClass)
On the other hand, a client provisioner will _carve out_ a dynamic path under /data for each persistent volument claim set. That is, if I declare the configuration below, k8s will _dynamically_ create a slice specifically for this claim under ‘/data’. For example, k8s will create something like:
The NFS provisioner is described here in more detail:
- name: frontend
- containerPort: 8080
- mountPath: "/apps/data"
- name: nfs-volume
claimName: nfs-claim---kind: PersistentVolumeClaim
ok…the first step is to setup an NFS Server:
1. Create the Single Node Filer OR Cloud FileStore
— — — — — — — — — — — — — — — -
→ SingleNode FIler:
For the Single Node Filer, I called my filer singlefs-1-vm.
I selected us-central1-a as the filer zone as well as the zone for the GKE cluster.
On your local system, find the ip address for the filer
for me it was:
$ gcloud compute instances \
describe singlefs-1-vm \
→ Cloud FileStore
For Cloud FileStore, simply create any instance but remember to set the FileShare mount to ‘/data’ (whch is what I use in the example yaml files below).
Note the IP address provided since you will use that in the specifications later if you choose to use FileStore.
2. Create a simple GKE cluster
I used Cloud Shell and ran:
3a. NFS as direct Volumes
The following section will deploy GKE ReplicaSet with direct volume mounts on NFS:
Copy and paste the following files in:
Note: I added in the IP address of the single node filer (10.128.0.9)
SPECIFY the IP address (GCE internal DNS does not does not resolve without additional work!!!)
Now lets use a confiuration to that will mount the NFS volume in directly:
the image salrashid123/single_node_filer does the following simple steps:
- listen on :8080
/readlists any files under
/writewrites a file with the node name and timestamp to
Create the GKE service and replicationController:
Get a coffee until the GCP loadbalancer is setup
The IP address for the LB I got is
126.96.36.199 (yours will be different).
Invoke the endpoint to read the file:
$ curl http://188.8.131.52:8080/read
You won’t see anything (unless you manually added a file to /data ealier manually)
Then add a file by invoking the /write endpoint
$ curl http://184.108.40.206:8080/writeFile /apps/data/myapp-rs-11jqc-01_Sep_2017_19_46_03.html written
Repeat a couple of times and then read:
$ curl http://220.127.116.11:8080/readmyapp-rs-11jqc-01_Sep_2017_19_46_03.html
What that indicates is different nodes all writing to one mount point because each file shows the node name that wrote the file!
If you browse the NFS system’s filesytem, you will see the files created directly on
— — — — — — — — — — — — — — — — — — — — — — — — —
3b. NFS Client Provisioner (StorageClass)
Now lets move on to using the same NFS server with a provisioner. What this does is setups a StorageClass on which k8s will dynamically parcel out subdirectories for your PersistentVolumeClaims.
Lets start off. We’re going to use a helm template to and install the NFS Provisioner:
- Create GKE Cluster
This step shoud’ve been done arleady above. In addition, allow yourself to crate higher level objects like StorageClasses:
kubectl create clusterrolebinding \
--user=$(gcloud config get-value core/account)
2. Install Helm
wget https://storage.googleapis.com/kubernetes-helm/helm-v2.11.0-linux-amd64.tar.gztar xzf helm-v2.11.0-linux-amd64.tar.gz
3. Install NFS Provisioner Helm Chart
I personally prefer to _not_ install tiller so the command set below only setsup helm as ‘client-only’
git clone https://github.com/helm/charts.githelm init --client-only
Now initialize the chart by specifying the NFS server’s IP address from the previous steps
helm template charts/stable/nfs-client-provisioner \
--name my-release \
--set nfs.server=10.128.0.9 \
--set nfs.path=/data > nfs_provisioner.yaml
Create the provisioner
kubectl apply -f nfs_provisioner.yaml
4. Deploy your application and the PVC
5. Note that there is a new “StorageClass” called ‘nfs-client’ and our claim ‘nfs-claim’ is now bound
5. Send some /read and /write traffic to it.
Note the IP address for the loadbalancer is different (i ran this setup just recenctly so i got a different IP)
As before, the output shows multiple reads and writes creating and reading from the same mount.
If you used the SingleNodeFiler, simply ssh into that instance and navigate to the /data folder. You should see a dynamic PVC claim that the provisioner made for you. Under that folder, you’ll see the two files you just created!
This article showd a variety of ways to setup NFS on GCP:
- SingleNode Filer
- Cloud FileStore
As well as two ways to mount NFS
- nfs Volume Mount
- NFS Provisioner (StorageClass)
You can pick and choose whichever one you need though I would suggest avoiding the SingleNode filer if availabity is of concern.
— — — — — — — — — — — — — — — — -
ADD . /app
RUN pip install Flask requests
ENTRYPOINT ["python", "main.py"]