Hands-On Hybrid Cloud: Deploy Apps to GCP & On-Prem

Set up an Ubuntu virtual machine in VirtualBox with 2 GB RAM, a dynamic 10 GB VDI, and a bridge network, then install Ubuntu and log in.

Install and configure an on-prem server by updating the package index, installing MySQL and strongSwan vpn, and creating a remote user and database for the frontend.

Create a separate database and a separate user for the Ghost application in MySQL. Log into the MySQL instance and set up the app-specific remote user.

Create a remote, least-privilege MySQL user for the ghost application with native password authentication, granting only ghost database read and write access, then flush privileges and enable remote access.

Enable remote access to MySQL by opening port 3306 with ufw and updating the bind address from localhost, then restart the SQL Server for access from Google Kubernetes Engine application.

Document the MySQL connection details, including host private IP, non-root user, password, database ghost, and port, then test remote login from local and cloud environments before activating site-to-site VPN.

Create a Google Cloud account with credits, then provision a VPC and a subnet. Plan IP ranges to avoid on-prem conflicts and set a firewall rule for the VM.

Create a Google Cloud VM in the VPC, set a firewall rule from 10.0.0.0/25 for ssh, then install the client to access the on-prem database and plan site-to-site VPN.

Document your on-prem network details to configure a vpn with a Google Cloud VPC, enabling on-prem database access to the cloud Kubernetes ghost application.

Configure the on-prem firewall to forward and allow vpn traffic by opening udp ports 500 and 4500, using ip route to identify the interface, enabling ip forwarding, and reloading ufw.

Configure a policy-based IPsec VPN on Google Cloud by creating a Cloud VPN gateway, defining a tunnel with on prem remote IP and matching VPC subnet parameters to establish connectivity.

Configure a strongSwan on-prem VPN gateway with Google's config, set left/right IPs and subnets, then restart ipsec to establish the cloud-to-on-prem VPN and access the on-prem MySQL.

Create a single node vpc-native gke cluster in a subnet, hosting apps in one data center with ip isolation, then connect via cloud shell to deploy nginx and ghost.

Create a DNS hostname with No IP, then generate a CSR using OpenSSL to obtain and securely store an SSL certificate, and prepare a CSV for the request.

Generate a CSR and private key, request an SSL certificate from a domain registrar, and download it via email in palm chain format to secure your Ghost application.

Learn how to deploy applications with helm charts on a Kubernetes cluster, exploring templates, deployment yaml files, services, secrets, ingress, and the values file for the ghost helm chart.

Pin the Ghost image version in the helm chart, enable ingress and a load balancer, specify the hostname and external database, and create an ssl secret named after the ingress.

Create a GitHub account and a public repository named 'Lycos home chat', initialize local folder as the repository, and push helm chart with git add, git commit, and git push.

Deploy nginx as a load balancer in a Kubernetes cluster using helm, then configure on-prem connectivity with a nat firewall rule.

After provisioning the load balancer, deploy the ghost application with helm, configure kubernetes in a vpc connected to on-prem, and apply a firewall rule to allow database access.

Update the dns a record to expose the ghost app in hybrid cloud deployment, then access the admin portal and publish your first blog while validating database tables.