A Rails App in Kubernetes with Hoop
Learn How to Audit, Monitor, and Protect your Application
In this tutorial we will show how to Audit, Monitor, and Protect your Rails Application, in this case we're using Kubernetes to deploy the application. You only need to install the hoop agent to have a secure access and apply data masking by default.
Requirements
- Hoop agent installation
- Docker installation
- Kubernetes cluster, you can use minikube
Deploy the Application in Kubernetes
The sample code repository is here, the image build used is hoop/ruby-sample:latest
Deploy the ruby on rails application on Kubernetes:
kubectl create deployment ruby-console --image=hoop/ruby-sample:latest
Validate the application is running successfully.
kubectl get pods
NAME READY STATUS RESTARTS AGE
ruby-console-5578769f4d-kcx76 1/1 Running 0 8m51s
Access to the Rails Console
kubectl exec -it ruby-console-5578769f4d-kcx76 -- rails console
Loading development environment (Rails 7.0.4.3)
irb(main):001:0>
Setting Hoop Access to the Cluster
Validate the Hoop agent running in the machine with access to Kubernetes
You need to login to the instance `hoop login`
hoop admin get agents
UID NAME VERSION HOSTNAME PLATFORM STATUS
Start the Hoop agent
hoop start agent
{"level":"info","timestamp":"2023-09-04T20:37:44-03:00","logger":"agent/main.go:38","msg":"version=1.15.26, platform=darwin/arm64, mode=webregister, grpc_server=app.hoop.dev:8443, tls=true - starting agent"}
{"level":"info","timestamp":"2023-09-04T20:37:44-03:00","logger":"agent/main.go:43","msg":"webregister - connecting, attempt=1"}
--------------------------------------------------------------------------
VISIT THE URL BELOW TO REGISTER THE AGENT
<https://app.hoop.dev/agents/new/x-agt-3db8cbe9-1818-4be4-b4e8-f5a83c3b2a87>
--------------------------------------------------------------------------
{"level":"info","timestamp":"2023-09-04T20:37:51-03:00","logger":"agent/main.go:43","msg":"webregister - connecting, attempt=2"}
{"level":"info","timestamp":"2023-09-04T20:37:59-03:00","logger":"agent/main.go:43","msg":"webregister - connecting, attempt=3"}
{"level":"info","timestamp":"2023-09-04T20:38:07-03:00","logger":"agent/main.go:43","msg":"webregister - connecting, attempt=4"}
{"level":"info","timestamp":"2023-09-04T20:38:14-03:00","logger":"agent/main.go:43","msg":"webregister - connecting, attempt=5"}
Visit the URL to Register the Agent
Validate the agent status
hoop admin get agents
UID NAME VERSION HOSTNAME PLATFORM STATUS
cb7a978b-fffc-4eaf-9144-e2670d842313 agent-my-k8s 1.15.26 krol-MacBookPro-2.local darwin/arm64 ONLINE
Create the Hoop connection using the hoop application
Create the Hoop connection using Hoop command line
Note that in Kubernetes by default the config file is in `~/.kube/config`
hoop admin create connection my-k8s --agent agent-my-k8s --type command-line -e "b64-filesystem:KUBECONFIG=$(cat config |base64)" -- kubectl
Access to the Rails Console with Hoop
hoop connect my-k8s -- exec --stdin deploy/ruby-console -- bash
Access to the recording session of your users in the Hoop app
