Kubernetes on Windows Subsystem for Linux (WSL) 2 using kind and Docker Engine

mkdir --parent "/tmp/cacerts/org"

curl -sSfL \
  "http://example.com/ca.crt" \
  --output "/tmp/cacerts/org/ca.cer"

$ openssl x509 \
    -in "/tmp/cacerts/org/ca.cer" \
    -inform DER \
    -subject \
    -noout

subject=CN = Example Root Certification Authority (1)

openssl x509 \
    -inform DER \
    -in "/tmp/cacerts/org/ca.cer" \
    -outform PEM \
    -out "/tmp/cacerts/org/ca.pem"

$ openssl x509 \
    -in "/tmp/cacerts/org/ca.pem" \
    -inform PEM \
    -subject \
    -noout

subject=CN = Example Root Certification Authority (1)

helm repo add \
    metallb \
    https://metallb.github.io/metallb

helm repo update

helm install \
    metallb \
    metallb/metallb --version 0.13.9 \
    --namespace metallb-system \
    --create-namespace \
    --wait --timeout 90s \
    --values <(echo '
controller:
  logLevel: info
speaker:
  logLevel: info
             ')

$ helm status metallb -n metallb-system

. . .
STATUS: deployed
. . .
NOTES:
MetalLB is now running in the cluster.

Now you can configure it via its CRs. Please refer to the metallb official docs
on how to use the CRs.

$ docker network inspect \
    kind \
    -f '{{range .IPAM.Config}}{{printf "%s\n" .Subnet}}{{end}}'

172.18.0.0/16 (1)
fc00:f853:ccd:e793::/64

kubectl apply -f - <<EOF
apiVersion: metallb.io/v1beta1
kind: IPAddressPool
metadata:
  name: first-pool
  namespace: metallb-system
spec:
  addresses:
  - 172.18.255.200-172.18.255.250 (1)
---
apiVersion: metallb.io/v1beta1
kind: L2Advertisement
metadata:
  name: empty
  namespace: metallb-system
EOF

kubectl apply -f - <<EOF
apiVersion: v1
kind: Pod
metadata:
  name: foo-app
  labels:
    app: http-echo
spec:
  containers:
  - name: foo-app
    image: hashicorp/http-echo:0.2.3
    args:
    - "-text=foo"
---
apiVersion: v1
kind: Pod
metadata:
  name: bar-app
  labels:
    app: http-echo
spec:
  containers:
  - name: bar-app
    image: hashicorp/http-echo:0.2.3
    args:
    - "-text=bar"
---
kind: Service
apiVersion: v1
metadata:
  name: foo-bar-service
spec:
  type: LoadBalancer
  selector:
    app: http-echo
  ports:
  - port: 5678  # Default port used by the image
EOF

$ kubectl get service foo-bar-service

NAME             TYPE          CLUSTER-IP   EXTERNAL-IP     PORT(S)
foo-bar-service  LoadBalancer  10.96.31.92  172.18.255.200  5678:30638/TCP

LB_IP=$(\
    kubectl get service/foo-bar-service \
        -o=jsonpath='{.status.loadBalancer.ingress[0].ip}' \
)

for _ in {1..10}; do
  curl ${LB_IP}:5678
done

foo
foo
foo
bar
foo
bar
bar
foo
bar
foo

kubectl delete \
  service/foo-bar-service \
  pod/bar-app \
  pod/foo-app

kubectl apply -f - <<EOF
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: local-path-pvc
  namespace: default
spec:
  accessModes:
    - ReadWriteOnce
  storageClassName: standard
  resources:
    requests:
      storage: 1Mi
EOF

kubectl apply -f - <<EOF
apiVersion: v1
kind: Pod
metadata:
  name: volume-test
  namespace: default
spec:
  containers:
  - name: volume-test
    image: nginx:stable-alpine
    imagePullPolicy: IfNotPresent
    volumeMounts:
    - name: volv
      mountPath: /data
    ports:
    - containerPort: 80
  volumes:
  - name: volv
    persistentVolumeClaim:
      claimName: local-path-pvc
EOF

$ kubectl get pv

NAME                                      RECLAIM POLICY  STATUS  CLAIM                   STORAGECLASS
pvc-ff55783c-e0a2-48ec-827a-4d812ff91651  Delete          Bound   default/local-path-pvc  standard

$ kubectl get pvc

NAME            STATUS  VOLUME                                    CAPACITY  STORAGECLASS
local-path-pvc  Bound   pvc-ff55783c-e0a2-48ec-827a-4d812ff91651  1Mi       standard

kubectl exec volume-test -- sh -c "echo local-path-test > /data/test"

$ kubectl exec volume-test -- cat /data/test

local-path-test

kubectl -n default delete \
    pod/volume-test \
    pvc/local-path-pvc