https://github.com/jeroenvermeulen/hetzner-talos-k8s-rancher
Scripts to install Kubernetes on Hetzner Cloud using Talos Linux
https://github.com/jeroenvermeulen/hetzner-talos-k8s-rancher
hetzner hetzner-cloud kubernetes kubernetes-cluster kubernetes-setup rancher talos talosctl
Last synced: 7 months ago
JSON representation
Scripts to install Kubernetes on Hetzner Cloud using Talos Linux
- Host: GitHub
- URL: https://github.com/jeroenvermeulen/hetzner-talos-k8s-rancher
- Owner: jeroenvermeulen
- License: mit
- Created: 2023-07-06T18:32:20.000Z (over 2 years ago)
- Default Branch: master
- Last Pushed: 2024-11-12T22:40:25.000Z (12 months ago)
- Last Synced: 2025-03-24T05:04:41.195Z (7 months ago)
- Topics: hetzner, hetzner-cloud, kubernetes, kubernetes-cluster, kubernetes-setup, rancher, talos, talosctl
- Language: Shell
- Homepage:
- Size: 224 KB
- Stars: 12
- Watchers: 2
- Forks: 4
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Scripts to install Kubernetes on Hetzner Cloud using Talos Linux
## Components
- [Hetzner Cloud](https://www.hetzner.com/cloud) virtual servers, loadbalancers, storage volumes
- [Talos Linux](https://www.talos.dev/) secure, immutable, and minimal
- [Kubernetes](https://kubernetes.io/) container orchestrator
- [Rancher](https://www.rancher.com/) enterprise Kubernetes management, dashboard
- [Traefik](https://traefik.io/traefik/) ingress controller
- [Cert-Manager](https://cert-manager.io/) manage Let's Encrypt certificates
- [Mayastor](https://openebs.io/docs/concepts/mayastor) container attached storage (optional)
## Requirements
- A local console, for example [iTerm](https://iterm2.com/) or SSH to a Linux shell
- Either:
- macOS with [Homebrew](https://brew.sh/),
- A Debian Linux variant like Ubuntu or
- Install tools checked on the bottom of [0_tools.sh](0_tools.sh) manually
- An [Hetzner account](https://accounts.hetzner.com/signUp)
- In the Hetzner Cloud Console create a [Project](https://console.hetzner.cloud/projects)
- In the Project create an API token using **Security** (left sidebar) => **API tokens**
- Description: `CLI` (doesn't matter)
- Permissions: **Read & Write**
- Save the token in a safe place, it will be asked later with prompt `Token:`
## Usage
### Clone project
Clone this project and go to the directory
```bash
git clone https://github.com/jeroenvermeulen/hetzner-talos-k8s-rancher.git
cd hetzner-talos-k8s-rancher
```
### Create config
Copy the example config and update it in your favorite editor
```bash
cp CONFIG.sh.example CONFIG.sh
nano CONFIG.sh
```
Make sure you update at least `RANCHER_HOSTNAME`
### Execute scripts one by one
#### Install and check required CLI tools
```bash
./0_tools.sh
```
#### Create a disk image at Hetzner containing Talos Linux
```bash
./1_hcloud_disk_image.sh
```
#### Start the Kubernetes cluster
```bash
./2_cluster.sh
```
#### Install Traefik ingress and Cert-Manager Letsencrypt
```bash
./3_services.sh
```
#### Install Rancher
```bash
./4_rancher.sh
```
If everything works well the last script will display the Rancher URL.
## Debug Commands
#### Set the context for hcloud, talosctl and kubectl:
```bash
source ./env.sh
```
#### Get cluster members
```bash
talosctl get members
```
#### Check state of services:
```bash
talosctl services --nodes 111.22.33.44
```
#### Check logs of a service:
```bash
talosctl logs etcd --nodes 111.22.33.44
```
If the loadbalancer is not working correctly you can add `--endpoint 111.22.33.44` with the node IP to connect to
port 50000 (Talos API) of the node directly instead of through the loadbalancer.