Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/zufardhiyaulhaq/kubernetes-hard-way-ansible
Automating Kubernetes the hard way cluster with Ansible. (Kubernetes 1.22.10)! Support Vagrant and OIDC! feature to renew the certificate, add a new worker node, and upgrade the Kubernetes version!
https://github.com/zufardhiyaulhaq/kubernetes-hard-way-ansible
ansible containerd kubernetes kubernetes-cluster kubernetes-setup metrics-server oidc ubuntu vagrant
Last synced: about 1 month ago
JSON representation
Automating Kubernetes the hard way cluster with Ansible. (Kubernetes 1.22.10)! Support Vagrant and OIDC! feature to renew the certificate, add a new worker node, and upgrade the Kubernetes version!
- Host: GitHub
- URL: https://github.com/zufardhiyaulhaq/kubernetes-hard-way-ansible
- Owner: zufardhiyaulhaq
- Created: 2019-04-20T16:26:12.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2022-06-09T14:59:05.000Z (over 2 years ago)
- Last Synced: 2024-05-01T16:34:27.730Z (8 months ago)
- Topics: ansible, containerd, kubernetes, kubernetes-cluster, kubernetes-setup, metrics-server, oidc, ubuntu, vagrant
- Language: Jinja
- Homepage:
- Size: 228 KB
- Stars: 47
- Watchers: 6
- Forks: 18
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Kubernetes Hard Way Ansible
Ansible template to create kubernetes cluster with the following specs:
* Kubernetes v1.22.10
* Flannel v0.18.1
* CNI v1.1.1
* CRI v1.22.0
* runc v1.1.3
* containerd v1.6.6
* gvisor 20220510
* etcd v3.5.4
* core-dns 1.9.3
* metrics-server v0.6.1
* metallb v0.12.1
* Haproxy & keepalived
* Secure communication between component
### Additional Feature
* OIDC supported
* MetalLB supported
* Vagrant installation supported
* Insecure Registry supported
* Renewing certificate playbook
* Adding worker node playbook
* Upgrade Kubernetes playbook
### Tested Environment
* Ubuntu 18.04
* 3 master nodes, 3 worker nodes
* 3 etcd nodes, 3 master nodes, 3 worker nodes
## Step Installation
Execution happen on the deployer node. All the ceritificate generated and store in the deployer node. The deployer node cannot be deleted if you want to renew certificate or extending kubernetes worker node. All this step executed in the deployer node.
* Prepare ansible
```bash
sudo apt-add-repository ppa:ansible/ansible -y
sudo apt update
sudo apt install ansible -y
```
* Make sure have access into all nodes
please make sure that have privilege access, you can add the user in sudoers files, after bootstrap is done, fell free to remove that.
```bash
ssh-keygen
# copy to deployer itself
ssh-copy-id @
# copy to etcd node
ssh-copy-id @
ssh-copy-id @
ssh-copy-id @
# copy to master node
ssh-copy-id @
ssh-copy-id @
ssh-copy-id @
# copy to master node
ssh-copy-id @
ssh-copy-id @
ssh-copy-id @
```
* disable ansible hostkey checking
```bash
vi ~/.ansible.cfg
[defaults]
host_key_checking = False
```
* Clone this repository
```bash
git clone https://github.com/zufardhiyaulhaq/kubernetes-hardway-ansible.git
git checkout --track origin/
```
* Adjust variable in the group_vars
```
vi group_vars/all.yml
```
* Adjust Kubernetes host and nodes
```
vi hosts/hosts
```
* Run ansible
```
ansible-playbook main.yml -i hosts/hosts
```
Please backup certificate directory in the deployer node!
### Additional Setup
* [OIDC](additional_setup/oidc.md)
* [metalLB](additional_setup/metallb.md)
* [Private Insecure Registry](additional_setup/insecure-registry.md)
* [Renew Certificate](renew-certificate.md)
* [Add new Worker](new-worker.md)
* [Upgrade Kubernetes](upgrade-kubernetes.md)