Skip to content

Automating Kubernetes the hard way cluster with Ansible. (Kubernetes 1.22.10)! Support Vagrant and OIDC! feature to renew the certificate, add a new worker node, and upgrade the Kubernetes version!

Notifications You must be signed in to change notification settings

zufardhiyaulhaq/kubernetes-hard-way-ansible

Repository files navigation

Kubernetes Hard Way Ansible

Ansible template to create kubernetes cluster with the following specs:

  • Kubernetes v1.22.10
  • Flannel v0.18.1
  • CNI v1.1.1
  • CRI v1.22.0
  • runc v1.1.3
  • containerd v1.6.6
  • gvisor 20220510
  • etcd v3.5.4
  • core-dns 1.9.3
  • metrics-server v0.6.1
  • metallb v0.12.1
  • Haproxy & keepalived
  • Secure communication between component

Additional Feature

  • OIDC supported
  • MetalLB supported
  • Vagrant installation supported
  • Insecure Registry supported
  • Renewing certificate playbook
  • Adding worker node playbook
  • Upgrade Kubernetes playbook

Tested Environment

  • Ubuntu 18.04
    • 3 master nodes, 3 worker nodes
    • 3 etcd nodes, 3 master nodes, 3 worker nodes

Step Installation

Execution happen on the deployer node. All the ceritificate generated and store in the deployer node. The deployer node cannot be deleted if you want to renew certificate or extending kubernetes worker node. All this step executed in the deployer node.

  • Prepare ansible
sudo apt-add-repository ppa:ansible/ansible -y
sudo apt update
sudo apt install ansible -y
  • Make sure have access into all nodes

please make sure that have privilege access, you can add the user in sudoers files, after bootstrap is done, fell free to remove that.

ssh-keygen

# copy to deployer itself
ssh-copy-id <user>@<deployer-node>

# copy to etcd node
ssh-copy-id <user>@<etcd-node>
ssh-copy-id <user>@<etcd-node>
ssh-copy-id <user>@<etcd-node>

# copy to master node
ssh-copy-id <user>@<master-node>
ssh-copy-id <user>@<master-node>
ssh-copy-id <user>@<master-node>

# copy to master node
ssh-copy-id <user>@<worker-node>
ssh-copy-id <user>@<worker-node>
ssh-copy-id <user>@<worker-node>
  • disable ansible hostkey checking
vi ~/.ansible.cfg

[defaults]
host_key_checking = False
  • Clone this repository
git clone https://github.com/zufardhiyaulhaq/kubernetes-hardway-ansible.git
git checkout --track origin/<TAG>
  • Adjust variable in the group_vars
vi group_vars/all.yml
  • Adjust Kubernetes host and nodes
vi hosts/hosts
  • Run ansible
ansible-playbook main.yml -i hosts/hosts

Please backup certificate directory in the deployer node!

Additional Setup

About

Automating Kubernetes the hard way cluster with Ansible. (Kubernetes 1.22.10)! Support Vagrant and OIDC! feature to renew the certificate, add a new worker node, and upgrade the Kubernetes version!

Topics

Resources

Stars

Watchers

Forks

Packages

No packages published