Ansible template to create kubernetes cluster with the following specs:
- Kubernetes v1.22.10
- Flannel v0.18.1
- CNI v1.1.1
- CRI v1.22.0
- runc v1.1.3
- containerd v1.6.6
- gvisor 20220510
- etcd v3.5.4
- core-dns 1.9.3
- metrics-server v0.6.1
- metallb v0.12.1
- Haproxy & keepalived
- Secure communication between component
- OIDC supported
- MetalLB supported
- Vagrant installation supported
- Insecure Registry supported
- Renewing certificate playbook
- Adding worker node playbook
- Upgrade Kubernetes playbook
- Ubuntu 18.04
- 3 master nodes, 3 worker nodes
- 3 etcd nodes, 3 master nodes, 3 worker nodes
Execution happen on the deployer node. All the ceritificate generated and store in the deployer node. The deployer node cannot be deleted if you want to renew certificate or extending kubernetes worker node. All this step executed in the deployer node.
- Prepare ansible
sudo apt-add-repository ppa:ansible/ansible -y
sudo apt update
sudo apt install ansible -y- Make sure have access into all nodes
please make sure that have privilege access, you can add the user in sudoers files, after bootstrap is done, fell free to remove that.
ssh-keygen
# copy to deployer itself
ssh-copy-id <user>@<deployer-node>
# copy to etcd node
ssh-copy-id <user>@<etcd-node>
ssh-copy-id <user>@<etcd-node>
ssh-copy-id <user>@<etcd-node>
# copy to master node
ssh-copy-id <user>@<master-node>
ssh-copy-id <user>@<master-node>
ssh-copy-id <user>@<master-node>
# copy to master node
ssh-copy-id <user>@<worker-node>
ssh-copy-id <user>@<worker-node>
ssh-copy-id <user>@<worker-node>- disable ansible hostkey checking
vi ~/.ansible.cfg
[defaults]
host_key_checking = False- Clone this repository
git clone https://github.com/zufardhiyaulhaq/kubernetes-hardway-ansible.git
git checkout --track origin/<TAG>- Adjust variable in the group_vars
vi group_vars/all.yml
- Adjust Kubernetes host and nodes
vi hosts/hosts
- Run ansible
ansible-playbook main.yml -i hosts/hosts
Please backup certificate directory in the deployer node!