kubernetes-the-hard-way/docs/10-configuring-kubectl.md

82 lines
2.1 KiB
Markdown
Raw Normal View History

2017-08-29 00:19:25 +03:00
# Configuring kubectl for Remote Access
In this lab you will generate a kubeconfig file for the `kubectl` command line utility based on the `admin` user credentials.
> Run the commands in this lab from the same directory used to generate the admin client certificates.
## The Admin Kubernetes Configuration File
Each kubeconfig requires a Kubernetes API Server to connect to. To support high availability the IP address assigned to the external load balancer fronting the Kubernetes API Servers will be used.
Retrieve the `kubernetes-the-hard-way` static IP address:
```
KUBERNETES_PUBLIC_ADDRESS=$(gcloud compute addresses describe kubernetes-the-hard-way \
--region $(gcloud config get-value compute/region) \
--format 'value(address)')
```
Generate a kubeconfig file suitable for authenticating as the `admin` user:
```
kubectl config set-cluster kubernetes-the-hard-way \
--certificate-authority=ca.pem \
--embed-certs=true \
--server=https://${KUBERNETES_PUBLIC_ADDRESS}:6443
```
2018-02-25 21:42:05 +03:00
Choose the `--embed-certs=true` below if that's convenient for your setup.
2017-08-29 00:19:25 +03:00
```
kubectl config set-credentials admin \
--client-certificate=admin.pem \
2018-02-25 21:42:05 +03:00
--embed-certs=true \
2017-08-29 00:19:25 +03:00
--client-key=admin-key.pem
```
```
kubectl config set-context kubernetes-the-hard-way \
--cluster=kubernetes-the-hard-way \
--user=admin
```
```
kubectl config use-context kubernetes-the-hard-way
```
## Verification
Check the health of the remote Kubernetes cluster:
```
kubectl get componentstatuses
```
> output
```
NAME STATUS MESSAGE ERROR
2017-09-04 00:18:03 +03:00
controller-manager Healthy ok
scheduler Healthy ok
etcd-2 Healthy {"health": "true"}
etcd-0 Healthy {"health": "true"}
etcd-1 Healthy {"health": "true"}
2017-08-29 00:19:25 +03:00
```
List the nodes in the remote Kubernetes cluster:
```
kubectl get nodes
```
> output
```
2017-10-02 06:37:09 +03:00
NAME STATUS ROLES AGE VERSION
2017-12-18 17:53:32 +03:00
worker-0 Ready <none> 1m v1.9.0
worker-1 Ready <none> 1m v1.9.0
worker-2 Ready <none> 1m v1.9.0
2017-08-29 00:19:25 +03:00
```
Next: [Provisioning Pod Network Routes](11-pod-network-routes.md)