diff --git a/docs/05-kubernetes-configuration-files.md b/docs/05-kubernetes-configuration-files.md index e7183a4..54e6b90 100644 --- a/docs/05-kubernetes-configuration-files.md +++ b/docs/05-kubernetes-configuration-files.md @@ -10,12 +10,10 @@ In this section you will generate kubeconfig files for the `controller manager`, Each kubeconfig requires a Kubernetes API Server to connect to. To support high availability the IP address assigned to the external load balancer fronting the Kubernetes API Servers will be used. -Retrieve the `kubernetes-the-hard-way` static IP address: +Define the static public IP address (you need to replace YOUR_EXTERNAL_IP by your external IP address): ```bash -KUBERNETES_PUBLIC_ADDRESS=$(gcloud compute addresses describe kubernetes-the-hard-way \ - --region $(gcloud config get-value compute/region) \ - --format 'value(address)') +KUBERNETES_PUBLIC_ADDRESS=YOUR_EXTERNAL_IP ``` ### The kubelet Kubernetes Configuration File @@ -62,26 +60,24 @@ worker-2.kubeconfig Generate a kubeconfig file for the `kube-proxy` service: ```bash -{ - kubectl config set-cluster kubernetes-the-hard-way \ - --certificate-authority=ca.pem \ - --embed-certs=true \ - --server=https://${KUBERNETES_PUBLIC_ADDRESS}:6443 \ - --kubeconfig=kube-proxy.kubeconfig +kubectl config set-cluster kubernetes-the-hard-way \ + --certificate-authority=ca.pem \ + --embed-certs=true \ + --server=https://${KUBERNETES_PUBLIC_ADDRESS}:6443 \ + --kubeconfig=kube-proxy.kubeconfig - kubectl config set-credentials system:kube-proxy \ - --client-certificate=kube-proxy.pem \ - --client-key=kube-proxy-key.pem \ - --embed-certs=true \ - --kubeconfig=kube-proxy.kubeconfig +kubectl config set-credentials system:kube-proxy \ + --client-certificate=kube-proxy.pem \ + --client-key=kube-proxy-key.pem \ + --embed-certs=true \ + --kubeconfig=kube-proxy.kubeconfig - kubectl config set-context default \ - --cluster=kubernetes-the-hard-way \ - --user=system:kube-proxy \ - --kubeconfig=kube-proxy.kubeconfig +kubectl config set-context default \ + --cluster=kubernetes-the-hard-way \ + --user=system:kube-proxy \ + --kubeconfig=kube-proxy.kubeconfig - kubectl config use-context default --kubeconfig=kube-proxy.kubeconfig -} +kubectl config use-context default --kubeconfig=kube-proxy.kubeconfig ``` Results: @@ -95,26 +91,24 @@ kube-proxy.kubeconfig Generate a kubeconfig file for the `kube-controller-manager` service: ```bash -{ - kubectl config set-cluster kubernetes-the-hard-way \ - --certificate-authority=ca.pem \ - --embed-certs=true \ - --server=https://127.0.0.1:6443 \ - --kubeconfig=kube-controller-manager.kubeconfig +kubectl config set-cluster kubernetes-the-hard-way \ + --certificate-authority=ca.pem \ + --embed-certs=true \ + --server=https://127.0.0.1:6443 \ + --kubeconfig=kube-controller-manager.kubeconfig - kubectl config set-credentials system:kube-controller-manager \ - --client-certificate=kube-controller-manager.pem \ - --client-key=kube-controller-manager-key.pem \ - --embed-certs=true \ - --kubeconfig=kube-controller-manager.kubeconfig +kubectl config set-credentials system:kube-controller-manager \ + --client-certificate=kube-controller-manager.pem \ + --client-key=kube-controller-manager-key.pem \ + --embed-certs=true \ + --kubeconfig=kube-controller-manager.kubeconfig - kubectl config set-context default \ - --cluster=kubernetes-the-hard-way \ - --user=system:kube-controller-manager \ - --kubeconfig=kube-controller-manager.kubeconfig +kubectl config set-context default \ + --cluster=kubernetes-the-hard-way \ + --user=system:kube-controller-manager \ + --kubeconfig=kube-controller-manager.kubeconfig - kubectl config use-context default --kubeconfig=kube-controller-manager.kubeconfig -} +kubectl config use-context default --kubeconfig=kube-controller-manager.kubeconfig ``` Results: @@ -128,26 +122,24 @@ kube-controller-manager.kubeconfig Generate a kubeconfig file for the `kube-scheduler` service: ```bash -{ - kubectl config set-cluster kubernetes-the-hard-way \ - --certificate-authority=ca.pem \ - --embed-certs=true \ - --server=https://127.0.0.1:6443 \ - --kubeconfig=kube-scheduler.kubeconfig +kubectl config set-cluster kubernetes-the-hard-way \ + --certificate-authority=ca.pem \ + --embed-certs=true \ + --server=https://127.0.0.1:6443 \ + --kubeconfig=kube-scheduler.kubeconfig - kubectl config set-credentials system:kube-scheduler \ - --client-certificate=kube-scheduler.pem \ - --client-key=kube-scheduler-key.pem \ - --embed-certs=true \ - --kubeconfig=kube-scheduler.kubeconfig +kubectl config set-credentials system:kube-scheduler \ + --client-certificate=kube-scheduler.pem \ + --client-key=kube-scheduler-key.pem \ + --embed-certs=true \ + --kubeconfig=kube-scheduler.kubeconfig - kubectl config set-context default \ - --cluster=kubernetes-the-hard-way \ - --user=system:kube-scheduler \ - --kubeconfig=kube-scheduler.kubeconfig +kubectl config set-context default \ + --cluster=kubernetes-the-hard-way \ + --user=system:kube-scheduler \ + --kubeconfig=kube-scheduler.kubeconfig - kubectl config use-context default --kubeconfig=kube-scheduler.kubeconfig -} +kubectl config use-context default --kubeconfig=kube-scheduler.kubeconfig ``` Results: @@ -161,26 +153,24 @@ kube-scheduler.kubeconfig Generate a kubeconfig file for the `admin` user: ```bash -{ - kubectl config set-cluster kubernetes-the-hard-way \ - --certificate-authority=ca.pem \ - --embed-certs=true \ - --server=https://127.0.0.1:6443 \ - --kubeconfig=admin.kubeconfig +kubectl config set-cluster kubernetes-the-hard-way \ + --certificate-authority=ca.pem \ + --embed-certs=true \ + --server=https://127.0.0.1:6443 \ + --kubeconfig=admin.kubeconfig - kubectl config set-credentials admin \ - --client-certificate=admin.pem \ - --client-key=admin-key.pem \ - --embed-certs=true \ - --kubeconfig=admin.kubeconfig +kubectl config set-credentials admin \ + --client-certificate=admin.pem \ + --client-key=admin-key.pem \ + --embed-certs=true \ + --kubeconfig=admin.kubeconfig - kubectl config set-context default \ - --cluster=kubernetes-the-hard-way \ - --user=admin \ - --kubeconfig=admin.kubeconfig +kubectl config set-context default \ + --cluster=kubernetes-the-hard-way \ + --user=admin \ + --kubeconfig=admin.kubeconfig - kubectl config use-context default --kubeconfig=admin.kubeconfig -} +kubectl config use-context default --kubeconfig=admin.kubeconfig ``` Results: @@ -195,7 +185,7 @@ Copy the appropriate `kubelet` and `kube-proxy` kubeconfig files to each worker ```bash for instance in worker-0 worker-1 worker-2; do - gcloud compute scp ${instance}.kubeconfig kube-proxy.kubeconfig ${instance}:~/ + scp ${instance}.kubeconfig kube-proxy.kubeconfig root@${instance}:~/ done ``` @@ -203,7 +193,7 @@ Copy the appropriate `kube-controller-manager` and `kube-scheduler` kubeconfig f ```bash for instance in controller-0 controller-1 controller-2; do - gcloud compute scp admin.kubeconfig kube-controller-manager.kubeconfig kube-scheduler.kubeconfig ${instance}:~/ + scp admin.kubeconfig kube-controller-manager.kubeconfig kube-scheduler.kubeconfig root@${instance}:~/ done ```