Commit Graph

512 Commits (76e8800d9b99b3bd6b8b7cb48adc758606496e71)

Author SHA1 Message Date
Alistair Mackay 76e8800d9b Emphasise no PR for IP changes 2022-09-22 10:29:34 +01:00
Alistair Mackay dcddd3347f
Upgrade/1.24 (#291)
* Set up Vagrantfile
- Use Ubuntu 22.04
- Set required kernel parameters and tunables
- Optimise file for DRY by use of local functions
- No longer install Docker

* Update prerequisites

* Update compute resources

* Update client-tools

* Update cert authority

* Update kube config files

* Update sata encryption keys

* Update etcd

* Cert enhancements
- Use dig for host IPs
- Create front-proxy keys

* Update prereqs with lab defaults

* Minor update

* Dynamic kubelet reconfig removed in 1.24

* Update failed provisioning

* Update cert sujects. Use vars for IP addresses

* Use vars for IP addresses

* USe vars for IPs. Update unit file

* Unit updates for 1.24. Use vars for IPs

* 1.24 changes
- Update unit files
- Use vars for IPs
- Install containerd

* Use vars for IPs. Update outputs

* Remove CNI plugins - done earlier

* Update API versions

* Adjust VM RAM

* Update coredns version and api versions

* Update git ignore and attributes

* Note about deprecation warning

* Fix kubeconfig name

* Formatting changes + pin nginx version

* Update kubetest

* Update README

* Discuss why only 2 masters

* Note on changing service cidr range vs coredns

* Add RAM column to VM table

* Best practice - secure PKI

* Secure kubeconfig

* Add prev link

* Adding `Prev` links

* Squashed commit of the following:

commit 8fbd36069cbf7365f627e5ebf5a04e37cde085d9
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 20:06:10 2022 +0100

    Update dns-addon test

commit 5528e873ecbe3265155da48d24c24d696635af52
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 20:00:48 2022 +0100

    Fix get nodes

commit 0d88ab0d1c4b6a7ae05bc2552366460f741bb763
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 20:00:19 2022 +0100

    Fix env var name

commit e564db03ff9c4c9ef536bcc5cd999fa1e6a3de15
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 19:42:52 2022 +0100

    Update e2e-tests

commit 247a59f2c5b84e34972f396cf87a34bcbeb2d2ef
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 19:39:54 2022 +0100

    Updated e2e-tests

commit 60b33d025bb252570f41c13f90955ec8d59141a7
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 19:38:02 2022 +0100

    bashify commands in ```

commit 2814949d6dd569c59ea7ec61135784d51ad4de1f
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 19:35:32 2022 +0100

    Note deprecation warning when deploying weave

commit af0264e13e5f0e277f8f31e5115a813680aadd74
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 19:33:55 2022 +0100

    Nodes are ready at end of step 11

commit 050502386d36a8593ed7348e902cdff9ad9c64b2
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 19:30:00 2022 +0100

    Minor change CNI

commit 04bdc1483e9696ed018ac26b6480237ee1dcf1d1
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 19:21:22 2022 +0100

    Explain data at rest is in etcd

commit 243154b9866f5a7a1a49037f97e38c6bf7ffbcb7
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 19:18:49 2022 +0100

    Explanation of api cluster ip

commit dd168ac2e128cbd405248115d8724498fa18fa67
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 19:14:42 2022 +0100

    Include vagrant password

commit d51c65a77ac192e2468d92f0067958c69057a2e0
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 19:12:34 2022 +0100

    Update tmux message

commit 10f41737100ab410adb6b20712ee32cd80618e3d
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 19:09:23 2022 +0100

    Insert step to configure CNI on both workers
    Optionally with tmux

commit 8fd873f1492f6ea1c846b3309f57740e8501adee
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 18:42:27 2022 +0100

    Shuffle up to make room for common cni install

commit d650443b069a7543cbb4cf449818a81d84932007
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 07:34:59 2022 +0100

    Added warning output to componentstatuses

commit 7bfef8f16bd1a126dcf3e5f43a02d79517d64c74
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 07:34:38 2022 +0100

    Rearrange text

commit b16b92bc6513cf355a41afa22ddfe2696142c28b
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 07:34:18 2022 +0100

    Minor wording change
    DNS arress is conventionally .10

commit 96c9d25663ce3d721e670262bb6858e9a7183873
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 07:32:24 2022 +0100

    Use shell vars for etcd addresses

commit c9e223fba5324a1c65d6f583cf9e739b8459df5d
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 07:31:58 2022 +0100

    Update on network defaults

commit 1cf98649df9410b8a7d14c68bcb17c24aa6a210a
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 07:05:38 2022 +0100

    Get and install correct CNI components

commit 311905fba72f4a48cde4a73c589daea9b76042b7
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Thu Aug 25 06:18:55 2022 +0100

    Update Approve CSR

commit 4c39c84c172fde8ab2aafc4ea38b050eb7f3019b
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Wed Aug 24 20:34:53 2022 +0100

    Moving certs out of service kuebeconfigs

* Squashed commit of the following:

commit 252cc335739e3c8007ab86c951222aba954d80f7
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Sun Aug 28 20:29:23 2022 +0100

    Update external links

commit 8091d1a13bc5a29654db2b8fecd55b8180bf8cab
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Sun Aug 28 20:28:14 2022 +0100

    Mac M1 note

commit 8b7e6065ffb74532b6ad7570a8c978addcc7fb66
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Sun Aug 28 20:03:11 2022 +0100

    Tweak order of commands e2e tests

commit 857d039dd1dff28e92d392ad6c5e40814a9eb054
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Sun Aug 28 20:02:51 2022 +0100

    Fixing kubecomfig checks

commit 26f42049bebd2d539406e6e16c51bb06441702f1
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Sun Aug 28 15:51:13 2022 +0100

    Updated cert_verify

commit 0df54e4c3499e6d79b836e1dfcf74eb9fdf196b1
Author: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date:   Sun Aug 28 09:09:14 2022 +0100

    Rewite cert_verify
    Round 1 certs and kubeconfigs

* Update README
- Insert CNI lab
- Correct CNI versions

* Automate hostfile network settings
Determine from interface address passed in.

* Update 01-prerequisites.md

* Update 01-prerequisites.md

Correct the default vm ip range

* Review updates. Issue 1

* Review updates. Issue 2

* Review updates. Issue 3
In actual fact, the base script is cert_verfiy.sh so the error is in the
link created by the provisioner. You'll see that the later labs all
refer to it with underscore.

* Review updates. Issue 5

* Review updates. Issue 6

* Review updates. Issue 7
I whip through the scripts so fast, that even if I had copied it twice
to my quick script, I didn't notice it say that the resource exists and
is unchanged!

* These certs already copied in step 4

* Formatting and command grouping

* Review updates. Step 11 cert_verify
Needs to be done after kublet starts as it is looking
for the auto-issued cert

* Group coomand batches

* Remove duplicate clusterrolebinding

* Extraction of scripts from md using tool
This uses markdown comments and ```bash fence
to determine what to extract and for which hosts

Fixed shell var bug in step 11

* Fixed typos

* Be specific that we're doing shutdown, not suspend

* Minor edits for clarity

* remove the extra \

* Rename step 9 to CRI, as that's what it actually is

* Disambiguate CRI vs CNI

* small fixes

Co-authored-by: Tej Singh Rana <58101587+Tej-Singh-Rana@users.noreply.github.com>
2022-09-20 07:17:00 +01:00
Mumshad Mannambeth 6327752d82
Merge pull request #265 from dev-player/master
Updated the description for kubelet
2022-01-11 02:04:09 +08:00
Tej Singh Rana 7281d07e2c Updated the description for kubelet 2022-01-10 23:24:07 +05:30
Mohamed Ayman fc4cd79fa3
Merge pull request #225 from teerasits/patch-1
Update 13-kube-apiserver-to-kubelet.md
2021-07-04 19:13:28 +02:00
Mohamed Ayman 262f5a5735
Merge pull request #222 from freephile/patch-3
Removing duplicate code
2021-07-04 06:13:48 +02:00
Mohamed Ayman 385412cbd6
Merge pull request #231 from gottsman/master
Cleanup code to deploy the haproxy load balancer
2021-07-04 06:12:04 +02:00
Kevin Gottsman 95be2e97a7 Cleanup provisioning of kublet client certs 2021-05-18 04:42:07 -04:00
Kevin Gottsman 1fc3c1b2c6 Remove prompts from cut/paste 2021-05-18 04:32:28 -04:00
Kevin Gottsman c2a902f055 More cleanup to the haproxy setup 2021-05-18 04:28:08 -04:00
Kevin Gottsman fbb3b73b1f Fix haproxy install on load balancer 2021-05-18 04:25:52 -04:00
teerasits d62f7af933
Update 13-kube-apiserver-to-kubelet.md
Hi,
I'm getting this error.

vagrant@master-1:~$ kubectl exec -ti busybox -- nslookup kubernetes

error: unable to upgrade connection: Forbidden (user=kube-apiserver, verb=create, resource=nodes, subresource=proxy)

vagrant@master-1:~$

It's due to this change in GitHub..
[Correction: User should be system:kube-apiserver] 13-kube-apiserver-to-kubelet.md #118


I've just reverted this change and then it's OK.

cat <<EOF | kubectl apply --kubeconfig admin.kubeconfig -f -
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
  name: system:kube-apiserver
  namespace: ""
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:kube-apiserver-to-kubelet
subjects:
  - apiGroup: rbac.authorization.k8s.io
    kind: User
    name: kube-apiserver  # system:kube-apiserver 
EOF
2021-05-13 00:02:52 +08:00
Greg Rundlett 38df8f16bd
Removing duplicate code
docs/17-extra-dynamic-kubelet-configuration.md had duplicate code in the example.
2021-05-03 14:47:50 -04:00
Mohamed Ayman e695945532
Merge pull request #155 from ricardolopes86/missing-hyper-links
Add missing hyperlinks to the first documents.
2021-04-19 00:06:27 +02:00
Mohamed Ayman dc2137710c
Merge branch 'master' into missing-hyper-links 2021-04-19 00:06:18 +02:00
Mohamed Ayman 12e12ab6b9
Merge pull request #67 from jorgemarti/patch-1
Missing tmux info
2021-04-19 00:03:33 +02:00
Mohamed Ayman acee279989
Merge branch 'master' into patch-1 2021-04-19 00:03:24 +02:00
Mohamed Ayman a9c9591ad4
Merge pull request #68 from rocket357/master
Add comment about non-default number of hosts
2021-04-19 00:02:42 +02:00
Mohamed Ayman 6538fc895c
Merge pull request #118 from ChaturvediSulabh/patch-1
[Correction: User should be system:kube-apiserver] 13-kube-apiserver-to-kubelet.md
2021-04-18 23:43:27 +02:00
Mohamed Ayman 3e140bde11
Merge pull request #138 from danielalejandrohc/patch-1
Make the command to work straight
2021-04-18 23:42:34 +02:00
Mohamed Ayman 8d3e96120c
Merge branch 'master' into patch-1 2021-04-18 23:42:14 +02:00
Mohamed Ayman e0dae33e2b
Merge pull request #143 from sugimoccos/minor-update
add mv command
2021-04-18 23:40:47 +02:00
Mohamed Ayman f8584d49a5
Merge pull request #151 from freephile/patch-1
Update 10-tls-bootstrapping-kubernetes-workers.md
2021-04-18 23:39:18 +02:00
Mohamed Ayman 7b3f8ed6ce
Merge branch 'master' into patch-1 2021-04-18 23:39:09 +02:00
Mohamed Ayman 34821eb496
Merge pull request #159 from fferencik/patch-2
Update 13-kube-apiserver-to-kubelet.md
2021-04-18 23:28:29 +02:00
Mohamed Ayman 941f2b09e9
Merge pull request #181 from DmitryMihailov/patch-1
Update 17-extra-dynamic-kubelet-configuration.md with more descriptive instructions
2021-04-18 23:27:53 +02:00
Mohamed Ayman 08424203ae
Merge pull request #213 from mushdavtyan/design
changing-to-better-and-comfortable-design
2021-04-18 23:25:57 +02:00
Mohamed Ayman 526f0d1e57
Merge pull request #190 from trmatthe/patch-1
Update 10-tls-bootstrapping-kubernetes-workers.md
2021-04-18 23:24:49 +02:00
Mumshad Mannambeth faa86b954b
Merge pull request #197 from mudit000/patch-1
Update 10-tls-bootstrapping-kubernetes-workers.md
2021-04-10 00:39:33 +08:00
Mohamed Ayman dee32a6439
Merge pull request #168 from filipe-costa/update-end-to-end-docs
Update End-To-End tests to use new version of Go
2021-03-29 03:22:10 +02:00
Mohamed Ayman e61d965cb2
Merge pull request #144 from gertzakis/patch-1
Update coredns.yaml
2021-03-29 03:21:30 +02:00
Mohamed Ayman 2bfcf68d07
Merge pull request #141 from thilees/master
Update 02-compute-resources.md
2021-03-29 03:13:12 +02:00
Mohamed Ayman 016f76c1ae
Merge pull request #183 from rashmitrathod/patch-1
Update 08-bootstrapping-kubernetes-controllers.md
2021-03-29 03:06:00 +02:00
Mohamed Ayman 2a9cb597ee
Merge pull request #195 from holynakamoto/patch-1
Update 08-bootstrapping-kubernetes-controllers.md
2021-03-29 03:04:57 +02:00
vpalazhi 097fc74dc5
Update etcd-backup-and-restore.md 2021-03-25 19:53:43 -04:00
vpalazhi b9708b54e6
Update etcd-backup-and-restore.md 2021-03-25 18:59:23 -04:00
vpalazhi 20bce206fc
Update etcd-backup-and-restore.md 2021-03-25 18:58:39 -04:00
vpalazhi 417edac191
Update etcd-backup-and-restore.md 2021-03-25 18:53:55 -04:00
vpalazhi 309d66def9
Update etcd-backup-and-restore.md 2021-03-25 18:51:42 -04:00
mushdavtyan b516ed6ee6 changing-to-better-and-comfortable-design 2021-03-12 22:03:09 +04:00
Mohamed Ayman e8da7a0d7e
Merge pull request #194 from pythagarchitect/update_certificates
Add etcd server.crt and server.key information
2021-02-15 02:28:14 +02:00
Mohamed Ayman 1847d752a4
Merge pull request #49 from b10s/patch-3
Update 07-bootstrapping-etcd.md
2021-02-15 02:19:48 +02:00
Mohamed Ayman cd94836a43
Merge pull request #182 from himadriganguly/master
Fixed parameter error in OpenSSL.
2021-02-15 02:13:35 +02:00
Mohamed Ayman fe62e371d4
Merge pull request #180 from paraita/patch-1
Update 01-prerequisites.md
2021-02-14 21:41:39 +02:00
Mohamed Ayman cfa90e2ef2
add the --data-dir option 2021-02-03 01:57:07 +02:00
Mohamed Ayman c7d96b3600
Merge pull request #199 from mfzarko/patch-1
Update 11-configuring-kubectl.md
2021-02-03 01:47:34 +02:00
Mateusz Zarkowski 96e3a9b1ae
Update 11-configuring-kubectl.md
Move reference outside codeblock
2020-12-20 17:24:20 +01:00
vpalazhi 7dda532c57
Update etcd-backup-and-restore.md 2020-12-14 15:56:04 -05:00
vpalazhi 92cf957d05
Update etcd-backup-and-restore.md 2020-12-14 15:55:18 -05:00
mudit000 61263677bc
Update 10-tls-bootstrapping-kubernetes-workers.md 2020-12-14 00:53:23 +00:00