Post: Kubernetes the hard way

[masayukig]

I'll try the Kubernetes the Hard way . So, it might be good to leave key terms and components.

Components

• kubectl
• CFSSL
  and like these.

    Kubernetes 1.12.0
    containerd Container Runtime 1.2.0-rc.0
    gVisor 50c283b9f56bb7200938d9e207355f05f79f0d17
    CNI Container Networking 0.6.0
    etcd v3.3.9
    CoreDNS v1.2.2

Labs

This tutorial assumes you have access to the Google Cloud Platform. While GCP is used for basic infrastructure requirements the lessons learned in this tutorial can be applied to other platforms.

    Prerequisites
    Installing the Client Tools
    Provisioning Compute Resources
    Provisioning the CA and Generating TLS Certificates
    Generating Kubernetes Configuration Files for Authentication
    Generating the Data Encryption Config and Key
    Bootstrapping the etcd Cluster
    Bootstrapping the Kubernetes Control Plane
    Bootstrapping the Kubernetes Worker Nodes
    Configuring kubectl for Remote Access
    Provisioning Pod Network Routes
    Deploying the DNS Cluster Add-on
    Smoke Test
    Cleaning Up

[masayukig]

1st, try it on the Google cloud and then, on my private cloud :)

[masayukig]

Idea: make a bash script for an automation

[masayukig]

Conclusion

• What I've learned
  • foo
  • bar
  • blah, blah, blah
• Do I really recommend this for beginners?
  • Yes, because blah, blah, blah..
• Total cost for this exercise
• Total hours

[masayukig]

Run on a cloud console on GCP

$ gcloud version
Google Cloud SDK 225.0.0
alpha 2018.11.09
app-engine-go
app-engine-java 1.9.68
app-engine-php " "
app-engine-python 1.9.80
app-engine-python-extras 1.9.74
beta 2018.11.09
bq 2.0.37
cbt
cloud-build-local
cloud-datastore-emulator 2.0.2
core 2018.11.09
datalab 20180823
docker-credential-gcr
gcd-emulator v1beta3-1.0.0
gsutil 4.34
kubectl 2018.09.17
pubsub-emulator 2018.02.02

[masayukig]

Conclusion should be put on the first page.

[masayukig]

Prerequisites: done

NOTE: I picked the us-west1 region for the cost efficiency. (Tokyo region is around 5% expensive.)

[masayukig]

Installing the Client Tools: Done

[masayukig]

Provisioning Compute Resources: Done

[masayukig]

Provisioning a CA and Generating TLS Certificates: Done

Created keys and distributed them to the appropriate servers.

[masayukig]

Generating Kubernetes Configuration Files for Authentication: Done

Generated config files and distributed them to the appropriate servers.

It's a bit annoying to input my password for ssh many times.

[masayukig]

Generating the Data Encryption Config and Key: Done

I changed my passphrase to empty for the private key.

[masayukig]

Bootstrapping the etcd Cluster: Done

With using tmux synchronize-panes, it was really easy.

[masayukig]

Bootstrapping the Kubernetes Control Plane: Done

The Kubernetes Frontend Load Balancer must be done on a client not on the clusters.

[masayukig]

Bootstrapping the Kubernetes Worker Nodes: Done

[masayukig]

Configuring kubectl for Remote Access: Done