Kubernetes: Configuração do Cluster Kubernetes Standard

= Configuração do Cluster Kubernetes sem HA =

Create a kubeadm-config.yaml
Criar arquivo kubeadm-config.yaml, com o conteúdo:

apiVersion: kubeadm.k8s.io/v1alpha2 kind: MasterConfiguration apiServerExtraArgs: enable-admission-plugins: PodSecurityPolicy kubernetesVersion: v1.11.9 networking: # This CIDR is a Calico default. Substitute or remove for your CNI provider. podSubnet: "192.168.0.0/16"

Initialize the master.

kubeadm init --config=kubeadm-config.yaml

To make kubectl work,

mkdir -p $HOME/.kube cp -i /etc/kubernetes/admin.conf $HOME/.kube/config chown $(id -u):$(id -g) $HOME/.kube/config

Anote a mensagem com o token para adicionar os demais nodes

kubeadm join --token token master-ip:master-port --discovery-token-ca-cert-hash sha256:hash

For HCL Component pack
If you enabled the PodSecurityPolicy admission plugin in step 6, then you need to download the Component Pack installation zip to the master node, extract the file privileged-psp-with-rbac.yaml and apply it so that system pods are able to start in the kube-system namespace:

unzip -p IC-ComponentPack-6.0.0.8.zip cd microservices_connections/hybridcloud/support/psp/

To allow system pods to start in the kube-system namespace, apply the yaml file:

kubectl apply -f privileged-psp-with-rbac.yaml

Instalar o Calico Network
wget https://docs.projectcalico.org/v3.3/getting-started/kubernetes/installation/hosted/rbac-kdd.yaml -O rbac-kdd.yaml wget https://docs.projectcalico.org/v3.3/getting-started/kubernetes/installation/hosted/kubernetes-datastore/calico-networking/1.7/calico.yaml -O calico.yaml kubectl apply -f rbac-kdd.yaml kubectl apply -f calico.yaml

Eu prefiro baixar os arquivos pois dá pra fazer off-line

Após a configuração, veja o artigo Kubernetes: Verificando o estado do Kubernetes após a configuração, este tópico inclui debug o Calico.

Adicionar os demais nodes
Execute o comando com o token para adicionar os demais nodes

kubeadm join --token token master-ip:master-port --discovery-token-ca-cert-hash sha256:hash

= Ver também =


 * Mais Artigos sobre Connections
 * Kubernetes: Instalação Offline ou Instalação usando repositórios privados
 * HCL Connections: Administrando o Component Pack