kelseyhightower ( Kelsey Hightower )

commit sha f0c42a469b60235bb466bdd4e2ab9e74b109d94c

update Dockerfiles

CA and Generating TLS Certificates and GoDaddy wildcard certificate

push time in a month

PublicEvent

issue closedkelseyhightower/kubernetes-the-hard-way

Hi! I read Provisioning a CA and Generating TLS Certificates. I have GoDaddy wildcard certificate *.myfirm.com and I want use it for Kubernetes PKI. Is it possible? How to need executing this?: {

cat > ca-config.json <<EOF { "signing": { "default": { "expiry": "8760h" }, "profiles": { "kubernetes": { "usages": ["signing", "key encipherment", "server auth", "client auth"], "expiry": "8760h" } } } } EOF

cat > ca-csr.json <<EOF { "CN": "Kubernetes", "key": { "algo": "rsa", "size": 2048 }, "names": [ { "C": "US", "L": "Portland", "O": "Kubernetes", "OU": "CA", "ST": "Oregon" } ] } EOF

cfssl gencert -initca ca-csr.json | cfssljson -bare ca

}

This need to save as xxx.yaml and execute with kubectl?! Please give me example!

closed time in 2 months

itkroplis

issue commentkelseyhightower/kubernetes-the-hard-way

CA and Generating TLS Certificates and GoDaddy wildcard certificate

It maybe possible, but I don't have the bandwidth to test it.

itkroplis

comment created time in 2 months

issue commentkelseyhightower/kubernetes-the-hard-way

CA / Certs / configuration YAML in /etc?

These are good suggestions but I would really like to avoid change dir structure unless it really contributes to the over all learning experience.

SudoBrendan

comment created time in 2 months

issue closedkelseyhightower/kubernetes-the-hard-way

CA / Certs / configuration YAML in /etc?

Hi everyone,

First, I seriously enjoyed the guide and gained a much better understanding of Kubernetes by following along and standing up my own cluster from scratch - TYVM for the assist and for continuing to keep this guide up to date!!

Nitpicking here (or trying to get a better understanding) for the decision to put all .pem, .kubeconfig, and several k8s component .yaml configuration files in /var/lib/ (steps 8/9, then referenced in later steps as well when configuring services in flags) - what was the rationale there? The Linux Filesystem Hierarchy Standard argues that no file in /var/lib should need to be modified to reconfigure a package's operation. I feel like etcd should be the only thing touching /var in this walkthrough via it's state files aside from systemd's additions to /var/log/syslog.

In my walkthrough, I migrated all these files to /etc/kubernetes without issue (in addition to updating how they are referenced in the systemd configs) in various forms on my master/worker nodes:

/etc/kubernetes/ssl/
/etc/kubernetes/kube-controller-manager/
/etc/kubernetes/kube-scheduler/
/etc/kubernetes/kube-api/
/etc/kubernetes/kubelet/
/etc/kubernetes/kube-proxy/

...though in reality, all this stuff could just be thrown in a flat /etc/kubernetes/ dir for simplicity. What do ya'll think about a change to the walkthrough to put configuration data (all certificates, kubeconfigs, and YAML configuration files) in /etc/kubernetes/, with no "kubernetes" directories at all in /var? ...or am I missing something - maybe bootstrapper tools like kubeadm also put those files there, so it's written this way for consistency?

In a related vein, I wasn't a fan of copying the same certificate files to /etc/etcd/ that also exist in /var/lib/kubernetes - I think this calls for a symlink so we don't forget to update one cert and not the other when it expires :)

I can submit a PR if this is seen as an improvement, if not, close this out - LMK.

Thanks again, really appreciated this guide!

closed time in 2 months

SudoBrendan

issue closedkelseyhightower/kubernetes-the-hard-way

Path on Google Cloud Shell has /google/google-cloud-sdk/bin before /usr/local/bin

which means that kubectl version in the prequisites doesn't return the value expected. Not sure if this is a "big deal" or not.

closed time in 2 months

gavincampbell

issue commentkelseyhightower/kubernetes-the-hard-way

Path on Google Cloud Shell has /google/google-cloud-sdk/bin before /usr/local/bin

It should be fine and I may consider using the full path to the /usr/local/bin directory.

gavincampbell

comment created time in 2 months

issue commentkelseyhightower/kubernetes-the-hard-way

Why was the Untrusted Workloads removed?

@moehajj is right. I need to keep this thing focused.

alexclarkofficial

comment created time in 2 months

issue closedkelseyhightower/kubernetes-the-hard-way

Why was the Untrusted Workloads removed?

This is more of a naive question than an issue.

I am following https://github.com/prabhatsharma/kubernetes-the-hard-way-aws and periodically cross referencing this tutorial when I have problems. I noticed Untrusted Workloads was removed from the Smoke Test lab when the tutorial was updated for Kubernetes 1.15.

I also noticed that the AWS tutorial has a Check images/pods/containers on worker nodes using crictl section in the Smoke Test lab, while this tutorial does not.

Can someone shed some light on why these sections are not present/were removed?

closed time in 2 months

alexclarkofficial

Fix minor typo

Typo empthy => empty @ docs/09-bootstrapping-kubernetes-workers.md#disable_swap

+1 -1

1 commit in zevisert/kubernetes-the-hard-way/tree/patch-1 kelseyhightower/kubernetes-the-hard-way/tree/master

0 comment

1 changed file

zevisert

pr closed time in 2 months

small fixups

+72 -124

14 commit in teknoraver/kubernetes-the-hard-way/tree/master kelseyhightower/kubernetes-the-hard-way/tree/master

1 comment

6 changed files

teknoraver

pr closed time in 2 months

pull request commentkelseyhightower/kubernetes-the-hard-way

small fixups

The brackets where added to make it easier to copy and paste and I'm still on the fence regarding the syntax highlighting.

teknoraver

comment created time in 2 months

Added lab duration expectations

Reviewers

Added lab duration expectations

+2 -0

1 commit in patpicos/kubernetes-the-hard-way-on-azure/tree/patch-2 kelseyhightower/kubernetes-the-hard-way/tree/master

1 comment

1 changed file

patpicos

pr closed time in 2 months

pull request commentkelseyhightower/kubernetes-the-hard-way

I'm going to consider this per chapter and hopefully come up with an accurate time estimate.

patpicos

comment created time in 2 months

correct typo

+1 -1

1 commit in dmjacobsen/kubernetes-the-hard-way/tree/patch-1 kelseyhightower/kubernetes-the-hard-way/tree/master

2 comments

1 changed file

dmjacobsen

pr closed time in 2 months

Fix typo

"empthy" should be "empty"

+1 -1

1 commit in jpmcb/kubernetes-the-hard-way/tree/patch-1 kelseyhightower/kubernetes-the-hard-way/tree/master

1 comment

1 changed file

jpmcb

pr closed time in 2 months

Update 09-bootstrapping-kubernetes-workers.md

spelling correction. "empthy" to "empty"

+1 -1

1 commit in thedancollins/kubernetes-the-hard-way/tree/patch-1 kelseyhightower/kubernetes-the-hard-way/tree/master

1 comment

1 changed file

thedancollins

pr closed time in 2 months

created tagkelseyhightower/kubernetes-the-hard-way

tag1.18.6

Bootstrap Kubernetes the hard way on Google Cloud Platform. No scripts.

created time in 2 months

commit sha ca96371e4d2d2176e8b2c3f5b656b5d92973479e

Update to Kubernetes 1.18.6

push time in 2 months

commit sha e5f500b390ee687ffdbd19ae303d46e00f166d0f

Update to Kubernetes 1.18.6

push time in 2 months

Upgrade Kube v1.16.2

This PR upgrades Kubernetes to v1.16.2 and upgrades all other components explicitly or implicitly (nginx image).

The clusterrole/clusterrolebinding are changed to rbac.authorization.k8s.io/v1

+41 -41

1 commit in drnic/kubernetes-the-hard-way/tree/kube-1.16 kelseyhightower/kubernetes-the-hard-way/tree/master

1 comment

8 changed files

drnic

pr closed time in 2 months

pull request commentkelseyhightower/kubernetes-the-hard-way

Upgrade Kube v1.16.2

This guide now uses 1.18.6

drnic

comment created time in 2 months

commit sha 8fd6380bbc92137f8d1cb62f00865f1b3c681d3c

Update to Kubernetes 1.18.6

push time in 2 months

PR merged kelseyhightower/kubernetes-the-hard-way

Update to Kubernetes 1.18.6

+124 -118

1 commit in kelseyhightower/kubernetes-the-hard-way/tree/1.18.6 kelseyhightower/kubernetes-the-hard-way/tree/master

0 comment

12 changed files

kelseyhightower

pr closed time in 2 months

PR opened kelseyhightower/kubernetes-the-hard-way

Update to Kubernetes 1.18.6

+124 -118

1 commit in kelseyhightower/kubernetes-the-hard-way/tree/1.18.6 kelseyhightower/kubernetes-the-hard-way/tree/master

0 comment

12 changed files

pr created time in 2 months

Fix typo

+1 -1

1 commit in stroebitzer/kubernetes-the-hard-way/tree/patch-1 kelseyhightower/kubernetes-the-hard-way/tree/master

2 comments

1 changed file

stroebitzer

pr closed time in 2 months

pull request commentkelseyhightower/kubernetes-the-hard-way

Fix typo

Fixed on the latest release.

stroebitzer

comment created time in 2 months

Update 03-compute-resources.md

Update 03-compute-resources.md

In the Public IP Address Section: updated with latest version of output returned by the gcloud compute addresses list... example command

+2 -2

1 commit in kcalmond/kubernetes-the-hard-way/tree/master kelseyhightower/kubernetes-the-hard-way/tree/master

1 comment

1 changed file

kcalmond

pr closed time in 2 months

pull request commentkelseyhightower/kubernetes-the-hard-way

This has been updated in the latest release.

kcalmond

comment created time in 2 months

Fixed typo

'empthy' > 'empty'

+1 -1

1 commit in scamargo/kubernetes-the-hard-way/tree/patch-1 kelseyhightower/kubernetes-the-hard-way/tree/master

2 comments

1 changed file

scamargo

pr closed time in 2 months

pull request commentkelseyhightower/kubernetes-the-hard-way

Fixed typo

This will be fixed in the next update.

scamargo

comment created time in 2 months

Resolve non-local domains in CoreDNS config

Resolve non-local domains in CoreDNS config

Currently CoreDNS only resolves domains in cluster.local domain. Added a forward clause to mitigate this.

+1 -0

1 commit in tahajahangir/kubernetes-the-hard-way/tree/patch-1 kelseyhightower/kubernetes-the-hard-way/tree/master

1 comment

1 changed file

tahajahangir

pr closed time in 2 months

pull request commentkelseyhightower/kubernetes-the-hard-way

This is a good suggestion but I'm going to avoid picking a DNS forwarder for now.

tahajahangir

comment created time in 2 months

Fix spelling error in step 09.

Fix spelling error in step 09.

+1 -1

1 commit in e-blackwelder/kubernetes-the-hard-way/tree/patch-1 kelseyhightower/kubernetes-the-hard-way/tree/master

2 comments

1 changed file

e-blackwelder

pr closed time in 2 months

pull request commentkelseyhightower/kubernetes-the-hard-way

This will be fixed on the next update.

e-blackwelder

comment created time in 2 months

commit sha f28bc8fecd91867859011350ca7def279ba43ce0

Update to Kubernetes 1.18.6

push time in 2 months

New branch for Proxmox/KVM procedure and with updated components (Kubernetes 1.18.4, ...)

New branch for Proxmox/KVM procedure and with updated components (Kubernetes 1.18.4, ...)

Hello,

I adapted the tutorial so that it could be used on a Proxmox (KVM) architecture and updated some components installed in the tutorial. I think it can be a good idea to create a new branch dedicated to Proxmox (and/or KVM) architecture.

This includes a network architecture diagram.

Versions change:

Kubernetes (kube-apiserver, kube-controller-manager, kube-scheduler and kubectl) : 1.15.3 -> 1.18.4
containerd : 1.2.9 -> 1.3.4
cni-plugins : v0.8.2 -> v0.8.5
etcd : v3.4.0 -> v3.4.9
cri-tools : 1.15.0 -> 1.17.0

Some other minor updates has been integrated.

To choose the versions more easily I used the following release notes : https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.18.md#v1184

I tested this tutorial adaptation multiple times (and lots of minor specific debug tests carried out during the adaptation).

Don't hesitate if you have any questions or comments.

nemosupinfo ("n.hauducSUPINFO/Wirebrass" that we can see in the commits is one of my other GitHub accounts).

+895 -862

41 commit in nemosupinfo/kubernetes-the-hard-way-on-proxmox/tree/master kelseyhightower/kubernetes-the-hard-way/tree/master

1 comment

22 changed files

nemosupinfo

pr closed time in 2 months

pull request commentkelseyhightower/kubernetes-the-hard-way

I just don't have the bandwidth to maintain or review more than one provider for this guide. I've encourage people to create their own forks for this use case.

nemosupinfo

comment created time in 2 months

bcvbxcvbxcvb

xcbvxcvbxcvb

+2893 -1625

154 commit in mmumshad/kubernetes-the-hard-way/tree/master kelseyhightower/kubernetes-the-hard-way/tree/master

0 comment

80 changed files

sandeeptsg9

pr closed time in 2 months