Kubernetes Build: Difference between revisions
| Line 33: | Line 33: | ||
Heartbeat Configuration Files | Heartbeat Configuration Files | ||
[[heartbeat ha.cf|ha.cf]]< | [[heartbeat ha.cf|ha.cf]]<br> | ||
[[heartbeat authkeys|authkeys]]< | [[heartbeat authkeys|authkeys]]<br> | ||
[[heartbeat haresources|haresources]]< | [[heartbeat haresources|haresources]]<br> | ||
us-nlb-[01,02] have heartbeat installed to manage the shared IP addresses between the two. | us-nlb-[01,02] have heartbeat installed to manage the shared IP addresses between the two. | ||
| Line 82: | Line 82: | ||
[https://www.openpolicyagent.org Open Policy Agent] | [https://www.openpolicyagent.org Open Policy Agent] | ||
[https://github.com/weaveworks/kured kured] | |||
Revision as of 22:16, 7 October 2020
Physical Build Out
Physical Information
Physical Node VLAN 50
Physical Node Network 10.0.50.0/24
Kubernetes Network
Pod Network CIDR 10.60.0.0/16
Node Build Out
| Physical Node | US Node Name | EU Node Name | Etcd Node | NLB Node |
|---|---|---|---|---|
| j | us-ctrl-01 | eu-wrk-01 | eu-etcd-01 | us-nlb-01 |
| a | us-ctrl-02 | eu-wrk-02 | eu-etcd-02 | us-nlb-02 |
| r | us-wrk-01 | eu-wrk-03 | eu-etcd-03 | us-nlb-03 |
| v | us-wrk-02 | eu-wrk-04 | us-etcd-01 | eu-nlb-01 |
| i | us-wrk-03 | eu-ctrl-01 | us-etcd-02 | eu-nlb-02 |
| s | us-wrk-04 | eu-ctrl-02 | us-etcd-03 | eu-nlb-03 |
HA Config for Etcd & K8S Masters
Two virtual IP addresses, 10.1.10.5 and 10.1.10.6, are shared between us-nlb-01 and us-nlb-02.
Heartbeat Configuration Files
us-nlb-[01,02] have heartbeat installed to manage the shared IP addresses between the two.
10.1.10.5 is for usage as the Etcd load-balanced IP address
10.1.10.6 is for usage as the Kubernetes API endpoint
Kubernetes Installation
Certificate Authority
Kubernetes Config Files
Data Encryption
Bootstrapping etcd
Bootstrapping K8S Controllers
Bootstrapping K8S Workers
Configure Kubectl
Installing Cilium / Network Routing
Installing CoreDNS
Kubernetes Terms
Building Upon Kubernetes
CNI Networking : Cilium
Service Mesh : Istio
LoadBalancing : MetalLB
Services To Deploy
Additional Elements
GitLab
jaeger