diff --git a/Migrations/Forget_Traefik_2023/README.md b/Migrations/Forget_Traefik_2023/README.md index 6d34b83..bc3e01c 100644 --- a/Migrations/Forget_Traefik_2023/README.md +++ b/Migrations/Forget_Traefik_2023/README.md @@ -1429,36 +1429,368 @@ node "slave01.filter.home" deleted ### Part 6 +Currently, the resources whereas: + +```yaml +192.168.1.2: pi4 +192.168.1.10: masterk +192.168.1.11: slave01 +``` + +I will change it to + +```yaml +192.168.1.9: masterk / pi4 +192.168.1.10: slave01 +192.168.1.11: slave02 +``` -# I am here <---- +#### Prepare NVME images etc. +Did the needful. + +#### Set up cluster + +Used the following ansible script to set up things arround. + +https://gitea.filterhome.xyz/ofilter/ansible_kubernetes_cluster + +##### run.sh + +
 ./run.sh 
+
+PLAY [Pre Setup] *************************************************************************************************************************************************************************************************************************
+
+TASK [apt update] ************************************************************************************************************************************************************************************************************************
+ok: [pi4.filter.home]
+changed: [slave02.filter.home]
+
+TASK [apt upgrade] ***********************************************************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Install sudo] **********************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [update facts] **********************************************************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+ok: [pi4.filter.home]
+
+TASK [Ensure localisation files for 'en_US.UTF-8' are available] *************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+ok: [pi4.filter.home]
+
+TASK [Ensure localisation files for 'en_US.UTF-8' are available] *************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+ok: [pi4.filter.home]
+
+TASK [Get current locale and language configuration] *************************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+ok: [pi4.filter.home]
+
+TASK [Configure locale to 'en_US.UTF-8' and language to 'en_US.UTF-8'] *******************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Make sure we have a 'wheel' group] *************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Allow 'wheel' group to have passwordless sudo] *************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Add user new_user_name] ************************************************************************************************************************************************************************************************************
+[DEPRECATION WARNING]: Encryption using the Python crypt module is deprecated. The Python crypt module is deprecated and will be removed from Python 3.13. Install the passlib library for continued encryption functionality. This 
+feature will be removed in version 2.17. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
+[DEPRECATION WARNING]: Encryption using the Python crypt module is deprecated. The Python crypt module is deprecated and will be removed from Python 3.13. Install the passlib library for continued encryption functionality. This 
+feature will be removed in version 2.17. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [adding user 'klussy' to group wheel] ***********************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Change root default password] ******************************************************************************************************************************************************************************************************
+[DEPRECATION WARNING]: Encryption using the Python crypt module is deprecated. The Python crypt module is deprecated and will be removed from Python 3.13. Install the passlib library for continued encryption functionality. This 
+feature will be removed in version 2.17. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
+[DEPRECATION WARNING]: Encryption using the Python crypt module is deprecated. The Python crypt module is deprecated and will be removed from Python 3.13. Install the passlib library for continued encryption functionality. This 
+feature will be removed in version 2.17. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [PermitRootLogin = no] **************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [PermitEmptyPasswords = no] *********************************************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [reboot] ****************************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+
+ +Pi4 got stuck to waiting for reboot, was expecting this issue already so returned to the old `shell: reboot` command. + +Nevertheless, resumed with the next playbook. + +
^C [ERROR]: User interrupted execution
+
+PLAY [Preparethings] *********************************************************************************************************************************************************************************************************************
+
+TASK [Gathering Facts] *******************************************************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+ok: [pi4.filter.home]
+
+TASK [debug] *****************************************************************************************************************************************************************************************************************************
+ok: [pi4.filter.home] => {
+    "set_hostname": "pi4.filter.home"
+}
+ok: [slave02.filter.home] => {
+    "set_hostname": "slave02.filter.home"
+}
+
+TASK [debug] *****************************************************************************************************************************************************************************************************************************
+ok: [pi4.filter.home] => {
+    "is_master": true
+}
+ok: [slave02.filter.home] => {
+    "is_master": false
+}
+
+TASK [Set a hostname] ********************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Swapoff] ***************************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Disable ram on boot (orangepi)] ****************************************************************************************************************************************************************************************************
+skipping: [pi4.filter.home]
+skipping: [slave02.filter.home]
+
+TASK [Disable ram on boot (armbian)] *****************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [apt prune containerd] **************************************************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+ok: [pi4.filter.home]
+
+TASK [apt update] ************************************************************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+ok: [pi4.filter.home]
+
+TASK [apt upgrade] ***********************************************************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+ok: [pi4.filter.home]
+
+TASK [apt install gnupg] *****************************************************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Creating a new directory] **********************************************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+ok: [pi4.filter.home]
+
+TASK [Add Docker GPG key] ****************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Add Docker APT repository] *********************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Add Kubernetes GPG key] ************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Add Kubernetes APT repository] *****************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [apt update] ************************************************************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Install Kubelet Kubeadm Kubectl] ***************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Hold kubeadm] **********************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Hold kubelet] **********************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Hold kubectl] **********************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Install Container Runtime] *********************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Containerd set default config] *****************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [SystemdCgroup = true] **************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Iptables thingies (not touching specific firewall rules.)] *************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Iptables thingies] *****************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Add the overlay module] ************************************************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+ok: [pi4.filter.home]
+
+TASK [Add the br_netfilter module] *******************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Apply changes (might need to use sysctl module with the reload flag, will try eventually)] *****************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Enable kubelet] ********************************************************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+ok: [pi4.filter.home]
+
+TASK [Enable containerd] *****************************************************************************************************************************************************************************************************************
+ok: [slave02.filter.home]
+ok: [pi4.filter.home]
+
+TASK [Enable kubelet] ********************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Restart containerd] ****************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Set /etc/hosts file content (template/base)] ***************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Init cluster] **********************************************************************************************************************************************************************************************************************
+skipping: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Export remote kubeconfig file] *****************************************************************************************************************************************************************************************************
+skipping: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+ +
TASK [Remove Taint (allows deployment in control plane node)] ****************************************************************************************************************************************************************************
+skipping: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Calico] ****************************************************************************************************************************************************************************************************************************
+skipping: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [MetalLB] ***************************************************************************************************************************************************************************************************************************
+skipping: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [Generate join token] ***************************************************************************************************************************************************************************************************************
+skipping: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+TASK [set_fact] **************************************************************************************************************************************************************************************************************************
+ok: [pi4.filter.home]
+skipping: [slave02.filter.home]
+
+TASK [debug] *****************************************************************************************************************************************************************************************************************************
+ok: [pi4.filter.home] => {
+    "kubeadm_join_command": "kubeadm join 192.168.1.9:6443 --token abcd1234abcd1234 --discovery-token-ca-cert-hash sha256:abcd1234abcd1234 "
+}
+skipping: [slave02.filter.home]
+
+TASK [Store join command in "./Exported/kubeadm-join.command"] ***************************************************************************************************************************************************************************
+skipping: [slave02.filter.home]
+changed: [pi4.filter.home -> localhost]
+
+TASK [Populate] **************************************************************************************************************************************************************************************************************************
+skipping: [pi4.filter.home]
+ok: [slave02.filter.home]
+
+TASK [debug] *****************************************************************************************************************************************************************************************************************************
+skipping: [pi4.filter.home]
+ok: [slave02.filter.home] => {
+    "_kubeadm_join_command": "kubeadm join 192.168.1.9:6443 --token abcd1234abcd1234 --discovery-token-ca-cert-hash sha256:abcd1234abcd1234 "
+}
+
+TASK [Join kubeadm] **********************************************************************************************************************************************************************************************************************
+skipping: [pi4.filter.home]
+changed: [slave02.filter.home]
+
+TASK [Delete user] ***********************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+ok: [pi4.filter.home]
+
+TASK [reboot] ****************************************************************************************************************************************************************************************************************************
+changed: [slave02.filter.home]
+changed: [pi4.filter.home]
+
+PLAY RECAP *******************************************************************************************************************************************************************************************************************************
+pi4.filter.home            : ok=15    changed=31    unreachable=0    failed=0    skipped=2       rescued=0    ignored=0   
+slave02.filter.home        : ok=12    changed=23    unreachable=0    failed=0    skipped=12      rescued=0    ignored=0   
+
+ + + + +#### Check cluster status + +Pods are deployed correctly ```shell +kubectl get pods --kubeconfig ksetup/Exported/kubeconfig.conf -A +``` +```text +NAMESPACE NAME READY STATUS RESTARTS AGE +kube-system calico-kube-controllers-85578c44bf-k5sgl 1/1 Running 1 51m +kube-system calico-node-2tn68 1/1 Running 1 (10m ago) 51m +kube-system calico-node-hksmv 1/1 Running 1 (10m ago) 12m +kube-system coredns-5d78c9869d-tblcq 1/1 Running 1 (10m ago) 71m +kube-system coredns-5d78c9869d-vmx8q 1/1 Running 1 (10m ago) 71m +kube-system etcd-pi4.filter.home 1/1 Running 1 (10m ago) 71m +kube-system kube-apiserver-pi4.filter.home 1/1 Running 1 (10m ago) 71m +kube-system kube-controller-manager-pi4.filter.home 1/1 Running 1 (10m ago) 71m +kube-system kube-proxy-cqvws 1/1 Running 1 (10m ago) 12m +kube-system kube-proxy-vwlkx 1/1 Running 1 (10m ago) 71m +kube-system kube-scheduler-pi4.filter.home 1/1 Running 1 (10m ago) 71m +metallb-system controller-595f88d88f-q87gr 1/1 Running 2 51m +metallb-system speaker-5zptn 1/1 Running 2 (8m29s ago) 50m +metallb-system speaker-whw4n 1/1 Running 2 (8m22s ago) 12m ``` +# I am here <---- ---- - - - - - - - - - - +## Should add labels to the SE resources etc. ## Difficulties - - The Certificate Manager must be located at the same namespace as the `istiod` service, without the LB location being taken into account.