diff --git a/Migrations/Forget_Traefik_2023/README.md b/Migrations/Forget_Traefik_2023/README.md index 6d34b83..bc3e01c 100644 --- a/Migrations/Forget_Traefik_2023/README.md +++ b/Migrations/Forget_Traefik_2023/README.md @@ -1429,36 +1429,368 @@ node "slave01.filter.home" deleted ### Part 6 +Currently, the resources whereas: + +```yaml +192.168.1.2: pi4 +192.168.1.10: masterk +192.168.1.11: slave01 +``` + +I will change it to + +```yaml +192.168.1.9: masterk / pi4 +192.168.1.10: slave01 +192.168.1.11: slave02 +``` -# I am here <---- +#### Prepare NVME images etc. +Did the needful. + +#### Set up cluster + +Used the following ansible script to set up things arround. + +https://gitea.filterhome.xyz/ofilter/ansible_kubernetes_cluster + +##### run.sh + +
✗ ./run.sh + +PLAY [Pre Setup] ************************************************************************************************************************************************************************************************************************* + +TASK [apt update] ************************************************************************************************************************************************************************************************************************ +ok: [pi4.filter.home] +changed: [slave02.filter.home] + +TASK [apt upgrade] *********************************************************************************************************************************************************************************************************************** +ok: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Install sudo] ********************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [update facts] ********************************************************************************************************************************************************************************************************************** +ok: [slave02.filter.home] +ok: [pi4.filter.home] + +TASK [Ensure localisation files for 'en_US.UTF-8' are available] ************************************************************************************************************************************************************************* +ok: [slave02.filter.home] +ok: [pi4.filter.home] + +TASK [Ensure localisation files for 'en_US.UTF-8' are available] ************************************************************************************************************************************************************************* +ok: [slave02.filter.home] +ok: [pi4.filter.home] + +TASK [Get current locale and language configuration] ************************************************************************************************************************************************************************************* +ok: [slave02.filter.home] +ok: [pi4.filter.home] + +TASK [Configure locale to 'en_US.UTF-8' and language to 'en_US.UTF-8'] ******************************************************************************************************************************************************************* +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Make sure we have a 'wheel' group] ************************************************************************************************************************************************************************************************* +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Allow 'wheel' group to have passwordless sudo] ************************************************************************************************************************************************************************************* +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Add user new_user_name] ************************************************************************************************************************************************************************************************************ +[DEPRECATION WARNING]: Encryption using the Python crypt module is deprecated. The Python crypt module is deprecated and will be removed from Python 3.13. Install the passlib library for continued encryption functionality. This +feature will be removed in version 2.17. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. +[DEPRECATION WARNING]: Encryption using the Python crypt module is deprecated. The Python crypt module is deprecated and will be removed from Python 3.13. Install the passlib library for continued encryption functionality. This +feature will be removed in version 2.17. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [adding user 'klussy' to group wheel] *********************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Change root default password] ****************************************************************************************************************************************************************************************************** +[DEPRECATION WARNING]: Encryption using the Python crypt module is deprecated. The Python crypt module is deprecated and will be removed from Python 3.13. Install the passlib library for continued encryption functionality. This +feature will be removed in version 2.17. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. +[DEPRECATION WARNING]: Encryption using the Python crypt module is deprecated. The Python crypt module is deprecated and will be removed from Python 3.13. Install the passlib library for continued encryption functionality. This +feature will be removed in version 2.17. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [PermitRootLogin = no] ************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [PermitEmptyPasswords = no] ********************************************************************************************************************************************************************************************************* +ok: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [reboot] **************************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] ++ +Pi4 got stuck to waiting for reboot, was expecting this issue already so returned to the old `shell: reboot` command. + +Nevertheless, resumed with the next playbook. + +
^C [ERROR]: User interrupted execution + +PLAY [Preparethings] ********************************************************************************************************************************************************************************************************************* + +TASK [Gathering Facts] ******************************************************************************************************************************************************************************************************************* +ok: [slave02.filter.home] +ok: [pi4.filter.home] + +TASK [debug] ***************************************************************************************************************************************************************************************************************************** +ok: [pi4.filter.home] => { + "set_hostname": "pi4.filter.home" +} +ok: [slave02.filter.home] => { + "set_hostname": "slave02.filter.home" +} + +TASK [debug] ***************************************************************************************************************************************************************************************************************************** +ok: [pi4.filter.home] => { + "is_master": true +} +ok: [slave02.filter.home] => { + "is_master": false +} + +TASK [Set a hostname] ******************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Swapoff] *************************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Disable ram on boot (orangepi)] **************************************************************************************************************************************************************************************************** +skipping: [pi4.filter.home] +skipping: [slave02.filter.home] + +TASK [Disable ram on boot (armbian)] ***************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [apt prune containerd] ************************************************************************************************************************************************************************************************************** +ok: [slave02.filter.home] +ok: [pi4.filter.home] + +TASK [apt update] ************************************************************************************************************************************************************************************************************************ +ok: [slave02.filter.home] +ok: [pi4.filter.home] + +TASK [apt upgrade] *********************************************************************************************************************************************************************************************************************** +ok: [slave02.filter.home] +ok: [pi4.filter.home] + +TASK [apt install gnupg] ***************************************************************************************************************************************************************************************************************** +ok: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Creating a new directory] ********************************************************************************************************************************************************************************************************** +ok: [slave02.filter.home] +ok: [pi4.filter.home] + +TASK [Add Docker GPG key] **************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Add Docker APT repository] ********************************************************************************************************************************************************************************************************* +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Add Kubernetes GPG key] ************************************************************************************************************************************************************************************************************ +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Add Kubernetes APT repository] ***************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [apt update] ************************************************************************************************************************************************************************************************************************ +ok: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Install Kubelet Kubeadm Kubectl] *************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Hold kubeadm] ********************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Hold kubelet] ********************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Hold kubectl] ********************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Install Container Runtime] ********************************************************************************************************************************************************************************************************* +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Containerd set default config] ***************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [SystemdCgroup = true] ************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Iptables thingies (not touching specific firewall rules.)] ************************************************************************************************************************************************************************* +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Iptables thingies] ***************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Add the overlay module] ************************************************************************************************************************************************************************************************************ +ok: [slave02.filter.home] +ok: [pi4.filter.home] + +TASK [Add the br_netfilter module] ******************************************************************************************************************************************************************************************************* +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Apply changes (might need to use sysctl module with the reload flag, will try eventually)] ***************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Enable kubelet] ******************************************************************************************************************************************************************************************************************** +ok: [slave02.filter.home] +ok: [pi4.filter.home] + +TASK [Enable containerd] ***************************************************************************************************************************************************************************************************************** +ok: [slave02.filter.home] +ok: [pi4.filter.home] + +TASK [Enable kubelet] ******************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Restart containerd] **************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Set /etc/hosts file content (template/base)] *************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Init cluster] ********************************************************************************************************************************************************************************************************************** +skipping: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Export remote kubeconfig file] ***************************************************************************************************************************************************************************************************** +skipping: [slave02.filter.home] +changed: [pi4.filter.home] ++ +
TASK [Remove Taint (allows deployment in control plane node)] **************************************************************************************************************************************************************************** +skipping: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Calico] **************************************************************************************************************************************************************************************************************************** +skipping: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [MetalLB] *************************************************************************************************************************************************************************************************************************** +skipping: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [Generate join token] *************************************************************************************************************************************************************************************************************** +skipping: [slave02.filter.home] +changed: [pi4.filter.home] + +TASK [set_fact] ************************************************************************************************************************************************************************************************************************** +ok: [pi4.filter.home] +skipping: [slave02.filter.home] + +TASK [debug] ***************************************************************************************************************************************************************************************************************************** +ok: [pi4.filter.home] => { + "kubeadm_join_command": "kubeadm join 192.168.1.9:6443 --token abcd1234abcd1234 --discovery-token-ca-cert-hash sha256:abcd1234abcd1234 " +} +skipping: [slave02.filter.home] + +TASK [Store join command in "./Exported/kubeadm-join.command"] *************************************************************************************************************************************************************************** +skipping: [slave02.filter.home] +changed: [pi4.filter.home -> localhost] + +TASK [Populate] ************************************************************************************************************************************************************************************************************************** +skipping: [pi4.filter.home] +ok: [slave02.filter.home] + +TASK [debug] ***************************************************************************************************************************************************************************************************************************** +skipping: [pi4.filter.home] +ok: [slave02.filter.home] => { + "_kubeadm_join_command": "kubeadm join 192.168.1.9:6443 --token abcd1234abcd1234 --discovery-token-ca-cert-hash sha256:abcd1234abcd1234 " +} + +TASK [Join kubeadm] ********************************************************************************************************************************************************************************************************************** +skipping: [pi4.filter.home] +changed: [slave02.filter.home] + +TASK [Delete user] *********************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +ok: [pi4.filter.home] + +TASK [reboot] **************************************************************************************************************************************************************************************************************************** +changed: [slave02.filter.home] +changed: [pi4.filter.home] + +PLAY RECAP ******************************************************************************************************************************************************************************************************************************* +pi4.filter.home : ok=15 changed=31 unreachable=0 failed=0 skipped=2 rescued=0 ignored=0 +slave02.filter.home : ok=12 changed=23 unreachable=0 failed=0 skipped=12 rescued=0 ignored=0 ++ + + + +#### Check cluster status + +Pods are deployed correctly ```shell +kubectl get pods --kubeconfig ksetup/Exported/kubeconfig.conf -A +``` +```text +NAMESPACE NAME READY STATUS RESTARTS AGE +kube-system calico-kube-controllers-85578c44bf-k5sgl 1/1 Running 1 51m +kube-system calico-node-2tn68 1/1 Running 1 (10m ago) 51m +kube-system calico-node-hksmv 1/1 Running 1 (10m ago) 12m +kube-system coredns-5d78c9869d-tblcq 1/1 Running 1 (10m ago) 71m +kube-system coredns-5d78c9869d-vmx8q 1/1 Running 1 (10m ago) 71m +kube-system etcd-pi4.filter.home 1/1 Running 1 (10m ago) 71m +kube-system kube-apiserver-pi4.filter.home 1/1 Running 1 (10m ago) 71m +kube-system kube-controller-manager-pi4.filter.home 1/1 Running 1 (10m ago) 71m +kube-system kube-proxy-cqvws 1/1 Running 1 (10m ago) 12m +kube-system kube-proxy-vwlkx 1/1 Running 1 (10m ago) 71m +kube-system kube-scheduler-pi4.filter.home 1/1 Running 1 (10m ago) 71m +metallb-system controller-595f88d88f-q87gr 1/1 Running 2 51m +metallb-system speaker-5zptn 1/1 Running 2 (8m29s ago) 50m +metallb-system speaker-whw4n 1/1 Running 2 (8m22s ago) 12m ``` +# I am here <---- ---- - - - - - - - - - - +## Should add labels to the SE resources etc. ## Difficulties - - The Certificate Manager must be located at the same namespace as the `istiod` service, without the LB location being taken into account.