alosadagrande/kubernetes-the-hard-way-libvirt-kvm

Bootstrap HA Kubernetes the hard way on a physical host running libvirtd

Kubernetes The Hard Way (Libvirt KVM edition)

This tutorial walks you through setting up Kubernetes the hard way. This guide is not for people looking for a fully automated command to bring up a Kubernetes cluster. If that's you then check out the Getting Started Guides.

Kubernetes The Hard Way is optimized for learning, which means taking the long route to ensure you understand each task required to bootstrap a Kubernetes cluster.

The results of this tutorial should not be viewed as production ready, and may receive limited support from the community, but don't let that stop you from learning!

Copyright

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.

Differences with the original kubernetes-the-hard-way and others

Note: This tutorial has been forked from Kubernetes The Hard Way wrote by Kelsey Hightower and it is based also on Kubernetes The Hard Way (Openstack Edition) by Eduardo Mínguez. Special thanks to both.

The main difference is that instead of running our cluster on top of an IaaS solution as Google Cloud or OpenStack, we aim to deploy a Kubernetes cluster on a baremetal server. We will leverage the virtualization capabilities that comes with GNU/Linux (libvirt/KVM/QEMU) to easily provide a similar virtual infrastructure. Note that in this case, we could use any spare baremetal server or laptop (with enough resources) running a GNU/Linux distribution.

Some other differences in this installation against the original one:

• CentOS 7/8 instead Ubuntu as the operating system of the instances.
• Dedicated instance for load balancing (with HAProxy).

Target Audience

The target audience for this tutorial is someone planning to support a production Kubernetes cluster and wants to understand how everything fits together.

Cluster Details

Kubernetes The Hard Way guides you through bootstrapping a highly available Kubernetes cluster with end-to-end encryption between components and RBAC authentication.

• Kubernetes 1.16.2
• containerd Container Runtime 1.3.0
• coredns v1.6.2
• cni v0.7.3
• etcd v3.4.0

Labs

This tutorial assumes you have access to an OpenStack environment. While OSP is used for basic infrastructure requirements the lessons learned in this tutorial can be applied to other platforms.

• Prerequisites
• Installing the Client Tools
• Provisioning Compute Resources
• Provisioning the CA and Generating TLS Certificates
• Generating Kubernetes Configuration Files for Authentication
• Generating the Data Encryption Config and Key
• Bootstrapping the etcd Cluster
• Bootstrapping the Kubernetes Control Plane
• Bootstrapping the Kubernetes Worker Nodes
• Configuring kubectl for Remote Access
• Provisioning Pod Network Routes
• Deploying the DNS Cluster Add-on
• Smoke Test
• Cleaning Up