C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
Deploy a Production Ready Kubernetes Cluster on bare metal or raw VMs - This is a clone of https://github.com/kubernetes-sigs/kubespray.git with a kitten twist.
1286 commits 17 branches 66 tags 141 MiB
Jinja 78.9%
HCL 10%
Python 5.7%
Shell 4.5%
Groovy 0.2%
Other 0.6%
Go to file
Bogdan Dobrelya cb2e5ac776 Drop linux capabilities and rework users/groups 
* Drop linux capabilities for unprivileged containerized
  worlkoads Kargo configures for deployments.
* Configure required securityContext/user/group/groups for kube
  components' static manifests, etcd, calico-rr and k8s apps,
  like dnsmasq daemonset.
* Rework cloud-init (etcd) users creation for CoreOS.
* Fix nologin paths, adjust defaults for addusers role and ensure
  supplementary groups membership added for users.
* Add netplug user for network plugins (yet unused by privileged
  networking containers though).
* Grant the kube and netplug users read access for etcd certs via
  the etcd certs group.
* Grant group read access to kube certs via the kube cert group.
* Remove priveleged mode for calico-rr and run it under its uid/gid
  and supplementary etcd_cert group.
* Adjust docs.
* Align cpu/memory limits and dropped caps with added rkt support
  for control plane.

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>
2017-01-20 08:50:42 +01:00
.github GITHUB: Added issue template file 2017-01-03 16:09:35 +01:00
contrib Introduce dns_mode and resolvconf_mode and implement docker_dns mode 2017-01-05 23:38:51 +01:00
docs Drop linux capabilities and rework users/groups 2017-01-20 08:50:42 +01:00
inventory Drop linux capabilities and rework users/groups 2017-01-20 08:50:42 +01:00
roles Drop linux capabilities and rework users/groups 2017-01-20 08:50:42 +01:00
scripts Fix pipeline premoderation/unit-tests 2017-01-04 17:52:27 +01:00
tests Merge pull request #863 from bogdando/coreos_facts 2017-01-05 13:22:35 -05:00
.gitignore Add inventory builder python script 2016-12-23 13:00:56 +03:00
.gitlab-ci.yml Update Ansible to 2.2.1 2017-01-19 13:46:46 +03:00
.gitmodules Remove submodules 2016-03-04 16:14:01 +01:00
.travis.yml.bak Manual steps for Gitlab CI pipeline 2016-12-15 17:23:18 +01:00
ansible.cfg Remove 'bastion' as default conf 2016-12-17 12:42:30 +01:00
cluster.yml Introduce dns_mode and resolvconf_mode and implement docker_dns mode 2017-01-05 23:38:51 +01:00
code-of-conduct.md files needed to move kargo to k8s 2016-08-16 14:01:03 +02:00
CONTRIBUTING.md files needed to move kargo to k8s 2016-08-16 14:01:03 +02:00
LICENSE Create LICENSE 2016-03-01 15:37:01 +01:00
OWNERS Update OWNERS 2016-10-28 11:16:11 +04:00
README.md Update docs 2017-01-09 16:32:55 +01:00
RELEASE.md Clarify major/minor/maintainance releases 2017-01-12 11:25:04 +01:00
requirements.txt Update Ansible to 2.2.1 2017-01-19 13:46:46 +03:00
reset.yml Add playbook and role to reset the cluster 2016-12-09 11:15:36 +01:00
ubuntu-bootstrap.yml Added bootstrap script for Ubuntu 16.04 LTS and later 2016-09-07 20:13:05 +02:00
uploads.yml Upload files to a separate storage 2016-03-04 17:39:02 +01:00
Vagrantfile Fix #781 prevent vagrant asking for password 2016-12-19 11:52:18 -08:00

README.md

Kubernetes Logo

##Deploy a production ready kubernetes cluster

If you have questions, join us on the kubernetes slack, channel #kargo.

  • Can be deployed on AWS, GCE, Azure, OpenStack or Baremetal
  • High available cluster
  • Composable (Choice of the network plugin for instance)
  • Support most popular Linux distributions
  • Continuous integration tests

To deploy the cluster you can use :

kargo-cli
Ansible usual commands and inventory builder
vagrant by simply running vagrant up (for tests purposes)

Supported Linux distributions

  • Container Linux by CoreOS
  • Debian Jessie
  • Ubuntu 16.04
  • CentOS/RHEL 7

Note: Upstart/SysV init based OS types are not supported.

Versions of supported components

kubernetes v1.5.1
etcd v3.0.6
flanneld v0.6.2
calicoctl v0.23.0
canal (given calico/flannel versions)
weave v1.6.1
docker v1.12.5
rkt v1.21.0

Note: rkt support as docker alternative is limited to control plane (etcd and kubelet). Docker is still used for Kubernetes cluster workloads and network plugins' related OS services. Also note, only one of the supported network plugins can be deployed for a given single cluster.

Requirements

  • The target servers must have access to the Internet in order to pull docker images.
  • The firewalls are not managed, you'll need to implement your own rules the way you used to. in order to avoid any issue during deployment you should disable your firewall.
  • The target servers are configured to allow IPv4 forwarding.
  • Copy your ssh keys to all the servers part of your inventory.
  • Ansible v2.2 (or newer) and python-netaddr

Network plugins

You can choose between 4 network plugins. (default: flannel with vxlan backend)

  • flannel: gre/vxlan (layer 2) networking.

  • calico: bgp (layer 3) networking.

  • canal: a composition of calico and flannel plugins.

  • weave: Weave is a lightweight container overlay network that doesn't require an external K/V database cluster.
    (Please refer to weave troubleshooting documentation).

The choice is defined with the variable kube_network_plugin. There is also an option to leverage built-in cloud provider networking instead. See also Network checker.

CI Tests

Gitlab Logo

Build graphs

CI/end-to-end tests sponsored by Google (GCE), and teuto.net for OpenStack. See the test matrix for details.