Kubernetes Nodes - Revision history

10.244.0.79: /* Install the kubernetes packages */

2020-08-08T19:51:12Z

Install the kubernetes packages

← Older revision		Revision as of 19:51, 8 August 2020
Line 30:		Line 30:
	apt-mark hold kubelet kubeadm kubectl		apt-mark hold kubelet kubeadm kubectl

	== ~~Install~~ the kubernetes packages ==		== Start the kubernetes packages ==
	~~Thes needs to be done on all nodes:~~
	~~systemctl start kubelet~~
	~~systemctl enable kubelet~~

	Make sure that /etc/sysconfig/kubelet (or /etc/default/kubelet on Debian) has the following line:		Make sure that /etc/sysconfig/kubelet (or /etc/default/kubelet on Debian) has the following line:

	KUBELET_EXTRA_ARGS=--authentication-token-webhook --fail-swap-on=false --runtime-cgroups=/systemd/system.slice --kubelet-cgroups=/systemd/system.slice		KUBELET_EXTRA_ARGS=--authentication-token-webhook --fail-swap-on=false --runtime-cgroups=/systemd/system.slice --kubelet-cgroups=/systemd/system.slice

			This needs to be done on all nodes:
			systemctl start kubelet
			systemctl enable kubelet

	== Join the cluster ==		== Join the cluster ==

DrEdWilliams at 15:19, 26 December 2019

2019-12-26T15:19:12Z

← Older revision		Revision as of 15:19, 26 December 2019
Line 54:		Line 54:
	If you don’t have the value of '''--discovery-token-ca-cert-hash''', you can get it by running the following command chain on the control-plane node:		If you don’t have the value of '''--discovery-token-ca-cert-hash''', you can get it by running the following command chain on the control-plane node:

	openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt \| openssl rsa -pubin -outform der 2>/dev/null \| \		openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt \| openssl rsa -pubin -outform der 2>/dev/null \| \
	openssl dgst -sha256 -hex \| sed 's/^.* //'		openssl dgst -sha256 -hex \| sed 's/^.* //'

DrEdWilliams at 01:07, 16 August 2019

2019-08-16T01:07:44Z

← Older revision		Revision as of 01:07, 16 August 2019
Line 1:		Line 1:
	The kubernetes node install is based on the prerequisites in the [[Kubernetes Cluster Installation]] page.		The kubernetes node install is based on the prerequisites in the [[Kubernetes Cluster Installation]] page.

	Install the kubernetes repo:		== Install the kubernetes repo ==

			=== CentOS 7===
	<pre>		<pre>
	cat <<EOF > /etc/yum.repos.d/kubernetes.repo		cat <<EOF > /etc/yum.repos.d/kubernetes.repo
Line 16:		Line 17:
	'''... or just copy it from an already installed kubernetes node ...'''		'''... or just copy it from an already installed kubernetes node ...'''

	~~Install the pieces of the~~ kubeadm ~~installation on all nodes~~		yum install -y kubelet kubectl kubeadm --disableexcludes=kubernetes

	<~~pre~~>		=== Debian 10 ===
	~~yum~~ install -y kubelet kubectl kubeadm ~~--disableexcludes~~=kubernetes
	systemctl start kubelet		apt-get update && apt-get install -y apt-transport-https curl
	systemctl enable kubelet~~</pre>~~		curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg \| apt-key add -
			cat <<EOF >/etc/apt/sources.list.d/kubernetes.list
			deb https://apt.kubernetes.io/ kubernetes-xenial main
			EOF
			apt-get update
			apt-get install -y kubelet kubeadm kubectl
			apt-mark hold kubelet kubeadm kubectl

			== Install the kubernetes packages ==
			Thes needs to be done on all nodes:
			systemctl start kubelet
			systemctl enable kubelet

	Make sure that /etc/sysconfig/kubelet has the following line:		Make sure that /etc/sysconfig/kubelet (or /etc/default/kubelet on Debian) has the following line:

	KUBELET_EXTRA_ARGS=--authentication-token-webhook --fail-swap-on=false --runtime-cgroups=/systemd/system.slice --kubelet-cgroups=/systemd/system.slice		KUBELET_EXTRA_ARGS=--authentication-token-webhook --fail-swap-on=false --runtime-cgroups=/systemd/system.slice --kubelet-cgroups=/systemd/system.slice

	Join the cluster ~~using~~ the token and hash from the [[Production Cluster Configuration]], [[Development Cluster Configuration]], or [[Test Cluster Configuration]] as appropriate:		== Join the cluster ==
			Using the token and hash from the [[Production Cluster Configuration]], [[Development Cluster Configuration]], or [[Test Cluster Configuration]] as appropriate:

	kubeadm join <master IP>:6443 --token <token> --discovery-token-ca-cert-hash <hash> --ignore-preflight-errors Swap --node-name=`hostname -s`		kubeadm join <master IP>:6443 --token <token> --discovery-token-ca-cert-hash <hash> --ignore-preflight-errors Swap --node-name=`hostname -s`

DrEdWilliams: added node-name to kubeadm join command

2019-08-07T10:58:01Z

added node-name to kubeadm join command

← Older revision		Revision as of 10:58, 7 August 2019
Line 29:		Line 29:
	Join the cluster using the token and hash from the [[Production Cluster Configuration]], [[Development Cluster Configuration]], or [[Test Cluster Configuration]] as appropriate:		Join the cluster using the token and hash from the [[Production Cluster Configuration]], [[Development Cluster Configuration]], or [[Test Cluster Configuration]] as appropriate:

	kubeadm join <master IP>:6443 --token <token> --discovery-token-ca-cert-hash <hash> --ignore-preflight-errors Swap		kubeadm join <master IP>:6443 --token <token> --discovery-token-ca-cert-hash <hash> --ignore-preflight-errors Swap --node-name=`hostname -s`

	If you do not have the token, you can get it by running the following command on the control-plane node:		If you do not have the token, you can get it by running the following command on the control-plane node:

DrEdWilliams at 02:45, 3 August 2019

2019-08-03T02:45:45Z

← Older revision		Revision as of 02:45, 3 August 2019
Line 30:		Line 30:

	kubeadm join <master IP>:6443 --token <token> --discovery-token-ca-cert-hash <hash> --ignore-preflight-errors Swap		kubeadm join <master IP>:6443 --token <token> --discovery-token-ca-cert-hash <hash> --ignore-preflight-errors Swap

			If you do not have the token, you can get it by running the following command on the control-plane node:

			kubeadm token list

			If you are joining a node to the cluster after the current token has expired, you can create a new token by running the following command on the control-plane node:

			kubeadm token create

			If you don’t have the value of '''--discovery-token-ca-cert-hash''', you can get it by running the following command chain on the control-plane node:

			openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt \| openssl rsa -pubin -outform der 2>/dev/null \| \
			openssl dgst -sha256 -hex \| sed 's/^.* //'

DrEdWilliams: Created page with "The kubernetes node install is based on the prerequisites in the Kubernetes Cluster Installation page. Install the kubernetes repo:

 cat < /etc/yum.repos.d/ku..."

2019-08-03T01:35:27Z

Created page with "The kubernetes node install is based on the prerequisites in the Kubernetes Cluster Installation page. Install the kubernetes repo: <pre> cat <<EOF > /etc/yum.repos.d/ku..."

New page

The kubernetes node install is based on the prerequisites in the [[Kubernetes Cluster Installation]] page.

Install the kubernetes repo:

<pre>
cat <<EOF > /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
exclude=kube*
EOF </pre>
'''... or just copy it from an already installed kubernetes node ...'''

Install the pieces of the kubeadm installation on all nodes

<pre>
yum install -y kubelet kubectl kubeadm --disableexcludes=kubernetes
systemctl start kubelet
systemctl enable kubelet</pre>

Make sure that /etc/sysconfig/kubelet has the following line:

KUBELET_EXTRA_ARGS=--authentication-token-webhook --fail-swap-on=false --runtime-cgroups=/systemd/system.slice --kubelet-cgroups=/systemd/system.slice

Join the cluster using the token and hash from the [[Production Cluster Configuration]], [[Development Cluster Configuration]], or [[Test Cluster Configuration]] as appropriate:

kubeadm join <master IP>:6443 --token <token> --discovery-token-ca-cert-hash <hash> --ignore-preflight-errors Swap