Skip to content

Commit cbe34d0

Browse files
committed
Now templating the Kubernetes cluster name - and also using it correctly inside the external node configuration and describing it correctly in the docs.
1 parent 59383fd commit cbe34d0

File tree

5 files changed

+13
-10
lines changed

5 files changed

+13
-10
lines changed

README.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -271,7 +271,7 @@ If you´re using [Proxy-mode: iptables](https://kubernetes.io/docs/concepts/serv
271271
If you want to interact with your k8s cluster, you need to setup your CLI for the specific cluster (`config set-cluster`), user (`config set-credentials`) and context (`config set-context`). All three are applied by a subsequent `config use-context`. For our `kubernetes-the-ansible-way` cluster, using the `admin` user, this is the following:
272272

273273
```
274-
kubectl config set-cluster kubernetes-the-hard-way \
274+
kubectl config set-cluster kubernetes-the-ansible-way \
275275
--certificate-authority=certificates/ca.pem \
276276
--embed-certs=true \
277277
--server=https://external.k8s:6443
@@ -280,11 +280,11 @@ kubectl config set-credentials admin \
280280
--client-certificate=certificates/admin.pem \
281281
--client-key=certificates/admin-key.pem
282282
283-
kubectl config set-context kubernetes-the-hard-way \
283+
kubectl config set-context cluster-access \
284284
--cluster=kubernetes-the-hard-way \
285285
--user=admin
286286
287-
kubectl config use-context kubernetes-the-hard-way
287+
kubectl config use-context cluster-access
288288
```
289289

290290
Review the successful configuration by a `kubectl cluster-info`. This should give something like:
@@ -297,6 +297,8 @@ KubeDNS is running at https://external.k8s:6443/api/v1/namespaces/kube-system/se
297297
To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.
298298
```
299299

300+
or have a look at your configuration with `kubectl config view` (see https://kubernetes.io/docs/tasks/access-application-cluster/access-cluster/#accessing-for-the-first-time-with-kubectl).
301+
300302
###### Authentication
301303

302304
See https://kubernetes.io/docs/reference/access-authn-authz/authentication/.

group_vars/all.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@ etcd_version: v3.3.5
55
# Kubernetes & Dashboard versions must be compatible! see https://github.com/kubernetes/dashboard/wiki/Compatibility-matrix
66
kubernetes_dashboard_version: v1.10.0
77

8+
kubernetes_cluster_name: kubernetes-the-ansible-way
89
kubernetes_cluster_cidr: 10.200.0.0/16
910
kubernetes_cluster_iprange: 10.32.0.0/24
1011
kubernetes_cluster_dns: 10.32.0.10

roles/configurationfiles/templates/kubeconfig.yaml.j2

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,10 +3,10 @@ clusters:
33
- cluster:
44
certificate-authority-data: {{ lookup('file', 'certificates/ca.pem') | b64encode }}
55
server: https://{{ item.server }}:6443
6-
name: kubernetes-the-ansible-way
6+
name: {{ kubernetes_cluster_name }}
77
contexts:
88
- context:
9-
cluster: kubernetes-the-ansible-way
9+
cluster: {{ kubernetes_cluster_name }}
1010
user: {{ item.prefix }}{{ item.name }}
1111
name: default
1212
current-context: default

roles/k8s-master/templates/kube-controller-manager.service.j2

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ExecStart=/usr/local/bin/kube-controller-manager \
77
--address=0.0.0.0 \
88
--cluster-cidr={{ kubernetes_cluster_cidr }} \
99
--allocate-node-cidrs=true \
10-
--cluster-name=kubernetes-the-ansible-way \
10+
--cluster-name={{ kubernetes_cluster_name }} \
1111
--cluster-signing-cert-file=/var/lib/kubernetes/ca.pem \
1212
--cluster-signing-key-file=/var/lib/kubernetes/ca-key.pem \
1313
--kubeconfig=/var/lib/kubernetes/kube-controller-manager.kubeconfig \

roles/kubectl-remote-access/tasks/main.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44

55
- name: Configuring kubectl for Remote Access - kubectl config set-cluster
66
shell: |
7-
kubectl config set-cluster kubernetes-the-hard-way \
7+
kubectl config set-cluster {{ kubernetes_cluster_name }} \
88
--certificate-authority=/vagrant/certificates/ca.pem \
99
--embed-certs=true \
1010
--server=https://external.k8s:6443
@@ -17,12 +17,12 @@
1717
1818
- name: Configuring kubectl for Remote Access - kubectl config set-context
1919
shell: |
20-
kubectl config set-context kubernetes-the-hard-way \
21-
--cluster=kubernetes-the-hard-way \
20+
kubectl config set-context cluster-access \
21+
--cluster={{ kubernetes_cluster_name }} \
2222
--user=admin
2323
2424
- name: Configuring kubectl for Remote Access - kubectl config use-context
25-
shell: kubectl config use-context kubernetes-the-hard-way
25+
shell: kubectl config use-context cluster-access
2626

2727
- name: Verify, if we are able to access the k8s cluster state
2828
shell: kubectl get componentstatuses

0 commit comments

Comments
 (0)