Kubernetes installation on Ubuntu 16+ with Calico CNI (with hostPort enabled) and private Docker Image registry DaemonSet on each node.
Bootstrap provides:
- Kubernetes installation via
kubeadm, - Kubernetes initialization via
kubeadmwith pods CIDR 192.168.0.0/16 (Calico CNI), - Calico CNI configuration with chained portmap plugin (requirement for hostPort);
- Docker Image Registry via DaemonSet on each node (
localhost:5000), restricted to localhost for security (by Calico Policy Rules).
Main difference from other guides and tutorials is that provided installation
supports hostPort option in ports mapping for containers (using portmap
plugin), so it's possible to expose container's port to host system. Also,
Docker Image Registry is protected by Calico Network Policy rule to
exclude external access.
- Ubuntu 16+,
- 2 CPU, 2Gb RAM.
Commands starting with @@ requires root login (or sudo) at target host.
All required parameters should be specified as variables assignment in form
of make <var>=<value>... <command>
Installs kubeadm to target host.
Parameters:
host— target host.
Initializes kubernetes master, Calico CNI and Docker Image Registry.
Copy join token from command output to join additional nodes.
Label one of your nodes with role: image-registry in order to allocate
Docker Image Register node.
Parameters:
host— target host.
NOTE: to allocate image registry you need to label one of your nodes with
node: image-registry:
kubectl label nodes <your-registry-node> role=image-registry
Joins target host to kubernetes master.
Parameters:
host— target host,token— token to join host to master,master— master server address (<host>:<port>).
Create user certificate and key, signs user certificate using server key and downloads them back.
Parameters:
host— target host,username— user name (CN=section in certtificate),organization— org name (O=section in certificate),days— certificate expiration time.
Connects Docker Image Registry to local machine. Imaage Registry will be
available at address localhost:5000.