Try using Kubespray for AWS (python ansible + terraform)

[Sanjay-George]

kubespray: ansible playbooks, need python to execute ansible. Terraform module only for AWS 😑. But GCP is supported with python 🙂

Blocker

kubespray ansible book failing randomly. Issue raised here: https://github.com/Sanjay-George/nick-name-generator/issues/4)

Articles

1. Installing kubernetes with kubespray

2. Quickstart setup using kubespray on GCP

Steps followed

1. Install ansible 🐍

• Installation guide

• Issue #1 with ansible not working from cmd line -> reinstall python with defaults

• Issue #2 some 💩 not available

• • might not work with windows directly. read this : http://blog.rolpdog.com/2020/03/why-no-ansible-controller-for-windows.html
• • Install ubuntu on wsl

• [x] Install ansible on WSL instead.

• [x] Install terraform on WSL

• [x] Set up virtual env guide and install all deps inside

• [x] Install specific version of ansible as mentioned in requirements.txt

2. Setup dev environment on ubuntu WSL

• [x] Git - ssh, push / pull, etc..

• Facing issue with pushing even after setting up SSH. Find solution here:

• [x] AWS credentials - stored here: $HOME/.aws/credentials

• [x] nano editor

• [ ] kubectl CLI

3. Run Terraform to provision the cluster

• [x] make necessary changes to access_key, region, secret_key, ssh_key etc..

• [x] Remove creation of IAM role. Just use the existing LabRole and LabInstanceProfile

• Note: Once tf runs, it creates the inventory file for ansible playbook. Check here

4. Run ansible playbooks to set up k8 on the already-provisioned cluster

• Tutorial 1: https://schoolofdevops.github.io/ultimate-kubernetes-bootcamp/cluster_setup_kubespray/

• Issue #1: https://github.com/Sanjay-George/nick-name-generator/issues/2
• Issue #2: https://github.com/Sanjay-George/nick-name-generator/issues/3
• • SSH into private servers not happening. Two possible solutions:
• • • [ ] Eliminate bastion host. Make all nodes public
• • • [ ] Assign elastic / static IP to bastion. Fix SSH config for proper connection. (will do later)
• Issue #3: Memory too low for master node. Minimum memory 1.5GB, but free tier t2.micro has only 1 GB.
• • Removed the checks here: https://github.com/Sanjay-George/kubespray-deployment/commit/89b75933d2df869489c561b410406e6f0d1f9559
• Issue #4: Play failing randomly with server connection issue

4a. Figure out way to pass in the key through CLI instead of inventory

• [x] Try command ansible-playbook -b -v -i inventory/hosts cluster.yml -u admin --private-key=~/.ssh/vockey
• [ ] Or add this in ansible.cfg

  private_key_file=~/.ssh/id_rsa_sbexx
  remote_user=core

5. Check kube cluster status