richard
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1937 Commits
29 Branches
81 Tags
146 MiB
 
 
 
 
 
Tree: 6eacedc443
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '6eacedc443'
${ noResults }
kubespray/contrib/terraform/aws
Gregory Storme 266ca9318d
Use the kube_apiserver_insecure_port variable instead of static 8080 		7 years ago
..
docs Use the kube_apiserver_insecure_port variable instead of static 8080 7 years ago
modules Fixes for AWS Terraform Deployment 7 years ago
templates Fixes for AWS Terraform Deployment and Updated Readme 7 years ago
.gitignore Rewrote AWS Terraform for Kargo 7 years ago
README.md Use the kube_apiserver_insecure_port variable instead of static 8080 7 years ago
create-infrastructure.tf Use the kube_apiserver_insecure_port variable instead of static 8080 7 years ago
credentials.tfvars.example Rewrote AWS Terraform for Kargo 7 years ago
output.tf Fixes for AWS Terraform Deployment and Updated Readme 7 years ago
terraform.tfvars Fixes for AWS Terraform Deployment 7 years ago
terraform.tfvars.example Fixes for AWS Terraform Deployment and Updated Readme 7 years ago
variables.tf Fixes for AWS Terraform Deployment and Updated Readme 7 years ago

README.md

Kubernetes on AWS with Terraform

Overview:

This project will create:

  • VPC with Public and Private Subnets in # Availability Zones
  • Bastion Hosts and NAT Gateways in the Public Subnet
  • A dynamic number of masters, etcd, and worker nodes in the Private Subnet
  • even distributed over the # of Availability Zones
  • AWS ELB in the Public Subnet for accessing the Kubernetes API from the internet

Requirements

  • Terraform 0.8.7 or newer

How to Use:

  • Export the variables for your AWS credentials or edit credentials.tfvars:
export AWS_ACCESS_KEY_ID="www"
export AWS_SECRET_ACCESS_KEY ="xxx"
export AWS_SSH_KEY_NAME="yyy"
export AWS_DEFAULT_REGION="zzz"

  • Rename contrib/terraform/aws/terraform.tfvars.example to terraform.tfvars

  • Update contrib/terraform/aws/terraform.tfvars with your data

  • Allocate new AWS Elastic IPs: Depending on # of Availability Zones used (2 for each AZ)

  • Create an AWS EC2 SSH Key

  • Run with terraform apply --var-file="credentials.tfvars" or terraform apply depending if you exported your AWS credentials

  • Terraform automatically creates an Ansible Inventory file called hosts with the created infrastructure in the directory inventory

  • Once the infrastructure is created, you can run the kubespray playbooks and supply inventory/hosts with the -i flag.

Troubleshooting

Remaining AWS IAM Instance Profile:

If the cluster was destroyed without using Terraform it is possible that the AWS IAM Instance Profiles still remain. To delete them you can use the AWS CLI with the following command:

aws iam delete-instance-profile --region <region_name> --instance-profile-name <profile_name>

Ansible Inventory doesnt get created:

It could happen that Terraform doesnt create an Ansible Inventory file automatically. If this is the case copy the output after inventory= and create a file named hostsin the directory inventory and paste the inventory into the file.

Architecture

Pictured is an AWS Infrastructure created with this Terraform project distributed over two Availability Zones.

AWS Infrastructure with Terraform