Overview

An Ansible playbook that installs Kubernetes
Features

containerd
calico for pod networking
Quickstart

ssh-keyscan -H -t rsa c1-cp1.lab.local >> ~/.ssh/known_hosts
ssh-keyscan -H -t rsa c1-node1.lab.local >> ~/.ssh/known_hosts
ssh-keyscan -H -t rsa c1-node2.lab.local >> ~/.ssh/known_hosts
ssh-keyscan -H -t rsa c1-node3.lab.local >> ~/.ssh/known_hosts

ansible -i inventory/dev all -m ping --user appuser

ansible-playbook -i inventory/dev playbooks/k8s_all.yaml --user appuser

# reboot might be required after installation
ansible -i inventory/dev all -a "/sbin/reboot" --become --user appuser

# Check the nodes status
kubectl cluster-info
kubectl get nodes

# Verify the status of pods in kube-system namespace
kubectl get pods -n kube-system

# OPTIONAL: 

# Installing Pre-reqs (+)
ansible-playbook -i inventory/dev playbooks/pre-reqs.yaml --user appuser

# Installing Longhorn (+)
ansible-galaxy collection install community.kubernetes
ansible-playbook -i inventory/dev playbooks/longhorn.yaml --user appuser

# Installing Istio https://www.tigera.io/blog/how-to-build-a-service-mesh-with-istio-and-calico/ (+)
ansible-playbook -i inventory/dev playbooks/install_istio.yml --user appuser
kubectl label namespace default istio-injection=enabled

# Install Istio Kiali
#helm install \
#  --namespace istio-system \
#  --set auth.strategy="anonymous" \
#  --repo https://kiali.org/helm-charts \
#  kiali-server \
#  kiali-server
ansible-playbook -i inventory/dev playbooks/install_istio_kiali.yaml --user appuser

# Install Istio addons (need install Prometheus-Jaeger-Grafana in istio-system Namespace with addons folder of istio)  
ansible-playbook -i inventory/dev playbooks/install_istio_addons_metrics.yaml --user appuser

# Setup Metrics-Server (*)
ansible-playbook -i inventory/dev playbooks/metrics-server.yaml --user appuser

# Metallb_install (only metallb-system/controller, do not install the metallb-system/speaker component. The speaker component also attempts to establish BGP sessions on the node, and will conflict with Calico.) (+)
ansible-playbook -i inventory/dev playbooks/metrics-server.yaml --user appuser

# Setup BPG to Firewall as (cloud provider) (*) WIP
ansible-playbook -i inventory/dev playbooks/configure_bgp.yaml --user appuser 

kubectl create -f - <<EOF
apiVersion: metallb.io/v1beta1
kind: IPAddressPool
metadata:
  name: first-pool
  namespace: metallb-system
spec:
  addresses:
  - 192.168.254.128-192.168.254.250
EOF

kubectl create -f - <<EOF
apiVersion: metallb.io/v1beta1
kind: BGPAdvertisement
metadata:
  name: default
  namespace: metallb-system
spec:
  ipAddressPools:
  - first-pool
  nodeSelectors:
  - matchLabels:
      kubernetes.io/hostname: c1-node1
  - matchLabels:
      kubernetes.io/hostname: c1-node2
  - matchLabels:
      kubernetes.io/hostname: c1-node3	  
EOF	  

kubectl create -f - <<EOF
apiVersion: metallb.io/v1beta2
kind: BGPPeer
metadata:
  name: default
  namespace: metallb-system
spec:
  myASN: 64512
  peerASN: 64513
  peerAddress: 192.168.254.1
  nodeSelectors:
  - matchLabels:
      kubernetes.io/hostname: c1-node1
  - matchLabels:
      kubernetes.io/hostname: c1-node2
  - matchLabels:
      kubernetes.io/hostname: c1-node3
EOF

# Test with Google microservices demo (https://www.tigera.io/blog/how-to-build-a-service-mesh-with-istio-and-calico/)
kubectl create -f https://raw.githubusercontent.com/GoogleCloudPlatform/microservices-demo/main/release/kubernetes-manifests.yaml


notes: 
+ test ok
- not tested
* dont work
ltiisidii/k8s-ansible

Overview

Features

Quickstart
