#kops - January 2019 | Slack Archive

kopsArchived

49 messages

Discussions related to kops for kubernetes
Archive: https://archive.sweetops.com/kops/

Dec 2018

January 2019

Feb 2019

Janover 7 years ago

https://github.com/cloudposse/prod.cloudposse.co#populate-chamber-secrets

Janover 7 years ago


Populate chamber secrets for kops project (make sure to change the keys and values to reflect your environment; add new secrets as needed)

Janover 7 years ago(edited)

where do I find that list? in aws/kops-aws-platform/chamber-kops.sh?

joshmyersover 7 years ago

@Jan good question

Janover 7 years ago

busy trying to stand up the root kops as is

Janover 7 years ago

then modify the a fork of the module for targeting existing vpc's

Erik Osterman (Cloud Posse)over 7 years ago

I am working on docs: https://github.com/cloudposse/geodesic/pull/339

Erik Osterman (Cloud Posse)over 7 years ago(edited)

this should be merged by EOW (sunday)

Erik Osterman (Cloud Posse)over 7 years ago

they still don’t take into account some of the latest changes.

Janover 7 years ago

https://github.com/kubernetes/node-problem-detector

Erik Osterman (Cloud Posse)over 7 years ago

https://registry.terraform.io/modules/cloudposse/kops-iam-authenticator-config/aws/0.1.0

Erik Osterman (Cloud Posse)over 7 years ago

Terraform module to create and apply a Kubernetes ConfigMap for aws-iam-authenticator to be used with Kops to map IAM principals to Kubernetes users

bazbremnerover 7 years ago

@bazbremner has joined the channel

Webbover 7 years ago

@Webb has joined the channel

Janover 7 years ago

Are you using rbac by default?

Janover 7 years ago

erg wrong channel I think

Erik Osterman (Cloud Posse)over 7 years ago

in our kops manifest, we have it disabled by default

Erik Osterman (Cloud Posse)over 7 years ago

but there’s a boolean to enable it

Erik Osterman (Cloud Posse)over 7 years ago

https://github.com/cloudposse/geodesic/blob/master/rootfs/templates/kops/default.yaml#L36

Janover 7 years ago

yea

Janover 7 years ago

Have it enabled

Ajay Tripathyover 7 years ago

@Ajay Tripathy has joined the channel

Janover 7 years ago

when runnign k8s via kops in aws

Janover 7 years ago

what creates the KubernetesAdmin role referenced here?

Janover 7 years ago

https://github.com/cloudposse/terraform-aws-kops-iam-authenticator-config/blob/master/examples/complete/terraform.tfvars.example#L5

Janover 7 years ago

https://github.com/kubernetes-sigs/aws-iam-authenticator#1-create-an-iam-role

Janover 7 years ago

here

Erik Osterman (Cloud Posse)over 7 years ago

might have to wait for @Andriy Knysh (Cloud Posse) …

Janover 7 years ago

are they prerequisites or do you create them automatically?

Erik Osterman (Cloud Posse)over 7 years ago

https://github.com/kubernetes-sigs/aws-iam-authenticator#why-do-i-want-this

Erik Osterman (Cloud Posse)over 7 years ago

I don’t have first-hand experience setting this up yet

Erik Osterman (Cloud Posse)over 7 years ago

so I can just google =P

Janover 7 years ago

hahah

Janover 7 years ago

yea all good

Janover 7 years ago

will figure it out

Janover 7 years ago

https://github.com/cloudposse/terraform-aws-kops-iam-authenticator-config/blob/master/main.tf

Janover 7 years ago

so liek this is the 2nd half of what I would have expected

Janover 7 years ago

the 1st part would have been the creation of the iam roles

Janover 7 years ago

will extend and submit

Janover 7 years ago

inf act its not needed

Janover 7 years ago

https://github.com/hjacobs/kubernetes-failure-stories

Erik Osterman (Cloud Posse)over 7 years ago

https://github.com/cloudposse/terraform-aws-kops-iam-authenticator-config/pull/2

Erik Osterman (Cloud Posse)over 7 years ago

@Jan ☝️

Janover 7 years ago

I thanks

Janover 7 years ago

so.... who wants to talk me through whats going on here?


module "kops_state_backend" {
  source           = "git::<https://github.com/cloudposse/terraform-aws-kops-state-backend.git?ref=tags/0.1.5>"
...
  cluster_name     = "${var.region}"
  region           = "${var.region}"
...
}

Janover 7 years ago

https://github.com/cloudposse/terraform-root-modules/blob/master/aws/kops/main.tf#L31-L36

Andriy Knysh (Cloud Posse)over 7 years ago

so in the example we use cluster name as the DNS zone subdomain name, e.g. if the domain for the nevironment is <http://prod.example.com|prod.example.com>, then the module will create a subdomain us-west-2 and you’ll access your cluster at <http://us-west-2.prod.example.com|us-west-2.prod.example.com>

Andriy Knysh (Cloud Posse)over 7 years ago

instead of the region, you can use any name that suits your needs, e.g. <http://kops.prod.example.com|kops.prod.example.com>

December 2018 Browse by date February 2019