DevSecOps-documentation/Cluster-Setup at main · Rohit-1920/DevSecOps-documentation · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
Install Packages
1. Log in to the control plane node.

2. Create the configuration file for containerd:

cat <<EOF | sudo tee /etc/modules-load.d/containerd.conf
overlay
br_netfilter
EOF
3. Load the modules:

sudo modprobe overlay
sudo modprobe br_netfilter
4. Set the system configurations for Kubernetes networking:

cat <<EOF | sudo tee /etc/sysctl.d/99-kubernetes-cri.conf
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward = 1
net.bridge.bridge-nf-call-ip6tables = 1
EOF
5. Apply the new settings:

sudo sysctl --system
6. Install containerd:

sudo apt-get update && sudo apt-get install -y containerd.io
7. Create the default configuration file for containerd:

sudo mkdir -p /etc/containerd
8. Generate the default containerd configuration, and save it to the newly created default file:

sudo containerd config default | sudo tee /etc/containerd/config.toml
9. Restart containerd to ensure the new configuration file is used:

sudo systemctl restart containerd
Verify that containerd is running:

sudo systemctl status containerd
10. Disable swap:

sudo swapoff -a
11. Install the dependency packages:

sudo apt-get update && sudo apt-get install -y apt-transport-https curl
12. Download and add the GPG key:

curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -
13. Add Kubernetes to the repository list:

cat <<EOF | sudo tee /etc/apt/sources.list.d/kubernetes.list
deb https://apt.kubernetes.io/ kubernetes-xenial main
EOF
Update the package listings:

sudo apt-get update
14. Install Kubernetes packages:

Note: If you get a dpkg lock message, just wait a minute or two before trying the command again.

sudo apt-get install -y kubelet=1.27.0-00 kubeadm=1.27.0-00 kubectl=1.27.0-00
15. Turn off automatic updates:

sudo apt-mark hold kubelet kubeadm kubectl
************Worker Node Operations************
Log in to worker nodes to perform the previous steps.
******************************
Initialize the Cluster
Initialize the Kubernetes cluster on the control plane node using kubeadm:

sudo kubeadm init --pod-network-cidr 192.168.0.0/16 --kubernetes-version 1.27.0
Set kubectl access:

mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config
Test access to the cluster:

kubectl get nodes
Install the Calico Network Add-On
On the control plane node, install Calico Networking:

kubectl apply -f https://raw.githubusercontent.com/projectcalico/calico/v3.25.0/manifests/calico.yaml
Check the status of the control plane node:

kubectl get nodes
Join the Worker Nodes to the Cluster
In the control plane node, create the token and copy the kubeadm join command:

kubeadm token create --print-join-command
Note: This output will be used as the next command for the worker nodes.

Copy the full output from the previous command used in the control plane node. This command starts with kubeadm join.

In both worker nodes, paste the full kubeadm join command to join the cluster. Use sudo to run it as root:

sudo kubeadm join...
In the control plane node, view the cluster status:

kubectl get nodes
Note: You may have to wait a few moments to allow all nodes to become ready.