coreos-k8s

k8s cluster on coreos

This is configuration for manual installation using cloud-init

######certs:

1. https://coreos.com/kubernetes/docs/latest/openssl.html

######Procedure:

1. install on disk using config for particular node

coreos-install -d /dev/vda -c cloud-config.yaml

2. set up loadbalancer for api(haproxy.cfg)

docker run -d -p 443:443 -v /path/to/haproxy.cfg:/etc/haproxy/haproxy.cfg million12/haproxy

3. create flannel network in etcd:

curl -X PUT -d "value={\"Network\":\"10.2.0.0/16\",\"Backend\":{\"Type\":\"vxlan\"}}" "192.168.1.170:2379/v2/keys/coreos.com/network/config"

4. create kube-system namespace

curl -H "Content-Type: application/json" -XPOST -d'{"apiVersion":"v1","kind":"Namespace","metadata":{"name":"kube-system"}}' "http://127.0.0.1:8080/api/v1/namespaces"

5. setup kubectl https://coreos.com/kubernetes/docs/latest/configure-kubectl.html
6. deploy dns-addon

####TODO:

1. encrypted connections between etcd instances
2. encrypted flanneld
3. encrypted fleet, lochsmithd
4. conformannce tests, now issue with version coreos/coreos-kubernetes#364
5. build automatic provisioner, which uses rc,svc,secrets definition from git repo

#####Config succesfully tested on VM(kvm+libvirt)