The ungleich kubernetes infrastructure » History » Revision 17

« Previous | Revision 17/20 (diff) | Next »
Nico Schottelius, 07/18/2021 02:19 PM

The ungleich kubernetes infrastructure


This document is pre-production

k8s clusters

Cluster Purpose Init/Notes flux Dev kubeadm init --config k8s/c0/kubeadm.yaml --upload-certs undef Dev Demo/Semiprod kubeadm init --config k8s/c2/kubeadm.yaml --upload-certs flux bootstrap git --url=ssh:// --path=cluster/c2 --network-policy false --cluster-domain Prod Place5 Prod Place6 Prod Place7

General architecture and components overview

  • All k8s clusters are IPv6 only
  • We use BGP peering to propagate podcidr and serviceCidr networks to our infrastructure
  • The main / public repository is ungleich-k8s

ungleich kubernetes infrastructure v1

We are using the following components:

Persistent storage setup

  • 3 or 5 monitors

Cluster types

Type/Feature Development Production
Min No. nodes 3 (1 master, 3 worker) 5 (3 master, 3 worker)
Recommended minimum 4 (dedicated master, 3 worker) 8 (3 master, 5 worker)
Separation of control plane optional recommended
Persistent storage required required
Number of storage monitors 3 5


Installing a new k8s cluster

  • Decide on the cluster name (usually, X counting upwards
  • Use cdist to configure the nodes with requirements like crio
  • Decide between single or multi node control plane setups (see below)
  • Setup DNS delegation and glue records:
    • kube-dns.kube-system.svc.cX AAAA ...
    • kube-dns.kube-system.svc.cX A ...
    • cX NS kube-dns.kube-system.svc.cX

Open Issues / To be discussed

Updated by Nico Schottelius 17 days ago · 17 revisions