Project

General

Profile

Actions

The ungleich kubernetes infrastructure » History » Revision 17

« Previous | Revision 17/20 (diff) | Next »
Nico Schottelius, 07/18/2021 02:19 PM


The ungleich kubernetes infrastructure

Status

This document is pre-production

k8s clusters

Cluster Purpose Init/Notes flux
c0.k8s.ooo Dev kubeadm init --config k8s/c0/kubeadm.yaml --upload-certs
c1.k8s.ooo undef Dev
c2.k8s.ooo Demo/Semiprod kubeadm init --config k8s/c2/kubeadm.yaml --upload-certs flux bootstrap git --url=ssh://git@code.ungleich.ch/ungleich-intern/k8s-config.git --path=cluster/c2 --network-policy false --cluster-domain c2.k8s.ooo
p5.k8s.ooo Prod Place5
p6.k8s.ooo Prod Place6
p7.k8s.ooo Prod Place7

General architecture and components overview

  • All k8s clusters are IPv6 only
  • We use BGP peering to propagate podcidr and serviceCidr networks to our infrastructure
  • The main / public repository is ungleich-k8s

ungleich kubernetes infrastructure v1

We are using the following components:

Persistent storage setup

  • 3 or 5 monitors

Cluster types

Type/Feature Development Production
Min No. nodes 3 (1 master, 3 worker) 5 (3 master, 3 worker)
Recommended minimum 4 (dedicated master, 3 worker) 8 (3 master, 5 worker)
Separation of control plane optional recommended
Persistent storage required required
Number of storage monitors 3 5

Operations

Installing a new k8s cluster

  • Decide on the cluster name (usually cX.k8s.ooo), X counting upwards
  • Use cdist to configure the nodes with requirements like crio
  • Decide between single or multi node control plane setups (see below)
  • Setup DNS delegation and glue records:
    • kube-dns.kube-system.svc.cX AAAA ...
    • kube-dns.kube-system.svc.cX A ...
    • cX NS kube-dns.kube-system.svc.cX

Open Issues / To be discussed

Updated by Nico Schottelius 17 days ago · 17 revisions