lwolf’s gists

lwolf / istio-helm.md

Last active April 8, 2019 18:01

https://blog.lwolf.org/post/switching_to_istio_as_the_primary_ingress/

# add istio helm repo
$ helm repo add istio.io https://storage.googleapis.com/istio-release/releases/1.1.0-rc.0/charts

# sync your index
$ helm repo update

# I usually save default values.yaml file to the values-custom.yaml to add to the repo
$ helm upgrade --install -f istio/values-custom.yaml istio istio.io/istio --namespace istio-system

lwolf / arch_fix

Created February 2, 2019 14:16

fix hardcoded arch (https://blog.lwolf.org/post/how-to-deploy-multi-arch-kubernetes-cluster-using-kubespray/)

	- hyperkube_download_url: "https://storage.googleapis.com/.../linux/amd64/hyperkube"
	+ hyperkube_download_url: "https://storage.googleapis.com/.../linux/{{ image_arch }}/hyperkube"

	- etcd_download_url: "https://github.com/coreos/.../etcd-{{ etcd_version }}-linux-amd64.tar.gz"
	+ etcd_download_url: "https://github.com/coreos/.../etcd-{{ etcd_version }}-linux-{{ image_arch }}.tar.gz"

lwolf / defaults_main.yaml

Created February 2, 2019 14:14

flannel vars (https://blog.lwolf.org/post/how-to-deploy-multi-arch-kubernetes-cluster-using-kubespray/)

	# roles/download/defaults/main.yaml
	flannel_cni_version: "v0.7.4"
	flannel_image_repo: "lwolf/flannel"
	flannel_cni_image_repo: "lwolf/flannel-cni"

lwolf / kubectl describe

Created February 2, 2019 14:13

pod describe (https://blog.lwolf.org/post/how-to-deploy-multi-arch-kubernetes-cluster-using-kubespray/)

	Normal Scheduled 48m default-scheduler Successfully assigned cert-manager/cert-manager-695f7b5bdc-t28j7 to odroid1
	Warning FailedCreatePodSandBox 48m kubelet, odroid1 Failed create pod sandbox: rpc error: code = Unknown desc = [failed to set up sandbox container "9c887728f495874b0b9efd444900f829283b26884bf23d4255193bdbd8139f4d" network for pod "cert-manager-695f7b5bdc-t28j7": NetworkPlugin cni failed to set up pod "cert-manager-695f7b5bdc-t28j7_cert-manager" network: failed to find plugin "loopback" in path [/opt/cni/bin], failed to clean up sandbox container "9c887728f495874b0b9efd444900f829283b26884bf23d4255193bdbd8139f4d" network for pod "cert-manager-695f7b5bdc-t28j7": NetworkPlugin cni failed to teardown pod "cert-manager-695f7b5bdc-t28j7_cert-manager" network: failed to find plugin "portmap" in path [/opt/cni/bin]]
	Normal SandboxChanged 2m (x204 over 48m) kubelet, odroid1 Pod sandbox changed, it will be killed and re-created.

lwolf / kubespray.stdout

Created February 2, 2019 14:12

kubespray output (https://blog.lwolf.org/post/how-to-deploy-multi-arch-kubernetes-cluster-using-kubespray/)

	TASK [kubernetes/secrets : Gen_certs \| add CA to trusted CA dir] ********************************************************************************************************************
	Saturday 29 September 2018 11:23:52 +0100 (0:00:00.536) 0:09:27.463 ****
	changed: [node1] => {"changed": true, "checksum": "6133a4cde211b2699082947ed5877627fc17a5fb", "dest": "/usr/local/share/ca-certificates/kube-ca.crt", "gid": 0, "group": "root", "md5sum": "538b74ed3d841c835d026dd51de99882", "mode": "0644", "owner": "root", "size": 1094, "src": "/etc/kubernetes/ssl/ca.pem", "state": "file", "uid": 0}
	changed: [node2] => {"changed": true, "checksum": "6133a4cde211b2699082947ed5877627fc17a5fb", "dest": "/usr/local/share/ca-certificates/kube-ca.crt", "gid": 0, "group": "root", "md5sum": "538b74ed3d841c835d026dd51de99882", "mode": "0644", "owner": "root", "size": 1094, "src": "/etc/kubernetes/ssl/ca.pem", "state": "file", "uid": 0}
	fatal: [odroid1]: FAILED! => {"changed": false, "msg": "Source /etc/kubernetes/ssl/ca.pem not

lwolf / flannel.yaml

Created February 2, 2019 14:11

flannel multiarch (https://blog.lwolf.org/post/how-to-deploy-multi-arch-kubernetes-cluster-using-kubespray/)

	apiVersion: extensions/v1beta1
	kind: DaemonSet
	metadata:
	name: kube-flannel-ds-arm64
	namespace: kube-system
	...
	spec:
	template:
	spec:
	...

lwolf / 0040-set_facts.yml

Created February 2, 2019 14:08

set facts (https://blog.lwolf.org/post/how-to-deploy-multi-arch-kubernetes-cluster-using-kubespray/)

	# roles/kubernetes/preinstall/tasks/0040-set_facts.yml
	- set_fact:
	architecture_groups:
	x86_64: amd64
	aarch64: arm64
	armv7l: arm

lwolf / defaults_main.yaml

Last active February 2, 2019 14:09

disable_sha256 (https://blog.lwolf.org/post/how-to-deploy-multi-arch-kubernetes-cluster-using-kubespray/)

	# roles/download/defaults/main.yaml
	kubeadm:
	enabled: "{{ kubeadm_enabled }}"
	file: true
	version: "{{ kubeadm_version }}"
	dest: "{{local_release_dir}}/kubeadm"
	# sha256: "{{ kubeadm_binary_checksum }}"
	url: "{{ kubeadm_download_url }}"
	unarchive: false
	owner: "root"

lwolf / gist:b94d702e0e754e5f40d7febcc25e7b5d

Created November 14, 2018 18:46

GlusterFS notes 01. heketi logs


	$ kubectl describe pod heketi-679447869-25f6n
	...
	Events:
	Type Reason Age From Message
	---- ------ ---- ---- -------
	Normal Scheduled 7m default-scheduler Successfully assigned default/heketi-679447869-25f6n to srv-vm-02
	Warning FailedMount 7m kubelet, srv-vm-02 MountVolume.SetUp failed for volume "db" : mount failed: mount failed: exit status 1
	Mounting command: systemd-run
	Mounting arguments: --description=Kubernetes transient mount for /var/lib/kubelet/pods/c5c266b6-da0f-11e8-bd66-000c29769173/volumes/kubernetes.io~glusterfs/db --scope -- mount -t glusterfs -o log-file=/var/lib/kubelet/plugins/kubernetes.io/glusterfs/db/heketi-679447869-25f6n-glusterfs.log,log-level=ERROR,backup-volfile-servers=192.168.11.14:192.168.11.15:192.168.11.16,auto_unmount 192.168.11.14:heketidbstorage /var/lib/kubelet/pods/c5c266b6-da0f-11e8-bd66-000c29769173/volumes/kubernetes.io~glusterfs/db

lwolf / gradual dump of postgres data

Created September 4, 2018 10:08

	#!/usr/bin/env bash

	set -e

	start=$(date -ud 20170413 "+%s") # start time in epoch time (seconds since Jan. 1st, 1970)
	end=$(date -ud 20180831 "+%s") # end time

	period=$((86400 * 7)) # 86400 is 24 hours

	for ((i=start; i <= end; i+=$period)); do

Sergii Nuzhdin lwolf