#kops - January 2019

kopsArchived
49 messages

Discussions related to kops for kubernetes
Archive: https://archive.sweetops.com/kops/

Dec 2018
January 2019
Feb 2019
Jan
Janalmost 8 years ago

Populate chamber secrets for kops project (make sure to change the keys and values to reflect your environment; add new secrets as needed)
Jan
Janalmost 8 years ago(edited)
where do I find that list? in aws/kops-aws-platform/chamber-kops.sh?
joshmyers
joshmyersalmost 8 years ago
@Jan good question
Jan
Janalmost 8 years ago
busy trying to stand up the root kops as is
Jan
Janalmost 8 years ago
then modify the a fork of the module for targeting existing vpc's
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 8 years ago
I am working on docs: https://github.com/cloudposse/geodesic/pull/339
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 8 years ago(edited)
this should be merged by EOW (sunday)
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 8 years ago
they still don’t take into account some of the latest changes.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 8 years ago
Terraform module to create and apply a Kubernetes ConfigMap for aws-iam-authenticator to be used with Kops to map IAM principals to Kubernetes users
bazbremner
bazbremneralmost 8 years ago
@bazbremner has joined the channel
Webb
Webbalmost 8 years ago
@Webb has joined the channel
Jan
Janalmost 8 years ago
Are you using rbac by default?
Jan
Janalmost 8 years ago
erg wrong channel I think
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 8 years ago
in our kops manifest, we have it disabled by default
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 8 years ago
but there’s a boolean to enable it
Jan
Janalmost 8 years ago
yea
Jan
Janalmost 8 years ago
Have it enabled
Ajay Tripathy
Ajay Tripathyalmost 8 years ago
@Ajay Tripathy has joined the channel
Jan
Janalmost 8 years ago
yo
Jan
Janalmost 8 years ago
when runnign k8s via kops in aws
Jan
Janalmost 8 years ago
what creates the KubernetesAdmin role referenced here?
Jan
Janalmost 8 years ago
here
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 8 years ago
might have to wait for @Andriy Knysh (Cloud Posse) …
Jan
Janalmost 8 years ago
are they prerequisites or do you create them automatically?
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 8 years ago
I don’t have first-hand experience setting this up yet
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 8 years ago
so I can just google =P
Jan
Janalmost 8 years ago
hahah
Jan
Janalmost 8 years ago
yea all good
Jan
Janalmost 8 years ago
will figure it out
Jan
Janalmost 8 years ago
so liek this is the 2nd half of what I would have expected
Jan
Janalmost 8 years ago
the 1st part would have been the creation of the iam roles
Jan
Janalmost 8 years ago
will extend and submit
Jan
Janalmost 8 years ago
inf act its not needed
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 8 years ago
@Jan ☝️
Jan
Janalmost 8 years ago
I thanks
Jan
Janalmost 8 years ago
so.... who wants to talk me through whats going on here?


module "kops_state_backend" {
  source           = "git::<https://github.com/cloudposse/terraform-aws-kops-state-backend.git?ref=tags/0.1.5>"
...
  cluster_name     = "${var.region}"
  region           = "${var.region}"
...
}
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)almost 8 years ago
so in the example we use cluster name as the DNS zone subdomain name, e.g. if the domain for the nevironment is <http://prod.example.com|prod.example.com>, then the module will create a subdomain us-west-2 and you’ll access your cluster at <http://us-west-2.prod.example.com|us-west-2.prod.example.com>
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)almost 8 years ago
instead of the region, you can use any name that suits your needs, e.g. <http://kops.prod.example.com|kops.prod.example.com>
December 2018Browse by dateFebruary 2019