SUNET/rut-prod-ops
8
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

recreated cluster and removed old eyaml files

Browse source
This commit is contained in:
Rasmus Thorslund 2025-02-06 12:16:47 +01:00
parent a7e1791d07
commit e28b4d94b3
No known key found for this signature in database
GPG key ID: 502D33332E9E305D
18 changed files with 213 additions and 91 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

111
README.md Normal file
View file

@ -0,0 +1,111 @@
# on new install:
* `tofu apply` to create machines
* change hostname to be fqdn with hostnamectl, changing with a running cluster will break the cluster
* register dns with `knotctl add -z rut.sunet.se -n internal-sto4-test-k8sm-1.rut.sunet.se. -d 2001:6b0:6c::449 -r AAAA`
* ./prepare-iaas-debian ${each host}
* ./add-host -b {each host}
* ./edit-secrets ${each controller host}
```
---
+microk8s_secrets:
+ kube-system:
+ cloud-config:
+ - key: cloud.conf
+ value: >
+ ENC[PKCS7,MIID7gYJKoZIhvcNAQcDoIID3zCCA9sCAQAxggKSMIICjgIBAD
+ B2MF4xCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRV
+ lBTUwxLzAtBgNVBAMMJmludGVybmFsLXN0bzQtdGVzdC1rOHNtLTIucnV0Ln
```
* Add to cosmos-rules:
```
'^internal-sto4-test-k8sc-[0-9].rut.sunet.se$':
rut::infra_ca_rp:
sunet::microk8s::node:
channel: 1.31/stable
sunet::frontend::register_sites:
sites:
kubetest.rut.sunet.se:
frontends:
- se-fre-lb-1.sunet.se
- se-tug-lb-1.sunet.se
port: '30443'
'^internal-sto4-test-k8sw-[0-9].rut.sunet.se$':
rut::infra_ca_rp:
sunet::microk8s::node:
channel: 1.31/stable
'^internal-sto4-test-k8spg-[0-9].rut.sunet.se$':
rut::infra_ca_rp:
sunet::microk8s::node:
channel: 1.31/stable
```
* add nodes by adding a provisioning key on the first management node with `microk8s add-node`
* Add all other _Controller_ nodes with `microk8s join 89.46.21.119:25000/12345678987654345678976543/1234565`
* Add all other _Worker_ nodes with `microk8s join 89.46.21.119:25000/12345678987654345678976543/1234565 --worker`
* Taint controller nodes so they wont get workload:` microk8s.kubectl taint nodes --selector=node.kubernetes.io/microk8s-controlplane=microk8s-controlplane cp-node=true:NoExecute`
* Taint Postgres nodes so they wont get workload:` microk8s.kubectl taint nodes --selector=sunet.se/role=cnpg pg-node=true:NoExecute`
* `kubectl get nodes` should show something like:
```
NAME STATUS ROLES AGE VERSION
internal-sto4-test-k8sc-2.rut.sunet.se NotReady <none> 16d v1.28.7
internal-sto4-test-k8sw-5.rut.sunet.se Ready <none> 15m v1.28.7
internal-sto4-test-k8sw-1.rut.sunet.se Ready <none> 15m v1.28.7
internal-sto4-test-k8sw-2.rut.sunet.se Ready <none> 14m v1.28.7
internal-sto4-test-k8sc-3.rut.sunet.se Ready <none> 16d v1.28.7
internal-sto4-test-k8sw-3.rut.sunet.se Ready <none> 18m v1.28.7
internal-sto4-test-k8sw-4.rut.sunet.se Ready <none> 16m v1.28.7
internal-sto4-test-k8sw-0.rut.sunet.se Ready <none> 21m v1.28.7
internal-sto4-test-k8sc-1.rut.sunet.se Ready <none> 16d v1.28.7
```
* Enable needed addons for rut: `microk8s enable ingress` `microk8s enable cert-manager` `microk8s enable community` `microk8s enable cloudnative-pg` `microk8s enable metrics-server`
* `kubectl create namespace sunet-cnpg`
* `kubectl label node internal-sto4-test-k8spg-0.rut.sunet.se sunet.se/role=cnpg`
* `kubectl label node internal-sto4-test-k8spg-1.rut.sunet.se sunet.se/role=cnpg`
* `kubectl label node internal-sto4-test-k8spg-2.rut.sunet.se sunet.se/role=cnpg`
* Setup storage class: `rsync -a k8s internal-sto4-test-k8sc-0.rut.sunet.se: && ssh internal-sto4-test-k8sc-0.rut.sunet.se kubectl apply -f k8s`
* **Profit**
# Setting up auth (satosa) and monitoring with thruk+naemon+loki+influxdb
* Get shib-sp metadata with `curl https://monitor-test.rut.sunet.se/Shibboleth.sso/Metadata > internal-sto4-test-satosa-1.rut.sunet.se/overlay/etc/satosa/metadata/monitor.xml`
* Get satosa metadata with `curl https://idp-proxy-test.rut.sunet.se/Saml2IDP/proxy.xml > internal-sto4-test-monitor-1.rut.sunet.se/overlay/opt/naemon_monitor/satosa.xml`
* Publish backend metadata to swamid. `ssh internal-sto4-test-satosa-1.rut.sunet.se cat /etc/satosa/metadata/backend.xml |xmllint --format - > rut.xml`
## Day 2 operations:
### Rolling upgrade:
Drain one controller at the time with:
kubectl drain internal-sto4-test-k8sc-0.rut.sunet.se --ignore-daemonset
After the first node is drained and upgraded, restart the calico controller with:
kubectl rollout restart deployment calico-kube-controllers -n kube-system
After that restart the calico-node running on that host by deleting it. It should be automatically recreated by the controller.
kubectl delete pod calico-node-???? -n kube-system
Continue with the workers (Including PG nodes):
kubectl drain internal-sto4-test-k8sw-0.rut.sunet.se --force --ignore-daemonsets --delete-emptydir-data --disable-eviction
kubectl delete pod calico-node-???? -n kube-system ```
### Calico problems
Calico can get in a bad state. Look for problems like `Candidate IP leak handle` and `too old resource version` in calico-kube-controllers pod. If theese are found calico can be restarted with:
kubectl rollout restart deployment calico-kube-controllers -n kube-system
kubectl rollout restart daemonset calico-node -n kube-system
This will disrupt the whole cluster for a few seconds.
### Backup
Install Velero backup from https://github.com/vmware-tanzu/velero/releases
velero install --provider aws --plugins velero/velero-plugin-for-aws:v1.2.1 --bucket velero --secret-file ./credentials-velero --use-volume-snapshots=false --backup-location-config region=sto3,s3ForcePathStyle="true",s3Url=https://s3.sto3.safedc.net
velero backup create rut-backup --selector 'backup notin (ignore)'

11
internal-sto4-prod-k8sc-0.rut.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -1,11 +0,0 @@
---
microk8s_secrets:
kube-system:
cloud-config:
- key: cloud.conf
value: ENC[PKCS7,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]
fleetlock_config:
rut-prod:
server: "https://fl-prod.knubbis.sunet.se"
password: ENC[PKCS7,MIIC6gYJKoZIhvcNAQcDoIIC2zCCAtcCAQAxggKSMIICjgIBADB2MF4xCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRVlBTUwxLzAtBgNVBAMMJmludGVybmFsLXN0bzQtcHJvZC1rOHNjLTAucnV0LnN1bmV0LnNlAhRV3Y63EDc0uKP/nAvqNTzdsgIPRjANBgkqhkiG9w0BAQEFAASCAgAw9qD5AY6N171mwYrHtaif+3LKjGe0egKhvw1BWZ9WrCqUD8pri+KUT/3awtGd3An4+Tbrc2qp2SeJDSdOkfNhhieaWrvK+3cuSF6JXcYNqrIcF7Y7pIgDgTs0H2IbHZ1I3bp8xuqw+vOu6ghCvWDxsBjeOyADt4IhtPq+LydF+MPKdNVVFxPzXUiYcqsmjWmvFcCPlIjqEiMo4zJVNHEk0dNntawV84BNeW3LdcV/nd+kxhbbiwe9eiyYjtIpWwfUAfDoGv1/PwNyZMKuvg8IlnhrP610vkk3PKJF7kvCkjtorFbwWY4Jet2Krslz4O7QOnTPMOrBLMffsLR1rqRLEc4qcmvCelh27Dqrdx/f+uOcLqOJpxblO6dEwR8dNn/PFoDULyU5X2oOxyzkwtJTzI++JhgBVLaqcDHkmXDt51r96Y+K4E/0n/AbJAw6BZ5Ad0upoVTv9ft1WdLw5ydYOsAcmT3XwpnTQPwf7XYYksgPkw0yeav5+DJ0xjc9MNHUhXre+0mcO4NoLKFssUT7aukzhCt85H0ZAKwL8eP34TecIO9RtidmUbQQeT6fm7BAe+TAG7HLvVQvjw61fr+aJjMnZthGnwDxCSc/LA1qamVnqAJXHYPHDTh33M+HGWkEvb1vw5ZpMZd9hmtEq8fpLatW4YgyQw+Z5Am65mwDYzA8BgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBDFzG5JbOA7hTcA7EXEVG1GgBB2DHWbYya8A3OclC2m+JmW]

11
internal-sto4-prod-k8sc-1.rut.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -1,11 +0,0 @@
---
microk8s_secrets:
kube-system:
cloud-config:
- key: cloud.conf
value: ENC[PKCS7,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]
fleetlock_config:
rut-prod:
server: "https://fl-prod.knubbis.sunet.se"
password: ENC[PKCS7,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]

11
internal-sto4-prod-k8sc-2.rut.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -1,11 +0,0 @@
---
microk8s_secrets:
kube-system:
cloud-config:
- key: cloud.conf
value: ENC[PKCS7,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]
fleetlock_config:
rut-prod:
server: "https://fl-prod.knubbis.sunet.se"
password: ENC[PKCS7,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]

6
internal-sto4-prod-k8spg-0.rut.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -1,6 +0,0 @@
---
fleetlock_config:
rut-prod:
server: "https://fl-prod.knubbis.sunet.se"
password: ENC[PKCS7,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]

6
internal-sto4-prod-k8spg-1.rut.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -1,6 +0,0 @@
---
fleetlock_config:
rut-prod:
server: "https://fl-prod.knubbis.sunet.se"
password: ENC[PKCS7,MIIC6wYJKoZIhvcNAQcDoIIC3DCCAtgCAQAxggKTMIICjwIBADB3MF8xCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRVlBTUwxMDAuBgNVBAMMJ2ludGVybmFsLXN0bzQtcHJvZC1rOHNwZy0xLnJ1dC5zdW5ldC5zZQIUZZeA9psD6C9te3ak6PFQKI1bNhswDQYJKoZIhvcNAQEBBQAEggIAfsFBFHZNGlJIJ4Bo4s5s1W0VSh3ogz+aASrR86NFzj+VXs28XP44X0xgkwAEmo3GWQkwt/IJCsQ0cZ+EkbfqGX9nSNufVFEYAVRRbziJ3soW1z+GVV/23Ja8N92rmgdki7OoptyNWWnw68euHxcUoDz0wKTRyWiGIbLVDyc3wm8yQndBPlC9BtNeSrRDvAEKyx1HspqBTHyDRDhxK8U6dWhfkJssGzwZVvVT+Nh5dXRE7G1wzYcaYxyl3ct/iug7gq2DM50u5fTghkGWcMggBZZ8HyvMOCZBM/ZbhgZkJ/BJ2+wsK4yWlP/YO9tjkX2xlyeUmn0dV+MHqHrWKsyLdYhg667rPl9DBZEawy1GItU9bCN947qg+yj5n04KFMRCFYodOuuBVgDGAb2BUSFZKPcEx72oNP3/Zj5mmuLWoTZDLuhQolnikJTX211tRBGvc166HifL/Nb4cw35E8EtlOBAsfBZA2uzMaRepCXZOCTIJ4I9noBSqoxv0eIskQ65A2iY2+FwLOgOo95RFYHoXhvB4BGZb2IoYm9rEs2iJK7E3gBBXSHBZ9wOQdqdGRL/PCzru10SIhKceMTvn/t9SI/oLSiIXmkXqo5WxhCjTR0efCXDj0J6Ohja1XNZvQ6A5CWo5GyELC9KzWSuYfYjL/SgPgDRVpofzWcvaGpR+EUwPAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBKgQQYsZTlfQJKtPZpSPmPed2CoAQcqWPyv7ffO5k09r3JAs93Q==]

6
internal-sto4-prod-k8spg-2.rut.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -1,6 +0,0 @@
---
fleetlock_config:
rut-prod:
server: "https://fl-prod.knubbis.sunet.se"
password: ENC[PKCS7,MIIC6wYJKoZIhvcNAQcDoIIC3DCCAtgCAQAxggKTMIICjwIBADB3MF8xCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRVlBTUwxMDAuBgNVBAMMJ2ludGVybmFsLXN0bzQtcHJvZC1rOHNwZy0yLnJ1dC5zdW5ldC5zZQIUC5w03++rwuM5p6346wL0cwBEjakwDQYJKoZIhvcNAQEBBQAEggIAUoJDeRaAQ1+kw2N7Jn8qkRLQEzD6RlzRFSWjk+88tW+qwt0ejO9Nu2+yfltJCeNbEz/TPHowat1jjZM4wvHFxZGiLXq5jUMLinDmBDzRN+YURnRF+lizRjVUPt6tCsKFYVk+pVrZ4UP6yWoo+ZYMBEjXTujAb7cS+f3IH4d6oQ9x9NsYgD2eT43zDfTwkJQ6O6p2PNojh9axtbYgx+Ne/MDHJtU647MIvXnqU+yAkYXJyXKtCRogIzYxjFjkPAAVt095aGLP1Y/biQbm34fchyJ7+RbAUM58RzEas0wsn/SaNC74iDNLHWGS52l3bne+w9+DCEnhaWc49RD4viOC/medDTtpVL7TzpGu9cGEYdtqpqJ49EyD/uq9CiM6q4IEeTvb9PiG2+IUKH9wi5QSbDgVKQnh+1n6o6YZeJXUVXKYWfu6Y7bvsuu+LdrNjZYLp01f1N+S1991QxG+z6q5OZrnlvKyMtQoGvD8h4SUigmQrR/Rntv8+XPdCYjltPtqFXiTIs3bukk5FG/0ifd6dbTJkg4ZBKZz7PQjOAITP/wdM3/mACCZz4P6tKT6lJGtgMmhXBwfYXGatVbDNUCtCn5kl1JYJuop41SYXZsnGz684DEONZaHYf0x5dKeVYVvVZVnLkMZlNZBGABYcEPlBOVHfbi8Cqz16V5jxAb2hekwPAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBKgQQDtO9Oe5N0+dJKJx5JAXGjYAQ8gcDE8JrIPJ6uigtmxZDLA==]

6
internal-sto4-prod-k8sw-0.rut.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -1,6 +0,0 @@
---
fleetlock_config:
rut-prod:
server: "https://fl-prod.knubbis.sunet.se"
password: ENC[PKCS7,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]

6
internal-sto4-prod-k8sw-1.rut.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -1,6 +0,0 @@
---
fleetlock_config:
rut-prod:
server: "https://fl-prod.knubbis.sunet.se"
password: ENC[PKCS7,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]

6
internal-sto4-prod-k8sw-2.rut.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -1,6 +0,0 @@
---
fleetlock_config:
rut-prod:
server: "https://fl-prod.knubbis.sunet.se"
password: ENC[PKCS7,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]

6
internal-sto4-prod-k8sw-3.rut.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -1,6 +0,0 @@
---
fleetlock_config:
rut-prod:
server: "https://fl-prod.knubbis.sunet.se"
password: ENC[PKCS7,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]

6
internal-sto4-prod-k8sw-4.rut.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -1,6 +0,0 @@
---
fleetlock_config:
rut-prod:
server: "https://fl-prod.knubbis.sunet.se"
password: ENC[PKCS7,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]

6
internal-sto4-prod-k8sw-5.rut.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -1,6 +0,0 @@
---
fleetlock_config:
rut-prod:
server: "https://fl-prod.knubbis.sunet.se"
password: ENC[PKCS7,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]

11
scripts/change_ttl_on_host.sh Executable file
View file

@ -0,0 +1,11 @@
#!/bin/bash
SERVERNAME=$1
DOMAIN=rut.sunet.se
ipv4=$(dig -t a +short $SERVERNAME)
ipv6=$(dig -t aaaa +short $SERVERNAME)
knotctl update -z $DOMAIN -n ${SERVERNAME}. -a ttl=60 -r AAAA -d $ipv6
knotctl update -z $DOMAIN -n ${SERVERNAME}. -a ttl=60 -r A -d $ipv4

33
scripts/get_host_ip.sh Executable file
View file

@ -0,0 +1,33 @@
#!/usr/bin/env bash
SERVERNAME=$1
export OS_CLOUD=sto4-rut
OLDIPV4=$(dig -t a +short $SERVERNAME)
OLDIPV6=$(dig -t aaaa +short $SERVERNAME)
# Pull the JSON for the server with the matching name
SERVER_JSON="$(openstack server list -f json \
| jq -r ".[] | select(.Name==\"$SERVERNAME\")")"
# Extract the public network list as a space-separated array
ADDRESSES="$(echo "$SERVER_JSON" \
| jq -r '.Networks.public[]')"
# Initialize empty variables
IPV4=""
IPV6=""
# Loop through each address in the 'public' list
# - If it contains a colon (:), assume it's IPv6
# - Otherwise, assume it's IPv4
for addr in $ADDRESSES; do
if [[ "$addr" == *:* ]]; then
IPV6="$addr"
else
IPV4="$addr"
fi
done
echo "SS IPv4: $IPV4" "DNS IPv4: $OLDIPV4"
echo "SS IPv6: $IPV6" "DNS IPv6: $OLDIPV6"

25
scripts/set_ip_on_host.sh Executable file
View file

@ -0,0 +1,25 @@
#!/bin/bash
SERVERNAME=$1
DOMAIN=rut.sunet.se
OS_CLOUD=sto4-rut
SERVER_JSON="$(openstack server list -f json \
| jq -r ".[] | select(.Name==\"$SERVER_NAME\")")"
ADDRESSES="$(echo "$SERVER_JSON" \
| jq -r '.Networks.public[]')"
IPV4=""
IPV6=""
for addr in $ADDRESSES; do
if [[ "$addr" == *:* ]]; then
IPV6="$addr"
else
IPV4="$addr"
fi
done
knotctl add -r A -z $DOMAIN -n ${SERVERNAME}. -d $IPV4
knotctl add -r AAAA -z $DOMAIN -n ${SERVERNAME}. -d $IPV6

29
scripts/update_ip_on_host.sh Executable file
View file

@ -0,0 +1,29 @@
#!/bin/bash
SERVERNAME=$1
DOMAIN=rut.sunet.se
OLDIPV4=$(dig -t a +short $SERVERNAME)
OLDIPV6=$(dig -t aaaa +short $SERVERNAME)
export OS_CLOUD=sto4-rut
SERVER_JSON="$(openstack server list -f json \
| jq -r ".[] | select(.Name==\"$SERVERNAME\")")"
ADDRESSES="$(echo "$SERVER_JSON" \
| jq -r '.Networks.public[]')"
IPV4=""
IPV6=""
for addr in $ADDRESSES; do
if [[ "$addr" == *:* ]]; then
IPV6="$addr"
else
IPV4="$addr"
fi
done
knotctl update -z $DOMAIN -n ${SERVERNAME}. -a data=$IPV6 -r AAAA -d $OLDIPV6
knotctl update -z $DOMAIN -n ${SERVERNAME}. -a data=$IPV4 -r A -d $OLDIPV4

8
vars.tf
View file

@ -1,5 +1,5 @@
variable "worker_instance_count" { variable "worker_instance_count" {
default = "6" default = "8"
} }
variable "controller_instance_count" { variable "controller_instance_count" {
default = "3" default = "3"
@ -9,13 +9,13 @@ variable "pgcluster_instance_count" {
} }
variable "controller_instance_type" { variable "controller_instance_type" {
default = "b2.c2r4" default = "b2.c4r16"
} }
variable "monitor_instance_type" { variable "monitor_instance_type" {
default = "b2.c2r4" default = "b2.c2r4"
} }
variable "worker_instance_type" { variable "worker_instance_type" {
default = "b2.c4r16" default = "b2.c8r32"
} }
variable "worker_name" { variable "worker_name" {
default = "internal-sto4-prod-k8sw" default = "internal-sto4-prod-k8sw"
@ -27,7 +27,7 @@ variable "pgcluster_name" {
default = "internal-sto4-prod-k8spg" default = "internal-sto4-prod-k8spg"
} }
variable "pgcluster_instance_type"{ variable "pgcluster_instance_type"{
default = "b2.c2r8" default = "b2.c8r32"
} }
variable "dns_suffix" { variable "dns_suffix" {