chrislovecnm

GKE IP Alaising Example

This is a demo of creating the subnets needed for a GKE Cluster

Create The Network

Create the base network for GKE.

chrislovecnm

//All the resource "*" we can prune down to a
//"Resource": "arn:aws:iam::ACCOUNTNUMBER:role/ROLENAME"
// which is tied to a VPC
// This is a list of the permissions that our installer tools
// use.
// There are multiple modes that our installer uses, we
// will not need the perms for VPC creation as we
// will be using a pre installed VPC

// Will need all of these

chrislovecnm

kops cluster config

kubeAPIServer:
  authorizationMode: RBAC
  authorizationRbacSuperUser: admin
  oidcCAFile: /srv/kubernetes/ca.crt
  oidcClientID: example
  oidcGroupsClaim: groups
  oidcIssuerURL: https://dex.example.com
  oidcUsernameClaim: email

chrislovecnm

#!/bin/bash

test-kubetest() {
	export GOPATH=$HOME/Workspace
	KOPS_FEATURE_FLAGS=+SpecOverrideFlag
	KOPS_STATE_STORE=gs://chlove-state-store/
	cd $GOPATH/src/k8s.io/kubernetes
        MYIP=$(curl ipinfo.io | jq -r .ip)
	RELEASE="ci/latest"
	VERSION=$(gsutil cat gs://kubernetes-release-dev/$RELEASE.txt)

chrislovecnm

#!/bin/bash

WORK=Workspace
U=chlove

echo "deb [arch=amd64] http://storage.googleapis.com/bazel-apt stable jdk1.8" | sudo tee /etc/apt/sources.list.d/bazel.list
curl https://bazel.build/bazel-release.pub.gpg | sudo apt-key add -
sudo apt-get update
sudo apt-get install -y openjdk-8-jdk bazel jq git build-essential

chrislovecnm

set -o vi
export GOPATH=~/Workspace
export PATH=$PATH:$GOPATH/bin
export KOPS_FEATURE_FLAGS=+SpecOverrideFlag
export KOPS_STATE_STORE=s3://clove-test-cncf
test-kubetest() {
	cd $GOPATH/src/k8s.io/kubernetes
        MYIP=$(curl ipinfo.io | jq -r .ip)
	WORKSPACE=/tmp
	LOG_DUMP_SSH_USER=admin

chrislovecnm

Summarizing 2 Failures:

[Fail] [sig-network] Network [It] should set TCP CLOSE_WAIT timeout
/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/network/kube_proxy.go:194

[Fail] [sig-apps] Job [It] should run a job to completion when tasks sometimes fail and are not locally restarted
/go/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/test/e2e/apps/job.go:86

chrislovecnm

.PHONY: ${DIST}/windows/amd64/kops
227 ${DIST}/windows/amd64/kops: ${BINDATA_TARGETS}
228         mkdir -p ${DIST}
229         GOOS=windows GOARCH=amd64 go build -a ${EXTRA_BUILDFLAGS} -o $@ -ldflags "${EXTRA_LDFLAGS} -X k8s.io/kops.Version=${VE    RSION} -X k8s.io/kops.GitVersion=${GITSHA}" k8s.io/kops/cmd/kops

chrislovecnm

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "ec2:DescribeInstances"
            ],
            "Resource": [
                "*"

chrislovecnm

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ec2:AttachVolume",
        "ec2:AuthorizeSecurityGroupEgress",
        "ec2:AuthorizeSecurityGroupIngress",
        "ec2:CreateSecurityGroup",