Skip to content

Instantly share code, notes, and snippets.

@making
Created May 31, 2018 17:36
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save making/adc8726fdef94671259ac43a18429d45 to your computer and use it in GitHub Desktop.
Save making/adc8726fdef94671259ac43a18429d45 to your computer and use it in GitHub Desktop.
ubuntu@ip-10-0-1-127:~/cfcr-manifests$ ./deploy-kubernetes.sh
Using environment '10.0.2.252' as client 'admin'
Using deployment 'cfcr'
Release 'bosh-dns/1.5.0' already exists.
Release 'docker/32.0.0' already exists.
Release 'bpm/0.6.0' already exists.
Release 'kubo/0.17.0' already exists.
Release 'cfcr-etcd/1.3' already exists.
stemcells:
+ - alias: trusty
+ os: ubuntu-trusty
+ version: '3586.16'
- - alias: trusty
- os: ubuntu-trusty
- version: '3541.10'
releases:
- name: kubo
- sha1: 8a513e48cccdea224c17a92ce73edbda04acee91
+ sha1: 0ab676b9f6f5363377498e93487e8ba31622768e
- url: https://bosh.io/d/github.com/cloudfoundry-incubator/kubo-release?v=0.16.0
+ url: https://bosh.io/d/github.com/cloudfoundry-incubator/kubo-release?v=0.17.0
- version: 0.16.0
+ version: 0.17.0
- name: cfcr-etcd
- sha1: 81dbcc40a27cbf731bfc71b7c46c495b510f85a4
+ sha1: 72a9753b08980229c73b623c4ddeea59a5afc96f
- url: https://github.com/cloudfoundry-incubator/cfcr-etcd-release/releases/download/v1.0/cfcr-etcd-release-1.0.tgz
+ url: https://github.com/cloudfoundry-incubator/cfcr-etcd-release/releases/download/v1.3/cfcr-etcd-release-1.3.tgz
- version: '1.0'
+ version: '1.3'
- name: docker
- sha1: 550ab08cb6dcd113ab5182d84fbcb09d966a612a
+ sha1: f192296243e68150ae66656fc9134a2b2a023184
- url: https://github.com/cloudfoundry-incubator/docker-boshrelease/releases/download/v31.0.1/docker-31.0.1.tgz
+ url: https://github.com/cloudfoundry-incubator/docker-boshrelease/releases/download/v32.0.0/docker-32.0.0.tgz
- version: 31.0.1
+ version: 32.0.0
- name: bosh-dns
- sha1: 9231b7c7d2f6aa85e0cb77fdeef7add54fdb3f1a
+ sha1: 66e74bb601b691ea4836f859c556de8a5c6c1264
- url: https://bosh.io/d/github.com/cloudfoundry/bosh-dns-release?v=0.2.0
+ url: https://bosh.io/d/github.com/cloudfoundry/bosh-dns-release?v=1.5.0
- version: 0.2.0
+ version: 1.5.0
- name: bpm
- sha1: 5a03b988c725c6b5a1aed247c8c23c2bff9d421b
+ sha1: 4f0f239abdc801d71de9063625aa56e3c42634b5
- url: https://bosh.io/d/github.com/cloudfoundry-incubator/bpm-release?v=0.4.0
+ url: https://bosh.io/d/github.com/cloudfoundry-incubator/bpm-release?v=0.6.0
- version: 0.4.0
+ version: 0.6.0
addons:
- name: bosh-dns
jobs:
- name: bosh-dns
properties:
+ api:
+ client:
+ tls: "((/dns_api_client_tls))"
+ server:
+ tls: "((/dns_api_server_tls))"
variables:
+ - name: tls-etcd-v0-17-0
+ options:
+ ca: kubo_ca
+ common_name: "*.etcd.cfcr.internal"
+ extended_key_usage:
+ - client_auth
+ - server_auth
+ type: certificate
+ - name: "/dns_api_tls_ca"
+ opsname: global_dns_api_tls_ca
+ options:
+ common_name: dns-api-tls-ca
+ is_ca: true
+ type: certificate
+ - name: "/dns_api_server_tls"
+ opsname: global_dns_api_server_tls
+ options:
+ ca: "/dns_api_tls_ca"
+ common_name: api.bosh-dns
+ extended_key_usage:
+ - server_auth
+ type: certificate
+ - name: "/dns_api_client_tls"
+ opsname: global_dns_api_client_tls
+ options:
+ ca: "/dns_api_tls_ca"
+ common_name: api.bosh-dns
+ extended_key_usage:
+ - client_auth
+ type: certificate
- - name: tls-etcd
- options:
- alternative_names:
- - master.default.cfcr.bosh
- - "*.master.default.cfcr.bosh"
- ca: kubo_ca
- common_name: master.default.cfcr.bosh
- extended_key_usage:
- - client_auth
- - server_auth
- type: certificate
instance_groups:
- name: master
jobs:
- name: kube-controller-manager
properties:
+ cluster-signing: "((kubo_ca))"
- name: etcd
properties:
tls:
etcd:
- ca: "((tls-etcd.ca))"
+ ca: "((tls-etcd-v0-17-0.ca))"
- certificate: "((tls-etcd.certificate))"
+ certificate: "((tls-etcd-v0-17-0.certificate))"
- private_key: "((tls-etcd.private_key))"
+ private_key: "((tls-etcd-v0-17-0.private_key))"
peer:
- ca: "((tls-etcd.ca))"
+ ca: "((tls-etcd-v0-17-0.ca))"
- certificate: "((tls-etcd.certificate))"
+ certificate: "((tls-etcd-v0-17-0.certificate))"
- private_key: "((tls-etcd.private_key))"
+ private_key: "((tls-etcd-v0-17-0.private_key))"
+ etcd:
+ dns_suffix: etcd.cfcr.internal
+ - name: smoke-tests
+ release: kubo
- name: worker
jobs:
- name: docker
properties:
- bip: 172.17.0.1/24
+ bridge: cni0
- name: kubelet
properties:
+ cloud-provider: aws
- name: kube-proxy
properties:
+ cloud-provider: aws
Continue? [yN]:
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment