Kubernetes The Hard Way on Azure
This tutorial is designed for Microsoft Azure and Azure CLI 2.0. It is a fork of the great Kubernetes The Hard Way from Kelsey Hightower that describes same steps using Google Cloud Platform.
Azure part is based on the superb translation done by Jonathan Carter - @lostintangent in this fork. He is the one who is really behind the Azure "translation".
This tutorial walks you through setting up Kubernetes the hard way. This guide is not for people looking for a fully automated command to bring up a Kubernetes cluster. If that's you then check out Azure Container Services, or the Getting Started Guides.
Kubernetes The Hard Way is optimized for learning, which means taking the long route to ensure you understand each task required to bootstrap a Kubernetes cluster.
Kubernetes Dashboard configuration has been added at the end of the tutorial, to let you play with the cluster through a UI.
The results of this tutorial should not be viewed as production ready, and may receive limited support from the community, but don't let that stop you from learning!
The target audience for this tutorial is someone planning to support a production Kubernetes cluster and wants to understand how everything fits together.
Kubernetes The Hard Way guides you through bootstrapping a highly available Kubernetes cluster with end-to-end encryption between components and RBAC authentication.
- Kubernetes 1.17.3
- containerd Container Runtime 1.3.3
- gVisor latest
- CNI Container Networking 0.7.1
- etcd v3.3.18
- CoreDNS v1.6.7
This tutorial assumes you have access to the Microsoft Azure. While Azure is used for basic infrastructure requirements the lessons learned in this tutorial can be applied to other platforms.
- Installing the Client Tools
- Provisioning Compute Resources
- Provisioning the CA and Generating TLS Certificates
- Generating Kubernetes Configuration Files for Authentication
- Generating the Data Encryption Config and Key
- Bootstrapping the etcd Cluster
- Bootstrapping the Kubernetes Control Plane
- Bootstrapping the Kubernetes Worker Nodes
- Configuring kubectl for Remote Access
- Provisioning Pod Network Routes
- Deploying the DNS Cluster Add-on
- Smoke Test
- Cleaning Up