mirror of
https://github.com/rancher/rancher-docs.git
synced 2026-09-24 20:18:18 +00:00
deleting files accidently checked in
This commit is contained in:
Mark Bishop
Denise
@@ -1,43 +0,0 @@
|
||||
When setting up an airgap environment, it may be useful to run RKE through a bastion server. This can be helpful if you want to keep your RKE config or SSH keys on your local machine. This requires that the bastion server is accessible from the outside world, and has access to port 22 (SSH) on your airgapped nodes.
|
||||
|
||||
local RKE (via port 22 over internet) -> bastion
|
||||
bastion (via port 22 over internal network) -> airgap_node_1, airgap_node_2, airgap_node3
|
||||
|
||||
To enable running RKE through a bastion server, add the following to your RKE yaml config:
|
||||
|
||||
```
|
||||
bastion_host:
|
||||
address: 18.224.54.35 # public IP of the bastion server
|
||||
user: ubuntu
|
||||
port: 22
|
||||
ssh_key_path: /path/to/ssh/key
|
||||
```
|
||||
|
||||
Full ex:
|
||||
```
|
||||
bastion_host:
|
||||
address: 18.224.54.35 # public IP of the bastion server
|
||||
user: ubuntu
|
||||
port: 22
|
||||
ssh_key_path: /path/to/ssh/key
|
||||
nodes:
|
||||
- address: 172.31.6.15 # private IP of airgapped node
|
||||
user: ubuntu
|
||||
role: [ "controlplane", "etcd", "worker" ]
|
||||
ssh_key_path: /path/to/ssh/key
|
||||
- address: 172.31.12.84 # private IP of airgapped node
|
||||
user: ubuntu
|
||||
role: [ "controlplane", "etcd", "worker" ]
|
||||
ssh_key_path: /path/to/ssh/key
|
||||
- address: 172.31.15.78 # private IP of airgapped node
|
||||
user: ubuntu
|
||||
role: [ "controlplane", "etcd", "worker" ]
|
||||
ssh_key_path: /path/to/ssh/key
|
||||
private_registries:
|
||||
- url: <registry url>
|
||||
user: <username>
|
||||
password: <password>
|
||||
is_default: true
|
||||
```
|
||||
|
||||
Running `rke up` will provision the k8s cluster through the bastion server, and provide the resulting kube_config. However, it's important to note that as your nodes are not accessible via a public IP, the machine you run `kubectl` from in later steps must be able to reach your airgapped nodes through the addresses provided. This may require moving the resulting kube_config after it is created.
|
||||
@@ -1,30 +0,0 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
|
||||
# Collect images for Air Gap/Private Registry install
|
||||
# Requires:
|
||||
# rke - https://rancher.com/docs/rke/v0.1.x/en/installation/
|
||||
# helm - https://docs.helm.sh/using_helm/#installing-helm
|
||||
# curl
|
||||
# jq
|
||||
|
||||
echo "RKE Images"
|
||||
rke config --system-images 2>/dev/null > tmp-images.txt
|
||||
|
||||
echo "Helm Tiller Image"
|
||||
helm init --dry-run --debug | grep image: | awk '{print $2}' >> tmp-images.txt
|
||||
|
||||
echo "Rancher Images"
|
||||
latest_url=$(curl -sS "https://api.github.com/repos/rancher/rancher/releases/latest" | jq -r '.assets[]|select(.name=="rancher-images.txt")|.browser_download_url')
|
||||
curl -sSL ${latest_url} >> tmp-images.txt
|
||||
|
||||
echo "Cert-Manager Image"
|
||||
cm_repo=$(helm inspect values stable/cert-manager | grep repository: | awk '{print $2}')
|
||||
cm_tag=$(helm inspect values stable/cert-manager | grep tag: | awk '{print $2}')
|
||||
echo "${cm_repo}:${cm_tag}" >> tmp-images.txt
|
||||
|
||||
echo "Sort and uniq the images list"
|
||||
cat tmp-images.txt | sort -u | uniq > images.txt
|
||||
|
||||
# cleanup tmp file
|
||||
rm tmp-images.txt
|
||||
@@ -1,40 +0,0 @@
|
||||
busybox
|
||||
rancher/alertmanager-helper:v0.0.2
|
||||
rancher/alpine-git:1.0.4
|
||||
rancher/calico-cni:v3.1.1
|
||||
rancher/calico-ctl:v2.0.0
|
||||
rancher/calico-node:v3.1.1
|
||||
rancher/cluster-proportional-autoscaler-amd64:1.0.0
|
||||
rancher/coreos-etcd:v3.1.12
|
||||
rancher/coreos-etcd:v3.2.18
|
||||
rancher/coreos-flannel-cni:v0.2.0
|
||||
rancher/coreos-flannel:v0.9.1
|
||||
rancher/docker-elasticsearch-kubernetes:5.6.2
|
||||
rancher/fluentd-helper:v0.1.2
|
||||
rancher/fluentd:v0.1.10
|
||||
rancher/hyperkube:v1.10.5-rancher1
|
||||
rancher/hyperkube:v1.11.2-rancher1
|
||||
rancher/hyperkube:v1.9.7-rancher2
|
||||
rancher/jenkins-jenkins:2.107-slim
|
||||
rancher/jenkins-jnlp-slave:3.10-1-alpine
|
||||
rancher/jenkins-plugins-docker:17.12
|
||||
rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.10
|
||||
rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.7
|
||||
rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.8
|
||||
rancher/k8s-dns-kube-dns-amd64:1.14.10
|
||||
rancher/k8s-dns-kube-dns-amd64:1.14.7
|
||||
rancher/k8s-dns-kube-dns-amd64:1.14.8
|
||||
rancher/k8s-dns-sidecar-amd64:1.14.10
|
||||
rancher/k8s-dns-sidecar-amd64:1.14.7
|
||||
rancher/k8s-dns-sidecar-amd64:1.14.8
|
||||
rancher/kibana:5.6.4
|
||||
rancher/log-aggregator:v0.1.3
|
||||
rancher/metrics-server-amd64:v0.2.1
|
||||
rancher/nginx-ingress-controller-defaultbackend:1.4
|
||||
rancher/nginx-ingress-controller:0.16.2-rancher1
|
||||
rancher/pause-amd64:3.0
|
||||
rancher/pause-amd64:3.1
|
||||
rancher/prom-alertmanager:v0.11.0
|
||||
rancher/rke-tools:v0.1.13
|
||||
rancher/rancher:v2.0.8
|
||||
rancher/rancher-agent:v2.0.8
|
||||
@@ -1,93 +0,0 @@
|
||||
#!/bin/sh
|
||||
|
||||
if [ -z "$1" ]; then
|
||||
echo Usage: $0 [REGISTRY]
|
||||
exit 1
|
||||
fi
|
||||
|
||||
set -e -x
|
||||
REGISTRY=$1
|
||||
|
||||
docker load --input rancher-images.tar.gz
|
||||
|
||||
|
||||
docker tag busybox ${REGISTRY}/busybox
|
||||
docker push ${REGISTRY}/busybox
|
||||
docker tag rancher/alertmanager-helper:v0.0.2 ${REGISTRY}/rancher/alertmanager-helper:v0.0.2
|
||||
docker push ${REGISTRY}/rancher/alertmanager-helper:v0.0.2
|
||||
docker tag rancher/alpine-git:1.0.4 ${REGISTRY}/rancher/alpine-git:1.0.4
|
||||
docker push ${REGISTRY}/rancher/alpine-git:1.0.4
|
||||
docker tag rancher/calico-cni:v3.1.1 ${REGISTRY}/rancher/calico-cni:v3.1.1
|
||||
docker push ${REGISTRY}/rancher/calico-cni:v3.1.1
|
||||
docker tag rancher/calico-ctl:v2.0.0 ${REGISTRY}/rancher/calico-ctl:v2.0.0
|
||||
docker push ${REGISTRY}/rancher/calico-ctl:v2.0.0
|
||||
docker tag rancher/calico-node:v3.1.1 ${REGISTRY}/rancher/calico-node:v3.1.1
|
||||
docker push ${REGISTRY}/rancher/calico-node:v3.1.1
|
||||
docker tag rancher/cluster-proportional-autoscaler-amd64:1.0.0 ${REGISTRY}/rancher/cluster-proportional-autoscaler-amd64:1.0.0
|
||||
docker push ${REGISTRY}/rancher/cluster-proportional-autoscaler-amd64:1.0.0
|
||||
docker tag rancher/coreos-etcd:v3.1.12 ${REGISTRY}/rancher/coreos-etcd:v3.1.12
|
||||
docker push ${REGISTRY}/rancher/coreos-etcd:v3.1.12
|
||||
docker tag rancher/coreos-etcd:v3.2.18 ${REGISTRY}/rancher/coreos-etcd:v3.2.18
|
||||
docker push ${REGISTRY}/rancher/coreos-etcd:v3.2.18
|
||||
docker tag rancher/coreos-flannel-cni:v0.2.0 ${REGISTRY}/rancher/coreos-flannel-cni:v0.2.0
|
||||
docker push ${REGISTRY}/rancher/coreos-flannel-cni:v0.2.0
|
||||
docker tag rancher/coreos-flannel:v0.9.1 ${REGISTRY}/rancher/coreos-flannel:v0.9.1
|
||||
docker push ${REGISTRY}/rancher/coreos-flannel:v0.9.1
|
||||
docker tag rancher/docker-elasticsearch-kubernetes:5.6.2 ${REGISTRY}/rancher/docker-elasticsearch-kubernetes:5.6.2
|
||||
docker push ${REGISTRY}/rancher/docker-elasticsearch-kubernetes:5.6.2
|
||||
docker tag rancher/fluentd-helper:v0.1.2 ${REGISTRY}/rancher/fluentd-helper:v0.1.2
|
||||
docker push ${REGISTRY}/rancher/fluentd-helper:v0.1.2
|
||||
docker tag rancher/fluentd:v0.1.10 ${REGISTRY}/rancher/fluentd:v0.1.10
|
||||
docker push ${REGISTRY}/rancher/fluentd:v0.1.10
|
||||
docker tag rancher/hyperkube:v1.10.5-rancher1 ${REGISTRY}/rancher/hyperkube:v1.10.5-rancher1
|
||||
docker push ${REGISTRY}/rancher/hyperkube:v1.10.5-rancher1
|
||||
docker tag rancher/hyperkube:v1.11.2-rancher1 ${REGISTRY}/rancher/hyperkube:v1.11.2-rancher1
|
||||
docker push ${REGISTRY}/rancher/hyperkube:v1.11.2-rancher1
|
||||
docker tag rancher/hyperkube:v1.9.7-rancher2 ${REGISTRY}/rancher/hyperkube:v1.9.7-rancher2
|
||||
docker push ${REGISTRY}/rancher/hyperkube:v1.9.7-rancher2
|
||||
docker tag rancher/jenkins-jenkins:2.107-slim ${REGISTRY}/rancher/jenkins-jenkins:2.107-slim
|
||||
docker push ${REGISTRY}/rancher/jenkins-jenkins:2.107-slim
|
||||
docker tag rancher/jenkins-jnlp-slave:3.10-1-alpine ${REGISTRY}/rancher/jenkins-jnlp-slave:3.10-1-alpine
|
||||
docker push ${REGISTRY}/rancher/jenkins-jnlp-slave:3.10-1-alpine
|
||||
docker tag rancher/jenkins-plugins-docker:17.12 ${REGISTRY}/rancher/jenkins-plugins-docker:17.12
|
||||
docker push ${REGISTRY}/rancher/jenkins-plugins-docker:17.12
|
||||
docker tag rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.10 ${REGISTRY}/rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.10
|
||||
docker push ${REGISTRY}/rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.10
|
||||
docker tag rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.7 ${REGISTRY}/rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.7
|
||||
docker push ${REGISTRY}/rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.7
|
||||
docker tag rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.8 ${REGISTRY}/rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.8
|
||||
docker push ${REGISTRY}/rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.8
|
||||
docker tag rancher/k8s-dns-kube-dns-amd64:1.14.10 ${REGISTRY}/rancher/k8s-dns-kube-dns-amd64:1.14.10
|
||||
docker push ${REGISTRY}/rancher/k8s-dns-kube-dns-amd64:1.14.10
|
||||
docker tag rancher/k8s-dns-kube-dns-amd64:1.14.7 ${REGISTRY}/rancher/k8s-dns-kube-dns-amd64:1.14.7
|
||||
docker push ${REGISTRY}/rancher/k8s-dns-kube-dns-amd64:1.14.7
|
||||
docker tag rancher/k8s-dns-kube-dns-amd64:1.14.8 ${REGISTRY}/rancher/k8s-dns-kube-dns-amd64:1.14.8
|
||||
docker push ${REGISTRY}/rancher/k8s-dns-kube-dns-amd64:1.14.8
|
||||
docker tag rancher/k8s-dns-sidecar-amd64:1.14.10 ${REGISTRY}/rancher/k8s-dns-sidecar-amd64:1.14.10
|
||||
docker push ${REGISTRY}/rancher/k8s-dns-sidecar-amd64:1.14.10
|
||||
docker tag rancher/k8s-dns-sidecar-amd64:1.14.7 ${REGISTRY}/rancher/k8s-dns-sidecar-amd64:1.14.7
|
||||
docker push ${REGISTRY}/rancher/k8s-dns-sidecar-amd64:1.14.7
|
||||
docker tag rancher/k8s-dns-sidecar-amd64:1.14.8 ${REGISTRY}/rancher/k8s-dns-sidecar-amd64:1.14.8
|
||||
docker push ${REGISTRY}/rancher/k8s-dns-sidecar-amd64:1.14.8
|
||||
docker tag rancher/kibana:5.6.4 ${REGISTRY}/rancher/kibana:5.6.4
|
||||
docker push ${REGISTRY}/rancher/kibana:5.6.4
|
||||
docker tag rancher/log-aggregator:v0.1.3 ${REGISTRY}/rancher/log-aggregator:v0.1.3
|
||||
docker push ${REGISTRY}/rancher/log-aggregator:v0.1.3
|
||||
docker tag rancher/metrics-server-amd64:v0.2.1 ${REGISTRY}/rancher/metrics-server-amd64:v0.2.1
|
||||
docker push ${REGISTRY}/rancher/metrics-server-amd64:v0.2.1
|
||||
docker tag rancher/nginx-ingress-controller-defaultbackend:1.4 ${REGISTRY}/rancher/nginx-ingress-controller-defaultbackend:1.4
|
||||
docker push ${REGISTRY}/rancher/nginx-ingress-controller-defaultbackend:1.4
|
||||
docker tag rancher/nginx-ingress-controller:0.16.2-rancher1 ${REGISTRY}/rancher/nginx-ingress-controller:0.16.2-rancher1
|
||||
docker push ${REGISTRY}/rancher/nginx-ingress-controller:0.16.2-rancher1
|
||||
docker tag rancher/pause-amd64:3.0 ${REGISTRY}/rancher/pause-amd64:3.0
|
||||
docker push ${REGISTRY}/rancher/pause-amd64:3.0
|
||||
docker tag rancher/pause-amd64:3.1 ${REGISTRY}/rancher/pause-amd64:3.1
|
||||
docker push ${REGISTRY}/rancher/pause-amd64:3.1
|
||||
docker tag rancher/prom-alertmanager:v0.11.0 ${REGISTRY}/rancher/prom-alertmanager:v0.11.0
|
||||
docker push ${REGISTRY}/rancher/prom-alertmanager:v0.11.0
|
||||
docker tag rancher/rke-tools:v0.1.13 ${REGISTRY}/rancher/rke-tools:v0.1.13
|
||||
docker push ${REGISTRY}/rancher/rke-tools:v0.1.13
|
||||
docker tag rancher/rancher:v2.0.8 ${REGISTRY}/rancher/rancher:v2.0.8
|
||||
docker push ${REGISTRY}/rancher/rancher:v2.0.8
|
||||
docker tag rancher/rancher-agent:v2.0.8 ${REGISTRY}/rancher/rancher-agent:v2.0.8
|
||||
docker push ${REGISTRY}/rancher/rancher-agent:v2.0.8
|
||||
@@ -1,44 +0,0 @@
|
||||
#!/bin/sh
|
||||
set -e -x
|
||||
|
||||
docker pull busybox
|
||||
docker pull rancher/alertmanager-helper:v0.0.2
|
||||
docker pull rancher/alpine-git:1.0.4
|
||||
docker pull rancher/calico-cni:v3.1.1
|
||||
docker pull rancher/calico-ctl:v2.0.0
|
||||
docker pull rancher/calico-node:v3.1.1
|
||||
docker pull rancher/cluster-proportional-autoscaler-amd64:1.0.0
|
||||
docker pull rancher/coreos-etcd:v3.1.12
|
||||
docker pull rancher/coreos-etcd:v3.2.18
|
||||
docker pull rancher/coreos-flannel-cni:v0.2.0
|
||||
docker pull rancher/coreos-flannel:v0.9.1
|
||||
docker pull rancher/docker-elasticsearch-kubernetes:5.6.2
|
||||
docker pull rancher/fluentd-helper:v0.1.2
|
||||
docker pull rancher/fluentd:v0.1.10
|
||||
docker pull rancher/hyperkube:v1.10.5-rancher1
|
||||
docker pull rancher/hyperkube:v1.11.2-rancher1
|
||||
docker pull rancher/hyperkube:v1.9.7-rancher2
|
||||
docker pull rancher/jenkins-jenkins:2.107-slim
|
||||
docker pull rancher/jenkins-jnlp-slave:3.10-1-alpine
|
||||
docker pull rancher/jenkins-plugins-docker:17.12
|
||||
docker pull rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.10
|
||||
docker pull rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.7
|
||||
docker pull rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.8
|
||||
docker pull rancher/k8s-dns-kube-dns-amd64:1.14.10
|
||||
docker pull rancher/k8s-dns-kube-dns-amd64:1.14.7
|
||||
docker pull rancher/k8s-dns-kube-dns-amd64:1.14.8
|
||||
docker pull rancher/k8s-dns-sidecar-amd64:1.14.10
|
||||
docker pull rancher/k8s-dns-sidecar-amd64:1.14.7
|
||||
docker pull rancher/k8s-dns-sidecar-amd64:1.14.8
|
||||
docker pull rancher/kibana:5.6.4
|
||||
docker pull rancher/log-aggregator:v0.1.3
|
||||
docker pull rancher/metrics-server-amd64:v0.2.1
|
||||
docker pull rancher/nginx-ingress-controller-defaultbackend:1.4
|
||||
docker pull rancher/nginx-ingress-controller:0.16.2-rancher1
|
||||
docker pull rancher/pause-amd64:3.0
|
||||
docker pull rancher/pause-amd64:3.1
|
||||
docker pull rancher/prom-alertmanager:v0.11.0
|
||||
docker pull rancher/rke-tools:v0.1.13
|
||||
docker pull rancher/rancher:v2.0.8
|
||||
docker pull rancher/rancher-agent:v2.0.8
|
||||
docker save busybox rancher/alertmanager-helper:v0.0.2 rancher/alpine-git:1.0.4 rancher/calico-cni:v3.1.1 rancher/calico-ctl:v2.0.0 rancher/calico-node:v3.1.1 rancher/cluster-proportional-autoscaler-amd64:1.0.0 rancher/coreos-etcd:v3.1.12 rancher/coreos-etcd:v3.2.18 rancher/coreos-flannel-cni:v0.2.0 rancher/coreos-flannel:v0.9.1 rancher/docker-elasticsearch-kubernetes:5.6.2 rancher/fluentd-helper:v0.1.2 rancher/fluentd:v0.1.10 rancher/hyperkube:v1.10.5-rancher1 rancher/hyperkube:v1.11.2-rancher1 rancher/hyperkube:v1.9.7-rancher2 rancher/jenkins-jenkins:2.107-slim rancher/jenkins-jnlp-slave:3.10-1-alpine rancher/jenkins-plugins-docker:17.12 rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.10 rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.7 rancher/k8s-dns-dnsmasq-nanny-amd64:1.14.8 rancher/k8s-dns-kube-dns-amd64:1.14.10 rancher/k8s-dns-kube-dns-amd64:1.14.7 rancher/k8s-dns-kube-dns-amd64:1.14.8 rancher/k8s-dns-sidecar-amd64:1.14.10 rancher/k8s-dns-sidecar-amd64:1.14.7 rancher/k8s-dns-sidecar-amd64:1.14.8 rancher/kibana:5.6.4 rancher/log-aggregator:v0.1.3 rancher/metrics-server-amd64:v0.2.1 rancher/nginx-ingress-controller-defaultbackend:1.4 rancher/nginx-ingress-controller:0.16.2-rancher1 rancher/pause-amd64:3.0 rancher/pause-amd64:3.1 rancher/prom-alertmanager:v0.11.0 rancher/rke-tools:v0.1.13 rancher/rancher:v2.0.8 rancher/rancher-agent:v2.0.8 | gzip -c > rancher-images.tar.gz
|
||||
Binary file not shown.
Reference in New Issue
Block a user