k3s/docs/getting-started-guides/gce.md

11 KiB

Getting started on Google Compute Engine

Table of Contents

- [Before you start](#before-you-start)
- [Prerequisites](#prerequisites)
- [Starting a cluster](#starting-a-cluster)
- [Installing the kubernetes command line tools on your workstation](#installing-the-kubernetes-command-line-tools-on-your-workstation)
- [Getting started with your cluster](#getting-started-with-your-cluster)
    - [Inspect your cluster](#inspect-your-cluster)
    - [Run some examples](#run-some-examples)
- [Tearing down the cluster](#tearing-down-the-cluster)
- [Customizing](#customizing)
- [Troubleshooting](#troubleshooting)
    - [Project settings](#project-settings)
    - [Cluster initialization hang](#cluster-initialization-hang)
    - [SSH](#ssh)
    - [Networking](#networking)

The example below creates a Kubernetes cluster with 4 worker node Virtual Machines and a master Virtual Machine (i.e. 5 VMs in your cluster). This cluster is set up and controlled from your workstation (or wherever you find convenient).

Before you start

If you want a simplified getting started experience and GUI for managing clusters, please consider trying Google Container Engine for hosted cluster installation and management.

If you want to use custom binaries or pure open source Kubernetes, please continue with the instructions below.

Prerequisites

  1. You need a Google Cloud Platform account with billing enabled. Visit the Google Developers Console for more details.
  2. Install gcloud as necessary. gcloud can be installed as a part of the Google Cloud SDK.
  3. Then, make sure you have the gcloud preview command line component installed. Run gcloud preview at the command line - if it asks to install any components, go ahead and install them. If it simply shows help text, you're good to go. This is required as the cluster setup script uses GCE Instance Groups, which are in the gcloud preview namespace. You will also need to enable Compute Engine Instance Group Manager API in the developers console.
  4. Make sure that gcloud is set to use the Google Cloud Platform project you want. You can check the current project using gcloud config list project and change it via gcloud config set project <project-id>.
  5. Make sure you have credentials for GCloud by running gcloud auth login.
  6. Make sure you can start up a GCE VM from the command line. At least make sure you can do the Create an instance part of the GCE Quickstart.
  7. Make sure you can ssh into the VM without interactive prompts. See the Log in to the instance part of the GCE Quickstart.

Starting a cluster

You can install a client and start a cluster with this command:

curl -sS https://get.k8s.io | bash

Once this command completes, you will have a master VM and four worker VMs, running as a Kubernetes cluster. By default, some containers will already be running on your cluster. Containers like kibana and elasticsearch provide logging, while heapster provides monitoring services.

Alternately, if you prefer, you can download and install the latest Kubernetes release from this page, then run the <kubernetes>/cluster/kube-up.sh script to start the cluster:

cd kubernetes
cluster/kube-up.sh

If you run into trouble, please see the section on troubleshooting, post to the google-containers group, or come ask questions on IRC at #google-containers on freenode.

The next few steps will show you:

  1. how to set up the command line client on your workstation to manage the cluster
  2. examples of how to use the cluster
  3. how to delete the cluster
  4. how to start clusters with non-default options (like larger clusters)

Installing the kubernetes command line tools on your workstation

The cluster startup script will leave you with a running cluster and a kubernetes directory on your workstation. The next step is to make sure the kubectl tool is in your path.

The kubectl tool controls the Kubernetes cluster manager. It lets you inspect your cluster resources, create, delete, and update components, and much more. You will use it to look at your new cluster and bring up example apps.

Add the appropriate binary folder to your PATH to access kubectl:

# OS X
export PATH=<path/to/kubernetes-directory>/platforms/darwin/amd64:$PATH

# Linux
export PATH=<path/to/kubernetes-directory>/platforms/linux/amd64:$PATH

Note: gcloud also ships with kubectl, which by default is added to your path. However the gcloud bundled kubectl version may be older than the one downloaded by the get.k8s.io install script. We recommend you use the downloaded binary to avoid potential issues with client/server version skew.

Getting started with your cluster

Inspect your cluster

Once kubectl is in your path, you can use it to look at your cluster. E.g., running:

$ kubectl get services

should show a set of services that look something like this:

NAME                    LABELS                                                                                              SELECTOR                        IP(S)            PORT(S)
elasticsearch-logging   k8s-app=elasticsearch-logging,kubernetes.io/cluster-service=true,kubernetes.io/name=Elasticsearch   k8s-app=elasticsearch-logging   10.0.198.255     9200/TCP
kibana-logging          k8s-app=kibana-logging,kubernetes.io/cluster-service=true,kubernetes.io/name=Kibana                 k8s-app=kibana-logging          10.0.56.44       5601/TCP
kube-dns                k8s-app=kube-dns,kubernetes.io/cluster-service=true,kubernetes.io/name=KubeDNS                      k8s-app=kube-dns                10.0.0.10        53/UDP
kubernetes              component=apiserver,provider=kubernetes                                                             <none>                          10.0.0.1         443/TCP

Similarly, you can take a look at the set of pods that were created during cluster startup. You can do this via the

$ kubectl get pods

command.

You'll see see a list of pods that looks something like this (the name specifics will be different):

NAME                                           READY     REASON    RESTARTS   AGE
elasticsearch-logging-v1-ab87r                 1/1       Running   0          1m
elasticsearch-logging-v1-v9lqa                 1/1       Running   0          1m
fluentd-elasticsearch-kubernetes-minion-419y   1/1       Running   0          12s
fluentd-elasticsearch-kubernetes-minion-k0xh   1/1       Running   0          1m
fluentd-elasticsearch-kubernetes-minion-oa8l   1/1       Running   0          1m
fluentd-elasticsearch-kubernetes-minion-xuj5   1/1       Running   0          1m
kibana-logging-v1-cx2p8                        1/1       Running   0          1m
kube-dns-v3-pa3w9                              3/3       Running   0          1m
monitoring-heapster-v1-m1xkz                   1/1       Running   0          1m

Some of the pods may take a few seconds to start up (during this time they'll show Pending), but check that they all show as Running after a short period.

Run some examples

Then, see a simple nginx example to try out your new cluster.

For more complete applications, please look in the examples directory. The guestbook example is a good "getting started" walkthrough.

Tearing down the cluster

To remove/delete/teardown the cluster, use the kube-down.sh script.

cd kubernetes
cluster/kube-down.sh

Likewise, the kube-up.sh in the same directory will bring it back up. You do not need to rerun the curl or wget command: everything needed to setup the Kubernetes cluster is now on your workstation.

Customizing

The script above relies on Google Storage to stage the Kubernetes release. It then will start (by default) a single master VM along with 4 worker VMs. You can tweak some of these parameters by editing kubernetes/cluster/gce/config-default.sh You can view a transcript of a successful cluster creation here.

Troubleshooting

Project settings

You need to have the Google Cloud Storage API, and the Google Cloud Storage JSON API enabled. It is activated by default for new projects. Otherwise, it can be done in the Google Cloud Console. See the Google Cloud Storage JSON API Overview for more details.

Also ensure that-- as listed in the Prerequsites section-- you've enabled the Compute Engine Instance Group Manager API, and can start up a GCE VM from the command line as in the GCE Quickstart instructions.

Cluster initialization hang

If the Kubernetes startup script hangs waiting for the API to be reachable, you can troubleshoot by SSHing into the master and minion VMs and looking at logs such as /var/log/startupscript.log.

Once you fix the issue, you should run kube-down.sh to cleanup after the partial cluster creation, before running kube-up.sh to try again.

SSH

If you're having trouble SSHing into your instances, ensure the GCE firewall isn't blocking port 22 to your VMs. By default, this should work but if you have edited firewall rules or created a new non-default network, you'll need to expose it: gcloud compute firewall-rules create --network=<network-name> --description "SSH allowed from anywhere" --allow tcp:22 default-ssh

Additionally, your GCE SSH key must either have no passcode or you need to be using ssh-agent.

Networking

The instances must be able to connect to each other using their private IP. The script uses the "default" network which should have a firewall rule called "default-allow-internal" which allows traffic on any port on the private IPs. If this rule is missing from the default network or if you change the network being used in cluster/config-default.sh create a new rule with the following field values:

  • Source Ranges: 10.0.0.0/8
  • Allowed Protocols and Port: tcp:1-65535;udp:1-65535;icmp

Analytics