CKA day2 july21

HA CONTROL NODE ROOT COMMANDS
    4  for i in {4..7}; do scp /etc/hosts 192.168.29.$i:/etc/; done
    5  git clone https://github.com/sandervanvugt/cka
    6  cd cka
    7  ./setup-docker.sh
    8  ./setup-kubetools.sh
    9  cat /etc/os-release
   10  cat /etc/redhat-release
   11  history
   12  cat /etc/hosts
   13  history
   14  vim setup-lb.sh
   15  ls
   16  ip a
   17  vim setup-lb.sh
   18  vim check_apiserver.sh
   19  vim keepalived.conf
   20  vim haproxy.cfg
   21  ls setup-lb.sh
   22  ls setup-lb.sh -l
   23  chmod +x setup-lb.sh
   24  ./setup-lb.sh
   25  ip a
   26  kubeadm init --control-plane-endpoint "192.168.29.100:8443" --upload-certs
   27  vim /tmp/cluster-setup.txt
   28  su - student
   29  kubeadm --help
   30  ps aux | grep apiserver
   31  exit
   32  cd /etc/kubernetes/pki/
   33  ls
   34  cd etcd/
   35  ls
   36  ETCDCTL_API=3 etcdctl --endpoints=https://127.0.0.1:2379   --cacert=<trusted-ca-file> --cert=<cert-file> --key=<key-file>   snapshot save <backup-file-location>
   37  ETCDCTL_API=3 etcdctl --endpoints=https://127.0.0.1:2379 --cacert=/etc/kubernetes/pki/etcd/ca.crt --cert=/etc/kubernetes/pki/etcd/server.crt --key=/etc/kubernetes/pki/etcd/server.key snapshot save /tmp/whatdoicare.backup
   38  ETCDCTL_API=3 etcdctl --endpoints=https://127.0.0.1:2379 --cacert=/etc/kubernetes/pki/etcd/ca.crt --cert=/etc/kubernetes/pki/etcd/server.crt --key=/etc/kubernetes/pki/etcd/server.key get / --prefix --keys-only
   39  ETCDCTL_API=3 etcdctl --endpoints=https://127.0.0.1:2379 --cacert=/etc/kubernetes/pki/etcd/ca.crt --cert=/etc/kubernetes/pki/etcd/server.crt --key=/etc/kubernetes/pki/etcd/server.key get /
   40  ETCDCTL_API=3 etcdctl --endpoints=https://127.0.0.1:2379   --cacert=<trusted-ca-file> --cert=<cert-file> --key=<key-file>   snapshot save <backup-file-location>
   41  pwd
   42  ls
   43  exit
   44  kubectl get all
   45  export KUBECONFIG=/etc/kubernetes/admin.conf
   46  kubectl get all
   47  kubectl config set-credentials anna --client-certificate=/home/anna/.certs/anna.crt --client-key=/home/anna/.certs/anna.key
   48  less /etc/kubernetes/admin.conf
   49  kubectl config set-context anna-context --cluster=kubernetes --user=anna --namespace=annaspace
   50  kubectl create ns annaspace
   51  kubectl get ns
   52  export KUBECONFIG=
   53  su - anna
   54  su - student
   55  poweroff
   56  history

HA CONTROLLER NODE STUDENT COMMANDS
[student@hacontrol1 ~]$ history
    1  mkdir .kube
    2  sudo cp -i /etc/kubernetes/admin.conf .kube/config
    3  chown student:student .kube/config
    4  sudo chown student:student .kube/config
    5  kubectl get all
    6  kubectl apply -f https://docs.projectcalico.org/v3.14/manifests/calico.yaml
    7  kubectl get ns
    8  kubectl get pods -n kube-system
    9  kubectl get nodes
   10  cat /tmp/cluster-setup.txt
   11  kubectl get nodes
   12  kubectl get pods -n kube-system
   13  cat /tmp/cluster-setup.txt
   14  exit
   15  kubectl run again --image=nginx
   16  kubectl get pods -o wide
   17  git clone https://github.com/sandervanvugt/cla
   18  git clone https://github.com/sandervanvugt/cka
   19  cka/counter.sh 13
   20  sudo useradd -G wheel anna
   21  sudo passwd anna
   22  su - anna
   23  history

HA CONTROLLER NODE ANNA COMMANDS
[anna@hacontrol1 ~]$ history
    1  mkdir .certs
    2  cd .certs/
    3  openssl genrsa -out anna.key 2048
    4  openssl req -new -key anna.key -out anna.csr -subj "/CN=anna"
    5  sudo openssl x509 -req -in anna.csr -CA /etc/kubernetes/pki/ca.crt -CAkey /etc/kubernetes/pki/ca.key -CAcreateserial -out anna.crt days 600
    6  sudo openssl x509 -req -in anna.csr -CA /etc/kubernetes/pki/ca.crt -CAkey /etc/kubernetes/pki/ca.key -CAcreateserial -out anna.crt -days 600
    7  ls -l
    8  man openssl-genrsa
    9  man openssl
   10  man genrsa
   11  su -
   12  mkdir .kube
   13  sudo cp /etc/kubernetes/admin.conf .kube/config
   14  sudo chown anna:anna .kube/config
   15  kubectl --context=anna-context get all
   16  kubectl get all
   17  vim .kube/config
   18  cd /tmp
   19  git clone https://github.com/sandervanvugt/cka
   20  cd cka
   21  ls
   22  vim podacessrole.yaml
   23  vim rolebinding.yaml
   24  kubectl create -f rolebinding.yaml
   25  kubectl run rolepiod --image=nginx -n annaspace
   26  kubectl get pods -n annaspace
   27  kubectl --context=anna-context get pods -n annaspace
   28  kubectl auth can-i get pods
   29  kubectl auth can-i get pods --as anna
   30  kubectl delete -f rolebinding.yaml
   31  kubectl create -f podacessrole.yaml
   32  kubectl create -f rolebinding.yaml
   33  kubectl --context=anna-context get pods -n annaspace
   34  ./counter.sh 13
   35  vim jc.yaml
   36  kubectl create -f jc.yaml
   37  kubectl get all
   38  kubectl completion -h
   39  source <(kubectl completion bash)
   40  kubectl describe pod initpod
   41  vim jc.yaml
   42  kubectl label nodes haworker2.example.com disktype=ssd
   43  kubectl get nodes --show-labels
   44  vim selector-pod.yaml
   45  kubectl create -f selector-pod.yaml
   46  kubectl get pods
   47  kubectl describe pod nginx
   48  kubectl label nodes haworker2.example.com disktype=hsd
   49  kubectl label nodes haworker2.example.com disktype-
   50  kubectl label nodes haworker2.example.com disktype=hsd
   51  kubectl get pods
   52  kubectl taint node  haworker1.example.com example-key=value1:NoSchedule
   53  kubectl describe node haworker1.example.com
   54  kubectl create deployment nginx-taint --image=nginx --replicas=3
   55  kubectl get pods -o wide
   56  vim taint-toleration.yaml
   57  kubectl create -f taint-toleration.yaml
   58  kubectl get pods -o wide
   59  kubectl taint node  haworker1.example.com example-key=value1:NoSchedule-
   60  kubectl taint node  haworker1.example.com example-key=value1:NoSchedule
   61  kubectl edit node haworker1.example.com
   62  kubectl -h | less
   63  kubectl cordon -h | less
   64  kubectl drain -h | less
   65  kubectl drain haworker1.example.com
   66  kubectl drain haworker1.example.com --delete-emptydir-data --ignore-daemonsets --force
   67  kubectl describe node haworker1.example.com
   68  kubectl describe node haworker1.example.com | less
   69  kubectl uncordon haworker1.example.com
   70  kubectl get pods -o wide
   71  kubectl run testpod --image=nginx
   72  kubectl get pods -o wide
   73  kubectl create -h | less
   74  vim ex11.yaml
   75  vim ex11b.yaml
   76  kubectl create -f ex11b.yaml
   77  kubectl get pods
   78  kubectl get pods -o wide
   79  ./counter.sh 19
   80  ./counter.sh 8
   81  kubectl top pod
   82  ./counter.sh 5
   83  kubectl top pods
   84  kubectl top node hacontrol1.example.com
   85  kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/download/v0.5.0/components.yaml
   86  kubectl get ns
   87  kubectl get pods kube-system
   88  kubectl get pods -n kube-system
   89  kubectl -n kube-system edit deployments.apps metrics-server
   90  kubectl get pods -n kube-system
   91  kubectl get all -n kube-system
   92  kubectl -n kube-system logs metrics-server-8589b99d8f-x56fz
   93  kubectl get nodes
   94  kubectl get pods
   95  kubectl top -h
   96  kubectl top pod
   97  kubectl get nodes
   98  kubectl describe node haworker2.example.com
   99  ping haworker2
  100  ssh root@worker2
  101  ssh root@haworker2
  102  kubectl get nodes
  103  ./counter.sh 12
  104  ./counter.sh 8
  105  sudo yum provides */etcdctl
  106  sudo yum install etcd
  107  #ETCDCTL_API=3 etcdctl --endpoints=https://127.0.0.1:2379 \
  108    --cacert=<trusted-ca-file> --cert=<cert-file> --key=<key-file>   snapshot save <backup-file-location>
  109  etcdctl -h
  110  ETCDCTL_API=3 etcdctl -h | less
  111  ps aux | grep apiserver
  112  sudo -i
  113  kubectl create -h | less
  114  kubectl get endpoints
  115  history