{"id":303,"date":"2022-01-30T14:24:22","date_gmt":"2022-01-30T14:24:22","guid":{"rendered":"https:\/\/blog.hslracing.com\/myhome\/?p=303"},"modified":"2022-02-07T11:42:29","modified_gmt":"2022-02-07T11:42:29","slug":"kubernetes-test-cluster","status":"publish","type":"post","link":"https:\/\/blog.hslracing.com\/myhome\/2022\/01\/kubernetes-test-cluster.html","title":{"rendered":"Kubernetes – Test Cluster"},"content":{"rendered":"

I had some time to spare whilst waiting for my access and laptop to be sorted for my new work role so decided to use the time to learn Kubernetes<\/a> (K8s – K 8 letters s).<\/p>\n

<\/p>\n

Kubernetes<\/a> is an orchestration tool for Docker<\/a> containers that also ensures that containers are restarted automatically elsewhere in the cluster if a node fails.<\/p>\n

I had been looking into how to make my various websites more resilient from a database point of view and scalable from an app point of view and Kubernetes<\/a> looked like it could be the way to go.<\/p>\n

I watched Jeff Geerling’s<\/a> Kubernetes 101<\/a> series of Youtube<\/a> videos to obtain a basic understanding of the concepts, these gave me a good basic understanding of its history and how it fits together.<\/p>\n

Next I decided to try building a cluster on a few virtual machines.<\/p>\n

I initially created 3 VMs, each with 4GB of RAM and 2 CPUs, as clones of my Ubuntu template that I keep shut down as a cloning source.<\/p>\n

I setup a load balancer with HAProxy on port 6443 on my PFsense firewall and then installed Docker<\/a> and then the Kubernetes<\/a> kubeadm software on the first node with apt. (instructions here<\/a>).<\/p>\n

The only problem was that the bootstrap environment did not like using my load balancer and had major issues with the self certified certificates. The local ones did not match the ones it had generated for the cluster via the load balancer.<\/p>\n

After much playing around with attempting to generate my own certificates, I have a wildcard domain certificate for hslracing.com, so thought it was worth a try, but I was really struggling to work out exactly how many certs of what kind the cluster required, I decided to watch some more videos.<\/p>\n

This is when I stumbled across some videos by Adrian Goins<\/a>, where he shows various installs of K3s<\/a> (half the letters in Kubernetes<\/a>), a much slimmer version of Kubernetes<\/a> which is potentially much more suited for homelab use.<\/p>\n

I reset and cleared down my VMs, I set up 3 master nodes and 3 worker nodes and then followed his video on HA K3s with etcd, Kube-VIP, MetalLB and Rancher<\/a> to build a cluster. This had none of the certificate issues I had previously encountered and seemed to be going well.<\/p>\n

The first problem came as soon as I installed Rancher<\/a>, the CPU on the various nodes went haywire and the entire cluster seemed to be in some sort of never ending death spiral.<\/p>\n

After much searching for suitable commands to use to interrogate the cluster I discovered that it was complaining about disk pressure on ephemeral storage which meant next to nothing to me and all of the searches I did implied that the resolution was to make use of faster SSD storage.<\/p>\n

The real issue I eventually realised is that because of where containerd<\/a> (K3s<\/a> Docker<\/a> equivilent) installs under \/var\/lib and then proceeds to generate loop back mounts from here as well as generate log files under here.<\/p>\n

I had only provisioned a 10GB OS file system and once the installs were complete and it attempted to create a new container for Rancher<\/a> the filesystems showed as more than 85% full and so killed off the container and tried again on the next worker node. This lead to High CPU on the worker node, which in turn affected the underlying physical server, impacted the responsiveness of the active database node and then caused that to fail over to the next node, in turn generating yet more CPU load – as mentioned above, a never ending death spiral.<\/p>\n

Once I realised what was happening, I cleared down the cluster, presented an additional 10GB of disk to each cluster node migrated the \/var file system onto this new storage and then started from scratch once again. This time I had a stable cluster.<\/p>\n

After further reading I discovered that ideally Rancher<\/a> should be installed on its own cluster and then used to remotely manage the rest of your Kubernetes<\/a> clusters.<\/p>\n

At this point I decided to simply install the Rancher<\/a> Docker<\/a> container and use that to manage my cluster instead of having Rancher<\/a> installed on the cluster itself. I also found a more recent video<\/a> by Adrian that skips the use of MetalLB<\/a> and simply uses Kube-VIP<\/a> as the load balancer (simpler is always better in my opinion).<\/p>\n

I then decided to install Longhorn<\/a> to manage local dedicated file systems for stateful environments like MySQL<\/a>. I added an additional 40GB of local storage to each of the worker nodes that I mounted under \/var\/lib\/longhorn. I then found a bug<\/a> in Longhorn<\/a> whereby it attempts to use the wrong arguments to mount NFS for its Backup storage.<\/p>\n

I also installed the NFS Subdirectory External Provisioner<\/a> for shared volume claims within the cluster such that I can have multiple WordPress<\/a> instances running for the same website.<\/p>\n

I installed the Bitnami<\/a> MYSQL<\/a> cluster via Helm<\/a> within Rancher<\/a> after adding the Bitnami<\/a> repository as a backend for my WordPress<\/a> sites and then installed Bitnami<\/a> WordPress<\/a> again from the App store in Rancher<\/a>.<\/p>\n

This has all been good testing and I may\/may not keep this test cluster, but I have decided to build a bare metal Kubernetes<\/a> cluster running K3s<\/a> on a bunch of Lenovo Tiny desktop machines.<\/p>\n","protected":false},"excerpt":{"rendered":"

I had some time to spare whilst waiting for my access and laptop to be sorted for my new work role so decided to use the time to learn Kubernetes (K8s – K 8 letters s). Kubernetes is an orchestration tool for Docker containers that also ensures that containers are restarted automatically elsewhere in the…<\/p>\n","protected":false},"author":1,"featured_media":305,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[5],"class_list":["post-303","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorised","tag-homelab"],"_links":{"self":[{"href":"https:\/\/blog.hslracing.com\/myhome\/wp-json\/wp\/v2\/posts\/303","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.hslracing.com\/myhome\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.hslracing.com\/myhome\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.hslracing.com\/myhome\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.hslracing.com\/myhome\/wp-json\/wp\/v2\/comments?post=303"}],"version-history":[{"count":2,"href":"https:\/\/blog.hslracing.com\/myhome\/wp-json\/wp\/v2\/posts\/303\/revisions"}],"predecessor-version":[{"id":325,"href":"https:\/\/blog.hslracing.com\/myhome\/wp-json\/wp\/v2\/posts\/303\/revisions\/325"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.hslracing.com\/myhome\/wp-json\/wp\/v2\/media\/305"}],"wp:attachment":[{"href":"https:\/\/blog.hslracing.com\/myhome\/wp-json\/wp\/v2\/media?parent=303"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.hslracing.com\/myhome\/wp-json\/wp\/v2\/categories?post=303"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.hslracing.com\/myhome\/wp-json\/wp\/v2\/tags?post=303"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}