kubespray/docs/azure.md

88 lines
3.9 KiB
Markdown
Raw Normal View History

2019-12-04 23:22:57 +08:00
# Azure
2016-11-29 17:20:28 +08:00
2017-02-18 01:39:22 +08:00
To deploy Kubernetes on [Azure](https://azure.microsoft.com) uncomment the `cloud_provider` option in `group_vars/all.yml` and set it to `'azure'`.
2016-11-29 17:20:28 +08:00
All your instances are required to run in a resource group and a routing table has to be attached to the subnet your instances are in.
Not all features are supported yet though, for a list of the current status have a look [here](https://github.com/Azure/AKS)
2016-11-29 17:20:28 +08:00
2019-12-04 23:22:57 +08:00
## Parameters
2016-11-29 17:20:28 +08:00
Before creating the instances you must first set the `azure_` variables in the `group_vars/all.yml` file.
2019-12-04 23:22:57 +08:00
All of the values can be retrieved using the azure cli tool which can be downloaded here: <https://docs.microsoft.com/en-gb/azure/xplat-cli-install>
2016-11-29 17:20:28 +08:00
After installation you have to run `azure login` to get access to your account.
2019-12-04 23:22:57 +08:00
### azure\_tenant\_id + azure\_subscription\_id
2016-11-29 17:20:28 +08:00
run `azure account show` to retrieve your subscription id and tenant id:
`azure_tenant_id` -> Tenant ID field
`azure_subscription_id` -> ID field
2019-12-04 23:22:57 +08:00
### azure\_location
2016-11-29 17:20:28 +08:00
The region your instances are located, can be something like `westeurope` or `westcentralus`. A full list of region names can be retrieved via `azure location list`
2019-12-04 23:22:57 +08:00
### azure\_resource\_group
2016-11-29 17:20:28 +08:00
The name of the resource group your instances are in, can be retrieved via `azure group list`
### azure\_vmtype
The type of the vm. Supported values are `standard` or `vmss`. If vm is type of `Virtal Machines` then value is `standard`. If vm is part of `Virtaul Machine Scale Sets` then value is `vmss`
2019-12-04 23:22:57 +08:00
### azure\_vnet\_name
2016-11-29 17:20:28 +08:00
The name of the virtual network your instances are in, can be retrieved via `azure network vnet list`
2019-12-04 23:22:57 +08:00
### azure\_subnet\_name
The name of the subnet your instances are in, can be retrieved via `azure network vnet subnet list --resource-group RESOURCE_GROUP --vnet-name VNET_NAME`
2016-11-29 17:20:28 +08:00
2019-12-04 23:22:57 +08:00
### azure\_security\_group\_name
2016-11-29 17:20:28 +08:00
The name of the network security group your instances are in, can be retrieved via `azure network nsg list`
2019-12-04 23:22:57 +08:00
### azure\_aad\_client\_id + azure\_aad\_client\_secret
2016-11-29 17:20:28 +08:00
These will have to be generated first:
2019-12-04 23:22:57 +08:00
2016-11-29 17:20:28 +08:00
- Create an Azure AD Application with:
2019-12-04 23:22:57 +08:00
`azure ad app create --display-name kubernetes --identifier-uris http://kubernetes --homepage http://example.com --password CLIENT_SECRET`
2019-10-02 19:41:07 +08:00
display name, identifier-uri, homepage and the password can be chosen
2016-11-29 17:20:28 +08:00
Note the AppId in the output.
- Create Service principal for the application with:
`azure ad sp create --id AppId`
2016-11-29 17:20:28 +08:00
This is the AppId from the last command
- Create the role assignment with:
`azure role assignment create --role "Owner" --assignee http://kubernetes --subscription SUBSCRIPTION_ID`
2016-11-29 17:20:28 +08:00
2019-10-02 19:41:07 +08:00
azure\_aad\_client\_id must be set to the AppId, azure\_aad\_client\_secret is your chosen secret.
2016-11-29 17:20:28 +08:00
2019-12-04 23:22:57 +08:00
### azure\_loadbalancer\_sku
Sku of Load Balancer and Public IP. Candidate values are: basic and standard.
2019-12-04 23:22:57 +08:00
### azure\_exclude\_master\_from\_standard\_lb
azure\_exclude\_master\_from\_standard\_lb excludes master nodes from `standard` load balancer.
2019-12-04 23:22:57 +08:00
### azure\_disable\_outbound\_snat
azure\_disable\_outbound\_snat disables the outbound SNAT for public load balancer rules. It should only be set when azure\_exclude\_master\_from\_standard\_lb is `standard`.
2019-12-04 23:22:57 +08:00
### azure\_primary\_availability\_set\_name
(Optional) The name of the availability set that should be used as the load balancer backend .If this is set, the Azure
cloudprovider will only add nodes from that availability set to the load balancer backend pool. If this is not set, and
multiple agent pools (availability sets) are used, then the cloudprovider will try to add all nodes to a single backend
pool which is forbidden. In other words, if you use multiple agent pools (availability sets), you MUST set this field.
2019-12-04 23:22:57 +08:00
### azure\_use\_instance\_metadata
2019-12-04 23:22:57 +08:00
Use instance metadata service where possible
## Provisioning Azure with Resource Group Templates
2016-11-29 17:20:28 +08:00
2017-02-18 03:27:38 +08:00
You'll find Resource Group Templates and scripts to provision the required infrastructure to Azure in [*contrib/azurerm*](../contrib/azurerm/README.md)