[ Kube 104 ] Set up a secure Highly Available ETCD Cluster

Поделиться
HTML-код
  • Опубликовано: 24 сен 2024

Комментарии • 38

  • @aghahasaan
    @aghahasaan 2 года назад +1

    It is my first video ever that I've liked even before it started playing.. :)

  • @NoName-ti7kj
    @NoName-ti7kj 2 года назад +1

    I want to commend you on the work you do and i love that soldierly "right!" let's get this stuff going type of vibe :) you helped me in my work immensly. Keep up the good work, rock on!

  • @rainbowp19
    @rainbowp19 2 года назад +1

    Thanks for excellent stuff as always Venkat. Though these concepts are very interesting,but most of them moving to managed k8s, cluster how this knowledge and hands on will help us.

    • @justmeandopensource
      @justmeandopensource  2 года назад +2

      Its always good to know how stuff works even when you are using managed services. Thanks for watching.

    • @rainbowp19
      @rainbowp19 2 года назад +1

      @@justmeandopensource thanks for your videos :)

    • @justmeandopensource
      @justmeandopensource  2 года назад +1

      @@rainbowp19 You are welcome.

  • @alucardlive2
    @alucardlive2 2 года назад +1

    excellent stuff my friend.
    please keep up the good work.

  • @faridakbarov4532
    @faridakbarov4532 2 года назад +1

    Great video Venkat, thank you bro

  • @zaheerhussain5311
    @zaheerhussain5311 8 месяцев назад +1

    Hi
    I learned alot from your channel. Do you have video on "LB infront of External ETCD Cluster"
    Regards

    • @justmeandopensource
      @justmeandopensource  7 месяцев назад

      Hi Zaheer, thanks for your interest in this channel. I have done series of videos on external etcd. I have to check what setup i used in those videos. Might be a separate load balancer. If you search in my channel you can find those videos.

  • @devops-vidyaarthee
    @devops-vidyaarthee 4 месяца назад

    Hi, have you created any video on how to add a extra external etcd to HA cluster after k8s cluster is created ? for example after 1 month of my self managed cluster I want to add one more etcd for some reason or let's say delete one etcd node and replace it with new one. if not can you please create a new video on that please.

  • @amrhegazy7221
    @amrhegazy7221 2 года назад +1

    i've a question
    can i make more than one k8s cluster with same master node ?
    what i mean i have 5 node one of them will be shared master with two cluster (every cluster have shared master with 2 worker node )

    • @justmeandopensource
      @justmeandopensource  2 года назад +1

      Interesting. You could actually do that I believe but you will have to run api-servers on a different ports for different cluster on that shared master node. Why do you want to do that actually?

  • @ahmedgamal5629
    @ahmedgamal5629 2 года назад

    how to renew external etcd service certificates on k8s cluster installed with kubeadm I hope you do video about it

  • @TwinCommander
    @TwinCommander 2 года назад

    Hi Venkat, what happens when all ETCD nodes go down such as power outage situation? would you be kind enough to do a video on automatic snapshot & restore/recovery for etcd & perhaps the cluster itself?

  • @reabnja
    @reabnja 2 года назад +1

    Thank you very much Venkat for the very helpful video. I would need it in my next project. Does it makes sense to install etcd on the three k3s servers or should they be extra machines? Would it not be wasting of resources. If it runs direcly on the k3s server, but three time it would also be highly available as also the k3s servers would be? By the way, how about the multiple editing in the three terminals. Is this a feature of tmux, which I don't know? Thanks in advance!

    • @justmeandopensource
      @justmeandopensource  2 года назад +1

      Hi Jan, thanks for watching.
      Basically these are two differenct approaches.
      1. External Etcd - separate set of machines running etcd processes, not dependent on control planes, control planes crashing won't affect etcd cluster, recommended setup for production use cases
      2. Stacked Topology - each control plane will have an etcd process, less number of machines, control plane crashing will also take etcd member out
      you can decide on what is appropriate for your use case.
      Regarding multiple editing in 3 terminals, its a feature in Tmux where you can synchronize panes so that when you type on one of them, it gets typed on other panes as well.
      medium.com/@bingorabbit/tmux-propagate-to-all-panes-9d2bfb969f01

    • @reabnja
      @reabnja 2 года назад

      @@justmeandopensource Thanks for answering. I'm aware that if control-plane and etcd would run on the same machine, their availability would be depending on each other. But for high availability I would have three of them, as you suggested. So if the one etcd would be down because of the control-plane, then two other etcd instances would be up. Wouldn't this be safe enough for the high availability?

    • @justmeandopensource
      @justmeandopensource  2 года назад

      @@reabnja From HA point of view, yeah thats fine. But again I wouldn't recommend such an architecture in production.

  • @leo5946
    @leo5946 Год назад

    i get the error when i reload start the etcd service,
    Job for etcd.service failed because the control process exited with error code.

  • @akshayjanrao5388
    @akshayjanrao5388 2 года назад

    Hi Venkat, I found set of commands to secure HA ETCD cluster using kubeadm utility
    kubeadm init phase certs etcd-server
    kubeadm init phase certs etcd-peer
    kubeadm init phase certs etcd-healthcheck-client
    kubeadm init phase certs apiserver-etcd-client
    Also to renew the certs for the same below are the commands:
    kubeadm alpha certs renew etcd-peer; kubeadm alpha certs renew etcd-server; kubeadm alpha certs renew apiserver-etcd-client;kubeadm alpha certs renew etcd-healthcheck-client
    Could you please throw some light on this ?
    Is there any other way to generate certificate for ETCD like above commands ?
    Please make a video on the same Thanks in advance.

  • @illmatik0ne241
    @illmatik0ne241 2 года назад +1

    Good day Venkat! Do you provide consultation services for businesses interested in learning Kubernetes topics covered in your videos? If so, what is the best way to reach you on this topic?

    • @justmeandopensource
      @justmeandopensource  2 года назад +1

      Hi, thanks for reaching out. I am afraid I don't have time to do consulation service. I am doing these videos on my free time which is very sparse.

    • @illmatik0ne241
      @illmatik0ne241 2 года назад +1

      @@justmeandopensource although disappointing for immediate reasons, I'm glad to hear that you can still provide the content for the community. Thank you for the response!

    • @justmeandopensource
      @justmeandopensource  2 года назад +1

      @@illmatik0ne241 No worries. Cheers.

  • @aliaa7042
    @aliaa7042 2 года назад +2

    Hi Venkat please start course about KVM virtualization, thank you 🌹

    • @justmeandopensource
      @justmeandopensource  2 года назад +2

      Hi Ali, thanks for watching. I can try. Cheers.

    • @aliaa7042
      @aliaa7042 2 года назад +1

      @@justmeandopensource thank you very much 🌹

  • @dharmaputra7394
    @dharmaputra7394 2 года назад +1

    Request tutorial database maria galera cluster in kubernetes cluster