Skip to content

Commit

Permalink
Merge branch 'feature-237' of https://github.com/cybnity/foundation i…
Browse files Browse the repository at this point in the history
…nto feature-237
  • Loading branch information
olivierlemee committed Dec 19, 2024
2 parents b88ef12 + e2a32db commit e6e178b
Show file tree
Hide file tree
Showing 4 changed files with 16 additions and 22 deletions.
15 changes: 4 additions & 11 deletions implementations-line/systems/modules/dev-env/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,6 @@ Several types of clusters can be build over command lines executions:
|:--|:--|:--|:--|
|RKE2 cluster|RKE2|- RAM: 8GB+<br>- CPU: 4+ cores|RKE2 Kubernetes platform.<br>Supported [Linux distributions](https://www.suse.com/suse-rke2/support-matrix/all-supported-versions/rke2-v1-30/)|
|Linux|Ubuntu LTS Linux server| |Operating System of single-node|
|Physical server| | |[CYDEL01-CYBDEV01 documentation](../../technical-infrastructure/CYDEL01-cybdev01.md)|

### CYDEL02
|System / Solution|Software Layer|Hardware Layer|Documentations|
Expand Down Expand Up @@ -55,15 +54,9 @@ One sub-directory is defined per CYBNITY application deployable as a Kubernetes
Current support environment is built over a set of physical resources.

## CYDEL01
See [CYDEL01-CYBDEV01 documentation](../../technical-infrastructure/CYDEL01-cybdev01.md).

### Hardware resources sizing
| | NEED | CURRENT | SIZING STATUS |
|:--|:--:|:--:|:--:|
| CPU CORES | 16 | 28 | :white_check_mark: |
| RAM | 128GB | 128GB | :white_check_mark: |
| STORAGE SIZE | 500GB | 3.5TB | :white_check_mark: |
| NETWORK SPEED| 10Gpbs |1Gbps + 10Gbps + 10Gbps| :white_check_mark: |

Infrastructure implemented resources:
- DEV Cluster:
- [CYDEL01-CYBDEV01 documentation](../../technical-infrastructure/CYDEL01-cybdev01.md)
- [CYDEL01-CYBDEV02 documentation](../../technical-infrastructure/CYDEL01-cybdev02.md)
#
[Back To Home](../README.md)
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ Current prepared server configuration is:
- hostname: __cybdev01__

# VIRTUALIZATION LAYER
RKE2 virtualization system is implemented as Kubernetes layer hosting the CYBNTY staging versions deployed into a __Dev cluster__.
RKE2 virtualization system is implemented as Kubernetes layer hosting the CYBNITY staging versions deployed into a __Dev cluster__.

## Helm
- Install Helm stable version via command:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ Current prepared server configuration is:
- hostname: __cybsup01__

# VIRTUALIZATION LAYER
RKE2 virtualization system is implemented as Kubernetes layer hosting the CYBNTY support applications deployed into a __Support cluster__.
RKE2 virtualization system is implemented as Kubernetes layer hosting the CYBNITY support applications deployed into a __Support cluster__.

## Helm
- Install Helm stable version via command:
Expand Down Expand Up @@ -55,7 +55,7 @@ RKE2 virtualization system is implemented as Kubernetes layer hosting the CYBNTY
```

### Private Certificates
Get new CYBNITY domain certificates bundles (including CA Root, intermediates crt and key files) usable for SUPPORT cluster (sup.cybnity.tech as Subject Alternative Name).
Get new CYBNITY domain certificates bundle (including CA Root, intermediates crt and key files) usable for SUPPORT cluster (sup.cybnity.tech as Subject Alternative Name).

### Root CA
From a wilcard signed certificate (e.g including cybnity.tech, and *.cybnity.tech sub-domains as Subject Alternative Name extensions):
Expand All @@ -80,11 +80,11 @@ If previous RKE2 version need to be uninstalled before defining the CA root, exe
See [RKE2 security certificates](https://docs.rke2.io/security/certificates) documentation for help.
- Create `/var/lib/rancher/rke2/server/tls` folder and copy into:
- custom domain certificate (e.g STAR_cybnity_tech.crt defining the SSL certificate for domain and/or sub-domains) as `root-ca.pem` renamed file
- private key of the custom domain (e.g private.key file of custom domain SSL certificate) as `root-ca.key` renamed file
- private key of the custom domain (e.g private.key file of custom domain SSL certificate) as `root-ca.key` renamed file.
- Generate custom CA certs and keys via command `curl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | PRODUCT=rke2 bash -` and check text shown regarding the database updates applied with success (e.g new entries made) about CA certificate generation completed.
- As recommended by command result, store in a secure area the root and intermediate certificate files (.pem, .crt, .key) and remove them from __/var/lib/rancher/rke2/server/tls__ folder
- As recommended by command result, store in a secure area the root and intermediate certificate files (.pem, .crt, .key) and remove them from __/var/lib/rancher/rke2/server/tls__ folder.
- Create folder `mkdir -p /opt/rke2/server/tls`
- Copy current service-account signing key considerated like current via `cp /var/lib/rancher/rke2/server/tls/service.key /opt/rke2/server/tls`, to avoid token lost during future custom CA certificate rotation
- Copy current service-account signing key considerated like current via `cp /var/lib/rancher/rke2/server/tls/service.key /opt/rke2/server/tls`, to avoid token lost during future custom CA certificate rotation.

### RKE2 Installation
- As root user, set environment variable to use during RKE2 script installation execution via command:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -75,16 +75,18 @@ After installation, storage layout and filesystem layout shall be shown (via `ls
- reload the changes via command `sudo sysctl --system`

- Server hostname change
- change default server's hostname defined during the standard SUSE installation by another one according to the server role (e.g "cybsup01" about CYBNITY Support's server 1) via command line `sudo hostnamectl set-hostname cybsup01`
- change default server's hostname defined during the standard Ubuntu installation by another one according to the server role (e.g "cybsup01" about CYBNITY Support's server 1) via command line `sudo hostnamectl set-hostname cybsup01`

- to make change without closing the terminal via command `exec bash`

- Update of /etc/hosts file check (e.g DHCP mode from network system) or static ip address
- Update of /etc/hosts file check (e.g DHCP mode from network system) or static ip address.
Ensure your system can resolve its hostname by updating the /etc/hosts file with the IP address and the new hostname via command:
```
sudo vi /etc/hosts
# Add a line: server-desired-hostname
# Local K8s application extended hostnames
192.168.30.12 cybdev02.cybnity.tech
```

- Ubuntu version update and upgrade via command line:
Expand All @@ -110,8 +112,7 @@ After installation, storage layout and filesystem layout shall be shown (via `ls
- show configuration of detected ethernet controllers via command `sudo hwinfo --netcard`

### Intel 10-Gigabit X540-AT2 card drivers
When NIC not detected or usable, install when network card were not detected/configured during the origin Linux installation.

When NIC not detected, usable or not configured during the origin Linux installation, install drivers:
- Download of drivers files via command lines:
```
curl -O https://downloadmirror.intel.com/832293/ixgbe-5.21.5.tar.gz
Expand Down Expand Up @@ -158,7 +159,7 @@ None configuration is existing about the additional network card (e.g Intel 10-G
send-hostname: false
hostname: cybsup01_mgt
# set 100Gbps NIC cards in DHCP mode as operation server endpoints
# set 10Gbps NIC cards in DHCP mode as operation server endpoints
enp11s0f0:
dhcp4: true
optional: true
Expand Down

0 comments on commit e6e178b

Please sign in to comment.