TF-AKS is for provisioning Azure Kubernetes through Terraform.
- Terraform https://www.terraform.io
- Azure Subscription https://azure.microsoft.com/
- Azure CLI installed and logged in. (az login) https://docs.microsoft.com/en-us/cli/azure/aks?view=azure-cli-latest
- kubectl installed https://kubernetes.io/docs/tasks/tools/install-kubectl/
- A Service Principal for your K8s Custer https://docs.microsoft.com/en-us/azure/container-service/kubernetes/container-service-kubernetes-service-principal
# Download TF-AKS
git clone [email protected]:datadarius/tf-aks.git
# login to azure
az login
# get your subscription id
az account list
# create a service principal for your Cluster.
az ad sp create-for-rbac --role="Contributor" --scopes="/subscriptions/YOURSUBSCRIPTIONID
# Take notes of subscription ID, Service Principal ID (appId), Service Principal Secret (password), you will # need them in the next steps.
# Make sure you have your SSH Pubkey at hand.
cd terraform-azure-kubernetes-service
terraform init
# Start in interactive mode:
terraform plan -out youraks.out
terraform apply youraks.out
You should now get a working Azure Kubernetes Cluster.
You can pass an automatic answerfile to terraform. However, be responsible with the secrets you have to manage. It might e.g. make sense to not store Service Principal or other data in flat files. Have a look at the test.tf-test. You can also use terraform like: terraform apply -var-file=test.tf-test -var 'service_principal=SECRETVALUE' -var 'service_principal_secret=SECRETVALUE'
Pleaese consider using a dedicated SP for Terraform as explained by Hashicorp: https://www.terraform.io/docs/providers/azurerm/authenticating_via_service_principal.html
In case you are going for a production deployment, you will want to persist your state somewhere remote. TF-AKS includes everything required to bootstrap a Azure File Container which then can be used as a Storage Backend for your Terraform State. As Terraform does not allow creating the backend within the same project it is going to be used, you will have to do this in sequence
- https://docs.microsoft.com/en-us/azure/aks/azure-files-dynamic-pv
- https://github.com/kubernetes/examples/blob/master/staging/volumes/azure_file/README.md
# Creating a Resource Group
az group create -n your-k8s-tf-resources -l westeurope
# Creating an AKS Cluster which has 3 Nodes using k8s version 1.8.7
az aks create -n your-k8s-cluster -g your-k8s-tf-resources -c 3 -k 1.8.7
# Download the kubeconfig
az aks get-credentials --name your-k8s-cluster --resource your-k8s-tf-resources
# Configuring your local kubectl to use the AKS Cluster
kubectl config use-context your-k8s-cluster
# See how many Nodes are running
kubectl get nodes
# Opening the Kubernetes Dashboard in Browser
az aks browse -n your-k8s-cluster -g your-k8s-tf-resources
![azure-pipelines[bot] avatar](https://avatars.githubusercontent.com/in/9426?v=4 "azure-pipelines[bot]")
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent