Skip to content

Latest commit

 

History

History
 
 

icp-ee-az

README.md

Deploying IBM Cloud Private Enterprise Edition on Azure using Terraform

This template deploys ICP Enterprise Edition across three Azure Availability Zones.

Infrastructure Architecture

The following diagram outlines the infrastructure architecture. Architecture

Resources created by this template

Resource type Resources
azurerm_resource_group 1 new resource group for ICP cluster
azurerm_virtual_network 1 new virtual network for ICP cluster
azurerm_route_table 1 new route table
azurerm_subnet
  • 1 subnet for cluster VMs
  • 1 subnet for container network
azurerm_public_ip
  • bootnode pip
  • master pip
azurerm_network_interface
  • boot nic
  • master nic
  • proxy nic
  • management nic
  • worker nic
azurerm_network_security_group
  • boot_sg
  • master_sg
  • proxy_sg
  • worker_sg
azurerm_lb
  • Single Standard SKU LoadBalancer
azurerm_lb_rule
  • master_rule
  • proxy_rule
azurerm_lb_backend_address_pool
  • masterlb_pool
  • proxylb_pool
azurerm_network_interface_backend_address_pool_association
  • masterlb
  • proxylb
azurerm_virtual_machine
  • boot
  • master
  • proxy
  • management
  • worker

Using the Terraform templates

  1. git clone the repository

  2. Create a terraform.tfvars file to reflect your environment. Please see variables.tf and below tables for variable names and descriptions.

variable default required description
Azure account options
resource_group icp_rg No Azure resource group name
location West Europe No Region to deploy to
storage_account_tier Standard No Defines the Tier of storage account to be created. Valid options are Standard and Premium.
storage_replication_type LRS No Defines the Replication Type to use for this storage account. Valid options include LRS, GRS etc.
default_tags {u'Owner': u'icpuser', u'Environment': u'icp-test'} No Map of default tags to be assign to any resource that supports it
ICP Virtual machine settings
master {'vm_size':'Standard_A8_v2'
'nodes':3
'name':'master'}		 No Master node instance configuration
management {'vm_size':'Standard_A8_v2'
'nodes':3
'name':'mgmt'}		 No Management node instance configuration
proxy {'vm_size':'Standard_A2_v2'
'nodes':3
'name':'proxy'}		 No Proxy node instance configuration
worker {'vm_size':'Standard_A4_v2'
'nodes':6
'name':'worker'}		 No Worker node instance configuration
os_image ubuntu No Select from Ubuntu (ubuntu) or RHEL (rhel) for the Operating System. Details on RHEL support here
admin_username vmadmin No linux vm administrator user name
Azure network settings
virtual_network_name icp_vnet No The name for the virtual network. Leave blank and populate *_subnet_id to use existing Azure Virtual Network. See azure-networking.md for details.
virtual_network_cidr 10.0.0.0/16 No cidr for the Azure virtual network if creating new
subnet_name icp_subnet No Name of the Subnet where VMs are placed. See azure-networking.md for details.
subnet_prefix 10.0.0.0/24 No The address prefix to use for the VM subnet.
controlplane_subnet_name No The name of the controlplane subnet. Leave blank single subnet for cluster
controlplane_subnet_prefix No The address prefix to use if creating separate controlplane subnet.
vm_subnet_id No ID of vm subnet if using existing VNET. Only when var.virtual_network_name is empty. See azure-networking.md for details.
controlplane_subnet_id No ID of controlplane subnet if using existing VNET. Only when var.virtual_network_name is empty and want control plane separate from workers
container_subnet_id No ID of container subnet if using existing VNET. Only when var.virtual_network_name is empty
route_table_name icp_route No The name for the route table.
ICP Settings
cluster_name myicp No Deployment name for resources prefix. Will form part of DNS names, so must only contain alphanumeric characters and -
ssh_public_key No SSH Public Key to add to authorized_key for admin_username. Required if you disable password authentication
disable_password_authentication true No Whether to enable or disable ssh password authentication for the created Azure VMs. Default: true
icp_version 3.1.2 No ICP Version
cluster_ip_range 10.1.0.0/24 No ICP Service Cluster IP Range
network_cidr 10.0.128.0/17 No ICP Network CIDR
instance_name icp No Name of the deployment. Will be added to virtual machine names
icpadmin_password admin No ICP admin password

Azure Network Options and information

You can read more about the Azure network and options in docs/azure-networking.md

Notes on Azure Cloud Provider for Kubernetes

Availability Zones

Kubernetes adds support for Azure Availability Zones in version 1.12, as an alpha feature. Read more about it here

Here is an example terraform.tfvars file:

Simple terraform.tfvars to allow connectivity with existing ssh keypair.

ssh_public_key = "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmGOJtZF5FYrpmEBI9GBcbcr4577pZ90lLxZ7tpvfbPmgXQVGoolChAY165frlotd+o7WORtjPiUlRnr/+676xeYCZngLh46EJislXXvcmZrIn3eeQTRdOlIkiP3V4+LiR9WvpyvmMY9jJ05sTGgk39h9LKhBs+XgU7eZMXGYNU7jDiCZssslTvV1i7SensNqy5bziQbhFKsC7TFRld9leYPgCPtoiSeFIWoXSFbQQ0Lh1ayPpOPb0C2k4tYgDFNr927cObtShUOY1dGGBZygUVKQRro1LZzq39DhmvmMCawCnnQt6A8jz4PE69jP62gnlBsdXQDvEm/L/LBrO4CBbQ=="

terraform.tfvars enabling SSH password authentication and provisioning 4 worker nodes

disable_password_authentication = false
worker = {
  "nodes" = 4
}

Red Hat support

Details on RHEL support here

Using the environment

Logging in

When the Terraform deployment is complete, you will see an output similar to this:

ICP Admin Password = e66bd82cfeb5ad404ff7f62ba0ac83df
ICP Admin Username = admin
ICP Boot node = 40.67.221.37
ICP Console URL = https://icpdemo-feb5ad40.westeurope.cloudapp.azure.com:8443
ICP Kubernetes API URL = https://icpdemo-feb5ad40.westeurope.cloudapp.azure.com:8001

Open the Console URL in a web browser and log in with the Admin Username and Admin Password provided from the Terraform template output.

Using the Azure Loadbalancer

See details and examples for exposing your workloads with Azure LoadBalancer in azure-loadbalancer.md