Project: FabEdge (Runtime / Cloud Native Network)
File: get-started-v0.7.0.md

[toc] Cloud Clustera standard k8s cluster, located at the cloud side, providing the cloud computing capability. Edge Cluster: a standard k8s cluster, located at the edge side, providing the edge computing capability. Connector Node: a k8s node, located at the cloud side, connector is responsible for communication between cloud side and edge side. Since connector node will have large traffic burden, it's better not to run other programs on them. Edge Node: a k8s node, located at the edge side, joining the cloud cluster using the framework, such as KubeEdge. Host Cluster: a selective cloud cluster, used to manage the cross-cluster communication. The 1st cluster deployed by FabEdge must be host cluster. Member Cluster: an edge cluster, registered into the host cluster, reports the network information to host cluster. CommunityK8S CRD defined by FabEdgethere are two types Node Type to define the communication between nodes within the same cluster Cluster Typeto define the cross-cluster communication Kubernetes (v1.18.81.22.7) Flannel (v0.14.0) or Calico (v3.16.5) KubeEdge v1.5or SuperEdgev0.5.0or OpenYurt v0.4.1 Make sure the following ports are allowed by firewall or security group. ESP(50)UDP/500UDP/4500 Collect the configuration of the current cluster ```shell $ curl -s http://116.62.127.76/installer/v0.6.0/getclusterinfo.sh | bash - This may take some time. Please wait. clusterDNS : 169.254.25.10 clusterDomain : root-cluster cluster-cidr : 10.233.64.0/18 service-cluster-ip-range : 10.233.0.0/18 ``` Deploy FabEdge ```shell $ curl 116.62.127.76/installer/v0.6.0/quickstart.sh | bash -s -- \ --cluster-name beijing \ --cluster-role host \ --cluster-zone beijing \ --cluster-region china \ --connectors node1 \ --edges edge1,edge2 \ --edge-pod-cidr 10.233.0.0/16 \ --connector-public-addresses 10.22.46.47 \ --chart http://116.62.127.76/fabedge-0.6.0.tgz ``` > Note > --connectors: The names of k8s nodes which connectors are located, those nodes will be labeled as node-role.kubernetes.io/connector > --edges: The names of edge nodesthose nodes will be labeled as node-role.kubernetes.io/edge > --edge-pod-cidr: The range of IPv4 addresses for the edge pod, if you use Calico, this is required. Please make sure the value is not overlapped with cluster CIDR of your cluster. > --connector-public-addresses: ip addresses of k8s nodes which connectors are located Verify the deployment ```shell $ kubectl get no NAME STATUS ROLES AGE VERSION edge1 Ready edge 5h22m v1.18.2 edge2 Ready edge 5h21m v1.18.2 master Ready master 5h29m v1.18.2 node1 Ready connector 5h23m v1.18.2 $ kubectl get po -n kube-system NAME READY STATUS RESTARTS AGE calico-kube-controllers-8b5ff5d58-lqg66 1/1 Running 0 17h calico-node-7dkwj 1/1 Running 0 16h calico-node-q95qp 1/1 Running 0 16h coredns-86978d8c6f-qwv49 1/1 Running 0 17h kube-apiserver-master 1/1 Running 0 17h kube-controller-manager-master 1/1 Running 0 17h kube-proxy-ls9d7 1/1 Running 0 17h kube-proxy-wj8j9 1/1 Running 0 17h kube-scheduler-master 1/1 Running 0 17h metrics-server-894c64767-f4bvr 2/2 Running 0 17h nginx-proxy-node1 1/1 Running 0 17h nodelocaldns-fmx7f 1/1 Running 0 17h nodelocaldns-kcz6b 1/1 Running 0 17h nodelocaldns-pwpm4 1/1 Running 0 17h $ kubectl get po -n fabedge NAME READY STATUS RESTARTS AGE fabdns-7b768d44b7-bg5h5 1/1 Running 0 9m19s fabedge-agent-edge1 2/2 Running 0 8m18s fabedge-cloud-agent-hxjtb 1/1 Running 4 9m19s fabedge-connector-8c949c5bc-7225c 2/2 Running 0 8m18s fabedge-operator-dddd999f8-2p6zn 1/1 Running 0 9m19s service-hub-74d5fcc9c9-f5t8f 1/1 Running 0 9m19s ``` Create community for edges which need to communicate with each other ```shell $ cat > node-community.yaml << EOF apiVersion: fabedge.io/v1alpha1 kind: Community metadata: name: beijing-edge-nodes # community name spec: members:

# format{cluster name}.{edge node name} beijing.edge2 EOF $ kubectl apply -f node-community.yaml ``` Update the dependent configuration Update the dependent configuration If any member cluster, register it in the host cluster first, then deploy FabEdge in it. in the host clustercreate an edge cluster named "shanghai". Get the token for registration. ```shell $ cat > shanghai.yaml << EOF apiVersion: fabedge.io/v1alpha1 kind: Cluster metadata: name: shanghai # cluster name EOF $ kubectl apply -f shanghai.yaml $ kubectl get cluster shanghai -o go-template --template='{{.spec.token}}' | awk 'END{print}' eyJomitted--9u0 ``` Deploy FabEdge in the member cluster ```shell curl 116.62.127.76/installer/v0.6.0/quickstart.sh | bash -s -- \ --cluster-name shanghai \ --cluster-role member \ --cluster-zone shanghai \ --cluster-region china \ --connectors node1 \ --edges edge1,edge2 \ --edge-pod-cidr 10.233.0.0/16 \ --connector-public-addresses 10.22.46.26 \ --chart http://116.62.127.76/fabedge-0.6.0.tgz \ --service-hub-api-server https://10.22.46.47:30304 \ --operator-api-server https://10.22.46.47:30303 \ --init-token ey...Jh ``` > Note: > --connectors: The names of k8s nodes which connectors are located, those nodes will be labeled as node-role.kubernetes.io/connector > --edges: The names of edge nodesthose nodes will be labeled as node-role.kubernetes.io/edge > --edge-pod-cidr: The range of IPv4 addresses for the edge pod, if you use Calico, this is required. Please make sure the value is not overlapped with cluster CIDR of your cluster. > --connector-public-addresses: ip address of k8s nodes on which connectors are located in the member cluster > --init-token: token when the member cluster is added in the host cluster > --service-hub-api-server: endpoint of serviceHub in the host cluster > --operator-api-server: endpoint of operator-api in the host cluster Verify the deployment ```shell $ kubectl get no NAME STATUS ROLES AGE VERSION edge1 Ready edge 5h22m v1.18.2 edge2 Ready edge 5h21m v1.18.2 master Ready master 5h29m v1.18.2 node1 Ready connector 5h23m v1.18.2 $ kubectl get po -n kube-system NAME READY STATUS RESTARTS AGE calico-kube-controllers-8b5ff5d58-lqg66 1/1 Running 0 17h calico-node-7dkwj 1/1 Running 0 16h calico-node-q95qp 1/1 Running 0 16h coredns-86978d8c6f-qwv49 1/1 Running 0 17h kube-apiserver-master 1/1 Running 0 17h kube-controller-manager-master 1/1 Running 0 17h kube-proxy-ls9d7 1/1 Running 0 17h kube-proxy-wj8j9 1/1 Running 0 17h kube-scheduler-master 1/1 Running 0 17h metrics-server-894c64767-f4bvr 2/2 Running 0 17h nginx-proxy-node1 1/1 Running 0 17h nodelocaldns-fmx7f 1/1 Running 0 17h nodelocaldns-kcz6b 1/1 Running 0 17h nodelocaldns-pwpm4 1/1 Running 0 17h $ kubectl get po -n fabedge NAME READY STATUS RESTARTS AGE fabdns-7b768d44b7-bg5h5 1/1 Running 0 9m19s fabedge-agent-edge1 2/2 Running 0 8m18s fabedge-cloud-agent-hxjtb 1/1 Running 4 9m19s fabedge-connector-8c949c5bc-7225c 2/2 Running 0 8m18s fabedge-operator-dddd999f8-2p6zn 1/1 Running 0 9m19s service-hub-74d5fcc9c9-f5t8f 1/1 Running 0 9m19s ``` in the host clustercreate a community for all clusters which need to communicate with each other ```shell $ cat > community.yaml << EOF apiVersion: fabedge.io/v1alpha1 kind: Community metadata: name: all-clusters spec: members: shanghai.connector # format: {cluster name}.connector beijing.connector # format: {cluster name}.connector EOF $ kubectl apply -f community.yaml ``` the DNS components need to be modified if `nodelocaldns` is usedmodify `nodelocaldns` only, if SuperEdge `edge-coredns` is usedmodify `coredns` and `edge-coredns`, modify `coredns` for others Update `nodelocaldns` ```shell $ kubectl -n kube-system edit cm nodelocaldns global:53 { errors cache 30 reload bind 169.254.25.10 # local bind address forward .

# cluset-ip of fab-dns service } ``` Update `edge-coredns` ```shell $ kubectl -n edge-system edit cm edge-coredns global { forward . 10.244.51.126 # cluset-ip of fab-dns service } ``` Update `coredns ` ```shell $ kubectl -n kube-system edit cm coredns global { forward . 10.109.72.43 # cluset-ip of fab-dns service } ``` Reboot corednsedge-coredns or nodelocaldns to take effect Make sure `nodelocaldns` is running on all edge nodes ```shell $ kubectl get po -n kube-system -o wide | grep nodelocaldns nodelocaldns-cz5h2 1/1 Running 0 56m 10.22.46.47 master <none> <none> nodelocaldns-nk26g 1/1 Running 0 47m 10.22.46.23 edge1 <none> <none> nodelocaldns-wqpbw 1/1 Running 0 17m 10.22.46.20 node1 <none> <none> ``` Update `edgecore` for all edge nodes ```shell $ vi /etc/kubeedge/config/edgecore.yaml edgeMesh: enable: false edged: enable: true cniBinDir: /opt/cni/bin cniCacheDirs: /var/lib/cni/cache cniConfDir: /etc/cni/net.d networkPluginName: cni networkPluginMTU: 1500 clusterDNS: 169.254.25.10 # clusterDNS of getclusterinfo script output clusterDomain: "root-cluster" # clusterDomain of getclusterinfo script output ``` > clusterDNSif no nodelocaldnscoredns service can be used. Reboot `edgecore` on all edge nodes ```shell $ systemctl restart edgecore ``` Verify the serviceif not readyto rebuild the Pod ```shell $ kubectl get po -n edge-system application-grid-controller-84d64b86f9-29svc 1/1 Running 0 15h application-grid-wrapper-master-pvkv8 1/1 Running 0 15h application-grid-wrapper-node-dqxwv 1/1 Running 0 15h application-grid-wrapper-node-njzth 1/1 Running 0 15h edge-coredns-edge1-5758f9df57-r27nf 0/1 Running 8 15h edge-coredns-edge2-84fd9cfd98-79hzp 0/1 Running 8 15h edge-coredns-master-f8bf9975c-77nds 1/1 Running 0 15h edge-health-7h29k 1/1 Running 3 15h edge-health-admission-86c5c6dd6-r65r5 1/1 Running 0 15h edge-health-wcptf 1/1 Running 3 15h tunnel-cloud-6557fcdd67-v9h96 1/1 Running 1 15h tunnel-coredns-7d8b48c7ff-hhc29 1/1 Running 0 15h tunnel-edge-dtb9j 1/1 Running 0 15h tunnel-edge-zxfn6 1/1 Running 0 15h $ kubectl delete po -n edge-system edge-coredns-edge1-5758f9df57-r27nf pod "edge-coredns-edge1-5758f9df57-r27nf" deleted $ kubectl delete po -n edge-system edge-coredns-edge2-84fd9cfd98-79hzp pod "edge-coredns-edge2-84fd9cfd98-79hzp" deleted ``` By default the master node has the taint of `node-role.kubernetes.io/master:NoSchedule`which prevents fabedge-cloud-agent to start. It caused pods on the master node cannot communicate with the other Pods on the other nodes. If needed, to modify the DamonSet of fabedge-cloud-agent to tolerant this taint Regardless the cluster role, add all Pod and Service network segments of all other clusters to the cluster with Calico, which prevents Calico from doing source address translation. one example with the clusters of: host (Calico) + member1 (Calico) + member2 (Flannel) on the host (Calico) cluster, to add the addresses of the member (Calico) cluster and the member(Flannel) cluster on the member1 (Calico) cluster, to add the addresses of the host (Calico) cluster and the member(Flannel) cluster on the member2 (Flannel) cluster, there is NO any configuration required. ```shell $ cat > cluster-cidr-pool.yaml << EOF apiVersion: projectcalico.org/v3 kind: IPPool metadata: name: cluster-beijing-cluster-cidr spec: blockSize: 26 cidr: 10.233.64.0/18 natOutgoing: false disabled: true ipipMode: Always EOF $ calicoctl.sh create -f cluster-cidr-pool.yaml $ cat > service-cluster-ip-range-pool.yaml << EOF apiVersion: projectcalico.org/v3 kind: IPPool metadata: name: cluster-beijing-service-cluster-ip-range spec: blockSize: 26 cidr: 10.233.0.0/18 natOutgoing: false disabled: true ipipMode: Always EOF $ calicoctl.sh create -f service-cluster-ip-range-pool.yaml ``` If asymmetric routes exist, to disable rp_filter on all cloud node ```shell $ sudo for i in /proc/sys/net/ipv4/conf/*/rp_filter; do echo 0 >$i; done $ sudo vi /etc/sysctl.conf net.ipv4.conf.default.rp_filter=0 net.ipv4.conf.all.rp_filter=0 ``` If Error withError: cannot re-use a name that is still in use. to uninstall fabedge and try again. ```shell $ helm uninstall -n fabedge fabedge release "fabedge" uninstalled ```