Name: fabric-kubernetes-nodes
Owner: CoreOS
Description: A fabric Fabfile for SSHing into Kubernetes nodes by label query
Created: 2017-05-01 02:26:26.0
Updated: 2018-04-05 00:01:54.0
Pushed: 2017-10-02 21:11:52.0
Homepage: null
Size: 17
Language: null
GitHub Committers
| User | Most Recent Commit | # Commits |
|---|
Other Committers
| User | Most Recent Commit | # Commits |
|---|
Kubernetes has a database of nodes in the cluster which can be queried with kubectl get nodes. This is a powerful database for automation and integration with existing tools. One powerful tool is the Fabric SSH utility which is known as a fabfile.py.
Install the Fabric SSH utility and test it out:
b --version
ic 1.13.1
Git clone this repo and move into the directory
clone https://github.com/coreos/fabric-kubernetes-nodes
abric-kubernetes-nodes
Fabric will use the fabfile.py from the root of this directory. So now Kubernetes Nodes and labels are integrated directly into fabric! Here is an example session using this integration:
bectl label node ip-10-0-0-50.us-west-2.compute.internal my-special-label=true
b -u core -R my-special-label=true -- date
26.54.211] Executing task '<remainder>'
26.54.211] run: date
26.54.211] out: Thu Feb 16 06:54:37 UTC 2017
26.54.211] out:
Many configurations of Kubernetes, like Tectonic, do not enable direct SSH access to machines in the cluster and instead users must first access gateway or bastion hosts. If the Kubernetes cluster has this configuration add the --gateway flag to the command and change the address type to .
port FAB_KUBE_NODE_ADDRESS_TYPE=InternalIP
b --gateway=W.X.Y.Z -u core -R failure-domain.beta.kubernetes.io/zone=us-west-2a -- date
0.3.24] Executing task '<remainder>'
0.3.24] run: date
0.3.24] out: Mon May 1 02:50:13 UTC 2017
0.3.24] out:
0.60.15] Executing task '<remainder>'
0.60.15] run: date
0.60.15] out: Mon May 1 02:50:16 UTC 2017
0.60.15] out:
.
onnect
By default the fabfile will use the ExternalIP of nodes. However, it can be configured to use any IP address that a Node has available. The example above uses the common InternalIP field. To change this to a custom SpecialIP export the environment variable FAB_KUBE_NODE_ADDRESS_TYPE=SpecialIP.
Q: With Kubernetes aren't we living in a post-SSH world?
A: Kubernetes does enable a workflow where SSH should be less and less necessary for administering machines but often there is still a need to SSH into machines to gather statistics, debug issues, or repair configuration issues. So, while we hope that years from now machines will never need SSH and one-off debugging this tool is useful for the realities of today.