Upgrade

Control plane upgrade steps

Upgrade kubeadm on the control plane node. 

drain the control plane node.    

 kubectl drain k8s-control --ignore-daemonsets

Plan the upgrade (kubeadm upgrade plan). 

sudo apt-get update && \

> sudo apt-get install -y --allow-change-held-packages kubeadm=1.27.2-00


Apply the upgrade (kubeadm upgrade apply).

sudo kubeadm upgrade plan v1.27.2

sudo kubeadm upgrade apply v1.27.2

Upgrade kubelet and kubectl on the control plane node. 

sudo apt-get update && \ 
sudo apt-get install -y --allow-change-held-packages kubelet=1.27.2-00 kubectl=1.27.2-00


sudo systemctl daemon-reload

sudo systemctl restart kubelet

Uncordon the control plane node. 

kubectl uncordon k8s-control



Worker node upgrade setp

Drain the node from kube-control plane

kubectl drain k8s-worker1 --ignore-daemonsets --force

Upgrade kubeadm  (run this commands from worker node) 

sudo apt-get update && \

 sudo apt-get install -y --allow-change-held-packages kubeadm=1.27.2-00

Upgrade the kubelet configuration (kubeadm upgrade node)

sudo kubeadm upgrade node

Upgrade kubelet and kubectl

sudo apt-get update && \ 
sudo apt-get install -y --allow-change-held-packages kubelet=1.27.2-00 kubectl=1.27.2-00


sudo systemctl daemon-reload

sudo systemctl restart kubelet

Uncordon the node. 

kubectl uncordon k8s-worker1 

Comments

Post a Comment

Popular posts from this blog

Advanced Pods

  Scheduling  :- The process of assigning Pods to Nodes so kubelets can run them.  Scheduler :-  Control plane component that handles scheduling  Scheduling Process The kubernets scheduler selects a suitable Node for each pod. It takes into account thins like Resource requests vs. avaiable node resource Various configurations that affect scheduling using node labels NodeSelector :- We can configure a node Selector for our pods to limit which nodes the pod can be scheduled on. Node selectos use node labels to filter suitable nodes.  Create labeles to node :- kubectl label nodes k8s-worker1 special=true NodeName :- We can bypass scheduling and assign a pod to specific node by name using nodeName.  What is DaemonSet  DaemonSet Automatically runs a copy of a Pod on each node.  DaemonSets will run a copy of the Pod on new nodes as they are added to the cluster.  DaemonSets and Scheduling DaemonSets respect normal scheduling rules around node ...
Read more

Docker

  hostnamectl set-hostname docker-host     // Change the hostname to docker-host Docker  There is not password for run pull request for docker   yum update -y      yum install docker* systemctl status docker systemctl start docker systemctl enable docker systemctl enable docker.service   // auto enable service for docker  systemctl status docker pull the images for docker hub https://dlcdn.apache.org/tomcat/tomcat-9/v9.0.82/bin/apache-tomcat-9.0.82.tar.gz docker pull centos // if we do not put tags it will download the latest images docker pull centos: 7 // It has verion 7 tags Note we can pull docker images without login to dockerhub    docker images        docker info | grep -i dir     // Docker info for storing docker images        ls -l /var/lib/docker/    //Location where docker images are stored    ls -l /var/lib/docker/overlay2/6a61...
Read more

RBAC

Image
 RBAC in K8s Role-based access control (RBAC) in k8s allows us to control what users are allowed to do and access within your cluster. For example, we can use RBAC to allow developers to read metadata and logs from Kubernetes pods but not make changes to them.  Roles and ClusterRoles are kubernetes object that define a set of permissions. These permissions determine what users can do in the cluster.  A role defines permissions within a particular namespace, and a cluster role defines cluster-wide permissions not specific to a single namespace.  RoleBininding and cluserRoleBinding are objects that connect Roles and ClusterRoles to users.  Service accounts What is service accounts ? Service account is an account used by container processes within Pods to authenticate with the k8s API.  If your Pods need to communicate with the k8s, we can use service accounts to control their access.  Creating Service accounts A service account object can be created wit...
Read more