This is a Terraform configuration to deploy a Kubernetes cluster on Oracle Cloud Infrastructure. It creates a few virtual machines and uses kubeadm to install a Kubernetes control plane on the first machine, and join the other machines as worker nodes.
By default, it deploys a 4-node cluster using ARM machines. Each machine has 1 OCPU and 6 GB of RAM, which means that the cluster fits within Oracle's (pretty generous if you ask me) free tier.
It is not meant to run production workloads, but it's great if you want to learn Kubernetes with a "real" cluster (i.e. a cluster with multiple nodes) without breaking the bank, and if you want to develop or test applications on ARM.
- Create an Oracle Cloud Infrastructure account.
- Configure OCI credentials. (FIXME)
terraform apply
That's it!
At the end of the terraform apply
, a kubeconfig
file is generated
in this directory. To use your new cluster, you can do:
export KUBECONFIG=$PWD/kubeconfig
kubectl get nodes
The command above should show you 4 nodes, named node1
to node4
.
You can also log into the VMs. At the end of the Terraform output you should see a command that you can use to SSH into the first VM (just copy-paste the command).
Check variables.tf
to see tweakable parameters. You can change the number
of nodes, the size of the nodes, or switch to Intel/AMD instances if you'd
like. Keep in mind that if you switch to Intel/AMD instances, you won't get
advantage of the free tier.
terraform destroy
This Terraform configuration:
- generates an OpenSSH keypair and a kubeadm token
- deploys 4 VMs using Ubuntu 20.04
- uses cloud-init to install and configure everything
- installs Docker and Kubernetes packages
- runs
kubeadm init
on the first VM - runs
kubeadm join
on the other VMs - installs the Weave CNI plugin
- transfers the
kubeconfig
file generated bykubeadm
- patches that file to use the public IP address of the machine
There is no cloud controller manager, which means that you cannot
create services with type: LoadBalancer
; or rather, if you create
such services, their EXTERNAL-IP
will remain <pending>
.
To expose services, use NodePort
.
Likewise, there is no ingress controller and no storage class.
(These might be added in a later iteration of this project.)
Oracle Cloud also has a managed Kubernetes service called Container Engine for Kubernetes (or OKE). That service doesn't have the caveats mentioned above; however, it's not part of the free tier.