Install Rancher@Scaleway

This tutorial will guide you through:

  • Creating a server on Scaleway Elements

  • Delegating a Gandi-managed DNS subdomain authority to it

  • Installing K3S and Rancher

Ready?

For this tutorial to go as expected you must:

Set.

For this tutorial, let’s assume that:

  • your domain is yourdomain.fr

  • your Rancher instance is yourlab

Go!

Setup the Rancher instance name

Most of the playbooks hosts scope is based on the 'workspace' ansible variable. This variable take its default value from environment variable KUBEFACTORY_WORKSPACE.

This value will be used as a DNS subdomain delegated to the Scaleway instance we will create.

Run:

export KUBEFACTORY_WORKSPACE="yourlab"

Create instance

Run:

ansible-playbook playbooks/tf_core.yml

After that you will find new file generated in the directory host_vars/${KUBEFACTORY_WORKSPACE}:

  • a terraform/core subdirectory: sources for Terraform provisioning Scaleway instance

  • a secrets subdirectory: contains generated keys for instance SSH access

  • system.yml: contains configuration for galaxie-clans roles

  • tf_core.yml: contains output values coming from terraform/core apply

Init server

Run:

ansible-playbook playbooks/core_init.yml

This step will access to your unprepared server and normalize a technical user for ansible to connect with in the following steps.

You can check everything went ok by running:

$ ssh -F ssh.cfg ${KUBEFACTORY_WORKSPACE} 2>/dev/null whoami
caretaker

Delegate a subdomain

Run:

ansible-playbook playbooks/gandi_delegate_subdomain.yml

Provision system

Run:

ansible-playbook playbooks/core_system.yml

This will clean configure your server. It also installs a Bind service to server as authority on the subdomain you delegated the step before. Configuration vars impacting roles behavior are located in host_vars/${KUBEFACTORY_WORKSPACE}/system.yml.

Provision certificates

Run:

ansible-playbook playbooks/acme_rotate_certificates.yml

This step will retrieve valid certificates from LetsEncrypt with a DNS challenge based on our Bind service.

Provision Rancher

Run:

ansible-playbook playbooks/core_rancher.yml

This step will retrieve valid certificates from LetsEncrypt with a DNS challenge based on our Bind service.

CONGRATULATIONS

Your Rancher is setup! You can reach it at https://rancher.k3s.yourlab.yourdomain.fr

SEASONED SCRIPT

export KUBEFACTORY_WORKSPACE=yourlab && \
ansible-playbook playbooks/tf_core.yml && \
ansible-playbook playbooks/core_init.yml && \
ansible-playbook playbooks/gandi_delegate_subdomain.yml -e mode=destroy -e force=true && \
ansible-playbook playbooks/gandi_delegate_subdomain.yml && \
ansible-playbook playbooks/core_system.yml && \
ansible-playbook playbooks/acme_rotate_certificates.yml && \
ansible-playbook playbooks/core_rancher.yml && \
ansible-playbook playbooks/tf_rancher_bootstrap.yml

SEASONED SCRIPT - DESTROY

export KUBEFACTORY_WORKSPACE=yourlab && \
ansible-playbook playbooks/gandi_delegate_subdomain.yml -e mode=destroy -e force=true && \
ansible-playbook playbooks/tf_core.yml -e tf_action=destroy