[KOS] Use KOS to install kubernetes so easily!

#!/bin/bash

# Enable ssh password authentication
echo "Enable ssh password authentication"
sed -i 's/^PasswordAuthentication no/PasswordAuthentication yes/' /etc/ssh/sshd_config
sed -i 's/.*PermitRootLogin.*/PermitRootLogin yes/' /etc/ssh/sshd_config
systemctl reload sshd

# Set Root password
echo "Set root password"
echo -e "admin\nadmin" | passwd root >/dev/null 2>&1

root@k8s-master:~# ssh-keygen -t rsa -b 2048 -f ~/.ssh/id_rsa_k0s
Generating public/private rsa key pair.
Enter passphrase (empty for no passphrase): <để trống>
Enter same passphrase again: <để trống>
Your identification has been saved in /root/.ssh/id_rsa_k0s
Your public key has been saved in /root/.ssh/id_rsa_k0s.pub
The key fingerprint is:
SHA256:HvatXNUWf5jcvvRVXDxIUG41ysVkGEPnGq3sIORPlYQ root@k8s-master
The key's randomart image is:
+---[RSA 2048]----+
|           .=B=B |
|           E=.%o.|
|         .   X =o|
|        o   +.+*=|
|        So o += O|
|       o o+.o. oo|
|        . ..o. .o|
|         . o  . +|
|          o    ..|
+----[SHA256]-----+

root@k8s-master:~# ssh-copy-id -i ~/.ssh/id_rsa_k0s.pub 192.168.101.41
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa_k0s.pub"
The authenticity of host '192.168.101.41 (192.168.101.41)' can't be established.
ECDSA key fingerprint is SHA256:nm6S4HLwHaZj1bkPAzTO04SDXMbUyQU/DRYxIcCGaK0.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@192.168.101.41's password: <pass root>

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh '192.168.101.41'"
and check to make sure that only the key(s) you wanted were added.

wget https://github.com/k0sproject/k0sctl/releases/download/v0.9.0/k0sctl-linux-x64 -O k0sctl

root@k8s-master:~# ls
k0sctl  snap
root@k8s-master:~# chmod +x k0sctl 
root@k8s-master:~# mv k0sctl /usr/local/bin/
root@k8s-master:~# k0sctl version
version: v0.9.0
commit: 6d364ff

root@k8s-master:~# k0sctl init > k0sctl.yaml
root@k8s-master:~# ls
k0sctl.yaml  snap

apiVersion: k0sctl.k0sproject.io/v1beta1
kind: Cluster
metadata:
  name: k0s-cluster
spec:
  hosts:
  - ssh:
      address: 192.168.101.40
      user: root
      port: 22
      keyPath: /root/.ssh/id_rsa_k0s
    role: controller
    privateInterface: ens160
  - ssh:
      address: 192.168.101.41
      user: root
      port: 22
      keyPath: /root/.ssh/id_rsa_k0s
    role: worker
    privateInterface: ens160
  - ssh:
      address: 192.168.101.42
      user: root
      port: 22
      keyPath: /root/.ssh/id_rsa_k0s
    role: worker
    privateInterface: ens160
  - ssh:
      address: 192.168.101.43
      user: root
      port: 22
      keyPath: /root/.ssh/id_rsa_k0s
    role: worker
    privateInterface: ens160
  k0s:
    version: 1.21.3+k0s.0
    config:
      spec:
        api:
          extraArgs:
            service-node-port-range: 30000-32767
        network:
          podCIDR: 10.244.0.0/16
          serviceCIDR: 10.96.0.0/12
          provider: calico
          calico:
            mode: vxlan
            vxlanPort: 4789
            vxlanVNI: 4096
            mtu: 1450
            wireguard: false

apiVersion: k0sctl.k0sproject.io/v1beta1
kind: Cluster
metadata:
  name: k0s-cluster
spec:
  hosts:
  - ssh:
      address: 192.168.101.40
      user: root
      port: 22
      keyPath: /root/.ssh/id_rsa_k0s
    role: controller
    privateInterface: ens160
  - ssh:
      address: 192.168.101.41
      user: root
      port: 22
      keyPath: /root/.ssh/id_rsa_k0s
    role: worker
    privateInterface: ens160
  - ssh:
      address: 192.168.101.42
      user: root
      port: 22
      keyPath: /root/.ssh/id_rsa_k0s
    role: worker
    privateInterface: ens160
  - ssh:
      address: 192.168.101.43
      user: root
      port: 22
      keyPath: /root/.ssh/id_rsa_k0s
    role: worker
    privateInterface: ens160
  k0s:
    version: v1.21.8+k0s.0
    config:
      spec:
        api:
          extraArgs:
            service-node-port-range: 30000-32767
        network:
          podCIDR: 10.244.0.0/16
          serviceCIDR: 10.96.0.0/12
          provider: custom
          kubeProxy:
            disabled: true
        extensions:
          helm:
            repositories:
            - name: cilium
              url: https://helm.cilium.io
            charts:
            - name: cilium
              chartname: cilium/cilium
              version: "1.11.2"
              namespace: kube-system
              values: |
                kubeProxyReplacement: "strict"
                k8sServiceHost: 192.168.101.40
                k8sServicePort: 6443

root@k8s-master:~# k0sctl apply --config k0sctl.yaml 

⠀⣿⣿⡇⠀⠀⢀⣴⣾⣿⠟⠁⢸⣿⣿⣿⣿⣿⣿⣿⡿⠛⠁⠀⢸⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠀█████████ █████████ ███
⠀⣿⣿⡇⣠⣶⣿⡿⠋⠀⠀⠀⢸⣿⡇⠀⠀⠀⣠⠀⠀⢀⣠⡆⢸⣿⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀███          ███    ███
⠀⣿⣿⣿⣿⣟⠋⠀⠀⠀⠀⠀⢸⣿⡇⠀⢰⣾⣿⠀⠀⣿⣿⡇⢸⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⠀███          ███    ███
⠀⣿⣿⡏⠻⣿⣷⣤⡀⠀⠀⠀⠸⠛⠁⠀⠸⠋⠁⠀⠀⣿⣿⡇⠈⠉⠉⠉⠉⠉⠉⠉⠉⢹⣿⣿⠀███          ███    ███
⠀⣿⣿⡇⠀⠀⠙⢿⣿⣦⣀⠀⠀⠀⣠⣶⣶⣶⣶⣶⣶⣿⣿⡇⢰⣶⣶⣶⣶⣶⣶⣶⣶⣾⣿⣿⠀█████████    ███    ██████████

k0sctl v0.9.0 Copyright 2021, k0sctl authors.
Anonymized telemetry of usage will be sent to the authors.
By continuing to use k0sctl you agree to these terms:
https://k0sproject.io/licenses/eula
INFO ==> Running phase: Connect to hosts 
INFO [ssh] 192.168.101.40:22: connected           
INFO [ssh] 192.168.101.41:22: connected           
INFO [ssh] 192.168.101.41:22: connected           
INFO [ssh] 192.168.101.41:22: connected 

k0sctl kubeconfig --config k0sctl.yaml > ~/.kube/config

sudo apt-get update
sudo apt-get install -y apt-transport-https ca-certificates curl
sudo curl -fsSLo /usr/share/keyrings/kubernetes-archive-keyring.gpg https://packages.cloud.google.com/apt/doc/apt-key.gpg
echo "deb [signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.list
sudo apt-get update
sudo apt-get install -y kubectl
kubectl get node

k0sctl reset --config k0sctl.yaml

root@k8s-master-cluster2:/etc/k0s# ls /var/lib/k0s/
bin/               etcd/              konnectivity.conf  manifests/         pki/
root@k8s-master-cluster2:/etc/k0s# ls /var/lib/k0s/pki/
admin.conf                    ca.key                  front-proxy-client.key  scheduler.conf
admin.crt                     ccm.conf                k0s-api.crt             scheduler.crt
admin.key                     ccm.crt                 k0s-api.key             scheduler.key
apiserver-etcd-client.crt     ccm.key                 konnectivity.conf       server.crt
apiserver-etcd-client.key     etcd                    konnectivity.crt        server.key
apiserver-kubelet-client.crt  front-proxy-ca.crt      konnectivity.key
apiserver-kubelet-client.key  front-proxy-ca.key      sa.key
ca.crt                        front-proxy-client.crt  sa.pub