-
Book Overview & Buying
-
Table Of Contents
Rancher Deep Dive
By :
Once you have created cluster.yaml, you have RKE create a cluster for you. This is done by running the rke up --config cluster.yaml command. RKE will look for the cluster.rkestate file. If it cannot find that file, RKE will assume that you are creating a new cluster, which causes RKE to create a new root CA certificate called kube-ca along with all the other certificates needed in the cluster. RKE will verify that all are valid and rotate and create the certificates for the different Kubernetes components as required if the cluster already has certificates. RKE then verifies the dialer has access to all the nodes in the cluster. The dialer will create an SSH tunnel to each node and bind to the Docker socket file. RKE will then use a file-deployer container to push the certificates to each node in the /etc/kubernetes/ssl directory.
RKE will then check if any etcd nodes are being added or removed from the cluster. Suppose RKE detects that the downtime settings...