Anthos ona AWS in now GA an Anthos on Azure is in a preview. GKE on AWS is a simplified installation of the Admin control plane. It uses AWS Elastic Compute Cloud (EC2), Elastic Block Storage (EBS), and Elastic Load Balancer (ELB) services. The bellow diagrams shows high level architecture. The deployment is done using Terraforms.
In bundled load balancing mode, GKE on-prem provides and manages the Seesaw load balancer.
The Authentication Plugin for Anthos has been integrated into and replaced with the Google Cloud command-line interface, which improves the authentication process and provides the user consent flow through gcloud commands.
vSphere credential rotation is enabled. Users can now use Solution User Certificates to authenticate to GKE deployed on-prem.
Preview Feature: Introducing User cluster Nodepools.
gkectl automatically uses the proxy URL from config.yaml to configure the proxy on the admin workstation.
When you login to GKE-OP nodes and try to run sudo command you will get the following warning:
sudo: unable to resolve host [nodename]
Your command will still execute but will show this warning. It is related to Ubuntu OS settings. To resolve it add the following line into the /etc/hosts file on the node:
127.0.0.1 [node-name]
Hope this will be solved soon as Google has already identified this issue. I guess they will add the record in the provisioning process for the nodes.
In this article we will show hot to install Istio and a simple microservice application. We will generate some traffic to that application and visualise the flows with Kiali.
The high level steps are as follows:
install Helm
deploy Istio CRDs
deploy Istio
expose Telemetry services
install BookInfo application
All the steps are performed from the Admin workstation
When using F5 BIG-IP load balancer of GKE On-Prem you might be wanting to use evaluation license. Keep in mind that this license has a restriction of 2MBps bandwidth in total. GKE-OP even with one user cluster can cause saturation and slowness of K8s API response. With multiple cluster and Istio installed the API can stop response at all. Note that F5 might not be showing the bandwith is saturated when you use the CLI tools.
Resolution: use full license or request 10GBps evaluation license.
With Anthos 1.2 there is a new feature that creates a test VM to check connectivities before you deploy your GKE-OP clusters. It helps to avoid issues during the installation.
[FAILURE] Admin Cluster VIP and NodeIP: Failed to create VM: failed to create VM (not retriable): failed to find VM template "gke-on-prem-osimage-1.14.7-gke.24mage-1.14.7-gke.24-20191120-f71f9a709b' not found
[FAILURE] User Cluster VIP and NodeIP: Failed to create VM: failed to create VM (not retriable): failed to find VM template "gke-on-prem-osimage-1.14.7-gke.24-age-1.14.7-gke.24-20191120-f71f9a709b' not found
Root cause: This is cause by the image not being present on the datastore. The installation steps in the GCP docs have wrong sequence.