Skip to content

T
tf_mod_aws_eks_cluster
Commit 7eb19645 authored by Chris Merrett's avatar Chris Merrett
Browse files
Options

Removed kube-proxy from userdata - it isn't used in EKS - documentation fail

parent 7b69a4ee
Pipeline #4967 passed with stage
    in 16 seconds
    Show whitespace changes
    Inline Side-by-side
    Showing with 16 additions and 6 deletions
    templates/userdata.tpl
    View file @ 7eb19645
    ......@@ -24,22 +24,32 @@ sed -i s,CLIENT_CA_FILE,$CA_CERTIFICATE_FILE_PATH,g /etc/systemd/system/kubelet.
    # start services
    systemctl daemon-reload
    systemctl restart kubelet kube-proxy
    systemctl restart kubelet
    # Install cron
    yum -y install crontabs && chkconfig crond on && service crond start
    yum -y install crontabs
    chkconfig crond on
    service crond start
    # Add Steamhaus user
    adduser steamhaus && passwd -l steamhaus && mkdir -p /home/steamhaus/bin && mkdir -p /home/steamhaus/.ssh && chmod 700 /home/steamhaus/.ssh
    adduser steamhaus
    passwd -l steamhaus
    mkdir -p /home/steamhaus/bin
    mkdir -p /home/steamhaus/.ssh
    chmod 700 /home/steamhaus/.ssh
    # Ensure Steamhaus user has full passwordless root
    echo "steamhaus ALL=(ALL)NOPASSWD:ALL" > /etc/sudoers.d/steamhaus && chmod 440 /etc/sudoers.d/steamhaus
    echo "steamhaus ALL=(ALL)NOPASSWD:ALL" > /etc/sudoers.d/steamhaus
    chmod 440 /etc/sudoers.d/steamhaus
    # Create Steamhaus SSH credential update script
    wget --no-check-certificate "https://gist.githubusercontent.com/chrisfu/87b642951aadafa62b99/raw/sh_pubkey_update.sh" -O /home/steamhaus/bin/sh_pubkey_update.sh && sed -i s,`whoami`,steamhaus,g /home/steamhaus/bin/sh_pubkey_update.sh && chmod 755 /home/steamhaus/bin/sh_pubkey_update.sh
    wget --no-check-certificate "https://gist.githubusercontent.com/chrisfu/87b642951aadafa62b99/raw/sh_pubkey_update.sh" -O /home/steamhaus/bin/sh_pubkey_update.sh
    sed -i s,`whoami`,steamhaus,g /home/steamhaus/bin/sh_pubkey_update.sh
    chmod 755 /home/steamhaus/bin/sh_pubkey_update.sh
    # Perform first-time update of Steamhaus SSH credentials
    /home/steamhaus/bin/sh_pubkey_update.sh && echo "0 1 * * * /home/steamhaus/bin/sh_pubkey_update.sh" > /var/spool/cron/steamhaus
    /home/steamhaus/bin/sh_pubkey_update.sh
    echo "0 1 * * * /home/steamhaus/bin/sh_pubkey_update.sh" > /var/spool/cron/steamhaus
    # Ensure everything within Steamhaus home directory is owned by Steamhaus
    chown -R steamhaus: /home/steamhaus/
    ......
    Markdown is supported
    0% or
    You are about to add 0 people to the discussion. Proceed with caution.
    Finish editing this message first!
    Please register or to comment