AWS Air-gapped Bootstrap

Bootstrap a kind cluster and CAPI controllers

Konvoy deploys all cluster lifecycle services to a bootstrap cluster, which deploys a workload cluster. When the workload cluster is ready, move the cluster lifecycle services to the workload cluster, after which the workload cluster manages its own lifecycle.

1. Assuming you have downloaded dkp-air-gapped-bundle_v2.8.1_linux_amd64.tar.gz , extract the tarball to a local directory:

   CODE

   tar -xzvf dkp-air-gapped-bundle_v2.8.1_linux_amd64.tar.gz && cd dkp-v2.8.1

2. Set an environment variable with your registry address with this command:

   CODE

   export REGISTRY_URL="<https/http>://<registry-address>:<registry-port>"
   export REGISTRY_URL=<ecr-registry-URI>
   export REGISTRY_USERNAME=<username>
   export REGISTRY_PASSWORD=<password>
   export REGISTRY_CA=<path to the cacert file on the bastion>

   REGISTRY_URL: the address of an existing local registry accessible in the VPC that the new cluster nodes will be configured to use a mirror registry when pulling images.

For ECR, the environment where you are running the dkp push command must be authenticated with AWS in order to load your images into ECR.

3. Seed the registry by running the following command to load the air-gapped image bundle into your private registry:

   CODE

   dkp push bundle --bundle ./container-images/konvoy-image-bundle-v2.8.1.tar --to-registry=${REGISTRY_URL} --to-registry-username=${REGISTRY_USERNAME} --to-registry-password=${REGISTRY_PASSWORD}

4. Load the bootstrap container image on your bastion machine using Docker or Podman command:

   CODE

   docker load -i konvoy-bootstrap-image-v2.8.1.tar

   CODE

   podman load -i konvoy-bootstrap-image-v2.8.1.tar

5. Create a bootstrap cluster:

   CODE

   dkp create bootstrap --kubeconfig $HOME/.kube/config

   Configuring an HTTP/HTTPS Proxy use --http-proxy, --https-proxy, and --no-proxy and their related values in this command for it to be successful.

--http-proxy <string> \
--https-proxy <string> \
--no-proxy <string>

6. (Optional) Refresh the credentials used by the AWS provider at any time, using the command:

   CODE

   dkp update bootstrap credentials aws

Konvoy creates a bootstrap cluster using KIND as a library. Konvoy then deploys the following Cluster API providers on the cluster:

• Core Provider

• vSphere Infrastructure Provider

• Kubeadm Bootstrap Provider

• Kubeadm ControlPlane Provider

Next Step

AWS Create a New Air-gapped Cluster