Kubernetes Cluster Creation

ForgeRock provides shell scripts based on the Google Cloud SDK to use for GKE cluster creation. Use them when you deploy the CDM. After you’ve finished deploying the CDM, you can use the CDM as a sandbox to explore a different infrastructure-as-code solution, if you like.

When you Create a Project Plan, you’ll need to identify your organization’s preferred infrastructure-as-code solution, and create your own cluster creation automation scripts, if necessary.

Here are the steps the Cloud Deployment Team followed to create a Kubernetes cluster on GKE:

Create the cluster:
1. Change to the directory that contains the cluster creation script:
  $ cd /path/to/forgeops/cluster/gke
2. Source the script that contains the configuration for your cluster size. For example:
  $ source ./small.sh
3. Run the cluster creation script^[1]:
  $ ./cluster-up.sh
  If you’re prompted to install Google Cloud SDK beta components, enter Y to install them.
  
  The script creates:
  - The cluster
  - The ds-pool node pool (for large clusters only)
  - The fast storage class
  - The prod namespace
  - The cluster-admin-binding cluster role binding
4. To verify that the script created the cluster, log in to the Google Cloud console. Select the Kubernetes Engine option. You should see the new cluster in the list of Kubernetes clusters.
5. Run the kubectx command.
  
  The output should contain your newly created cluster and any existing clusters.
  
  The current context should be set to the context for your new cluster.
Set context to the prod namespace:
```
$ kubens prod
```

Check the status of the pods in your cluster until all the pods are ready:

List all the pods in the cluster:

$ kubectl get pods --all-namespaces
NAMESPACE                         NAME                                             READY   STATUS    RESTARTS   AGE
cnrm-system                       cnrm-deletiondefender-0                          1/1     Running   0          6m52s
cnrm-system                       cnrm-resource-stats-recorder-7cc75c4d59-tjwvx    2/2     Running   0          6m52s
cnrm-system                       cnrm-webhook-manager-656ffb69d5-6d7cp            1/1     Running   0          6m52s
configconnector-operator-system   configconnector-operator-0                       1/1     Running   0          7m46s
kube-system                       event-exporter-gke-59b99fdd9c-qtvzw              2/2     Running   0          7m49s
kube-system                       fluentbit-gke-dm42n                              2/2     Running   0          6m37s
. . .

Review the output. Deployment is complete when:
- The READY column indicates all running containers are available. The entry in the READY column represents [total number of containers/number of available containers].
- All entries in the STATUS column indicate Running or Completed.
If necessary, continue to query your cluster’s status until all the pods are ready.

Next Step

1. The cluster creation script adds a set of required labels to clusters created by ForgeRock employees. The first time you run the script, it prompts you to specify whether you’re a ForgeRock employee or not, so that it can add these labels if appropriate. You should not receive this prompt during subsequent executions of the script.

ForgeOps

Kubernetes Cluster Creation

Next Step