Installing the client bundle
A convenience playbook is provided to install and apply the client bundle on the Ansible controller. To run the playbook:
# cd ~/Docker-SimpliVity
# ansible-playbook -i vm_hosts playbooks/install_client_bundle.yml --vault-password-file .vault_pass
The client bundle is downloaded to ~/certs.<<ucp_instance>>.<<ucp_username>>
where ucp_instance
will
be specific to the cluster you are running against, for example, hpe2-ucp01
and the ucp-username
is typically admin
.
The playbook downloads the client bundle, but does not configure it for use. Change to the download folder
and execute eval "$(<env.sh)"
# cd ~/certs.hpe2-ucp01.admin
# eval "$(<env.sh)"
Test the configuration by again running the kubectl version
command - this time, it should now report
the server version as well as the client version:
# kubectl version
Client Version: version.Info{Major:"1", Minor:"11", GitVersion:"v1.11.5", GitCommit:"753b2dbc622f5cc417845f0ff8a77f539a4213ea", GitTreeState:"clean", BuildDate:"2018-11-26T14:41:50Z", GoVersion:"go1.10.3", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"11+", GitVersion:"v1.11.5-docker-1", GitCommit:"d512ba512d0de40cd80258f480ff66bf71f2d8a4", GitTreeState:"clean", BuildDate:"2018-12-03T19:55:14Z", GoVersion:"go1.10.3", Compiler:"gc", Platform:"linux/amd64"}
More information on the client bundle is available at https://docs.docker.com/ee/ucp/user-access/cli/#download-client-certificates-by-using-the-rest-api