2. 程式人生 > >手動安裝K8s第三節：etcd集群部署

手動安裝K8s第三節：etcd集群部署

阿新 • • 發佈：2018-06-13
docker kubernetes 容器

手動安裝K8s第三節：etcd集群部署

準備安裝包
https://github.com/coreos/etcd
版本：3.2.18
wget https://github.com/coreos/etcd/releases/download/v3.2.18/etcd-v3.2.18-linux-amd64.tar.gz

0、安裝
[root@k8smaster src]# tar zxf etcd-v3.2.18-linux-amd64.tar.gz
[root@k8smaster src]# cd etcd-v3.2.18-linux-amd64
[root@k8smaster etcd-v3.2.18-linux-amd64]# ls

Documentation etcd etcdctl README-etcdctl.md README.md READMEv2-etcdctl.md
[root@k8smaster etcd-v3.2.18-linux-amd64]#

[root@k8smaster etcd-v3.2.18-linux-amd64]# cp etcd etcdctl /opt/kubernetes/bin/
[root@k8smaster etcd-v3.2.18-linux-amd64]# scp etcd etcdctl k8snode1:/opt/kubernetes/bin/
[root@k8smaster etcd-v3.2.18-linux-amd64]# scp etcd etcdctl k8snode2:/opt/kubernetes/bin/

1、創建 etcd 證書簽名請求：
[root@k8smaster ssl]# pwd
/usr/local/src/ssl

[root@k8smaster ssl]# vim etcd-csr.json

{
"CN": "etcd",
"hosts": [
"127.0.0.1",
"192.168.137.171",
"192.168.137.201",
"192.168.137.198"
],
"key": {
"algo": "rsa",

"size": 2048
},
"names": [
{
"C": "CN",
"ST": "BeiJing",
"L": "BeiJing",
"O": "k8s",
"OU": "System"
}
]
}

2、生成 etcd 證書和私鑰：
[root@k8smaster ssl]# cfssl gencert -ca=/opt/kubernetes/ssl/ca.pem \
-ca-key=/opt/kubernetes/ssl/ca-key.pem \
-config=/opt/kubernetes/ssl/ca-config.json \
-profile=kubernetes etcd-csr.json | cfssljson -bare etcd

2018/06/12 17:49:55 [INFO] generate received request
2018/06/12 17:49:55 [INFO] received CSR
2018/06/12 17:49:55 [INFO] generating key: rsa-2048
2018/06/12 17:49:56 [INFO] encoded CSR
2018/06/12 17:49:56 [INFO] signed certificate with serial number 436752967180796317929734672346870544021189509062
2018/06/12 17:49:56 [WARNING] This certificate lacks a "hosts" field. This makes it unsuitable for
websites. For more information see the Baseline Requirements for the Issuance and Management
of Publicly-Trusted Certificates, v.1.1.6, from the CA/Browser Forum (https://cabforum.org);
specifically, section 10.2.3 ("Information Requirements").
*註意：上面WARRING忽略

生成證書：etcd.per，etcd-key.pem
[root@k8smaster ssl]# ll
-rw-r--r-- 1 root root 1062 Jun 12 17:49 etcd.csr
-rw-r--r-- 1 root root 293 Jun 12 17:46 etcd-csr.json
-rw------- 1 root root 1679 Jun 12 17:49 etcd-key.pem
-rw-r--r-- 1 root root 1436 Jun 12 17:49 etcd.pem

3、將證書移動到/opt/kubernetes/ssl目錄下
[root@k8smaster ssl]# cp etcd.pem /opt/kubernetes/ssl
[root@k8smaster ssl]# scp etcd.pem k8snode1:/opt/kubernetes/ssl
[root@k8smaster ssl]# scp etcd*.pem k8snode2:/opt/kubernetes/ssl

[root@k8smaster ssl]# rm -f etcd.csr etcd-csr.json

4、設置ETCD配置文件
[root@k8smaster ~]# vim /opt/kubernetes/cfg/etcd.conf

#[member]
ETCD_NAME="etcd-node1" #修改為不同的名字
ETCD_DATA_DIR="/var/lib/etcd/default.etcd"
#ETCD_SNAPSHOT_COUNTER="10000"
#ETCD_HEARTBEAT_INTERVAL="100"
#ETCD_ELECTION_TIMEOUT="1000"
ETCD_LISTEN_PEER_URLS="https://192.168.137.171:2380" #修改為本機IP地址
ETCD_LISTEN_CLIENT_URLS="https://192.168.137.171:2379,https://127.0.0.1:2379" #修改為本機IP地址
#ETCD_MAX_SNAPSHOTS="5"
#ETCD_MAX_WALS="5"
#ETCD_CORS=""
#[cluster]
ETCD_INITIAL_ADVERTISE_PEER_URLS="https://192.168.137.171:2380" #修改為本機IP地址

if you use different ETCD_NAME (e.g. test),

set ETCD_INITIAL_CLUSTER value for this name, i.e. "test=http://..."

ETCD_INITIAL_CLUSTER="etcd-node1=https://192.168.137.171:2380,etcd-node2=https://192.168.137.201:2380,etcd-node3=https://192.168.137.198:2380"
ETCD_INITIAL_CLUSTER_STATE="new"
ETCD_INITIAL_CLUSTER_TOKEN="k8s-etcd-cluster"
ETCD_ADVERTISE_CLIENT_URLS="https://192.168.137.171:2379" #修改為本機IP地址
#[security]
CLIENT_CERT_AUTH="true"
ETCD_CA_FILE="/opt/kubernetes/ssl/ca.pem"
ETCD_CERT_FILE="/opt/kubernetes/ssl/etcd.pem"
ETCD_KEY_FILE="/opt/kubernetes/ssl/etcd-key.pem"
PEER_CLIENT_CERT_AUTH="true"
ETCD_PEER_CA_FILE="/opt/kubernetes/ssl/ca.pem"
ETCD_PEER_CERT_FILE="/opt/kubernetes/ssl/etcd.pem"
ETCD_PEER_KEY_FILE="/opt/kubernetes/ssl/etcd-key.pem"

將配置文件復制到其它節點，按上面標註進行修改
[root@k8smaster ~]# scp /opt/kubernetes/cfg/etcd.conf k8snode1:/opt/kubernetes/cfg/etcd.conf
[root@k8smaster ~]# scp /opt/kubernetes/cfg/etcd.conf k8snode2:/opt/kubernetes/cfg/etcd.conf

創建etcd.service
[root@k8smaster ~]# vim /etc/systemd/system/etcd.service
[Unit]
Description=Etcd Server
After=network.target

[Service]
Type=simple
WorkingDirectory=/var/lib/etcd
EnvironmentFile=-/opt/kubernetes/cfg/etcd.conf

set GOMAXPROCS to number of processors

ExecStart=/bin/bash -c "GOMAXPROCS=$(nproc) /opt/kubernetes/bin/etcd"
Type=notify

[Install]
WantedBy=multi-user.target

6、重新加載系統服務
[root@k8smaster ~]# scp /etc/systemd/system/etcd.service k8snode1:/etc/systemd/system/
[root@k8smaster ~]# scp /etc/systemd/system/etcd.service k8snode2:/etc/systemd/system/

在所有節點上創建etcd存儲目錄並啟動etcd

systemctl daemon-reload

mkdir /var/lib/etcd

systemctl start etcd

systemctl enable etcd

systemctl status etcd

7、驗證集群
[root@k8smaster ~]# etcdctl --endpoints=https://192.168.137.171:2379 \
--ca-file=/opt/kubernetes/ssl/ca.pem \
--cert-file=/opt/kubernetes/ssl/etcd.pem \
--key-file=/opt/kubernetes/ssl/etcd-key.pem cluster-health

member 3365586f3ad09ed8 is healthy: got healthy result from https://192.168.137.201:2379
member 80ecb1efc62e0556 is healthy: got healthy result from https://192.168.137.171:2379
member 851e1a89f7240e3a is healthy: got healthy result from https://192.168.137.198:2379
cluster is healthy

[root@k8smaster ~]# etcdctl --endpoints=https://192.168.137.171:2379 \
--ca-file=/opt/kubernetes/ssl/ca.pem \
--cert-file=/opt/kubernetes/ssl/etcd.pem \
--key-file=/opt/kubernetes/ssl/etcd-key.pem member list

3365586f3ad09ed8: name=etcd-node2 peerURLs=https://192.168.137.201:2380 clientURLs=https://192.168.137.201:2379 isLeader=false
80ecb1efc62e0556: name=etcd-node1 peerURLs=https://192.168.137.171:2380 clientURLs=https://192.168.137.171:2379 isLeader=true
851e1a89f7240e3a: name=etcd-node3 peerURLs=https://192.168.137.198:2380 clientURLs=https://192.168.137.198:2379 isLeader=false

[root@k8smaster ~]# vim etcdctl.sh

etcdctl cluster-health

etcdctl --endpoints=https://192.168.137.171:2379 \
--ca-file=/opt/kubernetes/ssl/ca.pem \
--cert-file=/opt/kubernetes/ssl/etcd.pem \
--key-file=/opt/kubernetes/ssl/etcd-key.pem cluster-health

etcdctl member list

etcdctl --endpoints=https://192.168.137.171:2379 \
--ca-file=/opt/kubernetes/ssl/ca.pem \
--cert-file=/opt/kubernetes/ssl/etcd.pem \
--key-file=/opt/kubernetes/ssl/etcd-key.pem member list

技術分享圖片

在node節點上查看端口狀態
[root@k8smaster ~]# netstat -ntlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 192.168.137.171:2379 0.0.0.0: LISTEN 3955/etcd
tcp 0 0 127.0.0.1:2379 0.0.0.0: LISTEN 3955/etcd
tcp 0 0 192.168.137.171:2380 0.0.0.0: LISTEN 3955/etcd
tcp 0 0 0.0.0.0:22 0.0.0.0: LISTEN 1154/sshd
tcp 0 0 127.0.0.1:25 0.0.0.0: LISTEN 1239/master
tcp6 0 0 :::22 ::: LISTEN 1154/sshd
tcp6 0 0 ::1:25 :::* LISTEN 1239/master

手動安裝K8s第三節：etcd集群部署

相關推薦

手動安裝K8s第三節：etcd集群部署

docker kubernetes 容器 手動安裝K8s第三節：etcd集群部署 準備安裝包https://github.com/coreos/etcd版本：3.2.18wget https://github.com/coreos/etcd/releases/download/v3.2.18/et

手動安裝K8s第八節：部署Fannel網絡

docker k8s kubernetes 容器 [root@k8smaster ~]# cd /usr/local/src/ssl/[root@k8smaster ssl]# vim flanneld-csr.json {"CN": "flanneld"

二進制安裝kubernetes v1.11.2 （第四章 etcd集群部署）

sys serve file nload dct scrip comm enc gdi 繼續第一章的部署。 六、部署etcd集群 6.1 kubernetes使用etcd存儲所有數據，本節極少部署一個2個節點高可用的etcd集群，復用第一章的master節點。 192.1

Kubernetes部署（四）：ETCD集群部署

rom 3.2 clust cti health 存儲目錄 wan etcd集群 報錯 手動部署ETCD集群 0.準備etcd軟件包 [root@node-01 k8s]# wget https://github.com/coreos/etcd/releases/downl

手動安裝K8s第六節：node節點部署-kubelet

docker k8s kubernetes 容器 部署kubelet1、準備二進制包[root@k8smaster ~]# cd /usr/local/src/kubernetes/server/bin/ [root@k8smaster bin]# scp kubelet kube-proxy

手動安裝K8s第五節：master節點kubectl命令部署

docker k8s kubernetes 容器 1、部署kubectl 命令行工具準備二進制包[root@k8smaster ~]# cd /usr/local/src/kubernetes/client/bin[root@k8smaster bin]# cp kubectl /opt/ku

手動安裝K8s第四節：Master節點

docker kubernetes k8s 容器 0、準備軟件包 cd /usr/local/src/kubernetes[root@k8smaster kubernetes]# cp server/bin/kube-apiserver /opt/kubernetes/bin/[root@k8

手動安裝K8s第七節：node節點部署-kube-proxy

docker k8s kubernetes 容器 部署Kubernetes Proxy vim CentOS-Base.repo [base]name=CentOS-$releasever - Base#mirrorlist=http://mirrorlist.centos.org/?rele

手動安裝K8s第九節：創建dashboard和發布應用

docker k8s kubernetes 容器 創建CoreDNS[root@k8smaster coredns]# lscoredns.yaml[root@k8smaster coredns]# kubectl create -f .serviceaccount "coredns

etcd 集群部署

rect selinux $2 span amp amd -m ntpd working 關於etcd的介紹，我這裏就不做介紹。百度一下即可，主要還是講一下部署。 一、環境介紹 1.1 主機環境 IP地址 主機名 角色 備註 192.168.15.131 k8s-

ETCD集群部署

etcdETCD 聚群部署 1.環境 172.16.50.121 morepay01 CentOS 7.4.1708 172.16.50.122 morepay02 CentOS 7.4.1708 172.16.50.123 morepay03 CentOS 7.4.1708 2.部署 2.1 軟件

etcd集群部署與遇到的坑(轉)

集群搭建 ESS 參數 nbsp get 存儲目錄 有時 snapshot 添加 在k8s集群中使用了etcd作為數據中心，在實際操作中遇到了一些坑。今天記錄一下，為了以後更好操作。 ETCD參數說明 —data-dir 指定節點的數據存儲目錄，這些數據

004.etcd集群部署-發現

cover 其他 127.0.0.1 -name amd64 idt ntp side roo 一 etcd發現簡介 1.1 需求背景 在實際環境中，集群成員的ip可能不會提前知道。如使用dhcp自動獲取的情況，在這些情況下，使用自動發現來引導etcdetcd集群，而不是指

004.etcd集群部署-動態發現

ast 過程 roo class 定靜 sts 另一個 sys alt 一 etcd發現簡介 1.1 需求背景 在實際環境中，集群成員的ip可能不會提前知道。如使用dhcp自動獲取的情況，在這些情況下，使用自動發現來引導etcdetcd集群，而不是指定靜態配置，這個過程被稱

Kubernetes（K8s）安裝部署過程（三）--創建高可用etcd集群

方式安裝 10.9 修改配置 取消 roo initial code clas list 這裏的etcd集群復用我們測試的3個節點，3個node都要安裝並啟動，註意修改配置文件 1、TLS認證文件分發：etcd集群認證用，除了本機有，分發到其他node節

k8s之二進制安裝etcd集群

k8s etcd 前言 kubeadm安裝的集群，默認etcd是一個單機的容器化的etcd，並且k8s和etcd通信沒有經過ssl加密和認證，這點是需要改造的。所以首先我們需要先部署一個三節點的etcd集群，二進制部署，systemd守護進程，並且需要生成ca證書 ETCD集群詳情 主機 IP

K8S 日誌收集（三）：ES 集群安裝

network -xms 結果 hosts sys k8s package refresh cat 集群設備 ip role 192.168.19.93 master、data 192.168.19.94 data 安裝java elasticsea

手動安裝K8s 1.10 第二節：基礎環境+CA證書

docekr kubernetes 容器 1、安裝Dockeryum install docker-ce -y 2、準備相關軟件上傳k8s-v1.10.1-manual.zip到/usr/local/src[root@k8smaster src]# lltotal 1178908-rw-r--r-

k8s, etcd集群搭建報報錯：request cluster ID mismatch (got

參考 mat art wan 通過 https rev boot conf 目前在學習K8S, etcd 集群搭建，啟動時候報錯： master-16 etcd[25461]: request cluster ID mismatch (got bdd7c7c32bde120

第三節：作用域鏈

靜態作用域規則 變量和函數的預處理 作用域鏈 JavaScript采用的是靜態作用域規則，也叫詞法作用域，其解析過程是按照從上到下、從左到右的順序加載，並分為兩個階段：預編譯期(預處理)和執行期。預編譯期對代碼塊中所有聲明的變量和函數進行處理。註意關鍵字：代碼塊、聲明、變量、函數。1、代碼塊代