k8s部署-4.创建node节点kubeconfig文件

一、下载kubectl

cd /tools/kubectl/

wget https://storage.googleapis.com/kubernetes-release/release/v1.18.15/bin/linux/amd64/kubectl

chmod a+x kubectl
cp kubectl /opt/kubernetes/bin/

kubernetes中文文档：https://www.kubernetes.org.cn/installkubectl

二、kubelet kubeconfig文件

生成token

export BOOTSTRAP_TOKEN=$(head -c 16 /dev/urandom | od -An -t x|tr -d '  ')
cat > token.csv << EOF
${BOOTSTRAP_TOKEN},kubelet-bootstrap,10001,"system:kubelet-bootstrap"
EOF

指定k8s api的访问入口

export KUBE_APISERVER="https://192.168.112.134:6443"

设置集群参数

cd /opt/kubernetes/ssl/

kubectl config set-cluster kubernetes \
  --certificate-authority=./ca.pem \
  --embed-certs=true \
  --server=${KUBE_APISERVER} \
  --kubeconfig=bootstrap.kubeconfig

设置客户端认证参数

kubectl config set-credentials kubelet-bootstrap \
  --token=${BOOTSTRAP_TOKEN} \
  --kubeconfig=bootstrap.kubeconfig

设置上下文参数

kubectl config set-context default \
  --cluster=kubernetes \
  --user=kubelet-bootstrap \
  --kubeconfig=bootstrap.kubeconfig

设置默认上下文

kubectl config use-context default --kubeconfig=bootstrap.kubeconfig

三、kube-proxy kubeconfig文件

kubectl config set-cluster kubernetes \
  --certificate-authority=./ca.pem \
  --embed-certs=true \
  --server=${KUBE_APISERVER} \
  --kubeconfig=kube-proxy.kubeconfig

配置证书

kubectl config set-credentials kube-proxy \
  --client-certificate=./kube-proxy.pem  \
  --client-key=./kube-proxy-key.pem  \
  --embed-certs=true  \
  --kubeconfig=kube-proxy.kubeconfig

配置上下文

kubectl config set-context default \
  --cluster=kubernetes \
  --user=kube-proxy \
  --kubeconfig=kube-proxy.kubeconfig

设置默认上下文

kubectl config use-context default --kubeconfig=kube-proxy.kubeconfig