一:前言
kuberntes 系统使用etcd 存储所有数据,部署一个三节点的 etcd 集群,需要为 etcd 集群创建加密通信的 TLS 证书,复制以前创建的kubernetes 证书。cp ca.pem kubernetes-key.pem kubernetes.pem /etc/kubernetes/ssl。
iZwz95trb3stk6afg8oozuZ :10.116.137.196
iZwz96e1vc35er68nlrcauZ :10.116.82.28
iZwz96e1vc35er68nlrcatZ :10.116.36.57
二:ETCD 安装
三:创建 etcd 的 systemd unit 文件
/usr/lib/systemd/system/etcd.service
四:环境变量配置文件 /etc/etcd/etcd.conf
五:启动 etcd 服务
systemctl daemon-reload
systemctl enable etcd
systemctl start etcd
systemctl status etcd
六:验证服务
etcdctl --ca-file=/etc/kubernetes/ssl/ca.pem --cert-file=/etc/kubernetes/ssl/kubernetes.pem --key-file=/etc/kubernetes/ssl/kubernetes-key.pem --endpoints=https://127.0.0.1:2379 cluster-health
kuberntes 系统使用etcd 存储所有数据,部署一个三节点的 etcd 集群,需要为 etcd 集群创建加密通信的 TLS 证书,复制以前创建的kubernetes 证书。cp ca.pem kubernetes-key.pem kubernetes.pem /etc/kubernetes/ssl。
iZwz95trb3stk6afg8oozuZ :10.116.137.196
iZwz96e1vc35er68nlrcauZ :10.116.82.28
iZwz96e1vc35er68nlrcatZ :10.116.36.57
二:ETCD 安装
点击(此处)折叠或打开
- wget https://github.com/coreos/etcd/releases/download/v3.3.2/etc
- d-v3.3.2-linux-amd64.tar.gz
- tar -xvf etcd-v3.3.2-linux-amd64.tar.gz
- mv etcd-v3.3.2-linux-amd64/etcd* /usr/local/bin
/usr/lib/systemd/system/etcd.service
点击(此处)折叠或打开
- [Unit]
- Description=Etcd Server
- After=network.target
- After=network-online.target
- Wants=network-online.target
-
- [Service]
- Type=notify
- WorkingDirectory=/var/lib/etcd/
- EnvironmentFile=/etc/etcd/etcd.conf
- ExecStart=/bin/bash -c "GOMAXPROCS=$(nproc) /usr/bin/etcd --name=\"${ETCD_NAME}\" --cert-file=\"${ETCD_CERT_FILE}\" --key-file=\"${ETCD_KEY_FILE}\" --trusted-ca-file=\"${ETCD_TRUSTED_CA_FILE}\" --peer-cert-file=\"${ETCD_PEER_CERT_FILE}\" --peer-key-file=\"${ETCD_PEER_KEY_FILE}\" --peer-trusted-ca-file=\"${ETCD_PEER_TRUSTED_CA_FILE}\" --data-dir=\"${ETCD_DATA_DIR}\" --listen-client-urls=\"${ETCD_LISTEN_CLIENT_URLS}\" --listen-peer-urls=\"${ETCD_LISTEN_PEER_URLS}\" --advertise-client-urls=\"${ETCD_ADVERTISE_CLIENT_URLS}\" --initial-advertise-peer-urls=\"${ETCD_INITIAL_ADVERTISE_PEER_URLS}\" --initial-cluster=\"${ETCD_INITIAL_CLUSTER}\" --initial-cluster-state=\"${ETCD_INITIAL_CLUSTER_STATE}\""
- Restart=on-failure
- LimitNOFILE=65536
-
- [Install]
- WantedBy=multi-user.target
点击(此处)折叠或打开
- # [member]
- ETCD_NAME=iZwz96e1vc35er68nlrcauZ
- ETCD_DATA_DIR="/var/lib/etcd/default.etcd"
- ETCD_LISTEN_PEER_URLS="https://10.116.82.28:2380"
- ETCD_LISTEN_CLIENT_URLS="https://10.116.82.28:2379,https://127.0.0.1:2379"
-
- # [cluster]
- ETCD_INITIAL_ADVERTISE_PEER_URLS="https://10.116.82.28:2380"
- ETCD_INITIAL_CLUSTER="iZwz95trb3stk6afg8oozuZ=https://10.116.137.196:2380,iZwz96e1vc35er68nlrcauZ=https://10.116.82.28:2380,iZwz96e1vc35er68nlrcatZ=https://10.116.36.57:2380"
- ETCD_INITIAL_CLUSTER_STATE="new"
- ETCD_INITIAL_CLUSTER_TOKEN="k8s-etcd-cluster"
- ETCD_ADVERTISE_CLIENT_URLS="https://10.116.82.28:2379"
-
- # [security]
- ETCD_CERT_FILE="/etc/kubernetes/ssl/kubernetes.pem"
- ETCD_KEY_FILE="/etc/kubernetes/ssl/kubernetes-key.pem"
- ETCD_TRUSTED_CA_FILE="/etc/kubernetes/ssl/ca.pem"
- ETCD_PEER_CERT_FILE="/etc/kubernetes/ssl/kubernetes.pem"
- ETCD_PEER_KEY_FILE="/etc/kubernetes/ssl/kubernetes-key.pem"
- ETCD_PEER_TRUSTED_CA_FILE="/etc/kubernetes/ssl/ca.pem"
五:启动 etcd 服务
systemctl daemon-reload
systemctl enable etcd
systemctl start etcd
systemctl status etcd
六:验证服务
etcdctl --ca-file=/etc/kubernetes/ssl/ca.pem --cert-file=/etc/kubernetes/ssl/kubernetes.pem --key-file=/etc/kubernetes/ssl/kubernetes-key.pem --endpoints=https://127.0.0.1:2379 cluster-health
![](http://img.blog.itpub.net/blog/attachment/201803/13/28624388_152090759713o7.png?x-oss-process=style/bb)
来自 “ ITPUB博客 ” ,链接:http://blog.itpub.net/28624388/viewspace-2151775/,如需转载,请注明出处,否则将追究法律责任。
转载于:http://blog.itpub.net/28624388/viewspace-2151775/