05.Kubernetes集群master节点高可用部署

1、执行脚本

脚本执行完成以后，master节点即部署完成

ansible]# ansible-playbook -i rocky/hosts.multi-node  05.kube-master.yml 

PLAY [kube_master] ********************************************************************************************************************************************

TASK [Gathering Facts] ********************************************************************************************************************************************
ok: [192.168.36.152]
ok: [192.168.36.151]

TASK [kube-master : Prepare k8s conf dirs] ********************************************************************************************************************************************
ok: [192.168.36.151] => (item=/etc/kubernetes)
ok: [192.168.36.152] => (item=/etc/kubernetes)
ok: [192.168.36.151] => (item=/etc/kubernetes/pki)
ok: [192.168.36.152] => (item=/etc/kubernetes/pki)

TASK [kube-master : Prepare k8s logs dirs] ********************************************************************************************************************************************
ok: [192.168.36.151]
ok: [192.168.36.152]

TASK [kube-master : Copy kubernetes Cert files] ********************************************************************************************************************************************
ok: [192.168.36.151] => (item=sa.key)
ok: [192.168.36.152] => (item=sa.key)
ok: [192.168.36.152] => (item=sa.pub)
ok: [192.168.36.151] => (item=sa.pub)
ok: [192.168.36.152] => (item=ca.pem)
ok: [192.168.36.151] => (item=ca.pem)
ok: [192.168.36.151] => (item=ca-key.pem)
ok: [192.168.36.152] => (item=ca-key.pem)
ok: [192.168.36.151] => (item=kube-scheduler.pem)
ok: [192.168.36.152] => (item=kube-scheduler.pem)
ok: [192.168.36.151] => (item=kube-scheduler-key.pem)
ok: [192.168.36.152] => (item=kube-scheduler-key.pem)
ok: [192.168.36.151] => (item=kube-controller-manager.pem)
ok: [192.168.36.152] => (item=kube-controller-manager.pem)
ok: [192.168.36.151] => (item=kube-controller-manager-key.pem)
ok: [192.168.36.152] => (item=kube-controller-manager-key.pem)
ok: [192.168.36.151] => (item=apiserver-kubelet-client.pem)
ok: [192.168.36.152] => (item=apiserver-kubelet-client.pem)
ok: [192.168.36.151] => (item=apiserver-kubelet-client-key.pem)
ok: [192.168.36.152] => (item=apiserver-kubelet-client-key.pem)
ok: [192.168.36.151] => (item=tls-192.168.36.151.pem)
ok: [192.168.36.152] => (item=tls-192.168.36.152.pem)
ok: [192.168.36.151] => (item=tls-192.168.36.151-key.pem)
ok: [192.168.36.152] => (item=tls-192.168.36.152-key.pem)
ok: [192.168.36.151] => (item=kube-apiserver-192.168.36.151.pem)
ok: [192.168.36.152] => (item=kube-apiserver-192.168.36.152.pem)
ok: [192.168.36.151] => (item=kube-apiserver-192.168.36.151-key.pem)
ok: [192.168.36.152] => (item=kube-apiserver-192.168.36.152-key.pem)

TASK [kube-master : Copy Front Proxy Cert files] ********************************************************************************************************************************************
ok: [192.168.36.152] => (item=front-proxy-ca.pem)
ok: [192.168.36.151] => (item=front-proxy-ca.pem)
ok: [192.168.36.152] => (item=front-proxy-client.pem)
ok: [192.168.36.151] => (item=front-proxy-client.pem)
ok: [192.168.36.152] => (item=front-proxy-client-key.pem)
ok: [192.168.36.151] => (item=front-proxy-client-key.pem)

TASK [kube-master : Copy Etcd Cert file] ********************************************************************************************************************************************
ok: [192.168.36.152] => (item=etcd-ca.pem)
ok: [192.168.36.151] => (item=etcd-ca.pem)
ok: [192.168.36.152] => (item=etcd-client.pem)
ok: [192.168.36.151] => (item=etcd-client.pem)
ok: [192.168.36.151] => (item=etcd-client-key.pem)
ok: [192.168.36.152] => (item=etcd-client-key.pem)

TASK [kube-master : Copy kube bin] ********************************************************************************************************************************************
ok: [192.168.36.151] => (item=kube-apiserver)
ok: [192.168.36.152] => (item=kube-apiserver)
ok: [192.168.36.151] => (item=kube-scheduler)
ok: [192.168.36.152] => (item=kube-scheduler)
ok: [192.168.36.151] => (item=kube-controller-manager)
ok: [192.168.36.152] => (item=kube-controller-manager)

TASK [kube-master : Copy master service] ********************************************************************************************************************************************
ok: [192.168.36.151] => (item=kube-apiserver)
ok: [192.168.36.152] => (item=kube-apiserver)
ok: [192.168.36.151] => (item=kube-scheduler)
ok: [192.168.36.152] => (item=kube-scheduler)
ok: [192.168.36.151] => (item=kube-controller-manager)
ok: [192.168.36.152] => (item=kube-controller-manager)

TASK [kube-master : Copy master config] ********************************************************************************************************************************************
ok: [192.168.36.151] => (item=scheduler.kubeconfig)
ok: [192.168.36.152] => (item=scheduler.kubeconfig)
ok: [192.168.36.151] => (item=controller-manager.kubeconfig)
ok: [192.168.36.152] => (item=controller-manager.kubeconfig)
ok: [192.168.36.151] => (item=kube-apiserver)
ok: [192.168.36.152] => (item=kube-apiserver)
ok: [192.168.36.151] => (item=kube-scheduler)
ok: [192.168.36.152] => (item=kube-scheduler)
ok: [192.168.36.151] => (item=kube-controller-manager)
ok: [192.168.36.152] => (item=kube-controller-manager)
ok: [192.168.36.151] => (item=audit-policy.yaml)
ok: [192.168.36.152] => (item=audit-policy.yaml)

TASK [kube-master : enable master service] ********************************************************************************************************************************************
ok: [192.168.36.151] => (item=kube-apiserver)
ok: [192.168.36.152] => (item=kube-apiserver)
ok: [192.168.36.151] => (item=kube-scheduler)
ok: [192.168.36.152] => (item=kube-scheduler)
ok: [192.168.36.151] => (item=kube-controller-manager)
ok: [192.168.36.152] => (item=kube-controller-manager)

PLAY RECAP ********************************************************************************************************************************************
192.168.36.151             : ok=10   changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   
192.168.36.152             : ok=10   changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0   

2、检测master服务

登录到其中一master节点，检查规格服务是否正常

~]# systemctl status kube-apiserver
● kube-apiserver.service - Kubernetes API Server
     Loaded: loaded (/etc/systemd/system/kube-apiserver.service; enabled; preset: disabled)
     Active: active (running) since Mon 2023-12-25 13:35:09 CST; 5h 8min ago
       Docs: https://github.com/kubernetes/kubernetes
   Main PID: 891 (kube-apiserver)
      Tasks: 18 (limit: 100297)
     Memory: 426.6M
        CPU: 15min 55.846s
     CGroup: /system.slice/kube-apiserver.service
             └─891 /usr/local/bin/kube-apiserver --v=1 --advertise-address=192.168.36.151 --allow-privileged=true --audit-log-maxage=30 --audit-log-maxbackup=3 --audit-log-maxsize=100 --audit-l>

~]# systemctl status kube-controller-manager
● kube-controller-manager.service - Kubernetes Controller Manager
     Loaded: loaded (/etc/systemd/system/kube-controller-manager.service; enabled; preset: disabled)
     Active: active (running) since Mon 2023-12-25 13:35:09 CST; 5h 8min ago
       Docs: https://github.com/kubernetes/kubernetes
   Main PID: 892 (kube-controller)
      Tasks: 8 (limit: 100297)
     Memory: 141.0M
        CPU: 5min 21.996s
     CGroup: /system.slice/kube-controller-manager.service
             └─892 /usr/local/bin/kube-controller-manager --v=1 --allocate-node-cidrs=true --authentication-kubeconfig=/etc/kubernetes/controller-manager.kubeconfig --authorization-kubeconfig=/>

~]# systemctl status kube-scheduler
● kube-scheduler.service - Kubernetes Scheduler
     Loaded: loaded (/etc/systemd/system/kube-scheduler.service; enabled; preset: disabled)
     Active: active (running) since Mon 2023-12-25 13:35:09 CST; 5h 9min ago
       Docs: https://github.com/kubernetes/kubernetes
   Main PID: 894 (kube-scheduler)
      Tasks: 11 (limit: 100297)
     Memory: 72.3M
        CPU: 1min 6.372s
     CGroup: /system.slice/kube-scheduler.service
             └─894 /usr/local/bin/kube-scheduler --v=1 --authentication-kubeconfig=/etc/kubernetes/scheduler.kubeconfig --authorization-kubeconfig=/etc/kubernetes/scheduler.kubeconfig --kubecon>

2、官方文档参考

kube-apiserver 命令行参数文档

kube-scheduler命令行参数文档

kube-controller-manager 命令行参数文档