实验环境
主机名 | 操作系统 | IP地址 |
---|---|---|
master01 | centos7 | 20.0.0.14 |
nginx01 | centos7 | 20.0.0.15 |
nginx02 | centos7 | 20.0.0.16 |
本次实验基于单节点部署完之后~~~~~~~~
一、master02部署
1、在master01上复制kubernetes目录到master02
[root@master01 ~]# scp -r /opt/kubernetes/ root@20.0.0.14:/opt/
token.csv 100% 84 162.5KB/s 00:00
kube-apiserver 100% 909 1.7MB/s 00:00
kube-scheduler 100% 94 125.4KB/s 00:00
kube-controller-manager 100% 483 951.7KB/s 00:00
kubectl 100% 55MB 103.2MB/s 00:00
kube-controller-manager 100% 155MB 96.3MB/s 00:01
kube-scheduler 100% 55MB 80.9MB/s 00:00
kube-apiserver 100% 184MB 70.0MB/s 00:02
ca-key.pem 100% 1679 2.4MB/s 00:00
ca.pem 100% 1359 1.1MB/s 00:00
server-key.pem 100% 1675 2.0MB/s 00:00
server.pem 100% 1643 2.0MB/s 00:00
- master02验证
[root@master02 ~]# ls /opt/kubernetes/
bin cfg ssl
2、复制master01中的三个组件启动脚本
[root@master01 ~]# scp /usr/lib/systemd/system/{
kube-apiserver,kube-controller-manager,kube-scheduler}.service root@20.0.0.14:/usr/lib/systemd/system
root@20.0.0.14's password:
kube-apiserver.service 100% 282 535.0KB/s 00:00
kube-controller-manager.service 100% 317 589.7KB/s 00:00
kube-scheduler.service 100% 281 385.1KB/s 00:00
3、修改master02配置文件kube-apiserver中的IP
[root@master02 ~]# cd /opt/kubernetes/cfg/
[root@master02 cfg]# ls
kube-apiserver kube-controller-manager kube-scheduler token.csv
[root@master02 cfg]# vi kube-apiserver
KUBE_APISERVER_OPTS="--logtostderr=true \
--v=4 \
--etcd-servers=https://20.0.0.11:2379,https://20.0.0.12:2379,https://20.0.0.13:2379 \
--bind-address=20.0.0.14 \ # 修改成master02 IP地址
--secure-port=6443 \
--advertise-address=20.0.0.14 \ # 修改成master02 IP地址
--allow-privileged=true \
--service-cluster-ip-range=10.0.0.0/24 \
--enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,ResourceQuota,NodeRestriction \
--authorization-mode=RBAC,Node \
--kubelet-https=true \
--enable-bootstrap-token-auth \
--token-auth-file=/opt/kubernetes/cfg/token.csv \
--service-node-port-range=30000-50000 \
--tls-cert-file=/opt/kubernetes/ssl/server.pem \
--tls-private-key-file=/opt/kubernetes/ssl/server-key.pem \
--client-ca-file=/opt/kubernetes/ssl/ca.pem \
--service-account-key-file=/opt/kubernetes/ssl/ca-key.pem \
--etcd-cafile=/opt/etcd/ssl/ca.pem \
--etcd-certfile=/opt/etcd/ssl/server.pem \
--etcd-keyfile=/opt/etcd/ssl/server-key.pem"
4、需要拷贝master01上已有的etcd证书给