Shulou(Shulou.com)06/02 Report--

Environment:

High availability environment architecture:

Component version:

Software version of Linux operating system CentOS7.5_x64Kubernetes1.12Docker18.xx-ceEtcd3.xFlannel0.10

Server role:

Role IP component master01192.168.1.43kube-apiserver,kube-controller-manager,kube-scheduler etcdmaster02192.168.1.63kube-apiserver,kube-controller-manager,kube-scheduler etcdnode01192.168.1.30kubelet,kube-proxy,docker,flannel,etcdnode02192.168.1.51kubelet,kube-proxy,docker,flannelnode03192.168.1.141kubelet,kube-proxy,docker,flannelLoad Balancer (Master) 192.168.1.31 192.168.1.230 (VIP) Nginx L4Load Balancer (Backup) 192.168.1.186Nginx L4

Self-signed SSL certificate:

Certificate etcdca.pem,server.pem,server-key.pemflannelca.pem,server.pem,server-key.pemkube-apiserverca.pem,server.pem,server-key.pemkubeletca.pem,ca-key.pemkube-proxyca.pem,kube-proxy.pem,kube-proxy-key.pemkubectlca.pem,admin.pem,admin-key.pem used by the component

Preparatory work:

Turn off the firewall: # systemctl stop firewalld & & systemctl disable firewalld synchronization time: (ssl verification time) # yum-y install ntpdate & & ntpdate time.windows.com1. Deploy ETCD Cluster 1.1 install cfsslcurl-L https://pkg.cfssl.org/R1.2/cfssl_linux-amd64-o / usr/local/bin/cfssl # cfssl to generate certificate curl-L https://pkg.cfssl.org/R1.2/cfssljson_linux-amd64-o / usr/local/bin/cfssljson # cfssljson input json file to generate certificate curl-L https://pkg.cfssl.org/R1.2 / cfssl-certinfo_linux-amd64-o / usr/local/bin/cfssl-certinfo # cfssl-cetinfo View generate certificate information chmod + x / usr/local/bin/cfssl / usr/local/bin/cfssljson / usr/local/bin/cfssl-certinfo1.2 generate certificate # mkdir ~ / k8s/etcd-cert-p # cd ~ / k8s/etcd-cert

Ca root certificate:

# cat > ca-config.json

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.