1. 首页
  2. 文章中心
  3. kubernetes/docker

部署 etcd 3 节点集群1. 准备csr文件2. 准备签名配置文件3.生成etcd证书和私钥(已事先准备好ca证书和私钥)4. 把证书分发到各个节点的/etc/etcd，创建/var/lib/etcd目录5. 在3个节点启动etcd6. 查看成员状态7. 查看endpoint状态8. 备份etcd， 只能备份一个结点9. 查看备份

77 阅读 0 评论
我是靠谱客的博主 明理麦片，这篇文章主要介绍部署 etcd 3 节点集群1. 准备csr文件2. 准备签名配置文件3.生成etcd证书和私钥(已事先准备好ca证书和私钥)4. 把证书分发到各个节点的/etc/etcd，创建/var/lib/etcd目录5. 在3个节点启动etcd6. 查看成员状态7. 查看endpoint状态8. 备份etcd， 只能备份一个结点9. 查看备份，现在分享给大家，希望可以做个参考。

1. 准备csr文件

etcd-csr.json

复制代码
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
{
  "CN": "etcd",
  "hosts": [
    "127.0.0.1",
    "192.168.220.121",
    "192.168.220.122",
    "192.168.220.123"
  ],
  "key": {
    "algo": "rsa",
    "size": 2048
  },
  "names": [
    {
      "CN": "CN",
      "ST": "BeiJing",
      "O": "k8s",
      "OU": "yngwie",
      "L": "BeiJing"
    }
  ]
}

2. 准备签名配置文件

ca-config.json

复制代码
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
{
  "signing": {
    "default": {
      "expiry": "87600h"
  },
  "profiles": {
    "k8s": {
      "usages": [
          "signing",
          "key encipherment",
          "server auth",
          "client auth"
        ],
        "expiry": "876000h"
      }
    }
  }
}

3.生成etcd证书和私钥(已事先准备好ca证书和私钥)

复制代码
1
2
3
4
5
$ cfssl gencert -ca=ca.crt 
-ca-key=ca.key 
-config=ca-config.json 
-profile=k8s etcd-csr.json | cfssljson -bare etcd

4. 把证书分发到各个节点的/etc/etcd，创建/var/lib/etcd目录

5. 在3个节点启动etcd

复制代码
1
2
3
4
5
6
./etcd --advertise-client-urls=https://192.168.220.121:2479 --cert-file=etcd.pem --client-cert-auth=true --data-dir=/var/lib/etcd1 --initial-advertise-peer-urls=https://192.168.220.121:2480 --initial-cluster=e1=https://192.168.220.121:2480,e2=https://192.168.220.122:2480,e3=https://192.168.220.123:2480 --key-file=etcd-key.pem --listen-client-urls=https://127.0.0.1:2479,https://192.168.220.121:2479 --listen-metrics-urls=http://127.0.0.1:2481 --listen-peer-urls=https://192.168.220.121:2480 --peer-cert-file=etcd.pem --peer-client-cert-auth=true --peer-key-file=etcd-key.pem --peer-trusted-ca-file=ca.crt --snapshot-count=10000 --trusted-ca-file=ca.crt --name=e1

./etcd --advertise-client-urls=https://192.168.220.122:2479 --cert-file=etcd.pem --client-cert-auth=true --data-dir=/var/lib/etcd --initial-advertise-peer-urls=https://192.168.220.122:2480 --initial-cluster=e1=https://192.168.220.121:2480,e2=https://192.168.220.122:2480,e3=https://192.168.220.123:2480 --key-file=etcd-key.pem --listen-client-urls=https://127.0.0.1:2479,https://192.168.220.122:2479 --listen-metrics-urls=http://127.0.0.1:2481 --listen-peer-urls=https://192.168.220.122:2480 --peer-cert-file=etcd.pem --peer-client-cert-auth=true --peer-key-file=etcd-key.pem --peer-trusted-ca-file=ca.crt --snapshot-count=10000 --trusted-ca-file=ca.crt --name=e2

./etcd --advertise-client-urls=https://192.168.220.123:2479 --cert-file=etcd.pem --client-cert-auth=true --data-dir=/var/lib/etcd --initial-advertise-peer-urls=https://192.168.220.123:2480 --initial-cluster=e1=https://192.168.220.121:2480,e2=https://192.168.220.122:2480,e3=https://192.168.220.123:2480 --key-file=etcd-key.pem --listen-client-urls=https://127.0.0.1:2479,https://192.168.220.123:2479 --listen-metrics-urls=http://127.0.0.1:2481 --listen-peer-urls=https://192.168.220.123:2480 --peer-cert-file=etcd.pem --peer-client-cert-auth=true --peer-key-file=etcd-key.pem --peer-trusted-ca-file=ca.crt --snapshot-count=10000 --trusted-ca-file=ca.crt --name=e3

6. 查看成员状态

复制代码
1
2
3
4
5
6
$ ./etcdctl --cacert=ca.crt --cert=etcd.pem --key=etcd-key.pem --endpoints=https://192.168.220.121:2479,https://192.168.220.122:2479,https://192.168.220.123:2479 member list

233107b54f466600, started, e2, https://192.168.220.122:2480, https://192.168.220.122:2479, false
68510ebb26e5951d, started, e3, https://192.168.220.123:2480, https://192.168.220.123:2479, false
a8ed76fdaaccdbca, started, e1, https://192.168.220.121:2480, https://192.168.220.121:2479, false

7. 查看endpoint状态

复制代码
1
2
3
4
5
6
7
8
9
$ ./etcdctl --cacert=ca.crt --cert=etcd.pem --key=etcd-key.pem --endpoints=https://192.168.220.121:2479,https://192.168.220.122:2479,https://192.168.220.123:2479 endpoint status --write-out=table
+------------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+
|           ENDPOINT           |        ID        | VERSION | DB SIZE | IS LEADER | IS LEARNER | RAFT TERM | RAFT INDEX | RAFT APPLIED INDEX | ERRORS |
+------------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+
| https://192.168.220.121:2479 | a8ed76fdaaccdbca |   3.4.0 |   20 kB |     false |      false |        47 |         19 |                 19 |        |
| https://192.168.220.122:2479 | 233107b54f466600 |   3.4.0 |   20 kB |      true |      false |        47 |         19 |                 19 |        |
| https://192.168.220.123:2479 | 68510ebb26e5951d |   3.4.0 |   29 kB |     false |      false |        47 |         19 |                 19 |        |
+------------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+

8. 备份etcd， 只能备份一个结点

复制代码
1
2
3
4
5
6
7
8
$ ./etcdctl --cacert=ca.crt --cert=etcd.pem --key=etcd-key.pem --endpoints=https://192.168.220.122:2479 snapshot save snapshot-etcd
{"level":"info","ts":1591772525.710396,"caller":"snapshot/v3_snapshot.go:109","msg":"created temporary db file","path":"snapshot-etcd.part"}
{"level":"warn","ts":"2020-06-10T15:02:05.716+0800","caller":"clientv3/retry_interceptor.go:116","msg":"retry stream intercept"}
{"level":"info","ts":1591772525.7161868,"caller":"snapshot/v3_snapshot.go:120","msg":"fetching snapshot","endpoint":"https://192.168.220.122:2479"}
{"level":"info","ts":1591772525.7202048,"caller":"snapshot/v3_snapshot.go:133","msg":"fetched snapshot","endpoint":"https://192.168.220.122:2479","took":0.009444471}
{"level":"info","ts":1591772525.7204468,"caller":"snapshot/v3_snapshot.go:142","msg":"saved","path":"snapshot-etcd"}
Snapshot saved at snapshot-etcd

9. 查看备份

复制代码
1
2
3
4
5
6
7
$ ./etcdctl --cacert=ca.crt --cert=etcd.pem --key=etcd-key.pem --endpoints=https://192.168.220.123:2479 snapshot status snapshot-etcd --write-out=table
+----------+----------+------------+------------+
|   HASH   | REVISION | TOTAL KEYS | TOTAL SIZE |
+----------+----------+------------+------------+
| b3c3a9a5 |        2 |          7 |      20 kB |
+----------+----------+------------+------------+

最后

以上就是明理麦片最近收集整理的关于部署 etcd 3 节点集群1. 准备csr文件2. 准备签名配置文件3.生成etcd证书和私钥(已事先准备好ca证书和私钥)4. 把证书分发到各个节点的/etc/etcd，创建/var/lib/etcd目录5. 在3个节点启动etcd6. 查看成员状态7. 查看endpoint状态8. 备份etcd， 只能备份一个结点9. 查看备份的全部内容，更多相关部署内容请搜索靠谱客的其他文章。

本图文内容来源于网友提供，作为学习参考使用，或来自网络收集整理，版权属于原作者所有。
点赞(51)

相关文章

etcd系列-----raft协议：理论基础篇（二）-------日志复制
etcd系列-----raft协议：理论基础篇（二）-------日志复制
ETCD可视化工具（Etcdkeeper）部署
ETCD可视化工具（Etcdkeeper）部署
K8S ETCD Keeper
K8S ETCD Keeper
k8s的单节点部署etcd数据库一、概述二、K8S单节点部署
k8s的单节点部署etcd数据库一、概述二、K8S单节点部署
部署 etcd 3 节点集群1. 准备csr文件2. 准备签名配置文件3.生成etcd证书和私钥(已事先准备好ca证书和私钥)4. 把证书分发到各个节点的/etc/etcd，创建/var/lib/etcd目录5. 在3个节点启动etcd6. 查看成员状态7. 查看endpoint状态8. 备份etcd， 只能备份一个结点9. 查看备份
部署 etcd 3 节点集群1. 准备csr文件2. 准备签名配置文件3.生成etcd证书和私钥(已事先准备好ca证书和私钥)4. 把证书分发到各个节点的/etc/etcd，创建/var/lib/etcd目录5. 在3个节点启动etcd6. 查看成员状态7. 查看endpoint状态8. 备份etcd， 只能备份一个结点9. 查看备份
使用docker-compose在单节点上运行etcd集群
使用docker-compose在单节点上运行etcd集群
认识kubernetes（k8s），k8s单节点etcd部署一、k8s概述二、单节点etcd部署
认识kubernetes（k8s），k8s单节点etcd部署一、k8s概述二、单节点etcd部署
etcd静态集群部署(Centos 3节点)
etcd静态集群部署(Centos 3节点)

评论列表共有 0 条评论

立即
投稿
返回
顶部