2023學(xué)年完整公開(kāi)課版組件安裝3

組件安裝3目錄kubectl安裝創(chuàng)建bootstrap.kubeconfigkube-proxy.kubeconfig2kubectl安裝3將提供的kubectl文件拷貝到/usr/local/bin/目錄，并且賦予執(zhí)行權(quán)限。#cp-pkubectl/usr/local/bin/#chmod+x/usr/local/bin/kubectl設(shè)置集群參數(shù),--server指定Master節(jié)點(diǎn)ip#kubectlconfigset-clusterkubernetes--certificate-authority=/etc/kubernetes/ssl/ca.pem--embed-certs=true--server=0:6443Cluster"kubernetes"set.kubectl安裝4創(chuàng)建/root/.kube/config設(shè)置客戶端認(rèn)證參數(shù)#kubectlconfigset-credentialsadmin--client-certificate=/etc/kubernetes/ssl/admin.pem--embed-certs=true--client-key=/etc/kubernetes/ssl/admin-key.pemUser"admin"set.kubectl安裝5創(chuàng)建/root/.kube/config設(shè)置上下文參數(shù)#kubectlconfigset-contextkubernetes--cluster=kubernetes--user=adminContext"kubernetes"created.kubectl安裝6創(chuàng)建/root/.kube/config#kubectlconfiguse-contextkubernetesSwitchedtocontext"kubernetes".創(chuàng)建bootstrap.kubeconfigkubelet訪問(wèn)kube-apiserver的時(shí)候是通過(guò)bootstrap.kubeconfig進(jìn)行用戶驗(yàn)證。kubectl安裝7生成token變量#exportBOOTSTRAP_TOKEN=$(head-c16/dev/urandom|od-An-tx|tr-d'')創(chuàng)建token.csv文件#vimtoken.csv${BOOTSTRAP_TOKEN},kubelet-bootstrap,10001,"system:kubelet-bootstrap“#mvtoken.csv/etc/kubernetes/kubectl安裝8創(chuàng)建bootstrap.kubeconfig設(shè)置集群參數(shù)#kubectlconfigset-credentialskubelet-bootstrap--token=${BOOTSTRAP_TOKEN}--kubeconfig=bootstrap.kubeconfigUser"kubelet-bootstrap"set.設(shè)置上下文參數(shù)#kubectlconfigset-contextdefault--cluster=kubernetes--user=kubelet-bootstrap--kubeconfig=bootstrap.kubeconfigContext"default"created.kubectl安裝9創(chuàng)建bootstrap.kubeconfig設(shè)置默認(rèn)上下文#kubectlconfiguse-contextdefault--kubeconfig=bootstrap.kubeconfigSwitchedtocontext"default".移動(dòng)位置#mvbootstrap.kubeconfig/etc/kubernetes/創(chuàng)建kube-proxy.kubeconfig10設(shè)置集群參數(shù)#kubectlconfigset-clusterkubernetes--certificate-authority=/etc/kubernetes/ssl/ca.pem--embed-certs=true--server=0:6443--kubeconfig=kube-proxy.kubeconfigCluster"kubernetes"set.創(chuàng)建kube-proxy.kubeconfig11設(shè)置客戶端認(rèn)證參數(shù)#kubectlconfigset-credentialskube-proxy--client-certificate=/etc/kubernetes/ssl/kube-proxy.pem--client-key=/etc/kubernetes/ssl/kube-proxy-key.pem--embed-certs=true--kubeconfig=kube-proxy.kubeconfigUser"kube-proxy"set.創(chuàng)建kube-proxy.kubeconfig12設(shè)置上下文參數(shù)#kubectlconfigset-contextdefault--cluster=kubernetes--user=kube-proxy--kubeconfig=kube-proxy.kubeconfigContext"default"created.創(chuàng)建kube-proxy.kubeconfig13設(shè)置默認(rèn)上下文參數(shù)#kubectlconfiguse-contextdefault--kubeconfig=kube-proxy.kubeconfigSwitchedtocontext"default".拷貝文件#mvkube-proxy.kubeconfig/etc/kubernetes/創(chuàng)建kube-proxy.kubeconfig14設(shè)置集群參數(shù)和客戶端認(rèn)證參數(shù)時(shí)--embed-certs都為true，這會(huì)將certificate-authority、client-certificate和client-key指向的證書文件內(nèi)容寫入到生成的kube-proxy.kubeconfig文件中。創(chuàng)建kube-proxy.kubeconfig15kube-proxy.pem證書中CN為system:kube-proxy，kube-apiserver預(yù)定義的RoleBindingcluster-admin將Usersystem:kube-proxy與Rolesystem:node-proxier綁定，該Role授予了調(diào)用kube-apiserverProxy