没有合适的资源?快使用搜索试试~ 我知道了~
Kubernetes1.6集群部署完全指南——二进制文件部署开启TLS基于CentOS7
需积分: 14 25 下载量 66 浏览量
2017-10-12
09:36:17
上传
评论
收藏 2.92MB PDF 举报
温馨提示
试读
52页
一步步的部署和解析,非常详细。
资源推荐
资源详情
资源评论
Kubernetes1.6ᵞᗭ᮱ᗟقܖ ——ԭ
CentOS7ԫᬰګොୗ᮱ᗟଚސTLSقᦊᦤ
֢ᘏғ Jimmy Song
GitHubࣈ࣎ғhttps://github.com/rootsongjc/follow-me-install-kubernetes-cluster
Forkᛔғhttps://github.com/opsnull/follow-me-install-kubernetes-cluster
ᇇғV1.0
ᳵғ2017-04-13
Kubernetes1.6ᵞᗭ᮱ᗟقܖ ——ԭCentOS7ԫᬰګොୗ᮱ᗟଚސTLSقᦊᦤ
ڹ
ᵞᗭᧇఘ
ٵ
Ԇᜋړᯈ
᳒؟ٵ
1.ڠୌ kubernetes ݱᕟկ TLS ے᭗מጱᦤԡᑃᰬ
ᤰ !"##$
ڠୌ CA (Certificate Authority)
2.ڠୌ kubernetes ᦤԡ
ڠୌ admin ᦤԡ
ڠୌ kube-proxy ᦤԡ
໊ḵᦤԡ
ֵአ %&'('') ե
ֵአ *+''),*-./0(+% ե
ړݎᦤԡ
݇ᘍ
2.ڠୌ kubeconfig կ
ڠୌ TLS Bootstrapping Token
ڠୌ kubelet bootstrapping kubeconfig կ
ڠୌ kube-proxy kubeconfig կ
ړݎ kubeconfig կ
3.ڠୌṛݢአ etcd ᵞᗭ
TLS ᦊᦤկ
ӥԫᬰګկ
ڠୌ etcd ጱ systemd unit կ
ސۖ etcd ๐ۓ
ḵᦤ๐ۓ
4.ӥᯈᗝ kubectl եᤈૡٍ
ӥ kubectl
ڠୌ kubectl kubeconfig կ
5.᮱ᗟṛݢአ kubernetes master ᵞᗭ
TLS ᦤԡկ
ӥ๋ෛᇇጱԫᬰګկ
ᯈᗝސۖ kube-apiserver
ᯈᗝސۖ kube-controller-manager
ސۖ kube-controller-manager
ᯈᗝސۖ kube-scheduler
ސۖ kube-scheduler
ḵᦤ master ᜓᅩۑᚆ
6.᮱ᗟkubernetes nodeᜓᅩ
ፓ୯կ
ᯈᗝFlanneld
ᤰᯈᗝ kubelet
ӥ๋ෛጱ kubelet kube-proxy ԫᬰګկ
ڠୌ kubelet ጱserviceᯈᗝկ
ސۖkublet
᭗ᬦ kublet ጱ TLS ᦤԡ᧗
ᯈᗝ kube-proxy
ސۖ kube-proxy
ḵᦤၥᦶ
7.ᤰᯈᗝ kubedns ൊկ
ᔮᕹᶼԎጱ RoleBinding
ᯈᗝ kube-dns ServiceAccount
ᯈᗝ 123-,4(' ๐ۓ
ᯈᗝ 123-,4(' Deployment
ಗᤈಅํԎկ
༄ັ kubedns ۑᚆ
8.ᯈᗝᤰ dashboard
ᯈᗝdashboard-service
ᯈᗝdashboard-controller
ಗᤈಅํԎկ
༄ັಗᤈᕮຎ
ᦢᳯdashboard
᭗ᬦ kubectl proxy ᦢᳯ dashboard
᭗ᬦ kube-apiserver ᦢᳯdashboard
9.ᯈᗝᤰ Heapster
ᯈᗝ grafana-deployment
ᯈᗝ heapster-deployment
ᯈᗝ influxdb-deployment
ᯈᗝ monitoring-influxdb Service
ಗᤈಅํԎկ
༄ັಗᤈᕮຎ
ᦢᳯ grafana
ᦢᳯ influxdb admin UI
10.ᯈᗝᤰ EFK
ᯈᗝ es-controller.yaml
ᯈᗝ es-service.yaml
ᯈᗝ fluentd-es-ds.yaml
ᯈᗝ kibana-controller.yaml
ᕳ Node ᦡᗝຽᓋ
ಗᤈԎկ
༄ັಗᤈᕮຎ
ᦢᳯ kibana
ڹ
ᔮڜՕᕨֵአԫᬰګ᮱ᗟ kubernetes ᵞᗭጱಅํྍṈ҅ᘒӧฎֵአ kubeadm ᒵᛔۖ۸ොୗ
᮱ᗟᵞᗭ҅ݶސԧᵞᗭጱTLSقᦊᦤҔ
ࣁ᮱ᗟጱᬦᑕӾ҅ᧇᕡڜڊݱᕟկጱސۖ݇හ҅ᕳڊᯈᗝկ҅ᧇᥴժጱތԎݢᚆ᭬کጱᳯ
᮱ᗟ౮ݸ֦҅ቘᥴᔮᕹݱᕟկጱԻܻቘ҅ᬰᘒᚆள᭛ᥴ٬ᴬᳯ
ಅզԆᥝᭇݳԭᮎԶํӞ kubernetes Ꮠ҅మ᭗ᬦӞྍྍ᮱ᗟጱොୗԟԧᥴᔮᕹᯈ
ᗝᬩᤈܻቘጱՈ
ဳғӾӧ۱ೡdockerᐺํ᳒؟ՙପጱᤰ
ᵞᗭᧇఘ
CentOS 7.2.1511
Docker 1.12.5
Kubernetes 1.6.0
Docker 1.12.5ҁֵአyumᤰ҂
Etcd 3.1.5
Flanneld 0.7 vxlan ᗑᕶ
TLS ᦊᦤ᭗מ (ಅํᕟկ҅ই etcdkubernetes master node)
RBAC ദ
kublet TLS BootStrapping
kubednsdashboardheapster(influxdbgrafana)EFK(elasticsearchfluentdkibana)
ᵞᗭൊկ
ᐺํdocker᳒؟ՙପharborҁ᧗ᛔᤈ᮱ᗟ҅harbor׀ᐶᕚᤰ۱҅ፗളֵአdocker-compose
ސۖܨݢ҂
ٵ
Ԇᜋړᯈ
IP Hostname Roles
172.20.0.112
sz-pg-oam-docker-
hub-
001.tendcloud.com
Harborҁᐺํ᳒؟ՙପ҂
172.20.0.113
sz-pg-oam-docker-
test-
001.tendcloud.com
master node kube-apiserver kube-controller-
manager kube-scheduler kubelet kube-proxy etcd
flannel
172.20.0.114
sz-pg-oam-docker-
test-
002.tendcloud.com
node kubectl kube-proxy flannel etcd
172.20.0.115
sz-pg-oam-docker-
test-
003.tendcloud.com
node kubectl kube-proxy flannel etcd
ဳғ
172.20.0.112֢ԅharborᐺํ᳒؟ՙପ҅ӧ۱ೡharborጱᤰ҅᧗݇
ᘍhttp://github.com/vmware/harborӤጱᛔᤈᤰ
172.20.0.113෬֢ԅmasterԞ֢ԅnode
᳒؟ٵ
Googleො׀ጱkubernetesᕟկ᳒؟ࣁ҅ࢵٖӥํࢯᵙ҅౯ಅํጱ᳒؟ظᵇጱԧӞղනک
ԧ᭛ԯӤ҅զӥلํ᳒؟ݢզፗളֵአғ
index.tenxcloud.com/jimmy/elasticsearch:v2.4.1-2
index.tenxcloud.com/jimmy/fluentd-elasticsearch:1.22
index.tenxcloud.com/jimmy/kibana:v4.6.1-1
index.tenxcloud.com/jimmy/kubernetes-dashboard-amd64:v1.6.0
index.tenxcloud.com/jimmy/heapster-grafana-amd64:v4.0.2
index.tenxcloud.com/jimmy/heapster-amd64:v1.3.0-beta.1
index.tenxcloud.com/jimmy/heapster-influxdb-amd64:v1.1.1
index.tenxcloud.com/jimmy/k8s-dns-kube-dns-amd64:1.14.1
index.tenxcloud.com/jimmy/k8s-dns-dnsmasq-nanny-amd64:1.14.1
index.tenxcloud.com/jimmy/k8s-dns-sidecar-amd64:1.14.1
ဳғ
Ӿֵአጱฎ౯ժጱᐺํ᳒؟ՙପӾጱ᳒؟҅ࣈ࣎ӨӤᬿӧݶ
1.ڠୌ kubernetes ݱᕟկ TLS ے᭗מጱ
ᦤԡᑃᰬ
123-.(-/-' ᔮᕹጱݱᕟկᵱᥝֵአ 5$# ᦤԡ᭗מᬰᤈےֵ҅አ !)%24")6.- ጱ PKI ૡ
ٍᵞ cfssl ኞ౮ Certificate Authority (CA) ٌᦤԡҔ
ኞ౮ጱ CA ᦤԡᑃᰬկইӥғ
ca-key.pem
ca.pem
kubernetes-key.pem
kubernetes.pem
kube-proxy.pem
kube-proxy-key.pem
admin.pem
admin-key.pem
ֵአᦤԡጱᕟկইӥғ
etcdғֵአ ca.pemkubernetes-key.pemkubernetes.pemҔ
kube-apiserverғֵአ ca.pemkubernetes-key.pemkubernetes.pemҔ
kubeletғֵአ ca.pemҔ
kube-proxyғֵአ ca.pemkube-proxy-key.pemkube-proxy.pemҔ
kubectlғֵአ ca.pemadmin-key.pemadmin.pemҔ
123-,*%(/.%))-. 123-,'*7-42)-. ୮ڹᵱᥝ 123-,6&0'-.8-. ᮱ᗟࣁݶӞݣӤӬֵአᶋ
قᒒݗ᭗מ҅ඳӧᵱᥝᦤԡ
ᤰ CFSSL
ොୗӞғፗളֵአԫᬰګრᎱ۱ᤰ
9
ොୗԫғֵአgoեᤰ
:9;<-/97//&'=>>&1<?*+'')?%.<>@A?B>*+'')C)0(2D,6E4FG
:9*7E%49HD9*+'')C)0(2D,6E4FG
:9'24%9E89*+'')C)0(2D,6E4FG9>.%%/>)%*6)>30(>*+'')
:9;<-/97//&'=>>&1<?*+'')?%.<>@A?B>*+'')I'%(C)0(2D,6E4FG
:9*7E%49HD9*+'')I'%(C)0(2D,6E4FG
:9'24%9E89*+'')I'%(C)0(2D,6E4FG9>.%%/>)%*6)>30(>*+'')I'%(
:9;<-/97//&'=>>&1<?*+'')?%.<>@A?B>*+''),*-./0(+%C)0(2D,6E4FG
:9*7E%49HD9*+''),*-./0(+%C)0(2D,6E4FG
:9'24%9E89*+''),*-./0(+%C)0(2D,6E4FG9>.%%/>)%*6)>30(>*+''),*-./0(+%
:9-D&%./9JK5LM>.%%/>)%*6)>30(=:JK5L
剩余51页未读,继续阅读
资源评论
ZJ327101303
- 粉丝: 0
- 资源: 2
上传资源 快速赚钱
- 我的内容管理 展开
- 我的资源 快来上传第一个资源
- 我的收益 登录查看自己的收益
- 我的积分 登录查看自己的积分
- 我的C币 登录后查看C币余额
- 我的收藏
- 我的下载
- 下载帮助
安全验证
文档复制为VIP权益,开通VIP直接复制
信息提交成功