kubernetes

etcd3.2.12

flanneld0.9.1

docker17.09.0-ce

vim /etc/hosts

10.10.20.60 k8s-master

10.10.20.61 k8s-node1

10.10.20.62 k8s-node2

vm.swappiness=0

EOF

modprobe br_netfilter

echo "modprobe br_netfilter" >> /etc/rc.local

sysctl -p /etc/sysctl.d/k8s.conf

setenforce 0

sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

/sbin/iptables -P FORWARD ACCEPT

echo "sleep 60 && /sbin/iptables -P FORWARD ACCEPT" >> /etc/rc.local

yum install -y epel-release

yum install -y yum-utils device-mapper-persistent-data lvm2 net-tools conntrack-tools wget

chmod +x cfssljson_linux-amd64

sudo mv cfssljson_linux-amd64 /usr/local/bin/cfssljson

wget https://pkg.cfssl.org/R1.2/cfssl-certinfo_linux-amd64

chmod +x cfssl-certinfo_linux-amd64

sudo mv cfssl-certinfo_linux-amd64 /usr/local/bin/cfssl-certinfo

export PATH=/usr/local/bin:$PATH

mkdir /root/ssl

cd /root/ssl

cat > ca-config.json << EOF

"kubernetes": {

"usages": [

"signing",

"key encipherment",

"server auth",

"client auth"

],

"expiry": "8760h"

}

}

}

}

cat > ca-csr.json << EOF

{

"CN": "kubernetes",

"key": {

"size": 2048

},

"names": [

{

"C": "CN",

"ST": "ChengDu",

EOF

cfssl gencert -initca ca-csr.json | cfssljson -bare ca

cat > kubernetes-csr.json << EOF

{

"CN": "kubernetes",

"kubernetes",