ubuntu16 kubernetes1.6安装(二、创建kubeconfig文件)
2017-12-08 11:29
465 查看
创建kubeconfig文件
kubelet 、 kube-proxy 等 Node 机器上的进程与 Master 机器的 kubeapiserver进程通信时需要认证和授权;
1、创建 TLS Bootstrapping Token
export BOOTSTRAP_TOKEN=$(head -c 16 /dev/urandom | od -An -t x |tr -d ' ')
root@ubuntu132:~/dnsyaml# cat /etc/kubernetes/token.csv
3a272deb721d9dcd30eb0b5d7039174d,kubelet-bootstrap,10001,"system:kubelet-bootstrap"
把BOOTSTRAP_TOKEN值写进去,拷贝到所有节点,进行api认证验证
2、创建 kubelet bootstrapping kubeconfig 文件
root@ubuntu132:~/scripts# cat bootstrapping.sh
#!/bin/bash
cd /etc/kubernetes
export KUBE_APISERVER="https://192.168.15.132:6443"
kubectl config set-cluster kubernetes \
--certificate-authority=/etc/kubernetes/ssl/ca.pem \
--embed-certs=true \
--server=${KUBE_APISERVER} \
--kubeconfig=/etc/kubernetes/bootstrap.kubeconfig
kubectl config set-credentials kubelet-bootstrap \
--token=${BOOTSTRAP_TOKEN} \
--kubeconfig=/etc/kubernetes/bootstrap.kubeconfig
kubectl config set-context default \
--cluster=kubernetes \
--user=kubelet-bootstrap \
--kubeconfig=/etc/kubernetes/bootstrap.kubeconfig
3、创建 kube-proxy kubeconfig 文件
root@ubuntu132:~/scripts# cat kube-proxy-config.sh
#!/bin/bash
kubectl config set-cluster kubernetes --certificate-authority=/etc/kubernetes/ssl/ca.pem --embed-certs=true --server=${KUBE_APISERVER} --kubeconfig=/etc/kuernetes/kube-proxy.kubeconfig
kubectl config set-credentials kube-proxy --client-certificate=/etc/kubernetes/ssl/kube-proxy.pem --client-key=/etc/kubernetes/ssl/kube-proxy-key.pem --embed-certs=true --kubeconfig=/etc/kubernetes/kube-proxy.kubeconfig
kubectl config set-context default \
--cluster=kubernetes \
--user=kube-proxy \
--kubeconfig=/etc/kubernetes/kube-proxy.kubeconfig
kubectl config use-context default --kubeconfig=/etc/kubernetes/kube-proxy.kubeconfig
cp bootstrap.kubeconfig kube-proxy.kubeconfig /etc/kubernetes/ 拷贝到所有节点
kubelet 、 kube-proxy 等 Node 机器上的进程与 Master 机器的 kubeapiserver进程通信时需要认证和授权;
1、创建 TLS Bootstrapping Token
export BOOTSTRAP_TOKEN=$(head -c 16 /dev/urandom | od -An -t x |tr -d ' ')
root@ubuntu132:~/dnsyaml# cat /etc/kubernetes/token.csv
3a272deb721d9dcd30eb0b5d7039174d,kubelet-bootstrap,10001,"system:kubelet-bootstrap"
把BOOTSTRAP_TOKEN值写进去,拷贝到所有节点,进行api认证验证
2、创建 kubelet bootstrapping kubeconfig 文件
root@ubuntu132:~/scripts# cat bootstrapping.sh
#!/bin/bash
cd /etc/kubernetes
export KUBE_APISERVER="https://192.168.15.132:6443"
kubectl config set-cluster kubernetes \
--certificate-authority=/etc/kubernetes/ssl/ca.pem \
--embed-certs=true \
--server=${KUBE_APISERVER} \
--kubeconfig=/etc/kubernetes/bootstrap.kubeconfig
kubectl config set-credentials kubelet-bootstrap \
--token=${BOOTSTRAP_TOKEN} \
--kubeconfig=/etc/kubernetes/bootstrap.kubeconfig
kubectl config set-context default \
--cluster=kubernetes \
--user=kubelet-bootstrap \
--kubeconfig=/etc/kubernetes/bootstrap.kubeconfig
3、创建 kube-proxy kubeconfig 文件
root@ubuntu132:~/scripts# cat kube-proxy-config.sh
#!/bin/bash
kubectl config set-cluster kubernetes --certificate-authority=/etc/kubernetes/ssl/ca.pem --embed-certs=true --server=${KUBE_APISERVER} --kubeconfig=/etc/kuernetes/kube-proxy.kubeconfig
kubectl config set-credentials kube-proxy --client-certificate=/etc/kubernetes/ssl/kube-proxy.pem --client-key=/etc/kubernetes/ssl/kube-proxy-key.pem --embed-certs=true --kubeconfig=/etc/kubernetes/kube-proxy.kubeconfig
kubectl config set-context default \
--cluster=kubernetes \
--user=kube-proxy \
--kubeconfig=/etc/kubernetes/kube-proxy.kubeconfig
kubectl config use-context default --kubeconfig=/etc/kubernetes/kube-proxy.kubeconfig
cp bootstrap.kubeconfig kube-proxy.kubeconfig /etc/kubernetes/ 拷贝到所有节点
相关文章推荐
- ubuntu16 kubernetes1.6安装(六、node节点部署)
- ubuntu16 kubernetes1.6安装(三、etcd、flannel)
- ubuntu16 kubernetes1.6安装(四、kubectl安装)
- ubuntu16 kubernetes1.6安装(七、kubedns安装)
- ubuntu16 kubernetes1.6安装(五、master节点安装)
- ubuntu16.04 编译安装kubernetes1.6
- VMware 12 Pro虚拟机安装Ubuntu 16操作系统,选择创建新的虚拟机操作后无反应
- ubuntu 16.04 kubernetes1.6安装(一k8s证书)
- 在32位Windows XP的VMWare里安装64位Ubuntu Linux/JDK1.6
- ubuntu16上安装openJDK.md
- Hadoop安装教程_单机/伪分布式配置_Hadoop2.8.0/Ubuntu16
- Ubuntu10下JDK1.6安装
- UBUNTU16.10安装Boost1.6
- ubuntu16 python3.5安装pygame
- ubuntu安装jdk1.6
- ubuntu16 caffe安装+测试(cpu)
- Ubuntu16安装mysql、mongodb、redis、apache
- ubuntu16 tomcat7安装和编码修改
- 在win7上安装Ubuntu16.10时没有设置root密码,不知Linux系统root密码时怎么办?
- ubuntu 16 安装VMware-tools