继续上一篇文章《k8s二进制集群之ETCD集群证书生成》下面介绍一下etcd证书生成配置。
下载etcd安装包
https://github.com/etcd-io/etcd/releases/download/v3.5.9/etcd-v3.5.9-linux-amd64.tar.gz
tar -zxvf etcd-v3.5.9-linux-amd64.tar.gz
本机安装etcd
cp -p etcd-v3.5.9-linux-amd64/etcd* /usr/local/bin/
其它master节点etcd安装
scp -p etcd-v3.5.9-linux-amd64/etcd* eyinfom2:/usr/local/bin/
scp -p etcd-v3.5.9-linux-amd64/etcd* eyinfom3:/usr/local/bin/
创建etcd配置文件
所有master节点都需要配置，需要根据下面配置项说明依次对每个节点做修改；
| ETCD_NAME | 集群中节点名称，保证唯一 |
|---|---|
| ETCD_DATA_DIR | 数据目录 |
| ETCD_LISTEN_PEER_URLS | 集群通信监听地址 |
| ETCD_LISTEN_CLIENT_URLS | 客户端访问监听地址 |
| ETCD_INITIAL_ADVERTISE_PEER_URLS | 客户端集群通信地址 |
| ETCD_ADVERTISE_CLIENT_URLS | 客户端集群访问监听地址 |
| ETCD_INITIAL_CLUSTER | 集群节点地址 |
| ETCD_INITIAL_CLUSTER_TOKEN | 集群token |
| ETCD_INITIAL_CLUSTER_STATE | 加入集群的当前状态：new-新集群；existing-表示加入已有集群 |
Master 1节点配置项
mkdir /etc/etcdcat > /etc/etcd/etcd.conf << "EOF" #[Member] ETCD_NAME="etcd1" ETCD_DATA_DIR="/var/lib/etcd/default.etcd" ETCD_LISTEN_PEER_URLS="https://192.168.3.41:2380" ETCD_LISTEN_CLIENT_URLS="https://192.168.3.41:2379,http://127.0.0.1:2379" #[clustering] ETCD_INITIAL_ADVERTISE_PEER_URLS="https://192.168.3.41:2380" ETCD_ADVERTISE_CLIENT_URLS="https://192.168.3.41:2379" ETCD_INITIAL_CLUSTER="etcd1=https://192.168.3.41:2380,etcd2=https://192.168.3.42:2380,etcd3=https://192.168.3.43:2380" ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster" ETCD_INITIAL_CLUSTER_STATE="new" EOFMaster 2节点配置项