編寫Playbook部署Etcd集羣

etcd二進制部署流程：

一、下載二進制包

二、準備https證書

三、準備配置文件，不一樣節點名稱\ip地址

四、systemd管理服務

五、啓動並設置開機啓動

 

[root@k8s-master2 ~]# mkdir ansible-etcd-cluster-deploy

[root@k8s-master2 ~]# cd ansible-etcd-cluster-deploy/

[root@k8s-master2 ansible-etcd-cluster-deploy]# mkdir files

[root@k8s-master2 ansible-etcd-cluster-deploy]# mkdir tls

[root@k8s-master2 ansible-etcd-cluster-deploy]# ll

總用量 0

drwxr-xr-x 2 root root 6 12月 20 21:18 files

drwxr-xr-x 2 root root 6 12月 20 21:19 tls

[root@k8s-master2 ansible-etcd-cluster-deploy]# cd tls/

[root@k8s-master2 tls]# ll

總用量 5732

-rw-r--r-- 1 root root     287 2月  20 2020 ca-config.json.j2

-rw-r--r-- 1 root root     209 2月  20 2020 ca-csr.json.j2

-rw-r--r-- 1 root root 5850685 11月 25 2019 cfssl.tar.gz

-rw-r--r-- 1 root root     517 3月  19 2020 generate_etcd_cert.sh

-rw-r--r-- 1 root root     499 3月   9 2020 server-csr.json.j2

 

[root@k8s-master2 tls]# mkdir cert

[root@k8s-master2 tls]# ls

ca-config.json.j2  ca-csr.json.j2  cert  cfssl.tar.gz  generate_etcd_cert.sh  server-csr.json.j2

[root@k8s-master2 tls]# cd cert/

[root@k8s-master2 cert]# pwd

/root/ansible-etcd-cluster-deploy/tls/cert

 

[root@k8s-master2 ansible-etcd-cluster-deploy]# vim tls.yaml

[root@k8s-master2 ansible-etcd-cluster-deploy]# ll

總用量 0

drwxr-xr-x 2 root root   6 12月 20 21:18 files

drwxr-xr-x 3 root root 140 12月 20 22:03 tls

-rw-r--r-- 1 root root   0 12月 20 22:07 tls.yaml

[root@k8s-master2 ansible-etcd-cluster-deploy]# vim hosts

[root@k8s-master2 ansible-etcd-cluster-deploy]# more hosts 本地執行，本身指定host

[etcd]

192.168.20.41

192.168.20.42

192.168.20.43

[root@k8s-master2 ansible-etcd-cluster-deploy]#

[root@k8s-master2 ansible-etcd-cluster-deploy]# ansible-playbook  -i hosts tls.yaml

[root@k8s-master2 ansible-etcd-cluster-deploy]# cd tls

[root@k8s-master2 tls]# ls

ca-config.json.j2  ca-csr.json.j2  cert  cfssl.tar.gz  generate_etcd_cert.sh  server-csr.json.j2

[root@k8s-master2 tls]# mv ca-config.json.j2 cert/ca-config.json

[root@k8s-master2 tls]# mv ca-csr.json.j2 cert/ca-csr.json

[root@k8s-master2 tls]# cp server-csr.json.j2 cert/

root@k8s-master2 ansible-etcd-cluster-deploy]# ansible-playbook  -i hosts tls.yaml

查看證書是否生成

[root@k8s-master2 ansible-etcd-cluster-deploy]# ls tls/cert/

ca-config.json  ca.csr  ca-csr.json  ca-key.pem  ca.pem  server.csr  server-csr.json  server-key.pem  server.pem

查看是否渲染成功有host的IP

2、配置etcd.yaml

root@k8s-master2 ansible-etcd-cluster-deploy]# ansible-playbook  etcd.yaml