在 10.4.7.21 10.4.7.22 上面部署 kube-controller-manager kube-scheduler 不需要签发证书 kube-apiserver kube-controller-manager kube-scheduler 这三个组件部署在同一台服务器上,kube-controller-manager kube-scheduler 找本机的 apiserver 是可以直接走http 协议,不需要证书。如果 apiserver 和这两个组件没有部署在同一台服务器上,这时这两个组件与apiserver通信,也还是需要签发client证书的。 部署kube-controller-manager 创建启动脚本: cd /opt/kubernetes/server/bin/ vim kube-controller-manager.sh #!/bin/sh ./kube-controller-manager \ --cluster-cidr 172.7.0.0/16 \ --leader-elect true \ --log-dir /data/logs/kubernetes/kube-controller-manager \ --master http://127.0.0.1:8080 \ --service-account-private-key-file ./cert/ca-key.pem \ --service-cluster-ip-range 192.168.0.0/16 \ --root-ca-file ./cert/ca.pem \ --v 2 #######+++++++ chmod +x /opt/kubernetes/server/bin/kube-controller-manager.sh mkdir -p /data/logs/kubernetes/kube-controller-manager 配置 supervisor vim /etc/supervisord.d/kube-conntroller-manager.ini [program:kube-controller-manager-7-21] command=/opt/kubernetes/server/bin/kube-controller-manager.sh numprocs=1 directory=/opt/kubernetes/server/bin autostart=true autorestart=true startsecs=30 startretries=3 exitcodes=0,2 stopsignal=QUIT stopwaitsecs=10 user=root redirect_stderr=true stdout_logfile=/data/logs/kubernetes/kube-controller-manager/controller.stdout.log stdout_logfile_maxbytes=64MB stdout_logfile_backups=4 stdout_capture_maxbytes=1MB stdout_events_enabled=false ####++++++ 10.4.7.22supervisorctl update ###########+++++++++ 部署 kube-scheduler (在 10.4.7.21 10.4.7.22 上面部署) 创建启动脚本: cd /opt/kubernetes/server/bin/ vim /opt/kubernetes/server/bin/kube-scheduler.sh #!/bin/sh ./kube-scheduler \ --leader-elect \ --log-dir /data/logs/kubernetes/kube-scheduler \ --master http://127.0.0.1:8080 \ --v 2 chmod +x /opt/kubernetes/server/bin/kube-scheduler.sh mkdir -p /data/logs/kubernetes/kube-scheduler 配置 supervisor vim /etc/supervisord.d/kube-scheduler.ini [program:kube-scheduler-7-21] command=/opt/kubernetes/server/bin/kube-scheduler.sh numprocs=1 directory=/opt/kubernetes/server/bin autostart=true autorestart=true startsecs=30 startretries=3 exitcodes=0,2 stopsignal=QUIT stopwaitsecs=10 user=root redirect_stderr=true stdout_logfile=/data/logs/kubernetes/kube-scheduler/scheduler.stdout.log stdout_logfile_maxbytes=64MB stdout_logfile_backups=4 stdout_capture_maxbytes=1MB stdout_events_enabled=false #######+++++++ 10.4.7.22 kube-scheduler supervisor配置文件
supervisorctl update ########++++++++++
![]()
创建kubectl 工具的软链接 ln -s /opt/kubernetes/server/bin/kubectl /usr/bin/kubectl 检查集群健康状态: kubectl get cs
![]()