User Tools

Site Tools


система_kubernetes

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
система_kubernetes [2026/06/03 07:33]
val [Отладка etcd]
система_kubernetes [2026/06/07 09:31] (current)
val [Развертывание через Kubespray]
Line 594: Line 594:
 [etcd:​children] [etcd:​children]
 kube_control_plane kube_control_plane
-#[etcd] 
-#kube2 
  
 [kube_node:​children] [kube_node:​children]
 kube_control_plane kube_control_plane
 </​code><​code>​ </​code><​code>​
-server:~# docker run --userns=host --rm -it -v /​root/​inventory/​sample:/​inventory -v /root/.ssh/:/root/.ssh/ quay.io/​kubespray/​kubespray:​v2.29.0 bash+server:~# docker run --userns=host --rm -it -v /​root/​inventory/​sample:/​inventory -v /​root/:/​root/​ quay.io/​kubespray/​kubespray:​v2.29.0 bash
  
 root@cf764ca3b291:/​kubespray#​ ansible all -m ping -i /​inventory/​inventory.ini root@cf764ca3b291:/​kubespray#​ ansible all -m ping -i /​inventory/​inventory.ini
 </​code>​ </​code>​
 +  * [[Сервис Ansible#​Использование ролей]] Ansible для настройки сети
 +
 +  * Может потребоваться
 <​code>​ <​code>​
 root@cf764ca3b291:/​kubespray#​ cp -rv inventory/​sample/​group_vars/​ /inventory/ root@cf764ca3b291:/​kubespray#​ cp -rv inventory/​sample/​group_vars/​ /inventory/
 </​code>​ </​code>​
-  * Может потребоваться ​[[#​Настройка registry-mirrors для Kubespray]] и [[#​Добавление insecure_registries через Kubespray]]+  * [[#​Настройка registry-mirrors для Kubespray]] и [[#​Добавление insecure_registries через Kubespray]] 
 <​code>​ <​code>​
 root@cf764ca3b291:/​kubespray#​ time ansible-playbook -i /​inventory/​inventory.ini cluster.yml root@cf764ca3b291:/​kubespray#​ time ansible-playbook -i /​inventory/​inventory.ini cluster.yml
Line 614: Line 616:
 ... ...
 </​code>​ </​code>​
-=== Удаление вышедшего из строя первого мастер узла ​===+=== Удаление вышедшего из строя ​узла через kubespray === 
 + 
 +<​code>​ 
 +root@3c29190fe4cb:/​kubespray#​ time ansible-playbook -i /​inventory/​inventory.ini remove-node.yml -e "​node=kubeN"​ -e "​reset_nodes=false"​ -e "​allow_ungraceful_removal=true"​ 
 +... yes 
 +</​code>​ 
 + 
 +в случае ​первого мастер узла ​понадобится:​
 <​code>​ <​code>​
 server:~# cat inventory/​sample/​inventory.ini server:~# cat inventory/​sample/​inventory.ini
Line 624: Line 633:
 ... ...
  
-root@3c29190fe4cb:/​kubespray#​ time ansible-playbook -i /​inventory/​inventory.ini remove-node.yml -e "​node=kube1" ​-e "​reset_nodes=false" ​-e "​allow_ungraceful_removal=true"​+... ansible-playbook -i /​inventory/​inventory.ini remove-node.yml ​... 
 + 
 + 
 +kube2:~# kubectl get configmap ​-n kube-system -o yaml | grep X.221 
 +kube2:~# kubectl edit configmap cluster-info -n kube-public 
 +kube2:~# kubectl edit configmap kubeadm-config ​-n kube-system
 </​code>​ </​code>​
  
Line 3059: Line 3073:
 kubeN:~# etcdctl endpoint status -w table \ kubeN:~# etcdctl endpoint status -w table \
   --endpoints=https://​kube1:​2379,​https://​kube2:​2379,​https://​kube3:​2379 \   --endpoints=https://​kube1:​2379,​https://​kube2:​2379,​https://​kube3:​2379 \
-  --cacert=/​etc/​ssl/​etcd/​ssl/​ca.pem \ 
-  --cert=/​etc/​ssl/​etcd/​ssl/​node-kube1.pem \ 
-  --key=/​etc/​ssl/​etcd/​ssl/​node-kube1-key.pem 
- 
-kubeN:~# ###etcdctl member remove nnnnnnnnnnnnn \ 
-  --endpoints=https://​kubeN:​2379 \ 
   --cacert=/​etc/​ssl/​etcd/​ssl/​ca.pem \   --cacert=/​etc/​ssl/​etcd/​ssl/​ca.pem \
   --cert=/​etc/​ssl/​etcd/​ssl/​node-kube1.pem \   --cert=/​etc/​ssl/​etcd/​ssl/​node-kube1.pem \
система_kubernetes.1780461224.txt.gz · Last modified: 2026/06/03 07:33 by val