2023学年完整公开课版组件安装3

组件安装3目录kubectl安装创建bootstrap.kubeconfigkube-proxy.kubeconfig2kubectl安装3将提供的kubectl文件拷贝到/usr/local/bin/目录，并且赋予执行权限。#cp-pkubectl/usr/local/bin/#chmod+x/usr/local/bin/kubectl设置集群参数,--server指定Master节点ip#kubectlconfigset-clusterkubernetes--certificate-authority=/etc/kubernetes/ssl/ca.pem--embed-certs=true--server=0:6443Cluster"kubernetes"set.kubectl安装4创建/root/.kube/config设置客户端认证参数#kubectlconfigset-credentialsadmin--client-certificate=/etc/kubernetes/ssl/admin.pem--embed-certs=true--client-key=/etc/kubernetes/ssl/admin-key.pemUser"admin"set.kubectl安装5创建/root/.kube/config设置上下文参数#kubectlconfigset-contextkubernetes--cluster=kubernetes--user=adminContext"kubernetes"created.kubectl安装6创建/root/.kube/config#kubectlconfiguse-contextkubernetesSwitchedtocontext"kubernetes".创建bootstrap.kubeconfigkubelet访问kube-apiserver的时候是通过bootstrap.kubeconfig进行用户验证。kubectl安装7生成token变量#exportBOOTSTRAP_TOKEN=$(head-c16/dev/urandom|od-An-tx|tr-d'')创建token.csv文件#vimtoken.csv${BOOTSTRAP_TOKEN},kubelet-bootstrap,10001,"system:kubelet-bootstrap“#mvtoken.csv/etc/kubernetes/kubectl安装8创建bootstrap.kubeconfig设置集群参数#kubectlconfigset-credentialskubelet-bootstrap--token=${BOOTSTRAP_TOKEN}--kubeconfig=bootstrap.kubeconfigUser"kubelet-bootstrap"set.设置上下文参数#kubectlconfigset-contextdefault--cluster=kubernetes--user=kubelet-bootstrap--kubeconfig=bootstrap.kubeconfigContext"default"created.kubectl安装9创建bootstrap.kubeconfig设置默认上下文#kubectlconfiguse-contextdefault--kubeconfig=bootstrap.kubeconfigSwitchedtocontext"default".移动位置#mvbootstrap.kubeconfig/etc/kubernetes/创建kube-proxy.kubeconfig10设置集群参数#kubectlconfigset-clusterkubernetes--certificate-authority=/etc/kubernetes/ssl/ca.pem--embed-certs=true--server=0:6443--kubeconfig=kube-proxy.kubeconfigCluster"kubernetes"set.创建kube-proxy.kubeconfig11设置客户端认证参数#kubectlconfigset-credentialskube-proxy--client-certificate=/etc/kubernetes/ssl/kube-proxy.pem--client-key=/etc/kubernetes/ssl/kube-proxy-key.pem--embed-certs=true--kubeconfig=kube-proxy.kubeconfigUser"kube-proxy"set.创建kube-proxy.kubeconfig12设置上下文参数#kubectlconfigset-contextdefault--cluster=kubernetes--user=kube-proxy--kubeconfig=kube-proxy.kubeconfigContext"default"created.创建kube-proxy.kubeconfig13设置默认上下文参数#kubectlconfiguse-contextdefault--kubeconfig=kube-proxy.kubeconfigSwitchedtocontext"default".拷贝文件#mvkube-proxy.kubeconfig/etc/kubernetes/创建kube-proxy.kubeconfig14设置集群参数和客户端认证参数时--embed-certs都为true，这会将certificate-authority、client-certificate和client-key指向的证书文件内容写入到生成的kube-proxy.kubeconfig文件中。创建kube-proxy.kubeconfig15kube-proxy.pem证书中CN为system:kube-proxy，kube-apiserver预定义的RoleBindingcluster-admin将Usersystem:kube-proxy与Rolesystem:node-proxier绑定，该Role授予了调用kube-apiserverProxy