{"id":5431,"date":"2020-08-18T15:40:40","date_gmt":"2020-08-18T07:40:40","guid":{"rendered":"http:\/\/39.97.231.10\/?p=5431"},"modified":"2020-08-18T15:40:40","modified_gmt":"2020-08-18T07:40:40","slug":"kubernetes-v1-15-%e4%ba%8c%e8%bf%9b%e5%88%b6%e9%83%a8%e7%bd%b2%e9%9b%86%e7%be%a4","status":"publish","type":"post","link":"http:\/\/www.weijing.co\/?p=5431","title":{"rendered":"Kubernetes V1.15 \u4e8c\u8fdb\u5236\u90e8\u7f72\u96c6\u7fa4"},"content":{"rendered":"<div id=\\\"primary\\\" class=\\\"content-area\\\"><main id=\\\"main\\\" class=\\\"site-main\\\" role=\\\"main\\\"><\/p>\n<article id=\\\"post-1517\\\" class=\\\"post-1517 post type-post status-publish format-standard hentry category-linux-devops category-cloud category-acl category-virt ury\\\">\n<header class=\\\"entry-header\\\"><\/header>\n<div>\n<div><\/div>\n<div>\n<div id=\\\"log-box\\\">\n<div id=\\\"catalog\\\">\n<ul id=\\\"catalog-ul\\\">\n<li>\u00a0<a title=\\\"3.1.1 \u8bbe\u7f6e\u5173\u95ed\u9632\u706b\u5899\u53caSELINUX\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-0\\\">3.1.1 \u8bbe\u7f6e\u5173\u95ed\u9632\u706b\u5899\u53caSELINUX<\/a><\/li>\n<li>\u00a0<a title=\\\"3.1.2 \u5173\u95edswap\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-1\\\">3.1.2 \u5173\u95edswap<\/a><\/li>\n<li>\u00a0<a title=\\\"3.1.3 \u8bbe\u7f6eDocker\u6240\u9700\u53c2\u6570\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-2\\\">3.1.3 \u8bbe\u7f6eDocker\u6240\u9700\u53c2\u6570<\/a><\/li>\n<li>\u00a0<a title=\\\"3.1.4 \u5b89\u88c5 Docker\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-3\\\">3.1.4 \u5b89\u88c5 Docker<\/a><\/li>\n<li>\u00a0<a title=\\\"3.1.5 \u521b\u5efa\u76f8\u5173\u76ee\u5f55\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-4\\\">3.1.5 \u521b\u5efa\u76f8\u5173\u76ee\u5f55<\/a><\/li>\n<li>\u00a0<a title=\\\"3.1.6 SSH \u4e92\u4fe1\u914d\u7f6e\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-5\\\">3.1.6 SSH \u4e92\u4fe1\u914d\u7f6e<\/a><\/li>\n<li>\u00a0<a title=\\\"3.1.7 \u6dfb\u52a0 PATH \u53d8\u91cf\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-6\\\">3.1.7 \u6dfb\u52a0 PATH \u53d8\u91cf<\/a><\/li>\n<li>\u00a0<a title=\\\"3.2.1 \u5b89\u88c5\u53ca\u914d\u7f6eCFSSL\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-7\\\">3.2.1 \u5b89\u88c5\u53ca\u914d\u7f6eCFSSL<\/a><\/li>\n<li>\u00a0<a title=\\\"3.2.2 \u521b\u5efa ETCD \u76f8\u5173\u8bc1\u4e66\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-8\\\">3.2.2 \u521b\u5efa ETCD \u76f8\u5173\u8bc1\u4e66<\/a><\/li>\n<li>\u00a0<a title=\\\"3.2.3 \u521b\u5efa Kubernetes \u76f8\u5173\u8bc1\u4e66\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-9\\\">3.2.3 \u521b\u5efa Kubernetes \u76f8\u5173\u8bc1\u4e66<\/a><\/li>\n<li>\u00a0<a title=\\\"3.3.1 \u914d\u7f6e\u8f6f\u4ef6\u5305\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-10\\\">3.3.1 \u914d\u7f6e\u8f6f\u4ef6\u5305<\/a><\/li>\n<li>\u00a0<a title=\\\"3.3.2 \u7f16\u8f91etcd\u914d\u7f6e\u6587\u4ef6\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-11\\\">3.3.2 \u7f16\u8f91etcd\u914d\u7f6e\u6587\u4ef6<\/a><\/li>\n<li>\u00a0<a title=\\\"3.3.3 \u521b\u5efa etcd\u7684 systemd unit \u6587\u4ef6\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-12\\\">3.3.3 \u521b\u5efa etcd\u7684 systemd unit \u6587\u4ef6<\/a><\/li>\n<li>\u00a0<a title=\\\"3.3.4 \u914d\u7f6e\u8bc1\u4e66\u6587\u4ef6\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-13\\\">3.3.4 \u914d\u7f6e\u8bc1\u4e66\u6587\u4ef6<\/a><\/li>\n<li>\u00a0<a title=\\\"3.3.5 \u914d\u7f6e\u6587\u4ef6\u62f7\u8d1d\u5230 \u8282\u70b91\u3001\u8282\u70b92\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-14\\\">3.3.5 \u914d\u7f6e\u6587\u4ef6\u62f7\u8d1d\u5230 \u8282\u70b91\u3001\u8282\u70b92<\/a><\/li>\n<li>\u00a0<a title=\\\"3.3.6 \u542f\u52a8ETCD\u670d\u52a1\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-15\\\">3.3.6 \u542f\u52a8ETCD\u670d\u52a1<\/a><\/li>\n<li>\u00a0<a title=\\\"3.3.7 \u68c0\u67e5\u670d\u52a1\u662f\u5426\u6b63\u5e38\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-16\\\">3.3.7 \u68c0\u67e5\u670d\u52a1\u662f\u5426\u6b63\u5e38<\/a><\/li>\n<li>\u00a0<a title=\\\"3.4.1 \u5411 etcd \u5199\u5165\u96c6\u7fa4 Pod \u7f51\u6bb5\u4fe1\u606f\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-17\\\">3.4.1 \u5411 etcd \u5199\u5165\u96c6\u7fa4 Pod \u7f51\u6bb5\u4fe1\u606f<\/a><\/li>\n<li>\u00a0<a title=\\\"3.4.2 \u90e8\u7f72 flannel\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-18\\\">3.4.2 \u90e8\u7f72 flannel<\/a><\/li>\n<li>\u00a0<a title=\\\"3.5.3 \u914d\u7f6eflannel\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-19\\\">3.5.3 \u914d\u7f6eflannel<\/a><\/li>\n<li>\u00a0<a title=\\\"3.5.4 \u521b\u5efa flanneld \u7684 systemd unit \u6587\u4ef6\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-20\\\">3.5.4 \u521b\u5efa flanneld \u7684 systemd unit \u6587\u4ef6<\/a><\/li>\n<li>\u00a0<a title=\\\"3.5.5 \u914d\u7f6eDocker\u542f\u52a8\u6307\u5b9a\u5b50\u7f51\u6bb5\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-21\\\">3.5.5 \u914d\u7f6eDocker\u542f\u52a8\u6307\u5b9a\u5b50\u7f51\u6bb5<\/a><\/li>\n<li>\u00a0<a title=\\\"3.5.6 \u5c06flanneld systemd unit \u6587\u4ef6\u5230\u6240\u6709\u8282\u70b9\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-22\\\">3.5.6 \u5c06flanneld systemd unit \u6587\u4ef6\u5230\u6240\u6709\u8282\u70b9<\/a><\/li>\n<li>\u00a0<a title=\\\"3.5.7 \u9a8c\u8bc1fannel\u7f51\u7edc\u914d\u7f6e\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-23\\\">3.5.7 \u9a8c\u8bc1fannel\u7f51\u7edc\u914d\u7f6e<\/a><\/li>\n<li>\u00a0<a title=\\\"3.5.1  \u914d\u7f6e master \u8282\u70b9\u6587\u4ef6\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-24\\\">3.5.1 \u914d\u7f6e master \u8282\u70b9\u6587\u4ef6<\/a><\/li>\n<li>\u00a0<a title=\\\"3.5.2 \u914d\u7f6e kubernetes\u76f8\u5173\u8bc1\u4e66\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-25\\\">3.5.2 \u914d\u7f6e kubernetes\u76f8\u5173\u8bc1\u4e66<\/a><\/li>\n<li>\u00a0<a title=\\\"3.5.3 \u90e8\u7f72 kube-apiserver \u7ec4\u4ef6\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-26\\\">3.5.3 \u90e8\u7f72 kube-apiserver \u7ec4\u4ef6<\/a><\/li>\n<li>\u00a0<a title=\\\"3.5.4 \u90e8\u7f72kube-scheduler\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-27\\\">3.5.4 \u90e8\u7f72kube-scheduler<\/a><\/li>\n<li>\u00a0<a title=\\\"3.5.5 \u90e8\u7f72kube-controller-manager\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-28\\\">3.5.5 \u90e8\u7f72kube-controller-manager<\/a><\/li>\n<li>\u00a0<a title=\\\"3.5.6 \u67e5\u770bmaster\u96c6\u7fa4\u72b6\u6001\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-29\\\">3.5.6 \u67e5\u770bmaster\u96c6\u7fa4\u72b6\u6001<\/a><\/li>\n<li>\u00a0<a title=\\\"3.6.1 \u90e8\u7f72 kubelet \u7ec4\u4ef6\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-30\\\">3.6.1 \u90e8\u7f72 kubelet \u7ec4\u4ef6<\/a><\/li>\n<li>\u00a0<a title=\\\"3.6.2 \u521b\u5efakubelet \u53c2\u6570\u914d\u7f6e\u6587\u4ef6\u62f7\u8d1d\u5230\u6240\u6709 nodes\u8282\u70b9\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-31\\\">3.6.2 \u521b\u5efakubelet \u53c2\u6570\u914d\u7f6e\u6587\u4ef6\u62f7\u8d1d\u5230\u6240\u6709 nodes\u8282\u70b9<\/a><\/li>\n<li>\u00a0<a title=\\\"3.6.3 \u542f\u52a8kubelet\u670d\u52a1\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-32\\\">3.6.3 \u542f\u52a8kubelet\u670d\u52a1<\/a><\/li>\n<li>\u00a0<a title=\\\"3.6.4 approve kubelet CSR \u8bf7\u6c42\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-33\\\">3.6.4 approve kubelet CSR \u8bf7\u6c42<\/a><\/li>\n<li>\u00a0<a title=\\\"3.6.5 \u67e5\u770b\u96c6\u7fa4\u72b6\u6001\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-34\\\">3.6.5 \u67e5\u770b\u96c6\u7fa4\u72b6\u6001<\/a><\/li>\n<li>\u00a0<a title=\\\"3.7.1 \u521b\u5efakube-proxy\u914d\u7f6e\u6587\u4ef6\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-35\\\">3.7.1 \u521b\u5efakube-proxy\u914d\u7f6e\u6587\u4ef6<\/a><\/li>\n<li>\u00a0<a title=\\\"3.7.2 \u521b\u5efakube-proxy systemd unit \u6587\u4ef6\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-36\\\">3.7.2 \u521b\u5efakube-proxy systemd unit \u6587\u4ef6<\/a><\/li>\n<li>\u00a0<a title=\\\"3.7.3 \u542f\u52a8kube-proxy\u670d\u52a1\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-37\\\">3.7.3 \u542f\u52a8kube-proxy\u670d\u52a1<\/a><\/li>\n<li>\u00a0<a title=\\\"3.7.4 \u68c0\u67e5\u670d\u52a1\u8fd0\u884c\u72b6\u6001\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#title-38\\\">3.7.4 \u68c0\u67e5\u670d\u52a1\u8fd0\u884c\u72b6\u6001<\/a><\/li>\n<\/ul>\n<p><a title=\\\"\u9690\u85cf\u76ee\u5f55\\\">\u76ee\u5f55<\/a><\/div>\n<\/div>\n<h2><span id=\\\"1\\\">1. \u67b6\u6784\u7bc7<\/span><\/h2>\n<p><a name=\\\"vIyyH\\\"><\/a><\/p>\n<h3><span id=\\\"11_kubernetes\\\">1.1 kubernetes \u67b6\u6784\u8bf4\u660e<\/span><\/h3>\n<p><img src=\\\"https:\/\/clsn.io\/wp-content\/themes\/clsn-003\/img\/blank.gif\\\" alt=\\\"Kubernetes V1.15 \u4e8c\u8fdb\u5236\u90e8\u7f72\u96c6\u7fa4\\\" data-original=\\\"https:\/\/cdn.nlark.com\/yuque\/0\/2019\/png\/206952\/1564577511433-970dda8f-915b-4ba3-bde6-bd562fc445b0.png\\\" \/><br \/>\n<a name=\\\"T47ku\\\"><\/a><\/p>\n<h3><span id=\\\"12_Flannel\\\">1.2 Flannel\u7f51\u7edc\u67b6\u6784\u56fe<\/span><\/h3>\n<p><img src=\\\"https:\/\/clsn.io\/wp-content\/themes\/clsn-003\/img\/blank.gif\\\" alt=\\\"Kubernetes V1.15 \u4e8c\u8fdb\u5236\u90e8\u7f72\u96c6\u7fa4\\\" data-original=\\\"https:\/\/cdn.nlark.com\/yuque\/0\/2019\/png\/206952\/1564577532575-5d725f80-102a-48b2-a453-c6be0d1e6cb5.png#align=left&amp;display=inline&amp;height=630&amp;name=%E5%9B%BE%E7%89%87.png&amp;originHeight=630&amp;originWidth=1004&amp;size=96777&amp;status=done&amp;width=1004\\\" \/><\/p>\n<blockquote><p><a href=\\\"https:\/\/clsn.io\/wp-content\/themes\/clsn-003\/inc\/go.php?url=https:\/\/blog.51cto.com\/10880347\/2326146\\\">\u96c6\u7fa4\u529f\u80fd\u5404\u6a21\u5757\u529f\u80fd\u63cf\u8ff0\uff1a<\/a><br \/>\nMaster\u8282\u70b9\uff1a<br \/>\nMaster\u8282\u70b9\u4e0a\u9762\u4e3b\u8981\u7531\u56db\u4e2a\u6a21\u5757\u7ec4\u6210\uff0cAPIServer\uff0cschedule,controller-manager,etcd<br \/>\nAPIServer: APIServer\u8d1f\u8d23\u5bf9\u5916\u63d0\u4f9bRESTful\u7684kubernetes API\u7684\u670d\u52a1\uff0c\u5b83\u662f\u7cfb\u7edf\u7ba1\u7406\u6307\u4ee4\u7684\u7edf\u4e00\u63a5\u53e3\uff0c\u4efb\u4f55\u5bf9\u8d44\u6e90\u7684\u589e\u5220\u8be5\u67e5\u90fd\u8981\u4ea4\u7ed9APIServer\u5904\u7406\u540e\u518d\u4ea4\u7ed9etcd\uff0c\u5982\u56fe\uff0ckubectl(kubernetes\u63d0\u4f9b\u7684\u5ba2\u6237\u7aef\u5de5\u5177\uff0c\u8be5\u5de5\u5177\u5185\u90e8\u662f\u5bf9kubernetes API\u7684\u8c03\u7528\uff09\u662f\u76f4\u63a5\u548cAPIServer\u4ea4\u4e92\u7684\u3002<br \/>\nschedule: schedule\u8d1f\u8d23\u8c03\u5ea6Pod\u5230\u5408\u9002\u7684Node\u4e0a\uff0c\u5982\u679c\u628ascheduler\u770b\u6210\u4e00\u4e2a\u9ed1\u5323\u5b50\uff0c\u90a3\u4e48\u5b83\u7684\u8f93\u5165\u662fpod\u548c\u7531\u591a\u4e2aNode\u7ec4\u6210\u7684\u5217\u8868\uff0c\u8f93\u51fa\u662fPod\u548c\u4e00\u4e2aNode\u7684\u7ed1\u5b9a\u3002 kubernetes\u76ee\u524d\u63d0\u4f9b\u4e86\u8c03\u5ea6\u7b97\u6cd5\uff0c\u540c\u6837\u4e5f\u4fdd\u7559\u4e86\u63a5\u53e3\u3002\u7528\u6237\u6839\u636e\u81ea\u5df1\u7684\u9700\u6c42\u5b9a\u4e49\u81ea\u5df1\u7684\u8c03\u5ea6\u7b97\u6cd5\u3002<br \/>\ncontroller manager: \u5982\u679cAPIServer\u505a\u7684\u662f\u524d\u53f0\u7684\u5de5\u4f5c\u7684\u8bdd\uff0c\u90a3\u4e48controller manager\u5c31\u662f\u8d1f\u8d23\u540e\u53f0\u7684\u3002\u6bcf\u4e00\u4e2a\u8d44\u6e90\u90fd\u5bf9\u5e94\u4e00\u4e2a\u63a7\u5236\u5668\u3002\u800ccontrol manager\u5c31\u662f\u8d1f\u8d23\u7ba1\u7406\u8fd9\u4e9b\u63a7\u5236\u5668\u7684\uff0c\u6bd4\u5982\u6211\u4eec\u901a\u8fc7APIServer\u521b\u5efa\u4e86\u4e00\u4e2aPod\uff0c\u5f53\u8fd9\u4e2aPod\u521b\u5efa\u6210\u529f\u540e\uff0cAPIServer\u7684\u4efb\u52a1\u5c31\u7b97\u5b8c\u6210\u4e86\u3002<br \/>\netcd\uff1aetcd\u662f\u4e00\u4e2a\u9ad8\u53ef\u7528\u7684\u952e\u503c\u5b58\u50a8\u7cfb\u7edf\uff0ckubernetes\u4f7f\u7528\u5b83\u6765\u5b58\u50a8\u5404\u4e2a\u8d44\u6e90\u7684\u72b6\u6001\uff0c\u4ece\u800c\u5b9e\u73b0\u4e86Restful\u7684API\u3002<br \/>\nNode\u8282\u70b9\uff1a<br \/>\n\u6bcf\u4e2aNode\u8282\u70b9\u4e3b\u8981\u7531\u4e09\u4e2a\u6a21\u677f\u7ec4\u6210\uff1akublet, kube-proxy<br \/>\nkube-proxy: \u8be5\u6a21\u5757\u5b9e\u73b0\u4e86kubernetes\u4e2d\u7684\u670d\u52a1\u53d1\u73b0\u548c\u53cd\u5411\u4ee3\u7406\u529f\u80fd\u3002kube-proxy\u652f\u6301TCP\u548cUDP\u8fde\u63a5\u8f6c\u53d1\uff0c\u9ed8\u8ba4\u57faRound Robin\u7b97\u6cd5\u5c06\u5ba2\u6237\u7aef\u6d41\u91cf\u8f6c\u53d1\u5230\u4e0eservice\u5bf9\u5e94\u7684\u4e00\u7ec4\u540e\u7aefpod\u3002\u670d\u52a1\u53d1\u73b0\u65b9\u9762\uff0ckube-proxy\u4f7f\u7528etcd\u7684watch\u673a\u5236\u76d1\u63a7\u96c6\u7fa4\u4e2dservice\u548cendpoint\u5bf9\u8c61\u6570\u636e\u7684\u52a8\u6001\u53d8\u5316\uff0c\u5e76\u4e14\u7ef4\u62a4\u4e00\u4e2aservice\u5230endpoint\u7684\u6620\u5c04\u5173\u7cfb\uff0c\u4ece\u800c\u4fdd\u8bc1\u4e86\u540e\u7aefpod\u7684IP\u53d8\u5316\u4e0d\u4f1a\u5bf9\u8bbf\u95ee\u8005\u9020\u6210\u5f71\u54cd\uff0c\u53e6\u5916\uff0ckube-proxy\u8fd8\u652f\u6301session affinity\u3002<br \/>\nkublet\uff1akublet\u662fMaster\u5728\u6bcf\u4e2aNode\u8282\u70b9\u4e0a\u9762\u7684agent\uff0c\u662fNode\u8282\u70b9\u4e0a\u9762\u6700\u91cd\u8981\u7684\u6a21\u5757\uff0c\u5b83\u8d1f\u8d23\u7ef4\u62a4\u548c\u7ba1\u7406\u8be5Node\u4e0a\u7684\u6240\u6709\u5bb9\u5668\uff0c\u4f46\u662f\u5982\u679c\u5bb9\u5668\u4e0d\u662f\u901a\u8fc7kubernetes\u521b\u5efa\u7684\uff0c\u5b83\u5e76\u4e0d\u4f1a\u7ba1\u7406\u3002\u672c\u8d28\u4e0a\uff0c\u5b83\u8d1f\u8d23\u4f7fPod\u7684\u8fd0\u884c\u72b6\u6001\u4e0e\u671f\u671b\u7684\u72b6\u6001\u4e00\u81f4\u3002<\/p><\/blockquote>\n<p><a name=\\\"agfT7\\\"><\/a><\/p>\n<h3><span id=\\\"13_Kubernetes\\\">1.3 Kubernetes\u5de5\u4f5c\u6d41\u7a0b<\/span><\/h3>\n<p><img src=\\\"https:\/\/clsn.io\/wp-content\/themes\/clsn-003\/img\/blank.gif\\\" alt=\\\"Kubernetes V1.15 \u4e8c\u8fdb\u5236\u90e8\u7f72\u96c6\u7fa4\\\" data-original=\\\"https:\/\/cdn.nlark.com\/yuque\/0\/2019\/png\/206952\/1564577632607-a9896412-556e-4db0-93d4-e4233a4ea938.png#align=left&amp;display=inline&amp;height=591&amp;name=%E5%9B%BE%E7%89%87.png&amp;originHeight=591&amp;originWidth=949&amp;size=121090&amp;status=done&amp;width=949\\\" \/><br \/>\n<a name=\\\"UgTIp\\\"><\/a><\/p>\n<h2><span id=\\\"2\\\">2. \u73af\u5883\u8bf4\u660e<\/span><\/h2>\n<p><a name=\\\"O4su0\\\"><\/a><\/p>\n<h3><span id=\\\"21\\\">2.1 \u90e8\u7f72\u8282\u70b9\u8bf4\u660e<\/span><\/h3>\n<table>\n<thead>\n<tr>\n<th align=\\\"center\\\">\u4e3b\u673a\u540d<\/th>\n<th align=\\\"center\\\">IP<\/th>\n<th align=\\\"center\\\">\u7528\u9014<\/th>\n<th align=\\\"center\\\">\u90e8\u7f72\u8f6f\u4ef6<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\\\"center\\\">k8s-1<\/td>\n<td align=\\\"center\\\">192.168.123.211<\/td>\n<td align=\\\"center\\\">master<\/td>\n<td align=\\\"center\\\">apiserver,scheduler,controller-manager<br \/>\netcd,flanneld<\/td>\n<\/tr>\n<tr>\n<td align=\\\"center\\\">k8s-2<\/td>\n<td align=\\\"center\\\">192.168.123.212<\/td>\n<td align=\\\"center\\\">node<\/td>\n<td align=\\\"center\\\">kubelet,kube-proxy<br \/>\netcd,flanneld<\/td>\n<\/tr>\n<tr>\n<td align=\\\"center\\\">k8s-3<\/td>\n<td align=\\\"center\\\">192.168.123.213<\/td>\n<td align=\\\"center\\\">node<\/td>\n<td align=\\\"center\\\">kubelet,kube-proxy<br \/>\netcd,flanneld<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><a name=\\\"1X399\\\"><\/a><\/p>\n<h3><span id=\\\"22\\\">2.2 \u64cd\u4f5c\u7cfb\u7edf\u73af\u5883<\/span><\/h3>\n<pre># \u4e09\u53f0\u673a\u5668\u76f8\u540c\n[root@k8s-1 \/root] master\n# uname  -r\n3.10.0-957.el7.x86_64\n[root@k8s-1 \/root] master\n# cat  \/etc\/redhat-release\nCentOS Linux release 7.6.1810 (Core)\n[root@k8s-1 \/root] master\n# sestatus\nSELinux status:                 disabled\n<\/pre>\n<p><a name=\\\"47N0T\\\"><\/a><\/p>\n<h3><span id=\\\"23\\\">2.3 \u8f6f\u4ef6\u5305\u7248\u672c<\/span><\/h3>\n<table>\n<thead>\n<tr>\n<th align=\\\"center\\\">\u8f6f\u4ef6\u5305<\/th>\n<th align=\\\"center\\\">\u4e0b\u8f7d\u5730\u5740<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td align=\\\"center\\\">kubernetes-node-linux-amd64.tar.gz<\/td>\n<td align=\\\"center\\\"><a href=\\\"https:\/\/clsn.io\/wp-content\/themes\/clsn-003\/inc\/go.php?url=https:\/\/dl.k8s.io\/v1.15.1\/kubernetes-node-linux-amd64.tar.gz\\\">https:\/\/dl.k8s.io\/v1.15.1\/kubernetes-node-linux-amd64.tar.gz<\/a><\/td>\n<\/tr>\n<tr>\n<td align=\\\"center\\\">kubernetes-server-linux-amd64.tar.gz<\/td>\n<td align=\\\"center\\\"><a href=\\\"https:\/\/clsn.io\/wp-content\/themes\/clsn-003\/inc\/go.php?url=https:\/\/dl.k8s.io\/v1.15.1\/kubernetes-server-linux-amd64.tar.gz\\\">https:\/\/dl.k8s.io\/v1.15.1\/kubernetes-server-linux-amd64.tar.gz<\/a><\/td>\n<\/tr>\n<tr>\n<td align=\\\"center\\\">flannel-v0.11.0-linux-amd64.tar.gz<\/td>\n<td align=\\\"center\\\"><a href=\\\"https:\/\/clsn.io\/wp-content\/themes\/clsn-003\/inc\/go.php?url=https:\/\/github.com\/coreos\/flannel\/releases\/download\/v0.11.0\/flannel-v0.11.0-linux-amd64.tar.gz\\\">https:\/\/github.com\/coreos\/flannel\/releases\/download\/v0.11.0\/flannel-v0.11.0-linux-amd64.tar.gz<\/a><\/td>\n<\/tr>\n<tr>\n<td align=\\\"center\\\">etcd-v3.3.10-linux-amd64.tar.gz<\/td>\n<td align=\\\"center\\\"><a href=\\\"https:\/\/clsn.io\/wp-content\/themes\/clsn-003\/inc\/go.php?url=https:\/\/github.com\/etcd-io\/etcd\/releases\/download\/v3.3.10\/etcd-v3.3.10-linux-amd64.tar.gz\\\">https:\/\/github.com\/etcd-io\/etcd\/releases\/download\/v3.3.10\/etcd-v3.3.10-linux-amd64.tar.gz<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2><span id=\\\"3_Kubernetes\\\">3. Kubernetes \u5b89\u88c5\u53ca\u914d\u7f6e<\/span><\/h2>\n<h3><span id=\\\"31\\\">3.1 \u521d\u59cb\u5316\u73af\u5883<\/span><\/h3>\n<p><a name=\\\"SyIDx\\\"><\/a><\/p>\n<h4 id=\\\"title-0\\\"><span id=\\\"311_SELINUX\\\">3.1.1 \u8bbe\u7f6e\u5173\u95ed\u9632\u706b\u5899\u53caSELINUX<\/span><\/h4>\n<pre>systemctl stop firewalld &amp;&amp; systemctl disable firewalld\nsetenforce 0\nvi \/etc\/selinux\/config\nSELINUX=disabled\n<\/pre>\n<p><a name=\\\"KyB6H\\\"><\/a><\/p>\n<h4 id=\\\"title-1\\\"><span id=\\\"312_swap\\\">3.1.2 \u5173\u95edswap<\/span><\/h4>\n<pre>swapoff -a &amp;&amp; sysctl -w vm.swappiness=0\nsed -i \\'\/ swap \/ s\/^\\\\(.*\\\\)$\/#\\\\1\/g\\' \/etc\/fstab\n<\/pre>\n<p><a name=\\\"1XMMe\\\"><\/a><\/p>\n<h4 id=\\\"title-2\\\"><span id=\\\"313_Docker\\\">3.1.3 \u8bbe\u7f6eDocker\u6240\u9700\u53c2\u6570<\/span><\/h4>\n<pre>cat &gt; \/etc\/sysctl.d\/kubernetes.conf &lt;&lt;EOF\nnet.ipv4.ip_forward=1\nnet.ipv4.tcp_tw_recycle=0\nvm.swappiness=0\nvm.overcommit_memory=1\nvm.panic_on_oom=0\nfs.inotify.max_user_watches=89100\nfs.file-max=52706963\nfs.nr_open=52706963\nnet.ipv6.conf.all.disable_ipv6=1\nEOF\nsysctl -p  \/etc\/sysctl.d\/kubernetes.conf\n<\/pre>\n<p><a name=\\\"kT4nA\\\"><\/a><\/p>\n<h4 id=\\\"title-3\\\"><span id=\\\"314_Docker\\\">3.1.4 \u5b89\u88c5 Docker<\/span><\/h4>\n<pre># \u914d\u7f6eyum\u6e90\ncd  \/etc\/yum.repo.d\/\nwget https:\/\/mirrors.aliyun.com\/docker-ce\/linux\/centos\/docker-ce.repo\nyum clean all ;yum  repolist -y\n# \u5b89\u88c5docker \uff0c\u7248\u672c 18.06.2\nyum  install  docker-ce-18.06.2.ce-3.el7 -y\n# \u542f\u52a8\nsystemctl start docker &amp;&amp; systemctl enable docker\n<\/pre>\n<p><a name=\\\"yBjuQ\\\"><\/a><\/p>\n<h4 id=\\\"title-4\\\"><span id=\\\"315\\\">3.1.5 \u521b\u5efa\u76f8\u5173\u76ee\u5f55<\/span><\/h4>\n<pre># \u521b\u5efa\u5b89\u88c5\u5305\u5b58\u50a8\u76ee\u5f55\nmkdir  \/data\/{install,ssl_config} -p\nmkdir \/data\/ssl_config\/{etcd,kubernetes}  -p\n# \u521b\u5efa\u5b89\u88c5\u76ee\u5f55\nmkdir \/cloud\/k8s\/etcd\/{bin,cfg,ssl} -p\nmkdir \/cloud\/k8s\/kubernetes\/{bin,cfg,ssl} -p\n<\/pre>\n<p><a name=\\\"ZI75c\\\"><\/a><\/p>\n<h4 id=\\\"title-5\\\"><span id=\\\"316_SSH\\\">3.1.6 SSH \u4e92\u4fe1\u914d\u7f6e<\/span><\/h4>\n<pre>ssh-keygen\nssh-copy-id  k8s-1\nssh-copy-id  k8s-2\nssh-copy-id  k8s-3\n<\/pre>\n<p><a name=\\\"BPehy\\\"><\/a><\/p>\n<h4 id=\\\"title-6\\\"><span id=\\\"317_PATH\\\">3.1.7 \u6dfb\u52a0 PATH \u53d8\u91cf<\/span><\/h4>\n<pre>vi \/etc\/profile\nexport PATH=$PATH:\/cloud\/k8s\/etcd\/bin\/:\/cloud\/k8s\/kubernetes\/bin\/\n<\/pre>\n<p><a name=\\\"LyLYH\\\"><\/a><\/p>\n<h3><span id=\\\"32_ssl\\\">3.2 \u521b\u5efassl\u8bc1\u4e66<\/span><\/h3>\n<p><a name=\\\"oSwhT\\\"><\/a><\/p>\n<h4 id=\\\"title-7\\\"><span id=\\\"321_CFSSL\\\">3.2.1 \u5b89\u88c5\u53ca\u914d\u7f6eCFSSL<\/span><\/h4>\n<pre>wget https:\/\/pkg.cfssl.org\/R1.2\/cfssl_linux-amd64\nwget https:\/\/pkg.cfssl.org\/R1.2\/cfssljson_linux-amd64\nwget https:\/\/pkg.cfssl.org\/R1.2\/cfssl-certinfo_linux-amd64\nchmod +x cfssl_linux-amd64 cfssljson_linux-amd64 cfssl-certinfo_linux-amd64\nmv cfssl_linux-amd64 \/usr\/local\/bin\/cfssl\nmv cfssljson_linux-amd64 \/usr\/local\/bin\/cfssljson\nmv cfssl-certinfo_linux-amd64 \/usr\/bin\/cfssl-certinfo\n<\/pre>\n<p><a name=\\\"tKNzX\\\"><\/a><\/p>\n<h4 id=\\\"title-8\\\"><span id=\\\"322_ETCD\\\">3.2.2 \u521b\u5efa ETCD \u76f8\u5173\u8bc1\u4e66<\/span><\/h4>\n<p>\u4ee5\u4e0b\u64cd\u4f5c\u5747\u5728\/data\/ssl_config\/etcd\/\u76ee\u5f55\u4e2d<br \/>\netcd\u8bc1\u4e66ca\u914d\u7f6e<\/p>\n<pre>cd \/data\/ssl_config\/etcd\/\ncat &lt;&lt; EOF | tee ca-config.json\n{\n  \\\"signing\\\": {\n    \\\"default\\\": {\n      \\\"expiry\\\": \\\"87600h\\\"\n    },\n    \\\"profiles\\\": {\n      \\\"www\\\": {\n         \\\"expiry\\\": \\\"87600h\\\",\n         \\\"usages\\\": [\n            \\\"signing\\\",\n            \\\"key encipherment\\\",\n            \\\"server auth\\\",\n            \\\"client auth\\\"\n        ]\n      }\n    }\n  }\n}\nEOF\n<\/pre>\n<p>\u521b\u5efa ETCD CA \u914d\u7f6e\u6587\u4ef6<\/p>\n<pre>cat &lt;&lt; EOF | tee ca-csr.json\n{\n    \\\"CN\\\": \\\"etcd CA\\\",\n    \\\"key\\\": {\n        \\\"algo\\\": \\\"rsa\\\",\n        \\\"size\\\": 2048\n    },\n    \\\"names\\\": [\n        {\n            \\\"C\\\": \\\"CN\\\",\n            \\\"L\\\": \\\"Beijing\\\",\n            \\\"ST\\\": \\\"Beijing\\\"\n        }\n    ]\n}\nEOF\n<\/pre>\n<p>\u521b\u5efa ETCD Server \u8bc1\u4e66<\/p>\n<pre>cat &lt;&lt; EOF | tee server-csr.json\n{\n    \\\"CN\\\": \\\"etcd\\\",\n    \\\"hosts\\\": [\n    \\\"k8s-3\\\",\n    \\\"k8s-2\\\",\n    \\\"k8s-1\\\",\n    \\\"192.168.123.211\\\",\n    \\\"192.168.123.212\\\",\n    \\\"192.168.123.213\\\"\n    ],\n    \\\"key\\\": {\n        \\\"algo\\\": \\\"rsa\\\",\n        \\\"size\\\": 2048\n    },\n    \\\"names\\\": [\n        {\n            \\\"C\\\": \\\"CN\\\",\n            \\\"L\\\": \\\"Beijing\\\",\n            \\\"ST\\\": \\\"Beijing\\\"\n        }\n    ]\n}\nEOF\n<\/pre>\n<p>\u751f\u6210 ETCD CA \u8bc1\u4e66\u548c\u79c1\u94a5<\/p>\n<pre>cd \/data\/ssl_config\/etcd\/\n# \u751f\u6210ca\u8bc1\u4e66\ncfssl gencert -initca ca-csr.json | cfssljson -bare ca -\n# \u751f\u6210server\u8bc1\u4e66\ncfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=ca-config.json -profile=www server-csr.json | cfssljson -bare server\n<\/pre>\n<p><a name=\\\"btxAS\\\"><\/a><\/p>\n<h4 id=\\\"title-9\\\"><span id=\\\"323_Kubernetes\\\">3.2.3 \u521b\u5efa Kubernetes \u76f8\u5173\u8bc1\u4e66<\/span><\/h4>\n<p>\u4ee5\u4e0b\u64cd\u4f5c\u5747\u5728\/data\/ssl_config\/kubernetes\/\u76ee\u5f55\u4e2d<br \/>\nkubernetes \u8bc1\u4e66ca\u914d\u7f6e<\/p>\n<pre>cd \/data\/ssl_config\/kubernetes\/\ncat &lt;&lt; EOF | tee ca-config.json\n{\n  \\\"signing\\\": {\n    \\\"default\\\": {\n      \\\"expiry\\\": \\\"87600h\\\"\n    },\n    \\\"profiles\\\": {\n      \\\"kubernetes\\\": {\n         \\\"expiry\\\": \\\"87600h\\\",\n         \\\"usages\\\": [\n            \\\"signing\\\",\n            \\\"key encipherment\\\",\n            \\\"server auth\\\",\n            \\\"client auth\\\"\n        ]\n      }\n    }\n  }\n}\nEOF\n<\/pre>\n<p>\u521b\u5efaca\u8bc1\u4e66\u914d\u7f6e<\/p>\n<pre>cat &lt;&lt; EOF | tee ca-csr.json\n{\n    \\\"CN\\\": \\\"kubernetes\\\",\n    \\\"key\\\": {\n        \\\"algo\\\": \\\"rsa\\\",\n        \\\"size\\\": 2048\n    },\n    \\\"names\\\": [\n        {\n            \\\"C\\\": \\\"CN\\\",\n            \\\"L\\\": \\\"Beijing\\\",\n            \\\"ST\\\": \\\"Beijing\\\",\n            \\\"O\\\": \\\"k8s\\\",\n            \\\"OU\\\": \\\"System\\\"\n        }\n    ]\n}\nEOF\n<\/pre>\n<p>\u751f\u6210API_SERVER\u8bc1\u4e66<\/p>\n<pre>cat &lt;&lt; EOF | tee server-csr.json\n{\n    \\\"CN\\\": \\\"kubernetes\\\",\n    \\\"hosts\\\": [\n      \\\"10.0.0.1\\\",\n      \\\"127.0.0.1\\\",\n      \\\"192.168.123.211\\\",\n      \\\"k8s-1\\\",\n      \\\"kubernetes\\\",\n      \\\"kubernetes.default\\\",\n      \\\"kubernetes.default.svc\\\",\n      \\\"kubernetes.default.svc.cluster\\\",\n      \\\"kubernetes.default.svc.cluster.local\\\"\n    ],\n    \\\"key\\\": {\n        \\\"algo\\\": \\\"rsa\\\",\n        \\\"size\\\": 2048\n    },\n    \\\"names\\\": [\n        {\n            \\\"C\\\": \\\"CN\\\",\n            \\\"L\\\": \\\"Beijing\\\",\n            \\\"ST\\\": \\\"Beijing\\\",\n            \\\"O\\\": \\\"k8s\\\",\n            \\\"OU\\\": \\\"System\\\"\n        }\n    ]\n}\nEOF\n<\/pre>\n<p>\u521b\u5efa Kubernetes Proxy \u8bc1\u4e66<\/p>\n<pre>cat &lt;&lt; EOF | tee kube-proxy-csr.json\n{\n  \\\"CN\\\": \\\"system:kube-proxy\\\",\n  \\\"hosts\\\": [],\n  \\\"key\\\": {\n    \\\"algo\\\": \\\"rsa\\\",\n    \\\"size\\\": 2048\n  },\n  \\\"names\\\": [\n    {\n      \\\"C\\\": \\\"CN\\\",\n      \\\"L\\\": \\\"Beijing\\\",\n      \\\"ST\\\": \\\"Beijing\\\",\n      \\\"O\\\": \\\"k8s\\\",\n      \\\"OU\\\": \\\"System\\\"\n    }\n  ]\n}\nEOF\n<\/pre>\n<p>\u751f\u6210 **kubernetes ** CA \u8bc1\u4e66\u548c\u79c1\u94a5<\/p>\n<pre># \u751f\u6210ca\u8bc1\u4e66\ncfssl gencert -initca ca-csr.json | cfssljson -bare ca -\n# \u751f\u6210 api-server \u8bc1\u4e66\ncfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=ca-config.json -profile=kubernetes server-csr.json | cfssljson -bare server\n# \u751f\u6210 kube-proxy \u8bc1\u4e66\ncfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=ca-config.json -profile=kubernetes kube-proxy-csr.json | cfssljson -bare kube-proxy\n<\/pre>\n<p><a name=\\\"YhaVS\\\"><\/a><\/p>\n<h3><span id=\\\"33_etcd\\\">3.3 \u90e8\u7f72etcd<\/span><\/h3>\n<p><a name=\\\"hwD5H\\\"><\/a><\/p>\n<h4 id=\\\"title-10\\\"><span id=\\\"331\\\">3.3.1 \u914d\u7f6e\u8f6f\u4ef6\u5305<\/span><\/h4>\n<pre>cd \/data\/install\/\ntar -xvf etcd-v3.3.10-linux-amd64.tar.gz\ncd etcd-v3.3.10-linux-amd64\/\ncp etcd etcdctl \/cloud\/k8s\/etcd\/bin\/\n<\/pre>\n<p><a name=\\\"wqRdw\\\"><\/a><\/p>\n<h4 id=\\\"title-11\\\"><span id=\\\"332_etcd\\\">3.3.2 \u7f16\u8f91etcd\u914d\u7f6e\u6587\u4ef6<\/span><\/h4>\n<pre>vim \/cloud\/k8s\/etcd\/cfg\/etcd\n#[Member]\nETCD_NAME=\\\"etcd01\\\"\nETCD_DATA_DIR=\\\"\/var\/lib\/etcd\/default.etcd\\\"\nETCD_LISTEN_PEER_URLS=\\\"https:\/\/192.168.123.211:2380\\\"\nETCD_LISTEN_CLIENT_URLS=\\\"https:\/\/192.168.123.211:2379\\\"\n#[Clustering]\nETCD_INITIAL_ADVERTISE_PEER_URLS=\\\"https:\/\/192.168.123.211:2380\\\"\nETCD_ADVERTISE_CLIENT_URLS=\\\"https:\/\/192.168.123.211:2379\\\"\nETCD_INITIAL_CLUSTER=\\\"etcd01=https:\/\/192.168.123.211:2380,etcd02=https:\/\/192.168.123.212:2380,etcd03=https:\/\/192.168.123.213:2380\\\"\nETCD_INITIAL_CLUSTER_TOKEN=\\\"etcd-cluster\\\"\nETCD_INITIAL_CLUSTER_STATE=\\\"new\\\"\n<\/pre>\n<p><a name=\\\"gcfzP\\\"><\/a><\/p>\n<h4 id=\\\"title-12\\\"><span id=\\\"333_etcd_systemd_unit\\\">3.3.3 \u521b\u5efa etcd\u7684 systemd unit \u6587\u4ef6<\/span><\/h4>\n<pre>vim \/usr\/lib\/systemd\/system\/etcd.service\n[Unit]\nDescription=Etcd Server\nAfter=network.target\nAfter=network-online.target\nWants=network-online.target\n[Service]\nType=notify\nEnvironmentFile=\/cloud\/k8s\/etcd\/cfg\/etcd\nExecStart=\/cloud\/k8s\/etcd\/bin\/etcd \\\\\n--name=${ETCD_NAME} \\\\\n--data-dir=${ETCD_DATA_DIR} \\\\\n--listen-peer-urls=${ETCD_LISTEN_PEER_URLS} \\\\\n--listen-client-urls=${ETCD_LISTEN_CLIENT_URLS},http:\/\/127.0.0.1:2379 \\\\\n--advertise-client-urls=${ETCD_ADVERTISE_CLIENT_URLS} \\\\\n--initial-advertise-peer-urls=${ETCD_INITIAL_ADVERTISE_PEER_URLS} \\\\\n--initial-cluster=${ETCD_INITIAL_CLUSTER} \\\\\n--initial-cluster-token=${ETCD_INITIAL_CLUSTER_TOKEN} \\\\\n--initial-cluster-state=new \\\\\n--cert-file=\/cloud\/k8s\/etcd\/ssl\/server.pem \\\\\n--key-file=\/cloud\/k8s\/etcd\/ssl\/server-key.pem \\\\\n--peer-cert-file=\/cloud\/k8s\/etcd\/ssl\/server.pem \\\\\n--peer-key-file=\/cloud\/k8s\/etcd\/ssl\/server-key.pem \\\\\n--trusted-ca-file=\/cloud\/k8s\/etcd\/ssl\/ca.pem \\\\\n--peer-trusted-ca-file=\/cloud\/k8s\/etcd\/ssl\/ca.pem\nRestart=on-failure\nLimitNOFILE=65536\n[Install]\nWantedBy=multi-user.target\n<\/pre>\n<p><a name=\\\"6MJei\\\"><\/a><\/p>\n<h4 id=\\\"title-13\\\"><span id=\\\"334\\\">3.3.4 \u914d\u7f6e\u8bc1\u4e66\u6587\u4ef6<\/span><\/h4>\n<pre>cd \/data\/ssl_config\/etcd\/\ncp ca*pem server*pem \/cloud\/k8s\/etcd\/ssl\n<\/pre>\n<p><a name=\\\"ii5gV\\\"><\/a><\/p>\n<h4 id=\\\"title-14\\\"><span id=\\\"335_12\\\">3.3.5 \u914d\u7f6e\u6587\u4ef6\u62f7\u8d1d\u5230 \u8282\u70b91\u3001\u8282\u70b92<\/span><\/h4>\n<pre>cd \/cloud\/k8s\/\nscp -r etcd k8s-2:\/cloud\/k8s\/\nscp -r etcd k8s-3:\/cloud\/k8s\/\nscp \/usr\/lib\/systemd\/system\/etcd.service  k8s-2:\/usr\/lib\/systemd\/system\/etcd.service\nscp \/usr\/lib\/systemd\/system\/etcd.service  k8s-3:\/usr\/lib\/systemd\/system\/etcd.service\n<\/pre>\n<p>\u4fee\u6539\u53e6\u5916\u4e24\u53f0\u673a\u5668\u914d\u7f6e\u6587\u4ef6<\/p>\n<pre>### k8s-2\ncat  \/cloud\/k8s\/etcd\/cfg\/etcd\n#[Member]\nETCD_NAME=\\\"etcd02\\\"\nETCD_DATA_DIR=\\\"\/var\/lib\/etcd\/default.etcd\\\"\nETCD_LISTEN_PEER_URLS=\\\"https:\/\/192.168.123.212:2380\\\"\nETCD_LISTEN_CLIENT_URLS=\\\"https:\/\/192.168.123.212:2379\\\"\n#[Clustering]\nETCD_INITIAL_ADVERTISE_PEER_URLS=\\\"https:\/\/192.168.123.212:2380\\\"\nETCD_ADVERTISE_CLIENT_URLS=\\\"https:\/\/192.168.123.212:2379\\\"\nETCD_INITIAL_CLUSTER=\\\"etcd01=https:\/\/192.168.123.211:2380,etcd02=https:\/\/192.168.123.212:2380,etcd03=https:\/\/192.168.123.213:2380\\\"\nETCD_INITIAL_CLUSTER_TOKEN=\\\"etcd-cluster\\\"\nETCD_INITIAL_CLUSTER_STATE=\\\"new\\\"\n### k8s-3\ncat  \/cloud\/k8s\/etcd\/cfg\/etcd\n#[Member]\nETCD_NAME=\\\"etcd03\\\"\nETCD_DATA_DIR=\\\"\/var\/lib\/etcd\/default.etcd\\\"\nETCD_LISTEN_PEER_URLS=\\\"https:\/\/192.168.123.213:2380\\\"\nETCD_LISTEN_CLIENT_URLS=\\\"https:\/\/192.168.123.213:2379\\\"\n#[Clustering]\nETCD_INITIAL_ADVERTISE_PEER_URLS=\\\"https:\/\/192.168.123.213:2380\\\"\nETCD_ADVERTISE_CLIENT_URLS=\\\"https:\/\/192.168.123.213:2379\\\"\nETCD_INITIAL_CLUSTER=\\\"etcd01=https:\/\/192.168.123.211:2380,etcd02=https:\/\/192.168.123.212:2380,etcd03=https:\/\/192.168.123.213:2380\\\"\nETCD_INITIAL_CLUSTER_TOKEN=\\\"etcd-cluster\\\"\nETCD_INITIAL_CLUSTER_STATE=\\\"new\\\"\n<\/pre>\n<p>\u53e6\u5916\u4e24\u53f0\u673a\u5668\u914d\u7f6e\u5b8c\u6210\u540e\uff0c\u542f\u52a8etcd\u670d\u52a1\uff0c\u4e09\u53f0\u90fd\u9700\u542f\u52a8\u3002<br \/>\n<a name=\\\"D109O\\\"><\/a><\/p>\n<h4 id=\\\"title-15\\\"><span id=\\\"336_ETCD\\\">3.3.6 \u542f\u52a8ETCD\u670d\u52a1<\/span><\/h4>\n<pre>systemctl daemon-reload\nsystemctl enable etcd\nsystemctl start etcd\n#\u542f\u52a8ETCD\u96c6\u7fa4\u540c\u65f6\u542f\u52a8\u4e8c\u4e2a\u8282\u70b9\uff0c\u5355\u8282\u70b9\u662f\u65e0\u6cd5\u6b63\u5e38\u542f\u52a8\u7684\u3002\n<\/pre>\n<p><a name=\\\"2w6W4\\\"><\/a><\/p>\n<h4 id=\\\"title-16\\\"><span id=\\\"337\\\">3.3.7 \u68c0\u67e5\u670d\u52a1\u662f\u5426\u6b63\u5e38<\/span><\/h4>\n<pre>[root@k8s-1 \/cloud\/k8s\/etcd\/bin] master\n# etcdctl --ca-file=\/cloud\/k8s\/etcd\/ssl\/ca.pem --cert-file=\/cloud\/k8s\/etcd\/ssl\/server.pem --key-file=\/cloud\/k8s\/etcd\/ssl\/server-key.pem --endpoints=\\\"https:\/\/192.168.123.211:2379,https:\/\/192.168.123.212:2379,https:\/\/192.168.123.213:2379\\\"  cluster-health\nmember 4c6bfb873a73368c is healthy: got healthy result from https:\/\/192.168.123.213:2379\nmember 622f71dbd55b34ce is healthy: got healthy result from https:\/\/192.168.123.211:2379\nmember f14004aa5403b07d is healthy: got healthy result from https:\/\/192.168.123.212:2379\ncluster is healthy\n<\/pre>\n<p><a name=\\\"AGqD3\\\"><\/a><\/p>\n<h3><span id=\\\"34_Flannel\\\">3.4 \u90e8\u7f72Flannel\u7f51\u7edc<\/span><\/h3>\n<p><a name=\\\"76kS4\\\"><\/a><\/p>\n<h4 id=\\\"title-17\\\"><span id=\\\"341_etcd_Pod\\\">3.4.1 \u5411 etcd \u5199\u5165\u96c6\u7fa4 Pod \u7f51\u6bb5\u4fe1\u606f<\/span><\/h4>\n<pre> cd \/cloud\/k8s\/etcd\/bin\n etcdctl --ca-file=ca.pem --cert-file=server.pem --key-file=server-key.pem \\\\\n --endpoints=\\\"https:\/\/192.168.123.211:2379,https:\/\/192.168.123.212:2379,https:\/\/192.168.123.213:2379\\\" \\\\\n set \/coreos.com\/network\/config  \\\\\n \\'{ \\\"Network\\\": \\\"172.18.0.0\/16\\\", \\\"Backend\\\": {\\\"Type\\\": \\\"vxlan\\\"}}\\'\n<\/pre>\n<blockquote>\n<pre>\u5199\u5165\u7684 Pod \u7f51\u6bb5 ${CLUSTER_CIDR} \u5fc5\u987b\u662f \/16 \u6bb5\u5730\u5740\uff0c\u5fc5\u987b\u4e0e kube-controller-manager \u7684 --cluster-cidr \u53c2\u6570\u503c\u4e00\u81f4\uff1b\n<\/pre>\n<\/blockquote>\n<p><a name=\\\"5JuoG\\\"><\/a><\/p>\n<h4 id=\\\"title-18\\\"><span id=\\\"342_flannel\\\">3.4.2 \u90e8\u7f72 flannel<\/span><\/h4>\n<pre> cd \/data\/install\/\n tar xf  flannel-v0.11.0-linux-amd64.tar.gz\n mv flanneld mk-docker-opts.sh \/cloud\/k8s\/kubernetes\/bin\/\n<\/pre>\n<p><a name=\\\"Y4xKV\\\"><\/a><\/p>\n<h4 id=\\\"title-19\\\"><span id=\\\"353_flannel\\\">3.5.3 \u914d\u7f6eflannel<\/span><\/h4>\n<pre>vim  \/cloud\/k8s\/kubernetes\/cfg\/flanneld\nFLANNEL_OPTIONS=\\\"--etcd-endpoints=https:\/\/192.168.123.211:2379,https:\/\/192.168.123.212:2379,https:\/\/192.168.123.213:2379 -etcd-cafile=\/cloud\/k8s\/etcd\/ssl\/ca.pem -etcd-certfile=\/cloud\/k8s\/etcd\/ssl\/server.pem -etcd-keyfile=\/cloud\/k8s\/etcd\/ssl\/server-key.pem\\\"\n<\/pre>\n<p><a name=\\\"rGEU5\\\"><\/a><\/p>\n<h4 id=\\\"title-20\\\"><span id=\\\"354_flanneld_systemd_unit\\\">3.5.4 \u521b\u5efa flanneld \u7684 systemd unit \u6587\u4ef6<\/span><\/h4>\n<pre>vim \/usr\/lib\/systemd\/system\/flanneld.service\n[Unit]\nDescription=Flanneld overlay address etcd agent\nAfter=network-online.target network.target\nBefore=docker.service\n[Service]\nType=notify\nEnvironmentFile=\/cloud\/k8s\/kubernetes\/cfg\/flanneld\nExecStart=\/cloud\/k8s\/kubernetes\/bin\/flanneld --ip-masq $FLANNEL_OPTIONS\nExecStartPost=\/cloud\/k8s\/kubernetes\/bin\/mk-docker-opts.sh -k DOCKER_NETWORK_OPTIONS -d \/run\/flannel\/subnet.env\nRestart=on-failure\n[Install]\nWantedBy=multi-user.target\n<\/pre>\n<blockquote>\n<pre>mk-docker-opts.sh \u811a\u672c\u5c06\u5206\u914d\u7ed9 flanneld \u7684 Pod \u5b50\u7f51\u7f51\u6bb5\u4fe1\u606f\u5199\u5165 \/run\/flannel\/docker \u6587\u4ef6\uff0c\u540e\u7eed docker \u542f\u52a8\u65f6 \u4f7f\u7528\u8fd9\u4e2a\u6587\u4ef6\u4e2d\u7684\u73af\u5883\u53d8\u91cf\u914d\u7f6e docker0 \u7f51\u6865\uff1b\n<\/pre>\n<p>flanneld \u4f7f\u7528\u7cfb\u7edf\u7f3a\u7701\u8def\u7531\u6240\u5728\u7684\u63a5\u53e3\u4e0e\u5176\u5b83\u8282\u70b9\u901a\u4fe1\uff0c\u5bf9\u4e8e\u6709\u591a\u4e2a\u7f51\u7edc\u63a5\u53e3\uff08\u5982\u5185\u7f51\u548c\u516c\u7f51\uff09\u7684\u8282\u70b9\uff0c\u53ef\u4ee5\u7528 -iface \u53c2\u6570\u6307\u5b9a\u901a\u4fe1\u63a5\u53e3\uff0c\u5982\u4e0a\u9762\u7684 eth0 \u63a5\u53e3;<br \/>\nflanneld \u8fd0\u884c\u65f6\u9700\u8981 root \u6743\u9650\uff1b<\/p><\/blockquote>\n<p><a name=\\\"PZVKL\\\"><\/a><\/p>\n<h4 id=\\\"title-21\\\"><span id=\\\"355_Docker\\\">3.5.5 \u914d\u7f6eDocker\u542f\u52a8\u6307\u5b9a\u5b50\u7f51\u6bb5<\/span><\/h4>\n<pre>vim \/usr\/lib\/systemd\/system\/docker.service\n[Unit]\nDescription=Docker Application Container Engine\nDocumentation=https:\/\/docs.docker.com\nAfter=network-online.target firewalld.service\nWants=network-online.target\n[Service]\nType=notify\nEnvironmentFile=\/run\/flannel\/subnet.env\nExecStart=\/usr\/bin\/dockerd  $DOCKER_NETWORK_OPTIONS\nExecReload=\/bin\/kill -s HUP $MAINPID\nLimitNOFILE=infinity\nLimitNPROC=infinity\nLimitCORE=infinity\nTimeoutStartSec=0\nDelegate=yes\nKillMode=process\nRestart=on-failure\nStartLimitBurst=3\nStartLimitInterval=60s\n[Install]\nWantedBy=multi-user.target\n<\/pre>\n<p><a name=\\\"YYHBC\\\"><\/a><\/p>\n<h4 id=\\\"title-22\\\"><span id=\\\"356_flanneld_systemd_unit\\\">3.5.6 \u5c06flanneld systemd unit \u6587\u4ef6\u5230\u6240\u6709\u8282\u70b9<\/span><\/h4>\n<pre>cd \/cloud\/k8s\/\nscp -r kubernetes k8s-2:\/cloud\/k8s\/\nscp -r kubernetes k8s-3:\/cloud\/k8s\/\nscp \/cloud\/k8s\/kubernetes\/cfg\/flanneld  k8s-2:\/cloud\/k8s\/kubernetes\/cfg\/flanneld\nscp \/cloud\/k8s\/kubernetes\/cfg\/flanneld  k8s-3:\/cloud\/k8s\/kubernetes\/cfg\/flanneld\nscp \/usr\/lib\/systemd\/system\/docker.service    k8s-2:\/usr\/lib\/systemd\/system\/docker.service\nscp \/usr\/lib\/systemd\/system\/docker.service    k8s-3:\/usr\/lib\/systemd\/system\/docker.service\nscp \/usr\/lib\/systemd\/system\/flanneld.service  k8s-2:\/usr\/lib\/systemd\/system\/flanneld.service\nscp \/usr\/lib\/systemd\/system\/flanneld.service  k8s-3:\/usr\/lib\/systemd\/system\/flanneld.service\n# \u542f\u52a8\u670d\u52a1(\u6bcf\u53f0\u8282\u70b9\u90fd\u64cd\u4f5c)\nsystemctl daemon-reload\nsystemctl start flanneld\nsystemctl enable flanneld\nsystemctl restart docker\n<\/pre>\n<p><a name=\\\"bQGmu\\\"><\/a><\/p>\n<h4 id=\\\"title-23\\\"><span id=\\\"357_fannel\\\">3.5.7 \u9a8c\u8bc1fannel\u7f51\u7edc\u914d\u7f6e<\/span><\/h4>\n<pre>[root@k8s-1 \/data\/install] master\n# ip a\n1: lo: &lt;LOOPBACK,UP,LOWER_UP&gt; mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000\n    link\/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00\n    inet 127.0.0.1\/8 scope host lo\n       valid_lft forever preferred_lft forever\n2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc mq state UP group default qlen 1000\n    link\/ether 00:0c:29:33:de:53 brd ff:ff:ff:ff:ff:ff\n    inet 192.168.123.211\/24 brd 192.168.123.255 scope global noprefixroute eth0\n       valid_lft forever preferred_lft forever\n3: flannel.1: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1450 qdisc noqueue state UNKNOWN group default\n    link\/ether 1a:6f:5a:0b:c7:18 brd ff:ff:ff:ff:ff:ff\n    inet 172.18.30.0\/32 scope global flannel.1\n       valid_lft forever preferred_lft forever\n4: docker0: &lt;NO-CARRIER,BROADCAST,MULTICAST,UP&gt; mtu 1500 qdisc noqueue state DOWN group default\n    link\/ether 02:42:5c:d0:df:e6 brd ff:ff:ff:ff:ff:ff\n    inet 172.18.30.1\/24 brd 172.18.30.255 scope global docker0\n       valid_lft forever preferred_lft forever\n<\/pre>\n<p><a name=\\\"jy9VQ\\\"><\/a><\/p>\n<h3><span id=\\\"35_master\\\">3.5 \u90e8\u7f72 master \u8282\u70b9<\/span><\/h3>\n<blockquote><p>kubernetes master \u8282\u70b9\u8fd0\u884c\u5982\u4e0b\u7ec4\u4ef6\uff1a<br \/>\nkube-apiserver<br \/>\nkube-scheduler<br \/>\nkube-controller-manager<br \/>\nkube-scheduler \u548c kube-controller-manager \u53ef\u4ee5\u4ee5\u96c6\u7fa4\u6a21\u5f0f\u8fd0\u884c\uff0c\u901a\u8fc7 leader \u9009\u4e3e\u4ea7\u751f\u4e00\u4e2a\u5de5\u4f5c\u8fdb\u7a0b\uff0c\u5176\u5b83\u8fdb\u7a0b\u5904\u4e8e\u963b\u585e\u6a21\u5f0f\u3002<\/p><\/blockquote>\n<p><a name=\\\"qVk4Z\\\"><\/a><\/p>\n<h4 id=\\\"title-24\\\"><span id=\\\"351__master\\\">3.5.1 \u914d\u7f6e master \u8282\u70b9\u6587\u4ef6<\/span><\/h4>\n<pre> cd \/data\/install\/\n tar xf kubernetes-server-linux-amd64.tar.gz\n cd kubernetes\/server\/bin\/\n cp kube-scheduler kube-apiserver kube-controller-manager kubectl \/cloud\/k8s\/kubernetes\/bin\/\n<\/pre>\n<p><a name=\\\"A91WA\\\"><\/a><\/p>\n<h4 id=\\\"title-25\\\"><span id=\\\"352_kubernetes\\\">3.5.2 \u914d\u7f6e kubernetes\u76f8\u5173\u8bc1\u4e66<\/span><\/h4>\n<pre>cd \/data\/ssl_config\/kubernetes\/\ncp *pem \/cloud\/k8s\/kubernetes\/ssl\/\n<\/pre>\n<p><a name=\\\"y1N1U\\\"><\/a><\/p>\n<h4 id=\\\"title-26\\\"><span id=\\\"353_kube-apiserver\\\">3.5.3 \u90e8\u7f72 kube-apiserver \u7ec4\u4ef6<\/span><\/h4>\n<p>\u521b\u5efa TLS Bootstrapping Token<\/p>\n<pre># head -c 16 \/dev\/urandom | od -An -t x | tr -d \\' \\'\n449bbeb0ea7e50f321087a123a509a19\n# vim \/cloud\/k8s\/kubernetes\/cfg\/token.csv\n449bbeb0ea7e50f321087a123a509a19,kubelet-bootstrap,10001,\\\"system:kubelet-bootstrap\\\"\n<\/pre>\n<p>\u521b\u5efaapiserver\u914d\u7f6e\u6587\u4ef6<\/p>\n<pre>vim \/cloud\/k8s\/kubernetes\/cfg\/kube-apiserver\nKUBE_APISERVER_OPTS=\\\"--logtostderr=true \\\\\n--v=4 \\\\\n--etcd-servers=https:\/\/192.168.123.211:2379,https:\/\/192.168.123.212:2379,https:\/\/192.168.123.213:2379 \\\\\n--bind-address=192.168.123.211 \\\\\n--secure-port=6443 \\\\\n--advertise-address=192.168.123.211 \\\\\n--allow-privileged=true \\\\\n--service-cluster-ip-range=10.0.0.0\/24 \\\\\n--enable-admission-plugins=NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota,NodeRestriction \\\\\n--authorization-mode=RBAC,Node \\\\\n--enable-bootstrap-token-auth \\\\\n--token-auth-file=\/cloud\/k8s\/kubernetes\/cfg\/token.csv \\\\\n--service-node-port-range=30000-50000 \\\\\n--tls-cert-file=\/cloud\/k8s\/kubernetes\/ssl\/server.pem  \\\\\n--tls-private-key-file=\/cloud\/k8s\/kubernetes\/ssl\/server-key.pem \\\\\n--client-ca-file=\/cloud\/k8s\/kubernetes\/ssl\/ca.pem \\\\\n--service-account-key-file=\/cloud\/k8s\/kubernetes\/ssl\/ca-key.pem \\\\\n--etcd-cafile=\/cloud\/k8s\/etcd\/ssl\/ca.pem \\\\\n--etcd-certfile=\/cloud\/k8s\/etcd\/ssl\/server.pem \\\\\n--etcd-keyfile=\/cloud\/k8s\/etcd\/ssl\/server-key.pem\\\"\n<\/pre>\n<p>\u521b\u5efa kube-apiserver systemd unit \u6587\u4ef6<\/p>\n<pre>vim  \/usr\/lib\/systemd\/system\/kube-apiserver.service\n[Unit]\nDescription=Kubernetes API Server\nDocumentation=https:\/\/github.com\/kubernetes\/kubernetes\n[Service]\nEnvironmentFile=\/cloud\/k8s\/kubernetes\/cfg\/kube-apiserver\nExecStart=\/cloud\/k8s\/kubernetes\/bin\/kube-apiserver $KUBE_APISERVER_OPTS\nRestart=on-failure\n[Install]\nWantedBy=multi-user.target\n<\/pre>\n<p>\u542f\u52a8\u670d\u52a1<\/p>\n<pre>systemctl daemon-reload\nsystemctl enable kube-apiserver\nsystemctl restart kube-apiserver\n<\/pre>\n<p>\u67e5\u770bapiserver\u662f\u5426\u8fd0\u884c<\/p>\n<pre>[root@k8s-1 \/data\/ssl_config\/kubernetes] master\n# ps -ef |grep kube-apiserver\nroot      5475     1  2 7\u670830 ?       01:57:41 \/cloud\/k8s\/kubernetes\/bin\/kube-apiserver --logtostderr=true --v=4 --etcd-servers=https:\/\/192.168.123.211:2379,https:\/\/192.168.123.212:2379,https:\/\/192.168.123.213:2379 --bind-address=192.168.123.211 --secure-port=6443 --advertise-address=192.168.123.211 --allow-privileged=true --service-cluster-ip-range=10.0.0.0\/24 --enable-admission-plugins=NamespaceLifecycle,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota,NodeRestriction --authorization-mode=RBAC,Node --enable-bootstrap-token-auth --token-auth-file=\/cloud\/k8s\/kubernetes\/cfg\/token.csv --service-node-port-range=30000-50000 --tls-cert-file=\/cloud\/k8s\/kubernetes\/ssl\/server.pem --tls-private-key-file=\/cloud\/k8s\/kubernetes\/ssl\/server-key.pem --client-ca-file=\/cloud\/k8s\/kubernetes\/ssl\/ca.pem --service-account-key-file=\/cloud\/k8s\/kubernetes\/ssl\/ca-key.pem --etcd-cafile=\/cloud\/k8s\/etcd\/ssl\/ca.pem --etcd-certfile=\/cloud\/k8s\/etcd\/ssl\/server.pem --etcd-keyfile=\/cloud\/k8s\/etcd\/ssl\/server-key.pem\nroot      6886  2930  0 19:49 pts\/0    00:00:00 grep --color=auto kube-apiserver\n<\/pre>\n<p><a name=\\\"n314u\\\"><\/a><\/p>\n<h4 id=\\\"title-27\\\"><span id=\\\"354_kube-scheduler\\\">3.5.4 \u90e8\u7f72kube-scheduler<\/span><\/h4>\n<p>\u521b\u5efakube-scheduler\u914d\u7f6e\u6587\u4ef6<\/p>\n<pre>vim  \/cloud\/k8s\/kubernetes\/cfg\/kube-scheduler\nKUBE_SCHEDULER_OPTS=\\\"--logtostderr=true --v=4 --master=127.0.0.1:8080 --leader-elect\\\"\n<\/pre>\n<blockquote>\n<pre>--address\uff1a\u5728 127.0.0.1:10251 \u7aef\u53e3\u63a5\u6536 http \/metrics \u8bf7\u6c42\uff1bkube-scheduler \u76ee\u524d\u8fd8\u4e0d\u652f\u6301\u63a5\u6536 https \u8bf7\u6c42\uff1b\n<\/pre>\n<p>&#8211;kubeconfig\uff1a\u6307\u5b9a kubeconfig \u6587\u4ef6\u8def\u5f84\uff0ckube-scheduler \u4f7f\u7528\u5b83\u8fde\u63a5\u548c\u9a8c\u8bc1 kube-apiserver\uff1b<br \/>\n&#8211;leader-elect=true\uff1a\u96c6\u7fa4\u8fd0\u884c\u6a21\u5f0f\uff0c\u542f\u7528\u9009\u4e3e\u529f\u80fd\uff1b\u88ab\u9009\u4e3a leader \u7684\u8282\u70b9\u8d1f\u8d23\u5904\u7406\u5de5\u4f5c\uff0c\u5176\u5b83\u8282\u70b9\u4e3a\u963b\u585e\u72b6\u6001\uff1b<\/p><\/blockquote>\n<p>\u521b\u5efakube-scheduler systemd unit \u6587\u4ef6<\/p>\n<pre>vim \/usr\/lib\/systemd\/system\/kube-scheduler.service\n[Unit]\nDescription=Kubernetes Scheduler\nDocumentation=https:\/\/github.com\/kubernetes\/kubernetes\n[Service]\nEnvironmentFile=\/cloud\/k8s\/kubernetes\/cfg\/kube-scheduler\nExecStart=\/cloud\/k8s\/kubernetes\/bin\/kube-scheduler $KUBE_SCHEDULER_OPTS\nRestart=on-failure\n[Install]\nWantedBy=multi-user.target\n<\/pre>\n<p>\u542f\u52a8kube-scheduler\u670d\u52a1<\/p>\n<pre>systemctl daemon-reload\nsystemctl enable kube-scheduler.service\nsystemctl restart kube-scheduler.service\n<\/pre>\n<p>\u67e5\u770bkube-scheduler\u662f\u5426\u8fd0\u884c<\/p>\n<pre>[root@k8s-1 \/data\/ssl_config\/kubernetes] master\n#  ps -ef |grep kube-scheduler\nroot      7269  2930  0 19:54 pts\/0    00:00:00 grep --color=auto kube-scheduler\nroot     13970     1  0 8\u670802 ?       00:01:21 \/cloud\/k8s\/kubernetes\/bin\/kube-scheduler --logtostderr=true --v=4 --master=127.0.0.1:8080 --leader-elect\n[root@k8s-1 \/data\/ssl_config\/kubernetes] master\n# systemctl status kube-scheduler\n\u25cf kube-scheduler.service - Kubernetes Scheduler\n   Loaded: loaded (\/usr\/lib\/systemd\/system\/kube-scheduler.service; enabled; vendor preset: disabled)\n   Active: active (running) since \u4e94 2019-08-02 18:33:11 CST; 1 day 1h ago\n     Docs: https:\/\/github.com\/kubernetes\/kubernetes\n Main PID: 13970 (kube-scheduler)\n    Tasks: 10\n   Memory: 19.1M\n   CGroup: \/system.slice\/kube-scheduler.service\n           \u2514\u250013970 \/cloud\/k8s\/kubernetes\/bin\/kube-scheduler --logtostderr=tru...\n8\u6708 03 19:46:52 k8s-1 kube-scheduler[13970]: I0803 19:46:52.580662   13970 ...d\n8\u6708 03 19:47:03 k8s-1 kube-scheduler[13970]: I0803 19:47:03.578985   13970 ...d\n8\u6708 03 19:47:03 k8s-1 kube-scheduler[13970]: I0803 19:47:03.583437   13970 ...d\n8\u6708 03 19:48:31 k8s-1 kube-scheduler[13970]: I0803 19:48:31.637472   13970 ...d\n8\u6708 03 19:48:48 k8s-1 kube-scheduler[13970]: I0803 19:48:48.617124   13970 ...d\n8\u6708 03 19:50:00 k8s-1 kube-scheduler[13970]: I0803 19:50:00.589103   13970 ...d\n8\u6708 03 19:50:18 k8s-1 kube-scheduler[13970]: I0803 19:50:18.616574   13970 ...d\n8\u6708 03 19:52:15 k8s-1 kube-scheduler[13970]: I0803 19:52:15.629976   13970 ...d\n8\u6708 03 19:52:45 k8s-1 kube-scheduler[13970]: I0803 19:52:45.580103   13970 ...d\n8\u6708 03 19:53:56 k8s-1 kube-scheduler[13970]: I0803 19:53:56.601687   13970 ...d\nHint: Some lines were ellipsized, use -l to show in full.\n<\/pre>\n<p><a name=\\\"lItbl\\\"><\/a><\/p>\n<h4 id=\\\"title-28\\\"><span id=\\\"355_kube-controller-manager\\\">3.5.5 \u90e8\u7f72kube-controller-manager<\/span><\/h4>\n<p>\u521b\u5efakube-controller-manager\u914d\u7f6e\u6587\u4ef6<\/p>\n<pre>vim  \/cloud\/k8s\/kubernetes\/cfg\/kube-controller-manager\nKUBE_CONTROLLER_MANAGER_OPTS=\\\"--logtostderr=true \\\\\n--v=4 \\\\\n--master=127.0.0.1:8080 \\\\\n--leader-elect=true \\\\\n--address=127.0.0.1 \\\\\n--service-cluster-ip-range=10.0.0.0\/24 \\\\\n--cluster-name=kubernetes \\\\\n--cluster-signing-cert-file=\/cloud\/k8s\/kubernetes\/ssl\/ca.pem \\\\\n--cluster-signing-key-file=\/cloud\/k8s\/kubernetes\/ssl\/ca-key.pem  \\\\\n--root-ca-file=\/cloud\/k8s\/kubernetes\/ssl\/ca.pem \\\\\n--service-account-private-key-file=\/cloud\/k8s\/kubernetes\/ssl\/ca-key.pem\\\"\n<\/pre>\n<p>\u521b\u5efakube-controller-manager systemd unit \u6587\u4ef6<\/p>\n<pre>vim  \/usr\/lib\/systemd\/system\/kube-controller-manager.service\n[Unit]\nDescription=Kubernetes Controller Manager\nDocumentation=https:\/\/github.com\/kubernetes\/kubernetes\n[Service]\nEnvironmentFile=\/cloud\/k8s\/kubernetes\/cfg\/kube-controller-manager\nExecStart=\/cloud\/k8s\/kubernetes\/bin\/kube-controller-manager $KUBE_CONTROLLER_MANAGER_OPTS\nRestart=on-failure\n[Install]\nWantedBy=multi-user.target\n<\/pre>\n<p>\u542f\u52a8\u670d\u52a1<\/p>\n<pre>systemctl daemon-reload\nsystemctl enable kube-controller-manager\nsystemctl restart kube-controller-manager\n<\/pre>\n<p>\u67e5\u770bkube-controller-manager\u662f\u5426\u8fd0\u884c<\/p>\n<pre>[root@k8s-1 \/data\/ssl_config\/kubernetes] master\n# ps -ef |grep kube-controller-manager\nroot      7759  2930  0 19:59 pts\/0    00:00:00 grep --color=auto kube-controller-manager\nroot     13972     1  0 8\u670802 ?       00:10:56 \/cloud\/k8s\/kubernetes\/bin\/kube-controller-manager --logtostderr=true --v=4 --master=127.0.0.1:8080 --leader-elect=true --address=127.0.0.1 --service-cluster-ip-range=10.0.0.0\/24 --cluster-name=kubernetes --cluster-signing-cert-file=\/cloud\/k8s\/kubernetes\/ssl\/ca.pem --cluster-signing-key-file=\/cloud\/k8s\/kubernetes\/ssl\/ca-key.pem --root-ca-file=\/cloud\/k8s\/kubernetes\/ssl\/ca.pem --service-account-private-key-file=\/cloud\/k8s\/kubernetes\/ssl\/ca-key.pem\n[root@k8s-1 \/data\/ssl_config\/kubernetes] master\n#  systemctl status kube-controller-manager\n\u25cf kube-controller-manager.service - Kubernetes Controller Manager\n   Loaded: loaded (\/usr\/lib\/systemd\/system\/kube-controller-manager.service; enabled; vendor preset: disabled)\n   Active: active (running) since \u4e94 2019-08-02 18:33:13 CST; 1 day 1h ago\n     Docs: https:\/\/github.com\/kubernetes\/kubernetes\n Main PID: 13972 (kube-controller)\n    Tasks: 10\n   Memory: 51.9M\n   CGroup: \/system.slice\/kube-controller-manager.service\n           \u2514\u250013972 \/cloud\/k8s\/kubernetes\/bin\/kube-controller-manager --logtos...\n8\u6708 03 19:59:48 k8s-1 kube-controller-manager[13972]: I0803 19:59:48.522342 ...\n8\u6708 03 19:59:48 k8s-1 kube-controller-manager[13972]: I0803 19:59:48.526381 ...\n8\u6708 03 19:59:50 k8s-1 kube-controller-manager[13972]: I0803 19:59:50.211112 ...\n8\u6708 03 19:59:50 k8s-1 kube-controller-manager[13972]: I0803 19:59:50.455555 ...\n8\u6708 03 19:59:50 k8s-1 kube-controller-manager[13972]: I0803 19:59:50.738397 ...\n8\u6708 03 19:59:50 k8s-1 kube-controller-manager[13972]: I0803 19:59:50.767332 ...\n8\u6708 03 19:59:51 k8s-1 kube-controller-manager[13972]: I0803 19:59:51.502835 ...\n8\u6708 03 19:59:53 k8s-1 kube-controller-manager[13972]: I0803 19:59:53.567923 ...\n8\u6708 03 19:59:53 k8s-1 kube-controller-manager[13972]: I0803 19:59:53.567955 ...\n8\u6708 03 19:59:54 k8s-1 kube-controller-manager[13972]: I0803 19:59:54.321341 ...\nHint: Some lines were ellipsized, use -l to show in full.\n<\/pre>\n<p><a name=\\\"bd17q\\\"><\/a><\/p>\n<h4 id=\\\"title-29\\\"><span id=\\\"356_master\\\">3.5.6 \u67e5\u770bmaster\u96c6\u7fa4\u72b6\u6001<\/span><\/h4>\n<pre>[root@k8s-1 \/root] master\n# kubectl get cs,nodes\nNAME                                 STATUS    MESSAGE             ERROR\ncomponentstatus\/controller-manager   Healthy   ok\ncomponentstatus\/scheduler            Healthy   ok\ncomponentstatus\/etcd-2               Healthy   {\\\"health\\\":\\\"true\\\"}\ncomponentstatus\/etcd-1               Healthy   {\\\"health\\\":\\\"true\\\"}\ncomponentstatus\/etcd-0               Healthy   {\\\"health\\\":\\\"true\\\"}\n<\/pre>\n<p><a name=\\\"v6nJy\\\"><\/a><\/p>\n<h3><span id=\\\"36_node\\\">3.6 \u90e8\u7f72node \u8282\u70b9<\/span><\/h3>\n<blockquote><p>kubernetes work \u8282\u70b9\u8fd0\u884c\u5982\u4e0b\u7ec4\u4ef6\uff1a<br \/>\ndocker<br \/>\nkubelet<br \/>\nkube-proxy<\/p><\/blockquote>\n<p><a name=\\\"psQXf\\\"><\/a><\/p>\n<h4 id=\\\"title-30\\\"><span id=\\\"361_kubelet\\\">3.6.1 \u90e8\u7f72 kubelet \u7ec4\u4ef6<\/span><\/h4>\n<blockquote>\n<pre>kublet \u8fd0\u884c\u5728\u6bcf\u4e2a worker \u8282\u70b9\u4e0a\uff0c\u63a5\u6536 kube-apiserver \u53d1\u9001\u7684\u8bf7\u6c42\uff0c\u7ba1\u7406 Pod \u5bb9\u5668\uff0c\u6267\u884c\u4ea4\u4e92\u5f0f\u547d\u4ee4\uff0c\u5982exec\u3001run\u3001logs \u7b49;\n<\/pre>\n<p>kublet \u542f\u52a8\u65f6\u81ea\u52a8\u5411 kube-apiserver \u6ce8\u518c\u8282\u70b9\u4fe1\u606f\uff0c\u5185\u7f6e\u7684 cadvisor \u7edf\u8ba1\u548c\u76d1\u63a7\u8282\u70b9\u7684\u8d44\u6e90\u4f7f\u7528\u60c5\u51b5;<br \/>\n\u4e3a\u786e\u4fdd\u5b89\u5168\uff0c\u672c\u6587\u6863\u53ea\u5f00\u542f\u63a5\u6536 https \u8bf7\u6c42\u7684\u5b89\u5168\u7aef\u53e3\uff0c\u5bf9\u8bf7\u6c42\u8fdb\u884c\u8ba4\u8bc1\u548c\u6388\u6743\uff0c\u62d2\u7edd\u672a\u6388\u6743\u7684\u8bbf\u95ee(\u5982apiserver\u3001heapster)\u3002<\/p><\/blockquote>\n<p>\u914d\u7f6enode\u8282\u70b9<\/p>\n<pre>cd \/data\/install\/kubernetes\/server\/bin\/\nscp kubelet kube-proxy k8s-2:\/cloud\/k8s\/kubernetes\/bin\/\nscp kubelet kube-proxy k8s-3:\/cloud\/k8s\/kubernetes\/bin\/\n<\/pre>\n<p>\u521b\u5efa kubelet bootstrap.kubeconfig \u6587\u4ef6<\/p>\n<pre> cd \/data\/ssl_config\/kubernetes\/\nvim environment.sh\n# \u521b\u5efakubelet bootstrapping kubeconfig\nBOOTSTRAP_TOKEN=449bbeb0ea7e50f321087a123a509a19\nKUBE_APISERVER=\\\"https:\/\/192.168.123.211:6443\\\"\n# \u8bbe\u7f6e\u96c6\u7fa4\u53c2\u6570\nkubectl config set-cluster kubernetes \\\\\n  --certificate-authority=.\/ca.pem \\\\\n  --embed-certs=true \\\\\n  --server=${KUBE_APISERVER} \\\\\n  --kubeconfig=bootstrap.kubeconfig\n# \u8bbe\u7f6e\u5ba2\u6237\u7aef\u8ba4\u8bc1\u53c2\u6570\nkubectl config set-credentials kubelet-bootstrap \\\\\n  --token=${BOOTSTRAP_TOKEN} \\\\\n  --kubeconfig=bootstrap.kubeconfig\n# \u8bbe\u7f6e\u4e0a\u4e0b\u6587\u53c2\u6570\nkubectl config set-context default \\\\\n  --cluster=kubernetes \\\\\n  --user=kubelet-bootstrap \\\\\n  --kubeconfig=bootstrap.kubeconfig\n# \u8bbe\u7f6e\u9ed8\u8ba4\u4e0a\u4e0b\u6587\nkubectl config use-context default --kubeconfig=bootstrap.kubeconfig\n<\/pre>\n<blockquote><p>\u901a\u8fc7\u00a0bash environment.sh\u83b7\u53d6 bootstrap.kubeconfig \u914d\u7f6e\u6587\u4ef6\u3002<\/p><\/blockquote>\n<p>\u521b\u5efa kubelet.kubeconfig \u6587\u4ef6<\/p>\n<pre>vim envkubelet.kubeconfig.sh\n# \u521b\u5efakubelet bootstrapping kubeconfig\nBOOTSTRAP_TOKEN=449bbeb0ea7e50f321087a123a509a19\nKUBE_APISERVER=\\\"https:\/\/192.168.123.211:6443\\\"\n# \u8bbe\u7f6e\u96c6\u7fa4\u53c2\u6570\nkubectl config set-cluster kubernetes \\\\\n  --certificate-authority=.\/ca.pem \\\\\n  --embed-certs=true \\\\\n  --server=${KUBE_APISERVER} \\\\\n  --kubeconfig=kubelet.kubeconfig\n# \u8bbe\u7f6e\u5ba2\u6237\u7aef\u8ba4\u8bc1\u53c2\u6570\nkubectl config set-credentials kubelet \\\\\n  --token=${BOOTSTRAP_TOKEN} \\\\\n  --kubeconfig=kubelet.kubeconfig\n# \u8bbe\u7f6e\u4e0a\u4e0b\u6587\u53c2\u6570\nkubectl config set-context default \\\\\n  --cluster=kubernetes \\\\\n  --user=kubelet \\\\\n  --kubeconfig=kubelet.kubeconfig\n# \u8bbe\u7f6e\u9ed8\u8ba4\u4e0a\u4e0b\u6587\nkubectl config use-context default --kubeconfig=kubelet.kubeconfig\n<\/pre>\n<p>\u521b\u5efakube-proxy kubeconfig\u6587\u4ef6<\/p>\n<pre>vim  env_proxy.sh\n# \u521b\u5efakube-proxy kubeconfig\u6587\u4ef6\nBOOTSTRAP_TOKEN=449bbeb0ea7e50f321087a123a509a19\nKUBE_APISERVER=\\\"https:\/\/192.168.123.211:6443\\\"\nkubectl config set-cluster kubernetes \\\\\n  --certificate-authority=.\/ca.pem \\\\\n  --embed-certs=true \\\\\n  --server=${KUBE_APISERVER} \\\\\n  --kubeconfig=kube-proxy.kubeconfig\nkubectl config set-credentials kube-proxy \\\\\n  --client-certificate=.\/kube-proxy.pem \\\\\n  --client-key=.\/kube-proxy-key.pem \\\\\n  --embed-certs=true \\\\\n  --kubeconfig=kube-proxy.kubeconfig\nkubectl config set-context default \\\\\n  --cluster=kubernetes \\\\\n  --user=kube-proxy \\\\\n  --kubeconfig=kube-proxy.kubeconfig\nkubectl config use-context default --kubeconfig=kube-proxy.kubeconfig\n<\/pre>\n<p>\u5c06bootstrap kubeconfig kube-proxy.kubeconfig \u6587\u4ef6\u62f7\u8d1d\u5230\u6240\u6709 nodes\u8282\u70b9<\/p>\n<pre>scp -rp bootstrap.kubeconfig kube-proxy.kubeconfig k8s-2:\/cloud\/k8s\/kubernetes\/cfg\/\nscp -rp bootstrap.kubeconfig kube-proxy.kubeconfig k8s-3:\/cloud\/k8s\/kubernetes\/cfg\/\n<\/pre>\n<p><a name=\\\"8lXKd\\\"><\/a><\/p>\n<h4 id=\\\"title-31\\\"><span id=\\\"362_kubelet_nodes\\\">3.6.2 \u521b\u5efakubelet \u53c2\u6570\u914d\u7f6e\u6587\u4ef6\u62f7\u8d1d\u5230\u6240\u6709 nodes\u8282\u70b9<\/span><\/h4>\n<p>\u521b\u5efa kubelet \u53c2\u6570\u914d\u7f6e\u6a21\u677f\u6587\u4ef6<\/p>\n<pre>[root@k8s-2 \/root] node\n# cat \/cloud\/k8s\/kubernetes\/cfg\/kubelet.config\nkind: KubeletConfiguration\napiVersion: kubelet.config.k8s.io\/v1beta1\naddress: 192.168.123.212\nport: 10250\nreadOnlyPort: 10255\ncgroupDriver: cgroupfs\nclusterDomain: cluster.local.\nfailSwapOn: false\nauthentication:\n  anonymous:\n    enabled: true\n<\/pre>\n<p>\u521b\u5efakubelet\u914d\u7f6e\u6587\u4ef6<\/p>\n<pre>vim  \/cloud\/k8s\/kubernetes\/cfg\/kubelet\nKUBELET_OPTS=\\\"--logtostderr=true \\\\\n--v=4 \\\\\n--hostname-override=k8s-2 \\\\\n--kubeconfig=\/cloud\/k8s\/kubernetes\/cfg\/kubelet.kubeconfig \\\\\n--bootstrap-kubeconfig=\/cloud\/k8s\/kubernetes\/cfg\/bootstrap.kubeconfig \\\\\n--config=\/cloud\/k8s\/kubernetes\/cfg\/kubelet.config \\\\\n--cert-dir=\/cloud\/k8s\/kubernetes\/ssl \\\\\n--pod-infra-container-image=registry.cn-hangzhou.aliyuncs.com\/google-containers\/pause-amd64:3.0\\\"\n<\/pre>\n<p>\u521b\u5efakubelet systemd unit \u6587\u4ef6<\/p>\n<pre> vim \/usr\/lib\/systemd\/system\/kubelet.service\n[Unit]\nDescription=Kubernetes Kubelet\nAfter=docker.service\nRequires=docker.service\n[Service]\nEnvironmentFile=\/cloud\/k8s\/kubernetes\/cfg\/kubelet\nExecStart=\/cloud\/k8s\/kubernetes\/bin\/kubelet $KUBELET_OPTS\nRestart=on-failure\nKillMode=process\n[Install]\nWantedBy=multi-user.target\n<\/pre>\n<p>\u5c06kubelet-bootstrap\u7528\u6237\u7ed1\u5b9a\u5230\u7cfb\u7edf\u96c6\u7fa4\u89d2\u8272<\/p>\n<pre>kubectl create clusterrolebinding kubelet-bootstrap \\\\\n  --clusterrole=system:node-bootstrapper \\\\\n  --user=kubelet-bootstrap\n<\/pre>\n<p><a name=\\\"xN1Wr\\\"><\/a><\/p>\n<h4 id=\\\"title-32\\\"><span id=\\\"363_kubelet\\\">3.6.3 \u542f\u52a8kubelet\u670d\u52a1<\/span><\/h4>\n<pre>systemctl daemon-reload\nsystemctl enable kubelet\nsystemctl restart kubelet\n<\/pre>\n<p><a name=\\\"fB8C0\\\"><\/a><\/p>\n<h4 id=\\\"title-33\\\"><span id=\\\"364_approve_kubelet_CSR\\\">3.6.4 approve kubelet CSR \u8bf7\u6c42<\/span><\/h4>\n<pre>kubectl get csr\nkubectl certificate approve $NAME\nkubectl get csr\ncsr \u72b6\u6001\u53d8\u4e3a Approved,Issued \u5373\u53ef\n<\/pre>\n<blockquote>\n<ul>\n<li>Requesting User\uff1a\u8bf7\u6c42 CSR \u7684\u7528\u6237\uff0ckube-apiserver \u5bf9\u5b83\u8fdb\u884c\u8ba4\u8bc1\u548c\u6388\u6743\uff1b<\/li>\n<li>Subject\uff1a\u8bf7\u6c42\u7b7e\u540d\u7684\u8bc1\u4e66\u4fe1\u606f\uff1b<\/li>\n<li>\u8bc1\u4e66\u7684 CN \u662f system:node:kube-node2\uff0c Organization \u662f system:nodes\uff0ckube-apiserver \u7684 Node \u6388\u6743\u6a21\u5f0f\u4f1a\u6388\u4e88\u8be5\u8bc1\u4e66\u7684\u76f8\u5173\u6743\u9650\uff1b<\/li>\n<\/ul>\n<\/blockquote>\n<p><a name=\\\"614St\\\"><\/a><\/p>\n<h4 id=\\\"title-34\\\"><span id=\\\"365\\\">3.6.5 \u67e5\u770b\u96c6\u7fa4\u72b6\u6001<\/span><\/h4>\n<pre>[root@k8s-1 \/root] master\n# kubectl  get  nodes,cs\nNAME         STATUS   ROLES   AGE     VERSION\nnode\/k8s-2   Ready    node    3d22h   v1.15.1\nnode\/k8s-3   Ready    node    3d22h   v1.15.1\nNAME                                 STATUS    MESSAGE             ERROR\ncomponentstatus\/scheduler            Healthy   ok\ncomponentstatus\/controller-manager   Healthy   ok\ncomponentstatus\/etcd-0               Healthy   {\\\"health\\\":\\\"true\\\"}\ncomponentstatus\/etcd-2               Healthy   {\\\"health\\\":\\\"true\\\"}\ncomponentstatus\/etcd-1               Healthy   {\\\"health\\\":\\\"true\\\"}\n<\/pre>\n<p><a name=\\\"LJxcV\\\"><\/a><\/p>\n<h3><span id=\\\"37_node_kube-proxy\\\">3.7 \u90e8\u7f72 node kube-proxy \u7ec4\u4ef6<\/span><\/h3>\n<blockquote><p>kube-proxy \u8fd0\u884c\u5728\u6240\u6709 node\u8282\u70b9\u4e0a\uff0c\u5b83\u76d1\u542c apiserver \u4e2d service \u548c Endpoint \u7684\u53d8\u5316\u60c5\u51b5\uff0c\u521b\u5efa\u8def\u7531\u89c4\u5219\u6765\u8fdb\u884c\u670d\u52a1\u8d1f\u8f7d\u5747\u8861\u3002<\/p><\/blockquote>\n<p><a name=\\\"OQ3TZ\\\"><\/a><\/p>\n<h4 id=\\\"title-35\\\"><span id=\\\"371_kube-proxy\\\">3.7.1 \u521b\u5efakube-proxy\u914d\u7f6e\u6587\u4ef6<\/span><\/h4>\n<pre>vim  \/cloud\/k8s\/kubernetes\/cfg\/kube-proxy\nKUBE_PROXY_OPTS=\\\"--logtostderr=true \\\\\n--v=4 \\\\\n--hostname-override=k8s-2 \\\\\n--cluster-cidr=10.0.0.0\/24 \\\\\n--kubeconfig=\/cloud\/k8s\/kubernetes\/cfg\/kube-proxy.kubeconfig\\\"\n<\/pre>\n<p><a name=\\\"SBiQa\\\"><\/a><\/p>\n<h4 id=\\\"title-36\\\"><span id=\\\"372_kube-proxy_systemd_unit\\\">3.7.2 \u521b\u5efakube-proxy systemd unit \u6587\u4ef6<\/span><\/h4>\n<pre>vim \/usr\/lib\/systemd\/system\/kube-proxy.service\n[Unit]\nDescription=Kubernetes Proxy\nAfter=network.target\n[Service]\nEnvironmentFile=\/cloud\/k8s\/kubernetes\/cfg\/kube-proxy\nExecStart=\/cloud\/k8s\/kubernetes\/bin\/kube-proxy $KUBE_PROXY_OPTS\nRestart=on-failure\n[Install]\nWantedBy=multi-user.target\n<\/pre>\n<p><a name=\\\"7Tzpi\\\"><\/a><\/p>\n<h4 id=\\\"title-37\\\"><span id=\\\"373_kube-proxy\\\">3.7.3 \u542f\u52a8kube-proxy\u670d\u52a1<\/span><\/h4>\n<pre>systemctl daemon-reload\nsystemctl enable kube-proxy\nsystemctl restart kube-proxy\n<\/pre>\n<p><a name=\\\"ZVmi2\\\"><\/a><\/p>\n<h4 id=\\\"title-38\\\"><span id=\\\"374\\\">3.7.4 \u68c0\u67e5\u670d\u52a1\u8fd0\u884c\u72b6\u6001<\/span><\/h4>\n<pre>[root@k8s-2 \/root] node\n#  systemctl status kube-proxy\n\u25cf kube-proxy.service - Kubernetes Proxy\n   Loaded: loaded (\/usr\/lib\/systemd\/system\/kube-proxy.service; enabled; vendor preset: disabled)\n   Active: active (running) since \u4e8c 2019-07-30 22:30:04 CST; 3 days ago\n Main PID: 5764 (kube-proxy)\n    Tasks: 0\n   Memory: 11.8M\n   CGroup: \/system.slice\/kube-proxy.service\n           \u2023 5764 \/cloud\/k8s\/kubernetes\/bin\/kube-proxy --logtostderr=true --v...\n8\u6708 03 20:51:33 k8s-2 kube-proxy[5764]: I0803 20:51:33.736946    5764 iptab...]\n8\u6708 03 20:51:33 k8s-2 kube-proxy[5764]: I0803 20:51:33.740738    5764 healt...\\\"\n8\u6708 03 20:51:33 k8s-2 kube-proxy[5764]: I0803 20:51:33.740762    5764 proxi...s\n8\u6708 03 20:51:33 k8s-2 kube-proxy[5764]: I0803 20:51:33.740780    5764 bound...s\n8\u6708 03 20:51:34 k8s-2 kube-proxy[5764]: I0803 20:51:34.018700    5764 confi...e\n8\u6708 03 20:51:34 k8s-2 kube-proxy[5764]: I0803 20:51:34.028396    5764 confi...e\n8\u6708 03 20:51:36 k8s-2 kube-proxy[5764]: I0803 20:51:36.035812    5764 confi...e\n8\u6708 03 20:51:36 k8s-2 kube-proxy[5764]: I0803 20:51:36.046563    5764 confi...e\n8\u6708 03 20:51:38 k8s-2 kube-proxy[5764]: I0803 20:51:38.045395    5764 confi...e\n8\u6708 03 20:51:38 k8s-2 kube-proxy[5764]: I0803 20:51:38.061197    5764 confi...e\nHint: Some lines were ellipsized, use -l to show in full.\n<\/pre>\n<p>\u81f3\u6b64 kubernetes 1.15 \u7248\u672c\u7b80\u5355\u90e8\u7f72\u5b8c\u6210~<br \/>\n[\u672a\u5b8c\u5f85\u7eed]<\/p>\n<div id=\\\"toc_container\\\">\n<ul>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#1\\\">1. \u67b6\u6784\u7bc7<\/a>\n<ul>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#11_kubernetes\\\">1.1 kubernetes \u67b6\u6784\u8bf4\u660e<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#12_Flannel\\\">1.2 Flannel\u7f51\u7edc\u67b6\u6784\u56fe<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#13_Kubernetes\\\">1.3 Kubernetes\u5de5\u4f5c\u6d41\u7a0b<\/a><\/li>\n<\/ul>\n<\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#2\\\">2. \u73af\u5883\u8bf4\u660e<\/a>\n<ul>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#21\\\">2.1 \u90e8\u7f72\u8282\u70b9\u8bf4\u660e<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#22\\\">2.2 \u64cd\u4f5c\u7cfb\u7edf\u73af\u5883<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#23\\\">2.3 \u8f6f\u4ef6\u5305\u7248\u672c<\/a><\/li>\n<\/ul>\n<\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#3_Kubernetes\\\">3. Kubernetes \u5b89\u88c5\u53ca\u914d\u7f6e<\/a>\n<ul>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#31\\\">3.1 \u521d\u59cb\u5316\u73af\u5883<\/a>\n<ul>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#311_SELINUX\\\">3.1.1 \u8bbe\u7f6e\u5173\u95ed\u9632\u706b\u5899\u53caSELINUX<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#312_swap\\\">3.1.2 \u5173\u95edswap<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#313_Docker\\\">3.1.3 \u8bbe\u7f6eDocker\u6240\u9700\u53c2\u6570<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#314_Docker\\\">3.1.4 \u5b89\u88c5 Docker<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#315\\\">3.1.5 \u521b\u5efa\u76f8\u5173\u76ee\u5f55<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#316_SSH\\\">3.1.6 SSH \u4e92\u4fe1\u914d\u7f6e<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#317_PATH\\\">3.1.7 \u6dfb\u52a0 PATH \u53d8\u91cf<\/a><\/li>\n<\/ul>\n<\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#32_ssl\\\">3.2 \u521b\u5efassl\u8bc1\u4e66<\/a>\n<ul>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#321_CFSSL\\\">3.2.1 \u5b89\u88c5\u53ca\u914d\u7f6eCFSSL<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#322_ETCD\\\">3.2.2 \u521b\u5efa ETCD \u76f8\u5173\u8bc1\u4e66<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#323_Kubernetes\\\">3.2.3 \u521b\u5efa Kubernetes \u76f8\u5173\u8bc1\u4e66<\/a><\/li>\n<\/ul>\n<\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#33_etcd\\\">3.3 \u90e8\u7f72etcd<\/a>\n<ul>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#331\\\">3.3.1 \u914d\u7f6e\u8f6f\u4ef6\u5305<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#332_etcd\\\">3.3.2 \u7f16\u8f91etcd\u914d\u7f6e\u6587\u4ef6<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#333_etcd_systemd_unit\\\">3.3.3 \u521b\u5efa etcd\u7684 systemd unit \u6587\u4ef6<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#334\\\">3.3.4 \u914d\u7f6e\u8bc1\u4e66\u6587\u4ef6<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#335_12\\\">3.3.5 \u914d\u7f6e\u6587\u4ef6\u62f7\u8d1d\u5230 \u8282\u70b91\u3001\u8282\u70b92<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#336_ETCD\\\">3.3.6 \u542f\u52a8ETCD\u670d\u52a1<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#337\\\">3.3.7 \u68c0\u67e5\u670d\u52a1\u662f\u5426\u6b63\u5e38<\/a><\/li>\n<\/ul>\n<\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#34_Flannel\\\">3.4 \u90e8\u7f72Flannel\u7f51\u7edc<\/a>\n<ul>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#341_etcd_Pod\\\">3.4.1 \u5411 etcd \u5199\u5165\u96c6\u7fa4 Pod \u7f51\u6bb5\u4fe1\u606f<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#342_flannel\\\">3.4.2 \u90e8\u7f72 flannel<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#353_flannel\\\">3.5.3 \u914d\u7f6eflannel<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#354_flanneld_systemd_unit\\\">3.5.4 \u521b\u5efa flanneld \u7684 systemd unit \u6587\u4ef6<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#355_Docker\\\">3.5.5 \u914d\u7f6eDocker\u542f\u52a8\u6307\u5b9a\u5b50\u7f51\u6bb5<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#356_flanneld_systemd_unit\\\">3.5.6 \u5c06flanneld systemd unit \u6587\u4ef6\u5230\u6240\u6709\u8282\u70b9<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#357_fannel\\\">3.5.7 \u9a8c\u8bc1fannel\u7f51\u7edc\u914d\u7f6e<\/a><\/li>\n<\/ul>\n<\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#35_master\\\">3.5 \u90e8\u7f72 master \u8282\u70b9<\/a>\n<ul>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#351__master\\\">3.5.1 \u914d\u7f6e master \u8282\u70b9\u6587\u4ef6<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#352_kubernetes\\\">3.5.2 \u914d\u7f6e kubernetes\u76f8\u5173\u8bc1\u4e66<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#353_kube-apiserver\\\">3.5.3 \u90e8\u7f72 kube-apiserver \u7ec4\u4ef6<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#354_kube-scheduler\\\">3.5.4 \u90e8\u7f72kube-scheduler<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#355_kube-controller-manager\\\">3.5.5 \u90e8\u7f72kube-controller-manager<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#356_master\\\">3.5.6 \u67e5\u770bmaster\u96c6\u7fa4\u72b6\u6001<\/a><\/li>\n<\/ul>\n<\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#36_node\\\">3.6 \u90e8\u7f72node \u8282\u70b9<\/a>\n<ul>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#361_kubelet\\\">3.6.1 \u90e8\u7f72 kubelet \u7ec4\u4ef6<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#362_kubelet_nodes\\\">3.6.2 \u521b\u5efakubelet \u53c2\u6570\u914d\u7f6e\u6587\u4ef6\u62f7\u8d1d\u5230\u6240\u6709 nodes\u8282\u70b9<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#363_kubelet\\\">3.6.3 \u542f\u52a8kubelet\u670d\u52a1<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#364_approve_kubelet_CSR\\\">3.6.4 approve kubelet CSR \u8bf7\u6c42<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#365\\\">3.6.5 \u67e5\u770b\u96c6\u7fa4\u72b6\u6001<\/a><\/li>\n<\/ul>\n<\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#37_node_kube-proxy\\\">3.7 \u90e8\u7f72 node kube-proxy \u7ec4\u4ef6<\/a>\n<ul>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#371_kube-proxy\\\">3.7.1 \u521b\u5efakube-proxy\u914d\u7f6e\u6587\u4ef6<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#372_kube-proxy_systemd_unit\\\">3.7.2 \u521b\u5efakube-proxy systemd unit \u6587\u4ef6<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#373_kube-proxy\\\">3.7.3 \u542f\u52a8kube-proxy\u670d\u52a1<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html#374\\\">3.7.4 \u68c0\u67e5\u670d\u52a1\u8fd0\u884c\u72b6\u6001<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div>\n<div><img src=\\\"https:\/\/clsn.io\/wp-content\/uploads\/2018\/09\/clsn_linux.bmp\\\" alt=\\\"weinxin\\\" \/><\/p>\n<div>\u60e8\u7eff\u5c11\u5e74Linux<\/div>\n<div>\u8fd9\u662f\u6211\u7684\u5fae\u4fe1\u516c\u4f17\u53f7\uff0c\u626b\u4e00\u626b\u5c31\u53ef\u4ee5\u5173\u6ce8\u54e6!<\/div>\n<div><\/div>\n<\/div>\n<\/div>\n<div id=\\\"social\\\"><\/div>\n<footer>\n<ul id=\\\"fontsize\\\">\n<li>A+<\/li>\n<\/ul>\n<div>\n<div>\u6240\u5c5e\u5206\u7c7b\uff1a<a href=\\\"https:\/\/clsn.io\/clsn-ops\/linux-devops\/\\\" rel=\\\"category tag\\\">Linux\u8fd0\u7ef4<\/a>\u00a0<a href=\\\"https:\/\/clsn.io\/clsn-ops\/cloud\/\\\" rel=\\\"category tag\\\">\u4e91\u8ba1\u7b97<\/a>\u00a0<a href=\\\"https:\/\/clsn.io\/clsn-ops\/ops-linux\/acl\/\\\" rel=\\\"category tag\\\">\u5b89\u5168<\/a>\u00a0<a href=\\\"https:\/\/clsn.io\/clsn-ops\/cloud\/virt\/\\\" rel=\\\"category tag\\\">\u865a\u62df\u5316<\/a><\/div>\n<\/div>\n<\/footer>\n<div><\/div>\n<\/div>\n<\/article>\n<div><\/div>\n<div data-wow-delay=\\\"0.3s\\\"><img src=\\\"https:\/\/clsn.io\/wp-content\/uploads\/2018\/11\/clsn_avatar-64x64.png\\\" alt=\\\"\u60e8\u7eff\u5c11\u5e74\\\" width=\\\"64\\\" height=\\\"64\\\" \/><\/p>\n<ul>\n<li><\/li>\n<li>\u7248\u6743\u58f0\u660e\uff1a\u672c\u7ad9\u539f\u521b\u6587\u7ae0\uff0c\u4e8e2019-08-1617:15:43\uff0c\u7531\u00a0<a title=\\\"\u7531\u60e8\u7eff\u5c11\u5e74\u53d1\u5e03\\\" href=\\\"https:\/\/clsn.io\/clsn\/lxauthor\/clsn\/\\\" rel=\\\"author\\\">\u60e8\u7eff\u5c11\u5e74<\/a>\u00a0\u53d1\u8868\uff0c\u5171 28313 \u5b57\u3002<\/li>\n<li>\u8f6c\u8f7d\u8bf7\u6ce8\u660e\uff1a<a title=\\\"\u672c\u6587\u56fa\u5b9a\u94fe\u63a5 https:\/\/clsn.io\/clsn\/lx1517.html\\\" href=\\\"https:\/\/clsn.io\/clsn\/lx1517.html\\\" rel=\\\"bookmark\\\">Kubernetes V1.15 \u4e8c\u8fdb\u5236\u90e8\u7f72\u96c6\u7fa4 &#8211; CLSN<\/a><\/li>\n<\/ul>\n<div><\/div>\n<\/div>\n<div id=\\\"related-img\\\" data-wow-delay=\\\"0.3s\\\">\n<div>\n<div>\n<figure><a href=\\\"https:\/\/clsn.io\/clsn\/lx1506.html\\\"><img src=\\\"https:\/\/clsn.io\/wp-content\/themes\/clsn-003\/timthumb.php?src=https:\/\/cdn.nlark.com\/yuque\/0\/2019\/png\/206952\/1546349237907-95e4f36c-1edb-42ac-9486-0198e71abfff.png&amp;w=280&amp;h=210&amp;a=&amp;zc=1\\\" alt=\\\"ZABBIX 4.0 LTS \u90e8\u7f72\\\" \/><\/a><\/figure>\n<div><a href=\\\"https:\/\/clsn.io\/clsn\/lx1506.html\\\">ZABBIX 4.0 LTS \u90e8\u7f72<\/a><\/div>\n<\/div>\n<\/div>\n<div>\n<div>\n<figure><a href=\\\"https:\/\/clsn.io\/clsn\/lx1502.html\\\"><img src=\\\"https:\/\/clsn.io\/wp-content\/themes\/clsn-003\/timthumb.php?src=https:\/\/cdn.nlark.com\/yuque\/0\/2018\/png\/206952\/1543929389178-51ab7b60-4303-4cb5-8083-88794e6b6599.png&amp;w=280&amp;h=210&amp;a=&amp;zc=1\\\" alt=\\\"SSH + Google Authenticator \u5b89\u5168\u52a0\u56fa\\\" \/><\/a><\/figure>\n<div><a href=\\\"https:\/\/clsn.io\/clsn\/lx1502.html\\\">SSH + Google Authenticator \u5b89\u5168\u52a0\u56fa<\/a><\/div>\n<\/div>\n<\/div>\n<div>\n<div>\n<figure><a href=\\\"https:\/\/clsn.io\/clsn\/lx1490.html\\\"><img src=\\\"https:\/\/clsn.io\/wp-content\/themes\/clsn-003\/timthumb.php?src=https:\/\/cdn.nlark.com\/yuque\/0\/2018\/png\/206952\/1545622365883-0b7d8d3b-e38b-4ecc-b1df-9e69a8a279bf.png&amp;w=280&amp;h=210&amp;a=&amp;zc=1\\\" alt=\\\"Hadoop+HBase \u96c6\u7fa4\u642d\u5efa\\\" \/><\/a><\/figure>\n<div><a href=\\\"https:\/\/clsn.io\/clsn\/lx1490.html\\\">Hadoop+HBase \u96c6\u7fa4\u642d\u5efa<\/a><\/div>\n<\/div>\n<\/div>\n<div>\n<div>\n<figure><a href=\\\"https:\/\/clsn.io\/clsn\/lx1485.html\\\"><img src=\\\"https:\/\/clsn.io\/wp-content\/themes\/clsn-003\/timthumb.php?src=https:\/\/cdn.nlark.com\/yuque\/0\/2018\/png\/206952\/1542944277970-788386d6-5675-42da-86ef-394f15027011.png&amp;w=280&amp;h=210&amp;a=&amp;zc=1\\\" alt=\\\"\u81ea\u52a8\u5316\u8fd0\u7ef4\u4e4bPSSH\\\" \/><\/a><\/figure>\n<div><a href=\\\"https:\/\/clsn.io\/clsn\/lx1485.html\\\">\u81ea\u52a8\u5316\u8fd0\u7ef4\u4e4bPSSH<\/a><\/div>\n<\/div>\n<\/div>\n<div><\/div>\n<\/div>\n<div id=\\\"single-widget\\\">\n<div data-wow-delay=\\\"0.3s\\\">\n<aside id=\\\"feed-2\\\" data-wow-delay=\\\"0.3s\\\">\n<h3>\u5173\u6ce8\u6211\u4eec<\/h3>\n<div id=\\\"feed_widget\\\">\n<div>\n<ul>\n<li><\/li>\n<li><\/li>\n<li><\/li>\n<li><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div><\/div>\n<\/aside>\n<aside id=\\\"related_post-2\\\" data-wow-delay=\\\"0.3s\\\">\n<div id=\\\"related_post_widget\\\">\n<ul>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1506.html\\\">ZABBIX 4.0 LTS \u90e8\u7f72<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1502.html\\\">SSH + Google Authenticator \u5b89\u5168\u52a0\u56fa<\/a><\/li>\n<li><a href=\\\"https:\/\/clsn.io\/clsn\/lx1490.html\\\">Hadoop+HBase \u96c6\u7fa4\u642d\u5efa<\/a><\/li>\n<\/ul>\n<\/div>\n<div><\/div>\n<\/aside>\n<\/div>\n<div><\/div>\n<\/div>\n<nav data-wow-delay=\\\"0.3s\\\"><a href=\\\"https:\/\/clsn.io\/clsn\/lx1506.html\\\" rel=\\\"prev\\\">\u00a0\u4e0a\u4e00\u7bc7<br \/>\nZABBIX 4.0 LTS \u90e8\u7f72<\/a>\u6ca1\u6709\u4e86<br \/>\n\u5df2\u662f\u6700\u65b0\u6587\u7ae0<\/p>\n<div><\/div>\n<\/nav>\n<nav role=\\\"navigation\\\">\n<div>\n<div><\/div>\n<\/div>\n<\/nav>\n<div><\/div>\n<div id=\\\"comments\\\">\n<div id=\\\"respond\\\" data-wow-delay=\\\"0.3s\\\">\n<h3 id=\\\"reply-title\\\">\u53d1\u8868\u8bc4\u8bba<small><\/small><\/h3>\n<p>\u60a8\u5fc5\u987b<a href=\\\"https:\/\/clsn.io\/wp-login.php?redirect_to=https%3A%2F%2Fclsn.io%2Fclsn%2Flx1517.html\\\">\u767b\u5f55<\/a>\u624d\u80fd\u53d1\u8868\u8bc4\u8bba\uff01\n<\/div>\n<\/div>\n<p><\/main><\/div>\n<div id=\\\"sidebar\\\">\n<div>\n<aside id=\\\"toc-widget-2\\\" data-wow-delay=\\\"0.3s\\\">\n<h3><\/h3>\n<\/aside>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\u00a03.1.1 \u8bbe\u7f6e\u5173\u95ed\u9632\u706b\u5899\u53caSELINUX \u00a03.1.2 \u5173\u95edswap \u00a03.1.3 \u8bbe\u7f6eDocker\u6240\u9700\u53c2 &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"http:\/\/www.weijing.co\/?p=5431\"> <span class=\"screen-reader-text\">Kubernetes V1.15 \u4e8c\u8fdb\u5236\u90e8\u7f72\u96c6\u7fa4<\/span> \u67e5\u770b\u5168\u6587 &raquo;<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":""},"categories":[104,123],"tags":[],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"mailpoet_newsletter_max":false,"woocommerce_thumbnail":false,"woocommerce_single":false,"woocommerce_gallery_thumbnail":false,"shop_catalog":false,"shop_single":false,"shop_thumbnail":false},"uagb_author_info":{"display_name":"weijing","author_link":"http:\/\/www.weijing.co\/?author=4"},"uagb_comment_info":0,"uagb_excerpt":"\u00a03.1.1 \u8bbe\u7f6e\u5173\u95ed\u9632\u706b\u5899\u53caSELINUX \u00a03.1.2 \u5173\u95edswap \u00a03.1.3 \u8bbe\u7f6eDocker\u6240\u9700\u53c2&hellip;","_links":{"self":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts\/5431"}],"collection":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5431"}],"version-history":[{"count":0,"href":"http:\/\/www.weijing.co\/index.php?rest_route=\/wp\/v2\/posts\/5431\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5431"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5431"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.weijing.co\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5431"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}