1. 程式人生 > 其它 >|NO.Z.00086|——————————|^^ 部署 ^^|——|KuberNetes&kubeadm.V15|5臺Server|---------------------------------------|kubernetes注意|證書過期|Master汙點|

|NO.Z.00086|——————————|^^ 部署 ^^|——|KuberNetes&kubeadm.V15|5臺Server|---------------------------------------|kubernetes注意|證書過期|Master汙點|



[CloudNative:KuberNetes&kubeadm.V15]                                                               [Applications.KuberNetes] [|DevOps|k8s|**5節點**|kubeadm.v1.21.2|注意事項|——|kubeadm證書過期|Taints汙點|]








一、kubernetes注意事項:
### --- kubeadm證書

~~~     注意:kubeadm安裝的叢集,證書有效期預設是一年。
~~~     master節點kube-apiserver、kube-scheduler、kube-controller-manager、etcd都是以容器執行的
~~~     可以通過kubectl get po -n kube-system檢視。
~~~     啟動和二進位制不同的是,
~~~     kubelet的配置檔案在/etc/sysconfig/kubelet和/var/lib/kubelet/config.yaml
~~~     其他元件的配置檔案在/etc/Kubernetes/manifests目錄下,
~~~     比如kube-apiserver.yaml,該yaml檔案更改後,kubelet會自動重新整理配置,也就是會重啟pod。
~~~     不能再次建立該檔案
二、實驗環境取消k8s-master汙點
### --- Kubeadm安裝後,master節點預設不允許部署pod,可以通過以下方式開啟:
~~~     # 非系統的元件不會部署在k8s-master節點的
~~~     注:在部署kubernetes時;做了汙點
~~~     注:非系統的pod不能部署在master節點
~~~     注:但是在實驗環境下,為了節省資源;允許把這些元件部署在,master節點

[root@k8s-master01 ~]# kubectl get po -A -owide
kube-system            coredns-6f6b8cc4f6-72xlp                     1/1     Running   0          99m     172.171.14.193   k8s-node02     <none>           <none>
kube-system            coredns-6f6b8cc4f6-8xjzf                     1/1     Running   0          99m     172.171.14.194   k8s-node02     <none>           <none>
kube-system            metrics-server-d6c46b546-f2jc5               1/1     Running   0          23m     172.161.125.1    k8s-node01     <none>           <none>
kubernetes-dashboard   dashboard-metrics-scraper-86bb69c5f6-c8w6m   1/1     Running   0          19m     172.171.14.195   k8s-node02     <none>           <none>
kubernetes-dashboard   kubernetes-dashboard-6576c84894-2lpt5        1/1     Running   0          19m     172.161.125.2    k8s-node01     <none>           <none>
### --- 檢視Taints:
~~~     檢視Taints汙點

[root@k8s-master01 ~]# kubectl  describe node -l node-role.kubernetes.io/master=  | grep Taints
Taints:             node-role.kubernetes.io/master:NoSchedule
Taints:             node-role.kubernetes.io/master:NoSchedule
Taints:             node-role.kubernetes.io/master:NoSchedule
### --- 刪除Taint:
~~~     # 刪除Taint汙點:

[root@k8s-master01 ~]# kubectl  taint node  -l node-role.kubernetes.io/master node-role.kubernetes.io/master:NoSchedule-
node/k8s-master01 untainted
node/k8s-master02 untainted
node/k8s-master03 untainted
~~~     # 檢視是否還有汙點

[root@k8s-master01 ~]# kubectl  describe node -l node-role.kubernetes.io/master=  | grep Taints
Taints:             <none>
Taints:             <none>
Taints:             <none>








===============================END===============================


Walter Savage Landor:strove with none,for none was worth my strife.Nature I loved and, next to Nature, Art:I warm'd both hands before the fire of life.It sinks, and I am ready to depart                                                                                                                                                    ——W.S.Landor



來自為知筆記(Wiz)