Update docs/reference/setup-tools/kubeadm/kubeadm.md (#11829)
* zh-trans:update docs/setup/independent/setup-ha-etcd-with-kubeadm.md * zh-trans:update docs/setup/independent/setup-ha-etcd-with-kubeadm.md
This commit is contained in:
committed by
Kubernetes Prow Robot
parent
361283e20d
commit
b697d945ef
@@ -33,10 +33,11 @@ when using kubeadm to set up a kubernetes cluster.
|
|||||||
* Three hosts that can talk to each other over ports 2379 and 2380. This document assumes these default ports. However, they are configurable through the kubeadm config file.
|
* Three hosts that can talk to each other over ports 2379 and 2380. This document assumes these default ports. However, they are configurable through the kubeadm config file.
|
||||||
-->
|
-->
|
||||||
* 三个可以通过 2379 和 2380 端口相互通信的主机。本文档使用这些作为默认端口。不过,它们可以通过 kubeadm 的配置文件进行自定义。
|
* 三个可以通过 2379 和 2380 端口相互通信的主机。本文档使用这些作为默认端口。不过,它们可以通过 kubeadm 的配置文件进行自定义。
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
* Each host must [have docker, kubelet, and kubeadm installed][toolbox].
|
* Each host must [have docker, kubelet, and kubeadm installed][toolbox].
|
||||||
-->
|
-->
|
||||||
* 每个主机必须 [安装有 docker, kubelet, 和 kubeadm][工具箱]
|
* 每个主机必须 [安装有 docker、kubelet 和 kubeadm][工具箱]。
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
* Some infrastructure to copy files between hosts. For example `ssh` and `scp` can satisfy this requirement.
|
* Some infrastructure to copy files between hosts. For example `ssh` and `scp` can satisfy this requirement.
|
||||||
@@ -62,7 +63,6 @@ The general approach is to generate all certs on one node and only distribute th
|
|||||||
-->
|
-->
|
||||||
一般来说,是在一个节点上生成所有证书并且只分发这些*必要*的文件到其它节点上。
|
一般来说,是在一个节点上生成所有证书并且只分发这些*必要*的文件到其它节点上。
|
||||||
|
|
||||||
|
|
||||||
{{< note >}}
|
{{< note >}}
|
||||||
<!--
|
<!--
|
||||||
kubeadm contains all the necessary crytographic machinery to generate the certificates described below; no other cryptographic tooling is required for this example.
|
kubeadm contains all the necessary crytographic machinery to generate the certificates described below; no other cryptographic tooling is required for this example.
|
||||||
@@ -70,7 +70,6 @@ kubeadm contains all the necessary crytographic machinery to generate the certif
|
|||||||
kubeadm 包含生成下述证书所需的所有必要的密码学工具;在这个例子中,不需要其他加密工具。
|
kubeadm 包含生成下述证书所需的所有必要的密码学工具;在这个例子中,不需要其他加密工具。
|
||||||
{{< /note >}}
|
{{< /note >}}
|
||||||
|
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
1. Configure the kubelet to be a service manager for etcd.
|
1. Configure the kubelet to be a service manager for etcd.
|
||||||
|
|
||||||
@@ -79,6 +78,7 @@ kubeadm 包含生成下述证书所需的所有必要的密码学工具;在这
|
|||||||
precedence.
|
precedence.
|
||||||
-->
|
-->
|
||||||
1. 将 kubelet 配置为 etcd 的服务管理器。
|
1. 将 kubelet 配置为 etcd 的服务管理器。
|
||||||
|
|
||||||
运行 etcd 比运行 kubernetes 更简单,因此您必须通过创建具有更高优先级的新文件来覆盖 kubeadm 提供的 kubelet 单元文件。
|
运行 etcd 比运行 kubernetes 更简单,因此您必须通过创建具有更高优先级的新文件来覆盖 kubeadm 提供的 kubelet 单元文件。
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
@@ -99,9 +99,10 @@ kubeadm 包含生成下述证书所需的所有必要的密码学工具;在这
|
|||||||
Generate one kubeadm configuration file for each host that will have an etcd
|
Generate one kubeadm configuration file for each host that will have an etcd
|
||||||
member running on it using the following script.
|
member running on it using the following script.
|
||||||
-->
|
-->
|
||||||
|
|
||||||
1. 为 kubeadm 创建配置文件。
|
1. 为 kubeadm 创建配置文件。
|
||||||
|
|
||||||
使用以下脚本为每个将要运行 etcd 成员的主机生成一个 kubeadm 配置文件。
|
使用以下脚本为每个将要运行 etcd 成员的主机生成一个 kubeadm 配置文件。
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
```sh
|
```sh
|
||||||
@@ -141,7 +142,7 @@ kubeadm 包含生成下述证书所需的所有必要的密码学工具;在这
|
|||||||
```
|
```
|
||||||
-->
|
-->
|
||||||
```sh
|
```sh
|
||||||
# 使用 IP 或是可解析的主机名替换 HOST0, HOST1, 和 HOST2
|
# 使用 IP 或可解析的主机名替换 HOST0、HOST1 和 HOST2
|
||||||
export HOST0=10.0.0.6
|
export HOST0=10.0.0.6
|
||||||
export HOST1=10.0.0.7
|
export HOST1=10.0.0.7
|
||||||
export HOST2=10.0.0.8
|
export HOST2=10.0.0.8
|
||||||
@@ -175,6 +176,7 @@ kubeadm 包含生成下述证书所需的所有必要的密码学工具;在这
|
|||||||
EOF
|
EOF
|
||||||
done
|
done
|
||||||
```
|
```
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
1.Generate the certificate authority
|
1.Generate the certificate authority
|
||||||
|
|
||||||
@@ -185,7 +187,7 @@ kubeadm 包含生成下述证书所需的所有必要的密码学工具;在这
|
|||||||
-->
|
-->
|
||||||
1. 生成证书颁发机构
|
1. 生成证书颁发机构
|
||||||
|
|
||||||
如果您已经拥有 CA,那么唯一的操作是复制 CA 的 `crt` 和 `key` 文件到 `etc/kubernetes/pki/etcd/ca.crt` 和 /etc/kubernetes/pki/etcd/ca.key`。复制完这些文件后继续下一步,“为每个成员创建证书”。
|
如果您已经拥有 CA,那么唯一的操作是复制 CA 的 `crt` 和 `key` 文件到 `etc/kubernetes/pki/etcd/ca.crt` 和 `/etc/kubernetes/pki/etcd/ca.key`。复制完这些文件后继续下一步,“为每个成员创建证书”。
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
If you do not already have a CA then run this command on `$HOST0` (where you generated the configuration files for kubeadm).
|
If you do not already have a CA then run this command on `$HOST0` (where you generated the configuration files for kubeadm).
|
||||||
@@ -272,7 +274,7 @@ kubeadm 包含生成下述证书所需的所有必要的密码学工具;在这
|
|||||||
-->
|
-->
|
||||||
1. 复制证书和 kubeadm 配置
|
1. 复制证书和 kubeadm 配置
|
||||||
|
|
||||||
证书已生成,现在必须将它们移动到对应的主机。
|
证书已生成,现在必须将它们移动到对应的主机。
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
USER=ubuntu
|
USER=ubuntu
|
||||||
@@ -291,7 +293,7 @@ kubeadm 包含生成下述证书所需的所有必要的密码学工具;在这
|
|||||||
-->
|
-->
|
||||||
1. 确保已经所有预期的文件都存在
|
1. 确保已经所有预期的文件都存在
|
||||||
|
|
||||||
`$HOST0` 所需文件的完整列表如下:
|
`$HOST0` 所需文件的完整列表如下:
|
||||||
|
|
||||||
```
|
```
|
||||||
/tmp/${HOST0}
|
/tmp/${HOST0}
|
||||||
@@ -355,7 +357,8 @@ kubeadm 包含生成下述证书所需的所有必要的密码学工具;在这
|
|||||||
└── server.key
|
└── server.key
|
||||||
```
|
```
|
||||||
|
|
||||||
<!-- 1. Create the static pod manifests
|
<!--
|
||||||
|
1.Create the static pod manifests
|
||||||
|
|
||||||
Now that the certificates and configs are in place it's time to create the
|
Now that the certificates and configs are in place it's time to create the
|
||||||
manifests. On each host run the `kubeadm` command to generate a static manifest
|
manifests. On each host run the `kubeadm` command to generate a static manifest
|
||||||
|
|||||||
Reference in New Issue
Block a user