教育-软件安装:etcd集群软件安装

时间:2024-05-10 10:34:21

etcd集群软件安装

表1 etcd集群软件安装

在master1上安装cfssl

wget https://pkg.cfssl.org/R1.2/cfssl_linux-amd64
wget https://pkg.cfssl.org/R1.2/cfssljson_linux-amd64
chmod +x cfssl_linux-amd64 cfssljson_linux-amd64
mv cfssl_linux-amd64 /usr/local/bin/cfssl
mv cfssljson_linux-amd64 /usr/local/bin/cfssljson

安装etcd二进制文件

# 创建目录
mkdir -p /data/etcd/bin
# 下载
cd /tmp
wget https://storage.googleapis.com/etcd/v3.3.25/etcd-v3.3.25-linux-amd64.tar.gz
tar zxf etcd-v3.3.25-linux-amd64.tar.gz
cd etcd-v3.3.25-linux-amd64
mv etcd etcdctl /data/etcd/bin/

创建ca证书,客户端,服务端,节点之间的证书

Etcd属于server ,etcdctl 属于client,二者之间通过http协议进行通信。

创建目录

创建ca证书

生成客户端证书

cfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=ca-config.json -profile=client client.json  | cfssljson -bare client -

生成server,peer证书

cfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=ca-config.json -profile=server etcd.json | cfssljson -bare server
cfssl gencert -ca=ca.pem -ca-key=ca-key.pem -config=ca-config.json -profile=peer etcd.json | cfssljson -bare peer

将master01的/data/etcd/ssl目录同步到master02和master03上

scp -r /data/etcd etcd2:/data/etcd
scp -r /data/etcd etcd3:/data/etcd

etcd systemd配置文件

vim /usr/lib/systemd/system/etcd.service

三台主机配置不一样用的时候把注释尽量删除

启动etcd集群

systemctl daemon-reload
systemctl enable etcd
systemctl start etcd
systemctl status etcd

support.huaweicloud.com/nsecp-education/nsecp_07.html