在本地管理集群#

1
brew install kubectl

1
$ kubectl get pods
2
Unable to connect to the server: x509: certificate is valid for 10.96.0.1, 172.17.68.40, not 47.93.26.56

1
# 以下操作均在 master node
2

3
# 删除 apiserver 的证书
4
$ rm /etc/kubernetes/pki/apiserver.*
5
rm: remove regular file ‘/etc/kubernetes/pki/apiserver.crt’? y
6
rm: remove regular file ‘/etc/kubernetes/pki/apiserver.key’? y
7

8
# 重新生成证书，并添加 IP 地址白名单 (当前 kubernetes 集群的版本是 v1.15)
9
$ kubeadm init phase certs all --apiserver-advertise-address=0.0.0.0 --apiserver-cert-extra-sans=47.93.26.56
10
W0902 20:38:12.102570   18119 version.go:98] could not fetch a Kubernetes version from the internet: unable to get URL "https://dl.k8s.io/release/stable-1.txt": Get https://dl.k8s.io/release/stable-1.txt: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
11
W0902 20:38:12.102645   18119 version.go:99] falling back to the local client version: v1.15.3
12
[certs] Using certificateDir folder "/etc/kubernetes/pki"
13
[certs] Using existing front-proxy-ca certificate authority
14
[certs] Using existing front-proxy-client certificate and key on disk
15
[certs] Using existing etcd/ca certificate authority
16
[certs] Using existing etcd/healthcheck-client certificate and key on disk
17
[certs] Using existing apiserver-etcd-client certificate and key on disk
18
[certs] Using existing etcd/peer certificate and key on disk
19
[certs] Using existing etcd/server certificate and key on disk
20
[certs] Using existing ca certificate authority
21
[certs] Generating "apiserver" certificate and key
22
[certs] apiserver serving cert is signed for DNS names [shuifeng kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.96.0.1 172.17.68.40 47.93.26.56]
23
[certs] Using existing apiserver-kubelet-client certificate and key on disk
24
[certs] Using the existing "sa" key
25

26
# 强制删除 apiserver 的容器
27
$ docker rm -f `docker ps -q -f 'name=k8s_kube-apiserver*'`
28
83fcae44bb1d
29

30
# 重启 kubelet 服务
31
$ systemctl restart kubelet

1
# 以下操作均在客户端 (个人mac)
2

3
$ kubectl get pods --all-namespaces
4
NAMESPACE              NAME                                          READY     STATUS             RESTARTS   AGE
5
kube-system            coredns-5c98db65d4-cqcn9                      1/1       Running            5          3d
6
kube-system            coredns-5c98db65d4-zxq79                      1/1       Running            5          3d
7
kube-system            etcd-shuifeng                                 1/1       Running            0          3d
8
kube-system            kube-apiserver-shuifeng                       1/1       Running            0          3d
9
kube-system            kube-controller-manager-shuifeng              1/1       Running            0          3d
10
kube-system            kube-flannel-ds-amd64-7v8mw                   1/1       Running            0          3d
11
kube-system            kube-flannel-ds-amd64-c6dpj                   1/1       Running            0          2d
12
kube-system            kube-proxy-cntqj                              1/1       Running            0          2d
13
kube-system            kube-proxy-js5wl                              1/1       Running            0          3d
14
kube-system            kube-scheduler-shuifeng                       1/1       Running            0          3d

1
$ export KUBECONFIG=$HOME/.kube/config:$HOME/.kube/config-dev:$HOME/.kube/config-production
2

3
# 罗列出所有的集群
4
$ kubectl config get-clusters
5
NAME
6
k8s-dev
7
k8s-production
8
minikube

1
# 如果在 mac 上
2
$ curl -LO "https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/darwin/amd64/kubectl"
3

4
# 如果在 linux 上
5
$ curl -LO https://storage.googleapis.com/kubernetes-release/release/`curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt`/bin/linux/amd64/kubectl
6

7
$ chmod +x ./kubectl
8
$ sudo mv ./kubectl /usr/local/bin/kubectl
9

10
$ kubectl version
11
Client Version: version.Info{Major:"1", Minor:"16", GitVersion:"v1.16.0", GitCommit:"2bd9643cee5b3b3a5ecbd3af49d09018f0773c77", GitTreeState:"clean", BuildDate:"2019-09-18T14:36:53Z", GoVersion:"go1.12.9", Compiler:"gc", Platform:"darwin/amd64"}
12
Server Version: version.Info{Major:"1", Minor:"16", GitVersion:"v1.16.0", GitCommit:"2bd9643cee5b3b3a5ecbd3af49d09018f0773c77", GitTreeState:"clean", BuildDate:"2019-09-18T14:27:17Z", GoVersion:"go1.12.9", Compiler:"gc", Platform:"linux/amd64"}

1
# 安装自动补全插件
2
$ yum install bash-completion
3

4
# 添加 kubectl 自动补全的脚本至 /etc/bash_completion.d 目录下
5
# kubectl completion bash: 生成自动补全的脚本
6
$ kubectl completion bash >/etc/bash_completion.d/kubectl
7

8
# 自动补全生效
9
$ kubectl get n
10
namespaces                         networkpolicies.extensions         networkpolicies.networking.k8s.io  nodes

1
$ source <(kubectl completion zsh)