@@ -196,7 +196,7 @@ kubeadm 包含生成下述证书所需的所有必要的密码学工具;在这
196
196
如果您还没有 CA,则在 `$HOST0`(您为 kubeadm 生成配置文件的位置)上运行此命令。
197
197
198
198
```
199
- kubeadm alpha phase certs etcd-ca
199
+ kubeadm init alpha phase certs etcd-ca
200
200
```
201
201
202
202
<!--
@@ -214,25 +214,25 @@ kubeadm 包含生成下述证书所需的所有必要的密码学工具;在这
214
214
215
215
<!--
216
216
```sh
217
- kubeadm alpha phase certs etcd-server --config=/tmp/${HOST2}/kubeadmcfg.yaml
218
- kubeadm alpha phase certs etcd-peer --config=/tmp/${HOST2}/kubeadmcfg.yaml
219
- kubeadm alpha phase certs etcd-healthcheck-client --config=/tmp/${HOST2}/kubeadmcfg.yaml
220
- kubeadm alpha phase certs apiserver-etcd-client --config=/tmp/${HOST2}/kubeadmcfg.yaml
217
+ kubeadm init phase certs etcd-server --config=/tmp/${HOST2}/kubeadmcfg.yaml
218
+ kubeadm init phase certs etcd-peer --config=/tmp/${HOST2}/kubeadmcfg.yaml
219
+ kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST2}/kubeadmcfg.yaml
220
+ kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST2}/kubeadmcfg.yaml
221
221
cp -R /etc/kubernetes/pki /tmp/${HOST2}/
222
222
# cleanup non-reusable certificates
223
223
find /etc/kubernetes/pki -not -name ca.crt -not -name ca.key -type f -delete
224
224
225
- kubeadm alpha phase certs etcd-server --config=/tmp/${HOST1}/kubeadmcfg.yaml
226
- kubeadm alpha phase certs etcd-peer --config=/tmp/${HOST1}/kubeadmcfg.yaml
227
- kubeadm alpha phase certs etcd-healthcheck-client --config=/tmp/${HOST1}/kubeadmcfg.yaml
228
- kubeadm alpha phase certs apiserver-etcd-client --config=/tmp/${HOST1}/kubeadmcfg.yaml
225
+ kubeadm init phase certs etcd-server --config=/tmp/${HOST1}/kubeadmcfg.yaml
226
+ kubeadm init phase certs etcd-peer --config=/tmp/${HOST1}/kubeadmcfg.yaml
227
+ kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST1}/kubeadmcfg.yaml
228
+ kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST1}/kubeadmcfg.yaml
229
229
cp -R /etc/kubernetes/pki /tmp/${HOST1}/
230
230
find /etc/kubernetes/pki -not -name ca.crt -not -name ca.key -type f -delete
231
231
232
- kubeadm alpha phase certs etcd-server --config=/tmp/${HOST0}/kubeadmcfg.yaml
233
- kubeadm alpha phase certs etcd-peer --config=/tmp/${HOST0}/kubeadmcfg.yaml
234
- kubeadm alpha phase certs etcd-healthcheck-client --config=/tmp/${HOST0}/kubeadmcfg.yaml
235
- kubeadm alpha phase certs apiserver-etcd-client --config=/tmp/${HOST0}/kubeadmcfg.yaml
232
+ kubeadm init phase certs etcd-server --config=/tmp/${HOST0}/kubeadmcfg.yaml
233
+ kubeadm init phase certs etcd-peer --config=/tmp/${HOST0}/kubeadmcfg.yaml
234
+ kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST0}/kubeadmcfg.yaml
235
+ kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST0}/kubeadmcfg.yaml
236
236
# No need to move the certs because they are for HOST0
237
237
238
238
# clean up certs that should not be copied off this host
@@ -241,25 +241,25 @@ kubeadm 包含生成下述证书所需的所有必要的密码学工具;在这
241
241
```
242
242
-->
243
243
```sh
244
- kubeadm alpha phase certs etcd-server --config=/tmp/${HOST2}/kubeadmcfg.yaml
245
- kubeadm alpha phase certs etcd-peer --config=/tmp/${HOST2}/kubeadmcfg.yaml
246
- kubeadm alpha phase certs etcd-healthcheck-client --config=/tmp/${HOST2}/kubeadmcfg.yaml
247
- kubeadm alpha phase certs apiserver-etcd-client --config=/tmp/${HOST2}/kubeadmcfg.yaml
244
+ kubeadm init phase certs etcd-server --config=/tmp/${HOST2}/kubeadmcfg.yaml
245
+ kubeadm init phase certs etcd-peer --config=/tmp/${HOST2}/kubeadmcfg.yaml
246
+ kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST2}/kubeadmcfg.yaml
247
+ kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST2}/kubeadmcfg.yaml
248
248
cp -R /etc/kubernetes/pki /tmp/${HOST2}/
249
249
# 清理不可重复使用的证书
250
250
find /etc/kubernetes/pki -not -name ca.crt -not -name ca.key -type f -delete
251
251
252
- kubeadm alpha phase certs etcd-server --config=/tmp/${HOST1}/kubeadmcfg.yaml
253
- kubeadm alpha phase certs etcd-peer --config=/tmp/${HOST1}/kubeadmcfg.yaml
254
- kubeadm alpha phase certs etcd-healthcheck-client --config=/tmp/${HOST1}/kubeadmcfg.yaml
255
- kubeadm alpha phase certs apiserver-etcd-client --config=/tmp/${HOST1}/kubeadmcfg.yaml
252
+ kubeadm init phase certs etcd-server --config=/tmp/${HOST1}/kubeadmcfg.yaml
253
+ kubeadm init phase certs etcd-peer --config=/tmp/${HOST1}/kubeadmcfg.yaml
254
+ kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST1}/kubeadmcfg.yaml
255
+ kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST1}/kubeadmcfg.yaml
256
256
cp -R /etc/kubernetes/pki /tmp/${HOST1}/
257
257
find /etc/kubernetes/pki -not -name ca.crt -not -name ca.key -type f -delete
258
258
259
- kubeadm alpha phase certs etcd-server --config=/tmp/${HOST0}/kubeadmcfg.yaml
260
- kubeadm alpha phase certs etcd-peer --config=/tmp/${HOST0}/kubeadmcfg.yaml
261
- kubeadm alpha phase certs etcd-healthcheck-client --config=/tmp/${HOST0}/kubeadmcfg.yaml
262
- kubeadm alpha phase certs apiserver-etcd-client --config=/tmp/${HOST0}/kubeadmcfg.yaml
259
+ kubeadm init phase certs etcd-server --config=/tmp/${HOST0}/kubeadmcfg.yaml
260
+ kubeadm init phase certs etcd-peer --config=/tmp/${HOST0}/kubeadmcfg.yaml
261
+ kubeadm init phase certs etcd-healthcheck-client --config=/tmp/${HOST0}/kubeadmcfg.yaml
262
+ kubeadm init phase certs apiserver-etcd-client --config=/tmp/${HOST0}/kubeadmcfg.yaml
263
263
# 不需要移动 certs 因为它们是给 HOST0 使用的
264
264
265
265
# 清理不应从此主机复制的证书
@@ -370,9 +370,9 @@ kubeadm 包含生成下述证书所需的所有必要的密码学工具;在这
370
370
既然证书和配置已经就绪,是时候去创建清单了。在每台主机上运行 ` kubeadm` 命令来生成 etcd 使用的静态清单。
371
371
372
372
` ` ` sh
373
- root@HOST0 $ kubeadm alpha phase etcd local --config=/tmp/${HOST0} /kubeadmcfg.yaml
374
- root@HOST1 $ kubeadm alpha phase etcd local --config=/home/ubuntu/kubeadmcfg.yaml
375
- root@HOST2 $ kubeadm alpha phase etcd local --config=/home/ubuntu/kubeadmcfg.yaml
373
+ root@HOST0 $ kubeadm init phase etcd local --config=/tmp/${HOST0} /kubeadmcfg.yaml
374
+ root@HOST1 $ kubeadm init phase etcd local --config=/home/ubuntu/kubeadmcfg.yaml
375
+ root@HOST2 $ kubeadm init phase etcd local --config=/home/ubuntu/kubeadmcfg.yaml
376
376
` ` `
377
377
378
378
< ! --
0 commit comments