一 master02 節(jié)點部署

1 先在master01 添加映射master02

對master02進(jìn)行環(huán)境初始化

3 從 master01 節(jié)點上拷貝證書文件、各master組件的配置文件和服務(wù)管理文件到 master02 節(jié)點

scp -r /opt/etcd/ root@192.168.11.12:/opt/
scp -r /opt/kubernetes/ root@192.168.11.12:/opt
scp -r /root/.kube root@192.168.11.12:/root
scp /usr/lib/systemd/system/{kube-apiserver,kube-controller-manager,kube-scheduler}.service root@192.168.11.12:/usr/lib/systemd/system/

4 修改配置文件kube-apiserver中的IP

修改配置文件kube-apiserver中的IP
vim /opt/kubernetes/cfg/kube-apiserver
KUBE_APISERVER_OPTS="--logtostderr=true \
--v=4 \
--etcd-servers=https://192.168.10.80:2379,https://192.168.10.18:2379,https://192.168.10.19:2379 \
--bind-address=192.168.10.20 \				#修改
--secure-port=6443 \
--advertise-address=192.168.10.20 \			#修改

注意

注：
如果出現(xiàn)以下報錯
[root@master01 k8s]# kubectl run -it  --image=busybox:1.28.4 sh
If you don't see a command prompt, try pressing enter.
Error attaching, falling back to logs: unable to upgrade connection: Forbidden (user=system:anonymous, verb=create, resource=nodes, subresource=proxy)
Error from server (Forbidden): Forbidden (user=system:anonymous, verb=get, resource=nodes, subresource=proxy) ( pods/log sh)需要添加 rbac的權(quán)限  直接使用kubectl綁定  clusteradmin 管理員集群角色  授權(quán)操作權(quán)限[root@master01 k8s]# kubectl create clusterrolebinding cluster-system-anonymous --clusterrole=cluster-admin --user=system:anonymous
clusterrolebinding.rbac.authorization.k8s.io/cluster-system-anonymous created

?