集群高可用

注意：以上方法需要每个 etcd 节点都运行 kubelet。如果不想使用 kubelet，还可以通过 systemd 的方式来启动 etcd：

export ETCD_VERSION=v3.1.10

curl -sSL https://github.com/coreos/etcd/releases/download/${ETCD_VERSION}/etcd-${ETCD_VERSION}-linux-amd64.tar.gz | tar -xzv --strip-components=1 -C /usr/local/bin/

rm -rf etcd-$ETCD_VERSION-linux-amd64*

​

touch /etc/etcd.env

echo "PEER_NAME=$PEER_NAME" >> /etc/etcd.env

echo "PRIVATE_IP=$PRIVATE_IP" >> /etc/etcd.env

​

cat >/etc/systemd/system/etcd.service <<EOF

[Unit]

Description=etcd

Documentation=https://github.com/coreos/etcd

Conflicts=etcd.service

Conflicts=etcd2.service

​

[Service]

EnvironmentFile=/etc/etcd.env

Type=notify

Restart=always

RestartSec=5s

LimitNOFILE=40000

TimeoutStartSec=0

​

ExecStart=/usr/local/bin/etcd --name ${PEER_NAME} \

--data-dir /var/lib/etcd \

--listen-client-urls https://${PRIVATE_IP}:2379 \

--advertise-client-urls https://${PRIVATE_IP}:2379 \

--listen-peer-urls https://${PRIVATE_IP}:2380 \

--initial-advertise-peer-urls https://${PRIVATE_IP}:2380 \

--cert-file=/etc/kubernetes/pki/etcd/server.pem \

--key-file=/etc/kubernetes/pki/etcd/server-key.pem \

--client-cert-auth \

--trusted-ca-file=/etc/kubernetes/pki/etcd/ca.pem \

--peer-cert-file=/etc/kubernetes/pki/etcd/peer.pem \

--peer-key-file=/etc/kubernetes/pki/etcd/peer-key.pem \

--peer-client-cert-auth \

--peer-trusted-ca-file=/etc/kubernetes/pki/etcd/ca.pem \

--initial-cluster etcd0=https://<etcd0-ip-address>:2380,etcd1=https://<etcd1-ip-address>:2380,etcd2=https://<etcd2-ip-address>:2380 \

--initial-cluster-token my-etcd-token \

--initial-cluster-state new

​

[Install]

WantedBy=multi-user.target

EOF

​

systemctl daemon-reload

systemctl start etcd

注意：确保 kube-apiserver 配置 --etcd-quorum-read=true（v1.9 之后默认为 true）。