feat(deploy): 首次提交
这个提交包含在:
@@ -0,0 +1,38 @@
|
||||
### 替换hostname
|
||||
hostnamectl set-hostname node && reboot
|
||||
|
||||
### 安装tailscale
|
||||
curl -fsSL https://tailscale.com/install.sh | sh
|
||||
|
||||
### 开启tailscale的自动更新
|
||||
tailscale set --auto-update
|
||||
|
||||
### 开启ip转发
|
||||
echo 'net.ipv4.ip_forward = 1' | sudo tee -a /etc/sysctl.d/99-tailscale.conf
|
||||
echo 'net.ipv6.conf.all.forwarding = 1' | sudo tee -a /etc/sysctl.d/99-tailscale.conf
|
||||
sudo sysctl -p /etc/sysctl.d/99-tailscale.conf
|
||||
|
||||
### 新建目录 将不同节点类型的config写入
|
||||
mkdir -p /etc/rancher/k3s && nano /etc/rancher/k3s/config.yaml
|
||||
|
||||
### 安装k3s 此处注意安装类型 是server 还是 agent
|
||||
curl -sfL https://get.k3s.io | \
|
||||
INSTALL_K3S_MIRROR=cn \
|
||||
sh -s - server
|
||||
|
||||
### 国内安装加速 & 镜像加速地址
|
||||
https://rancher-mirror.rancher.cn/k3s/k3s-install.sh
|
||||
nano /etc/rancher/k3s/registries.yaml
|
||||
|
||||
### 查看serverToken 记得在config中替换最新的token
|
||||
cat /var/lib/rancher/k3s/server/node-token
|
||||
|
||||
### 查看api server config 需要替换到.kube/config中 注意将其中的server地址替换为高可用地址
|
||||
cat /etc/rancher/k3s/k3s.yaml
|
||||
|
||||
### 给node添加地域标签
|
||||
kubectl label nodes tca topology.kubernetes.io/region=cn-sh
|
||||
kubectl label nodes tca svccontroller.k3s.cattle.io/enablelb="true"
|
||||
|
||||
### 给master节点添加污点
|
||||
kubectl taint nodes tca node-role.kubernetes.io/master:NoSchedule
|
||||
@@ -0,0 +1,10 @@
|
||||
# worker 工作节点
|
||||
server: "https://k3s.dev.cm:6443"
|
||||
token: "K10cdbe82226583b6e0c8f80c203f3a2d79580aaf9c2f61d0aebea4a28c1ff3897f::server:35e7d0dc0b8c2427fdb42bb90bb85d5a"
|
||||
|
||||
# 网络相关
|
||||
vpn-auth: "name=tailscale,joinKey=tskey-auth-ksJXXH4CNTRL-4WRkX448yC6W6yhytK1FD68HMDK4zStw"
|
||||
|
||||
# 节点相关
|
||||
# 保留节点资源 根据节点做不同配置 如不需要可以注释掉
|
||||
kubelet-arg: kube-reserved=cpu=5000
|
||||
@@ -0,0 +1,7 @@
|
||||
# server 主节点
|
||||
cluster-init: true
|
||||
tls-san:
|
||||
- "k3s.dev.cm,k3s.fillcode.com"
|
||||
|
||||
# 网络相关
|
||||
vpn-auth: "name=tailscale,joinKey=tskey-auth-ksJXXH4CNTRL-4WRkX448yC6W6yhytK1FD68HMDK4zStw"
|
||||
@@ -0,0 +1,8 @@
|
||||
# server 从节点
|
||||
server: "https://tca:6443"
|
||||
token: "K10cdbe82226583b6e0c8f80c203f3a2d79580aaf9c2f61d0aebea4a28c1ff3897f::server:35e7d0dc0b8c2427fdb42bb90bb85d5a"
|
||||
tls-san:
|
||||
- "k3s.dev.cm,k3s.fillcode.com"
|
||||
|
||||
# 网络相关
|
||||
vpn-auth: "name=tailscale,joinKey=tskey-auth-ksJXXH4CNTRL-4WRkX448yC6W6yhytK1FD68HMDK4zStw"
|
||||
@@ -0,0 +1,7 @@
|
||||
mirrors:
|
||||
"docker.io":
|
||||
endpoint:
|
||||
- "https://mirror.ccs.tencentyun.com"
|
||||
"registry.k8s.io":
|
||||
endpoint:
|
||||
- "k8s.m.daocloud.io"
|
||||
在新议题中引用
屏蔽一个用户