kubespray安裝kubernetes完成後kubectl客戶端配置

接上篇使用kuberspay無坑安裝生產級Kubernetes集群,在使用kubespray安裝好了kubernetes之後，我們需要在自己的客戶端電腦配置kubectl，如何將集群的配置信息在本地配置呢，我們使用下面的腳本，放在scriptscopy-kubeconfig.yaml下，內容為:

---
- hosts: kube-master[0]
gather_facts: no
become: yes
tasks:
- fetch:
src: "/etc/kubernetes/ssl/{{ item }}.pem"
dest: "{{ playbook_dir }}/kubectl/{{ item }}.pem"
flat: True
with_items:
- admin-{{ inventory_hostname }}-key
- admin-{{ inventory_hostname }}
- ca
- name: export hostname
set_fact:
kubectl_name: "{{ inventory_hostname }}"

- hosts: localhost
connection: local
vars:
kubectl_name: "{{ hostvars[groups["kube-master"][0]].kubectl_name }}"
cluster_name: "{{ hostvars[groups["kube-master"][0]].cluster_name }}"
kube_apiserver_port: "{{ hostvars[groups["kube-master"][0]].kube_apiserver_port }}"
system_namespace: "{{ hostvars[groups["kube-master"][0]].system_namespace }}"
tasks:
- name: "check if context admin@{{ cluster_name }} exists"
command: kubectl config get-contexts admin@{{ cluster_name }}
register: kctl
failed_when: kctl.rc == 0

- block:
- name: "create cluster {{ cluster_name }}"
command: >
kubectl config set-cluster {{ cluster_name }}
--server=https://{{ kubectl_name }}:{{ kube_apiserver_port }}
--certificate-authority={{ playbook_dir }}/kubectl/ca.pem
--embed-certs

- name: "create credentials admin"
command: >
kubectl config set-credentials admin
--certificate-authority={{ playbook_dir }}/kubectl/ca.pem
--client-key={{ playbook_dir }}/kubectl/admin-{{ kubectl_name }}-key.pem
--client-certificate={{ playbook_dir }}/kubectl/admin-{{ kubectl_name }}.pem
--embed-certs

- name: "create context admin@{{ cluster_name }}"
command: >
kubectl config set-context admin@{{ cluster_name }}
--cluster={{ cluster_name }}
--namespace={{ system_namespace }}
--user=admin

- name: "use context admin@{{ cluster_name }}"
command: kubectl config use-context admin@{{ cluster_name }}
when: kctl.rc != 0

- name: "clean up fetched certificates"
file:
state: absent
path: "{{ playbook_dir }}/kubectl"

在kubespray根目錄執行：

ansible-playbook -i inventory/inventory.cfg scripts/copy-kubeconfig.yaml

執行完成後，如果你本機的hosts文件已經配置了node1對應的ip，配置已經完成；如果沒有配置，編輯vi /Users/wangyunfei/.kube/config，將node1修改為192.168.1.130。此時再執行：

wangyunfeideMBP:kubespray wangyunfei$ kubectl get node
NAME STATUS AGE VERSION
node1 Ready,SchedulingDisabled 3d v1.6.1+coreos.0
node2 Ready 3d v1.6.1+coreos.0
node3 Ready 3d v1.6.1+coreos.0

喜歡這篇文章嗎？立刻分享出去讓更多人知道吧！