[Service Account #1] 외부 클러스터 컨트롤

목표

 - deploy 서버에서 Cluster 접근

 

 

1. Deploy 서버에 K8S 설치

# yum install kubernetes

 

2. Copy Auth Files (Master -> Deploy) 

# scp test-master:/etc/kubernetes/pki/ca.crt /opt/kube-certs/test-cluster-ca.crt

# scp test-master:/etc/kubernetes/admin.conf /opt/kube-certs/test-cluster-admin.conf

# scp test-master:/etc/kubernetes/pki/ssl/apiserver-kubelet-client.crt /opt/kube-certs/test-cluster.client.crt

# scp test-master:/etc/kubernetes/pki/ssl/apiserver-kubelet-client.key /opt/kube-certs/test-cluster.client.key

 

3. 복사 된 파일 확인

[root@test-deploy kube-certs]# ls -l
test-cluster-admin.conf
test-cluster-ca.crt
test-cluster-client.crt
test-cluster-client.key

 

4. kubeconfig 파일 작성

/root/.kube/config

apiVersion: v1 clusters: - cluster:     certificate-authority: /opt/kube-certs/test-cluster-ca.crt     server: https://xx.xx.0.31:6443   #master001 IP   name: test-cluster contexts: - context:     cluster: test-cluster     user: test-cluster-admin   name: admin@test-cluster current-context: admin@test-cluster kind: Config preferences: {} users: - name: test-cluster-admin   user:     client-certificate: /opt/kube-certs/test-cluster-client.crt     client-key: /opt/kube-certs/test-cluster-client.key

 

5. daemon & kubectl restart

 

6. Context Switch

(k8s-env) [root@test-deploy .kube]# kubectl config  use-context admin@test-cluster
Switched to context "admin@test-cluster".

 

7. 현재 context 확인
(k8s-env) [root@test-deploy .kube]# kubectl config get-contexts
CURRENT   NAME                         CLUSTER        AUTHINFO             NAMESPACE
*                  admin@test-cluster   test-cluster    test-cluster-admin

 

8. 테스트

(k8s-env) [root@test-deploy .kube]# kubectl get nodes
NAME             STATUS    AGE
test-master001   Ready     12d
test-master002   Ready     12d
test-master003   Ready     12d
test-worker001   Ready     12d
test-worker002   Ready     12d