- A+
所属分类：K8S
1.在nfs主机192.168.3.22上启动nfs
|
1 2 3 4 5 6 7 8 9 |
mkdir -p /hbase_data/consul_data_pv1 vim /etc/exports /filedata 192.168.3.0/24(rw,sync,no_root_squash) /filedata 192.168.33.0/24(rw,sync,no_root_squash) /hbase_data/consul_data_pv1 *(rw,no_root_squash,sync) exportfs -r systemctl restart rpcbind && systemctl restart nfs |
2.进入k8s集群192.168.3.18上创建动态存储类
|
1 |
mkdir /lvqingshan/consul/nfs |
创建rbac
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 |
vim rbac.yaml kind: ClusterRole apiVersion: rbac.authorization.k8s.io/v1 metadata: name: nfs-provisioner-runner rules: - apiGroups: [""] resources: ["persistentvolumes"] verbs: ["get", "list", "watch", "create", "delete"] - apiGroups: [""] resources: ["persistentvolumeclaims"] verbs: ["get", "list", "watch", "update"] - apiGroups: ["storage.k8s.io"] resources: ["storageclasses"] verbs: ["get", "list", "watch"] - apiGroups: [""] resources: ["events"] verbs: ["create", "update", "patch"] --- kind: ClusterRoleBinding apiVersion: rbac.authorization.k8s.io/v1 metadata: name: run-nfs-provisioner subjects: - kind: ServiceAccount name: nfs-provisioner namespace: default roleRef: kind: ClusterRole name: nfs-provisioner-runner apiGroup: rbac.authorization.k8s.io --- kind: Role apiVersion: rbac.authorization.k8s.io/v1 metadata: name: leader-locking-nfs-provisioner rules: - apiGroups: [""] resources: ["endpoints"] verbs: ["get", "list", "watch", "create", "update", "patch"] --- kind: RoleBinding apiVersion: rbac.authorization.k8s.io/v1 metadata: name: leader-locking-nfs-provisioner subjects: - kind: ServiceAccount name: nfs-provisioner # replace with namespace where provisioner is deployed namespace: default roleRef: kind: Role name: leader-locking-nfs-provisioner apiGroup: rbac.authorization.k8s.io |
创建serviceaccount
|
1 2 3 4 5 |
vim serviceaccount.yaml apiVersion: v1 kind: ServiceAccount metadata: name: nfs-provisioner |
创建nfs-client-provisioner
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 |
vim deployment.yaml kind: Deployment apiVersion: extensions/v1beta1 metadata: name: nfs-provisioner spec: replicas: 1 strategy: type: Recreate template: metadata: labels: app: nfs-provisioner spec: containers: - name: nfs-provisioner image: registry.cn-hangzhou.aliyuncs.com/open-ali/nfs-client-provisioner volumeMounts: - name: nfs-client-root mountPath: /persistentvolumes env: - name: PROVISIONER_NAME value: example.com/nfs - name: NFS_SERVER value: 192.168.3.22 - name: NFS_PATH value: /hbase_data/consul_data_pv1 volumes: - name: nfs-client-root nfs: server: 192.168.3.22 path: /hbase_data/consul_data_pv1 |
创建nfs-storageclass
|
1 2 3 4 5 6 7 |
vim nfs-storageclass.yaml kind: StorageClass apiVersion: storage.k8s.io/v1 metadata: name: nfs provisioner: example.com/nfs |
|
1 2 3 4 |
kubectl create -f rbac.yaml kubectl create -f serviceaccount.yaml kubectl create -f deployment.yaml kubectl create -f nfs-storageclass.yaml |
3.测试用动态存储类创建pvc
|
1 2 3 4 5 6 7 8 9 10 11 12 |
vim test-pvc1.yaml apiVersion: v1 kind: PersistentVolumeClaim metadata: name: data-default-consul-consul-server-1 spec: accessModes: - ReadWriteOnce storageClassName: rbd resources: requests: storage: 3Gi |
|
1 |
kubectl create -f test-pvc1.yaml |
查看是否创建成功，然后删除
|
1 |
kubectl delete -f test-pvc1.yaml |
4.在consul在kubernetes中部署
|
1 2 3 |
mkdir /consul cd /consul git clone https://github.com/hashicorp/consul-helm.git |
修改values.yaml
|
1 |
vim consul-helm/values.yaml |
开起service
|
1 2 |
# enabled: false enabled: true |
注释掉ClusterIP
|
1 |
#type: ClusterIP |
使用NodePort
|
1 2 |
type: NodePort nodePort: 40213 |
ui改为
|
1 |
type: NodePort |
修改storageClass为之前创建的，默认大小为10G可以不用修改
|
1 |
storageClass: nfs |
部署consul
|
1 |
helm install --name consul ./consul-helm |
5.consul备份
|
1 2 3 4 5 6 7 8 9 10 11 12 |
vim backup.sh #!/bin/sh DATE=`date +%Y%m%d%H%M` export CONSUL_HTTP_ADDR="192.168.3.21:28501" export CONSUL_HTTP_TOKEN="9f012e18-1a62-4a0a-4d8e-f6ef9f45c689" echo $CONSUL_HTTP_ADDR echo $CONSUL_HTTP_TOKEN consul kv export > /root/xiaochen-toolkit/scripts/consul/backup_data/kv.dump.$DATE consul snapshot save /root/xiaochen-toolkit/scripts/consul/backup_data/backup.snap.$DATE |
- 我的微信
- 这是我的微信扫一扫
-
- 我的微信公众号
- 我的微信公众号扫一扫
-
