装置KubeOperator并导入现有集群进行治理
介绍
KubeOperator 是一个开源的轻量级 Kubernetes 发行版,专一于帮忙企业布局、部署和经营生产级别的 Kubernetes 集群。
KubeOperator 提供可视化的 Web UI,反对离线环境,反对物理机、VMware、OpenStack 和 FusionCompute 等 IaaS 平台,反对 x86 和 ARM64 架构,反对 GPU,内置利用商店,已通过 CNCF 的 Kubernetes 软件一致性认证。
KubeOperator 应用 Terraform 在 IaaS 平台上主动创立主机(用户也能够自行筹备主机,比方物理机或者虚机),通过 Ansible 实现自动化部署和变更操作,反对 Kubernetes 集群 从 Day 0 布局,到 Day 1 部署,到 Day 2 经营的全生命周期治理。
装置
root@hello:~# curl -sSL https://github.com/KubeOperator/KubeOperator/releases/latest/download/quick_start.sh | sh...略...======================= KubeOperator 装置实现 =======================请凋谢防火墙或平安组的80,8081-8083端口,通过以下形式拜访: URL: http://$LOCAL_IP:80 用户名: admin 初始密码: kubeoperator@admin123 root@hello:~# root@hello:~# koctl status Name Command State Ports -----------------------------------------------------------------------------------------------------------------------------------------------kubeoperator_kobe sh /root/entrypoint.sh Up (healthy) 8080/tcp kubeoperator_kotf kotf-server Up (healthy) 8080/tcp kubeoperator_kubepi kubepi-server Up (healthy) 80/tcp kubeoperator_mysql /entrypoint.sh mysqld Up (healthy) 3306/tcp, 33060/tcp kubeoperator_nexus sh -c ${SONATYPE_DIR}/star ... Up (healthy) 0.0.0.0:8081->8081/tcp,:::8081->8081/tcp, 0.0.0.0:8082->8082/tcp,:::8082->8082/tcp, 0.0.0.0:8083->8083/tcp,:::8083->8083/tcp kubeoperator_nginx /docker-entrypoint.sh /bin ... Up (healthy) 0.0.0.0:80->80/tcp,:::80->80/tcp kubeoperator_server ko-server Up (healthy) 8080/tcp kubeoperator_ui /docker-entrypoint.sh ngin ... Up (healthy) 80/tcp kubeoperator_webkubectl sh /opt/webkubectl/start-w ... Up (healthy) root@hello:~#
登陆
地址: http://<ko服务器_ip>:80用户名: admin明码: kubeoperator@admin123
导入集群
# 获取 Api Server[root@k8s-master01 ~]# cat ~/.kube/config | grep server: | awk '{print $2}'https://192.168.1.69:8443# 获取 Router# 若应用kubeadm装置能够应用如下命令进行查看 ,若二进制装置应用节点IP即可[root@k8s-master01 ~]# kubectl -n kube-system get pod -o wide | grep kube-proxy[root@k8s-master01 ~]# # 获取 Token[root@k8s-master01 ~]# vim 123.yaml[root@k8s-master01 ~]# cat 123.yaml apiVersion: v1kind: ServiceAccountmetadata: name: kubeoperator-user namespace: kube-system---apiVersion: rbac.authorization.k8s.io/v1kind: ClusterRoleBindingmetadata: name: kubeoperator-userroleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: cluster-adminsubjects: - kind: ServiceAccount name: kubeoperator-user namespace: kube-system[root@k8s-master01 ~]# [root@k8s-master01 ~]# kubectl apply -f 123.yaml serviceaccount/kubeoperator-user createdclusterrolebinding.rbac.authorization.k8s.io/kubeoperator-user created[root@k8s-master01 ~]# [root@k8s-master01 ~]# # 1.23 以及以下能够应用如下命令查看[root@k8s-master01 ~]# kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep kubeoperator-user | awk '{print $1}') | grep token: | awk '{print $2}'[root@k8s-master01 ~]# [root@k8s-master01 ~]# # 1.24 版本应用如下命令创立token[root@k8s-master01 ~]# kubectl -n kube-system create token kubeoperator-usereyJhbGciOiJSUzI1NiIsImtpZCI6Ik9fdmIzY3ZjU2w0V3ZuUXl2bExBN2tZYlh3bFV2MTliZElSd0hvMnN6SXMifQ.eyJhdWQiOlsiaHR0cHM6Ly9rdWJlcm5ldGVzLmRlZmF1bHQuc3ZjLmNsdXN0ZXIubG9jYWwiXSwiZXhwIjoxNjU4ODk4MTE5LCJpYXQiOjE2NTg4OTQ1MTksImlzcyI6Imh0dHBzOi8va3ViZXJuZXRlcy5kZWZhdWx0LnN2Yy5jbHVzdGVyLmxvY2FsIiwia3ViZXJuZXRlcy5pbyI6eyJuYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsInNlcnZpY2VhY2NvdW50Ijp7Im5hbWUiOiJrdWJlb3BlcmF0b3ItdXNlciIsInVpZCI6ImZhOGJmZjJjLWIyYjYtNDAxMS1iODAzLTY4MDVmZDYwZjMxOSJ9fSwibmJmIjoxNjU4ODk0NTE5LCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6a3ViZS1zeXN0ZW06a3ViZW9wZXJhdG9yLXVzZXIifQ.HvLQlMW_aJ2TDlyE-aM9UiDKl3QHAod9oUQZaHBI97-nLc3aoUdKsGrhICD42ud_Qcn_vFhUvJkPvBi_5esqKCB9LPF-cUhyyj0TxRIH_rTfUdzmDeYUVn3rfg0jlGkXRhzpJMLIRpsK_RB0StbDR4WxfhdnpRkFz-7YgtsRUfRZXG4AF6HNzt1ZWEA3ZVv779TqJemBUTmwJGB9OdyYkKTnGNy4tDGfryZsfW7zN-FhdVugd_7-_lNlFrLZWwrN3fUYPSZLGqulvy7BBpIBO16pBtIA0Qi0bkNdkSpu5a2RNjpMtXKVRYy7M--mQ4EaEod4aCZDuDhMz2S-75VwDA[root@k8s-master01 ~]#
对于
https://www.oiox.cn/
https://www.oiox.cn/index.php...
CSDN、GitHub、知乎、开源中国、思否、掘金、简书、华为云、阿里云、腾讯云、哔哩哔哩、今日头条、新浪微博、集体博客
全网可搜《小陈运维》
文章次要公布于微信公众号