
安装helm
wget https://www.rancher.cn/download/helm/helm-v2.14.3-linux-amd64.tar.gz
tar xf helm-v2.14.3-linux-amd64.tar.gz
mv linux-amd64/helm /usr/local/bin/helm && chmod +x /usr/local/bin/helm
kubectl -n kube-system create serviceaccount tiller
kubectl create clusterrolebinding tiller --clusterrole cluster-admin --serviceaccount=kube-system:tiller
helm init --service-account tiller --skip-refresh --tiller-image registry.cn-shanghai.aliyuncs.com/rancher/tiller:v2.14.3
安装rancher 4层负载 helm在线方式,参考官网
按官网生成证书
./create_self-signed-cert.sh --ssl-domain=www.test.com --ssl-trusted-domain=bjrc.xikang.com --ssl-trusted-ip=10.4.31.171,10.4.31.172,10.4.31.173 --ssl-size=2048 --ssl-date=3650
kubectl create namespace cattle-system
kubectl -n cattle-system create secret tls tls-rancher-ingress --cert=./tls.crt --key=./tls.key
kubectl -n cattle-system create secret \
generic tls-ca \
--from-file=cacerts.pem
helm repo add rancher-stable \
https://releases.rancher.com/server-charts/stable
helm install \
rancher-stable/rancher \
--name rancher \
--namespace cattle-system \
--set hostname=bjrc.xikang.com \
--set ingress.tls.source=secret \
--set privateCA=true
kubectl -n cattle-system \
patch deployments rancher --patch '{
"spec": {
"template": {
"spec": {
"hostAliases": [
{
"hostnames":
[
"bjrc.xikang.com"
],
"ip": "10.4.31.150"
}
]
}
}
}
}'
kubectl -n cattle-system patch deployments cattle-cluster-agent --patch '{
"spec": {
"template": {
"spec": {
"hostAliases": [
{
"hostnames":
[
"bjrc.xikang.com"
],
"ip": "10.4.31.150"
}
]
}
}
}
}'
kubectl -n cattle-system \
patch daemonsets cattle-node-agent --patch '{
"spec": {
"template": {
"spec": {
"hostAliases": [
{
"hostnames":
[
"bjrc.xikang.com"
],
"ip": "10.4.31.150"
}
]
}
}
}
}'
需用rke安装的集群,否则由于Ingress原因不成功访问。
高可用,如果某个点down,访问会慢或报错,原因是nginx未错误检查,建议nginx中去掉该错误节点。
rancher升级到2.3.2版本
helm repo update
helm search rancher
helm upgrade rancher rancher-stable/rancher --version v2.3.2 --set hostname=bjrc.xikang.com --set ingress.tls.source=secret --set privateCA=true --set service.type=ClusterIP
「真诚赞赏,手留余香」
请我喝杯咖啡?
使用微信扫描二维码完成支付
