當前位置：首頁 > 编程资源 > 编程问答 >内容正文

编程问答

etcd+calico集群的部署

發(fā)布時間：2025/7/14 编程问答 19 豆豆

生活随笔收集整理的這篇文章主要介紹了 etcd+calico集群的部署小編覺得挺不錯的,現(xiàn)在分享給大家,幫大家做個參考.

>> from?zhuhaiqing.info

etcd單機模式

設置環(huán)境變量

export HostIP="192.168.12.50"

執(zhí)行如下命令，打開etcd的客戶端連接端口4001和2379、etcd互聯(lián)端口2380

如果是第一次執(zhí)行此命令，docker會下載最新的etcd官方鏡像

docker run -d -v /usr/share/ca-certificates/:/etc/ssl/certs -p 4001:4001 -p 2380:2380 -p 2379:2379 \--name etcd quay.io/coreos/etcd \-name etcd0 \-advertise-client-urls http://${HostIP}:2379,http://${HostIP}:4001 \-listen-client-urls http://0.0.0.0:2379,http://0.0.0.0:4001 \-initial-advertise-peer-urls http://${HostIP}:2380 \-listen-peer-urls http://0.0.0.0:2380 \-initial-cluster-token etcd-cluster-1 \-initial-cluster etcd0=http://${HostIP}:2380 \-initial-cluster-state new

選擇上面2個端口中的任意一個，檢測一下節(jié)點情況：

curl -L http://127.0.0.1:2379/v2/members

多節(jié)點etcd集群

配置多節(jié)點etcd集群和單節(jié)點類似，最主要的區(qū)別是-initial-cluster參數(shù)，它表示了各個成員的互聯(lián)地址（peer url）:

節(jié)點01執(zhí)行如下命令：

docker run -d -p 4001:4001 -p 2380:2380 -p 2379:2379 \ --restart=always \ --name etcd quay.io/coreos/etcd \ -name etcd01 \ -advertise-client-urls http://192.168.73.140:2379,http://192.168.73.140:4001 \ -listen-client-urls http://0.0.0.0:2379 \ -initial-advertise-peer-urls http://192.168.73.140:2380 \ -listen-peer-urls http://0.0.0.0:2380 \ -initial-cluster-token etcd-cluster \ -initial-cluster "etcd01=http://192.168.73.140:2380,etcd02=http://192.168.73.137:2380" \ -initial-cluster-state new

節(jié)點02執(zhí)行如下命令

docker run -d -p 4001:4001 -p 2380:2380 -p 2379:2379 \ --restart=always \ --name etcd quay.io/coreos/etcd \ -name etcd02 \ -advertise-client-urls http://192.168.73.137:2379,http://192.168.73.137:4001 \ -listen-client-urls http://0.0.0.0:2379 \ -initial-advertise-peer-urls http://192.168.73.137:2380 \ -listen-peer-urls http://0.0.0.0:2380 \ -initial-cluster-token etcd-cluster \ -initial-cluster "etcd01=http://192.168.73.140:2380,etcd02=http://192.168.73.137:2380" \ -initial-cluster-state new

檢查集群連接情況，分別在各個節(jié)點執(zhí)行如下命令：

curl -L http://127.0.0.1:2379/v2/members

如果正常，將看到2個節(jié)點的信息，且在各個節(jié)點看到的結果都應該是一樣的：

{"members":[{"id":"2bd5fcc327f74dd5","name":"etcd01","peerURLs":["http://192.168.73.140:2380"],"clientURLs":["http://192.168.73.140:2379","http://192.168.73.140:4001"]},{"id":"c8a9cac165026b12","name":"etcd02","peerURLs":["http://192.168.73.137:2380"],"clientURLs":["http://192.168.73.137:2379","http://192.168.73.137:4001"]}]}

擴展etcd集群

在集群中的任何一臺etcd節(jié)點上執(zhí)行命令，將新節(jié)點注冊到集群：

curl http://127.0.0.1:2379/v2/members -XPOST -H "Content-Type: application/json" -d '{"peerURLs": ["http://192.168.73.172:2380"]}'

在新節(jié)點上啟動etcd容器，注意-initial-cluster-state參數(shù)為existing

docker run -d -p 4001:4001 -p 2380:2380 -p 2379:2379 \ --restart=always \ --name etcd quay.io/coreos/etcd \ -name etcd03 \ -advertise-client-urls http://192.168.73.150:2379,http://192.168.73.150:4001 \ -listen-client-urls http://0.0.0.0:2379 \ -initial-advertise-peer-urls http://192.168.73.150:2380 \ -listen-peer-urls http://0.0.0.0:2380 \ -initial-cluster-token etcd-cluster \ -initial-cluster "etcd01=http://192.168.73.140:2380,etcd02=http://192.168.73.137:2380,etcd03=http://192.168.73.150:2380" \ -initial-cluster-state existing

任意節(jié)點執(zhí)行健康檢查：

[root@docker01 ~]# etcdctl cluster-health member 2bd5fcc327f74dd5 is healthy: got healthy result from http://192.168.73.140:2379 member c8a9cac165026b12 is healthy: got healthy result from http://192.168.73.137:2379 cluster is healthy

calico部署

現(xiàn)在物理主機下載calicoctl，下載頁面：

https://github.com/projectcalico/calico-containers/releases

并將下載的calicoctl復制到/usr/local/bin下面

在第一臺etcd節(jié)點上執(zhí)行如下命令：

[root@docker01 ~]# calicoctl node #如果是第一次執(zhí)行該命令，會需要聯(lián)網下載calico node鏡像并啟動 Running Docker container with the following command:docker run -d --restart=always --net=host --privileged --name=calico-node -e HOSTNAME=docker01 -e IP= -e IP6= -e CALICO_NETWORKING=true -e AS= -e NO_DEFAULT_POOLS= -e ETCD_AUTHORITY=127.0.0.1:2379 -e ETCD_SCHEME=http -v /var/log/calico:/var/log/calico -v /var/run/calico:/var/run/calico calico/node:v0.18.0Calico node is running with id: 60b284221a94b418509f86d3c8d7073e11ab3c2a3ca17e4efd2568e97791ff33 Waiting for successful startup No IP provided. Using detected IP: 192.168.73.140 Calico node started successfully

在第二臺etcd節(jié)點上執(zhí)行：

[root@Docker01 ~]# calicoctl node --如果是第一次執(zhí)行該命令，會需要聯(lián)網下載calico node鏡像 Running Docker container with the following command:docker run -d --restart=always --net=host --privileged --name=calico-node -e HOSTNAME=docker01 -e IP= -e IP6= -e CALICO_NETWORKING=true -e AS= -e NO_DEFAULT_POOLS= -e ETCD_AUTHORITY=127.0.0.1:2379 -e ETCD_SCHEME=http -v /var/log/calico:/var/log/calico -v /var/run/calico:/var/run/calico calico/node:v0.18.0Calico node is running with id: 72e7213852e529a3588249d85f904e38a92d671add3cdfe5493687aab129f5e2 Waiting for successful startup No IP provided. Using detected IP: 192.168.73.137 Calico node started successfully

在任意一臺calico節(jié)點上執(zhí)行如下命令，配置地址資源池：

[root@Docker01 ~]# calicoctl pool remove 192.168.0.0/16 #刪除默認資源池 [root@Docker01 ~]# calicoctl pool add 10.0.238.0/24 --nat-outgoing --ipip #添加新的IP資源池，支持跨子網的主機上的Docker間網絡互通，需要添加--ipip參數(shù)；如果要Docker訪問外網，需要添加--nat-outgoing參數(shù) [root@docker01 ~]# calicoctl pool show #查看配置后的結果

在任意calico節(jié)點，檢查Calico狀態(tài)：

配置docker容器網絡

分別在2個節(jié)點上啟動業(yè)務一個容器，不加載網絡驅動，后面網絡讓Calico來配置：

[root@docker01 ~]# docker run --name test01 -itd --log-driver none --net none daocloud.io/library/centos:6.6 /bin/bash [root@docker02 ~]# docker run --name test02 -itd --log-driver none --net none daocloud.io/library/centos:6.6 /bin/bash

在任意的calico節(jié)點創(chuàng)建Calico profile：

[root@docker01 ~]# calicoctl profile add starboss

通過Calico手動為容器指定ip，注意此ip需要符合calico pool的ip配置：

[root@docker01 ~]# calicoctl container add test01 10.0.238.10 IP 10.0.238.10 added to test01 [root@docker02 ~]# calicoctl container add test02 10.0.238.11 IP 10.0.238.10 added to test02

在各個calico節(jié)點上，分別將需要互相訪問的節(jié)點加入同一個profile：

[root@docker01 ~]# calicoctl container test01 profile set starboss Profile(s) set to starboss. [root@docker02 ~]# calicoctl container test02 profile set starboss Profile(s) set to starboss.

在任意節(jié)點查看Calico節(jié)點的配置情況：

測試，在一臺物理主機中ping另外一臺主機中的容器：

[root@docker01 ~]# docker exec test01 ping 192.168.0.11 PING 192.168.0.11 (192.168.0.11) 56(84) bytes of data. 64 bytes from 192.168.0.11: icmp_seq=1 ttl=62 time=0.557 ms 64 bytes from 192.168.0.11: icmp_seq=2 ttl=62 time=0.603 ms 64 bytes from 192.168.0.11: icmp_seq=3 ttl=62 time=0.656 ms 64 bytes from 192.168.0.11: icmp_seq=4 ttl=62 time=0.386 ms

轉載于:https://www.cnblogs.com/zhuhaiqing/p/5393548.html

總結

以上是生活随笔為你收集整理的etcd+calico集群的部署的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。