01集群架构 安装和配置

# 创建 ClusterRole
kubectl create clusterrole deployment-clusterrole --verb=create --resource=deployments,statefulsets,daemonsets

# 创建 ServiceAccount
kubectl create sa cicd-token -n app-team1

# 将新的 ClusterRole deployment-clusterrole 绑定到新的 ServiceAccount cicd-token
kubectl create rolebinding bind-clusterrole \
  --clusterrole=deployment-clusterrole \
  --serviceaccount=app-team1:cicd-token \
  --namespace=app-team1

# 切换环境
kubectl config use-context ek8s

# 禁止调度
kubectl cordon ek8s-node-0

# 执行驱逐
kubectl drain ek8s-node-0 --ignore-daemonsets --delete-emptydir-data --force

# 切换 context
kubectl config use-context mk8s

# 准备工作
# 设置为不可用
kubectl cordon k8s-master

# 驱逐节点
kubectl drain k8s-master --delete-emptydir-data --ignore-daemonsets --force

# 升级组件
# Ubuntu
apt update
apt-cache madison kubeadm
apt-mark unhold kubeadm && \
apt-get update && apt-get install -y kubeadm=kubeadm='1.24.x-*' && \
apt-mark hold kubeadm
# yum install -y kubeadm-1.24.0-0 --disableexcludes=kubernetes

# 验证下载操作正常，并且 kubeadm 版本正确&验证升级计划：
kubeadm version
kubeadm upgrade plan

# 升级
sudo kubeadm upgrade apply v1.24.0 --etcd-upgrade=false

# 升级 kubectl、kubelet
apt-mark unhold kubelet kubectl && \
apt-get update && apt-get install -y kubelet='1.24.x-*' kubectl='1.24.x-*' && \
apt-mark hold kubelet kubectl
# yum install -y kubelet-1.24.0-0 kubectl-1.24.0-0 --disableexcludes=kubernetes

# 重启 kubelet
sudo systemctl daemon-reload
sudo systemctl restart kubelet

# 恢复为可调度
kubectl uncordon k8s-master

# 找到 etcdctl 的位置
find / -name etcdctl

# 设置 etcdctl 的 alias 别名
alias etcdctl='/var/lib/docker/overlay2/81db967cc7079ac61b211f282300c1e4ce1e8b1eef09b2723375056cb6304501/diff/usr/local/bin/etcdctl'

# 设置 API 版本
export ETCDCTL_API=3 

# 备份
etcdctl \
  --endpoints=https://127.0.0.1:2379 \
  --cacert=/opt/KUIN00601/ca.crt \
  --cert=/opt/KUIN00601/etcd-client.crt \
  --key=/opt/KUIN00601/etcd-client.key \
  snapshot save /srv/data/etcd-snapshot.db

# 验证备份快照
etcdctl --write-out=table snapshot status /cka/etcd-snapshot.db

# 恢复数据前关闭静态 pod
cd /etc/kubernets/mainfests && mv kube-* /opt/backup
etcdctl \
  --endpoints=https://127.0.0.1:2379 \
  --cacert=/opt/KUIN00601/ca.crt \
  --cert=/opt/KUIN00601/etcd-client.crt \
  --key=/opt/KUIN00601/etcd-client.key \
  snapshot restore /srv/data/etcd-snapshot-previous.db \
  --data-dir=/var/lib/ectd-restore
# 恢复后更改 etcd 存储路径
vi etcd.yaml # /var/lib/ectd -> /var/lib/ectd-restore
# 恢复静态 pod
mv /opt/backup/kube-* /etc/kubernets/mainfests
# 重启 kubelet
systemctl restart kubelet