日韩无码专区无码一级三级片|91人人爱网站中日韩无码电影|厨房大战丰满熟妇|AV高清无码在线免费观看|另类AV日韩少妇熟女|中文日本大黄一级黄色片|色情在线视频免费|亚洲成人特黄a片|黄片wwwav色图欧美|欧亚乱色一区二区三区

RELATEED CONSULTING
相關(guān)咨詢
選擇下列產(chǎn)品馬上在線溝通
服務(wù)時(shí)間：8:30-17:00
你可能遇到了下面的問題
關(guān)閉右側(cè)工具欄

新聞中心

這里有您想知道的互聯(lián)網(wǎng)營銷解決方案
一篇帶給你ETCD入門指南

前言

之前對etcd不是很了解，于是下定決心學(xué)習(xí)一下。隨手把過程記錄了一下，希望對大家有幫助。

讓客戶滿意是我們工作的目標(biāo)，不斷超越客戶的期望值來自于我們對這個(gè)行業(yè)的熱愛。我們立志把好的技術(shù)通過有效、簡單的方式提供給客戶，將通過不懈努力成為客戶在信息化領(lǐng)域值得信任、有價(jià)值的長期合作伙伴，公司提供的服務(wù)項(xiàng)目有：主機(jī)域名、網(wǎng)絡(luò)空間、營銷軟件、網(wǎng)站建設(shè)、漢臺網(wǎng)站維護(hù)、網(wǎng)站推廣。

環(huán)境說明如下：

一、集群搭建

我這里將etcd部署在虛擬機(jī)上，采取靜態(tài)配置，即在etcd各節(jié)點(diǎn)在配置中指定。

1.所有節(jié)點(diǎn)下載etcd并解壓、移動(dòng)至/usr/local/bin/，并給予對應(yīng)權(quán)限

 
 
 
 
    
  
  
  
  
  1. # 下載地址：https://github.com/etcd-io/etcd/releases 
    2.   
  
  
  
  2. wget https://github.com/coreos/etcd/releases/download/v3.4.16/etcd-v3.4.16-linux-amd64.tar.gz 
    3.   
  
  
  
  3. tar -zxvf etcd-v3.4.16-linux-amd64.tar.gz 
    4.   
  
  
  
  4. cd etcd* 
    5.   
  
  
  
  5. mv etcdctl etcd /usr/local/bin 
    6.   
  
  
  
  6. chmod +x /usr/local/bin/etcd* 
    7.

2.證書文件

 
 
 
 
    
  
  
  
  
  1. # 證書文件 ca-config.json etcd-ca-csr.json etcd-csr.json 
    2.   
  
  
  
  2. cat ca-config.json 
    3.   
  
  
  
  3. { 
    4.   
  
  
  
  4.   "signing": { 
    5.   
  
  
  
  5.     "default": { 
    6.   
  
  
  
  6.       "expiry": "876000h" 
    7.   
  
  
  
  7.     }, 
    8.   
  
  
  
  8.     "profiles": { 
    9.   
  
  
  
  9.       "kubernetes": { 
    10.   
  
  
  
  10.         "usages": [ 
    11.   
  
  
  
  11.             "signing", 
    12.   
  
  
  
  12.             "key encipherment", 
    13.   
  
  
  
  13.             "server auth", 
    14.   
  
  
  
  14.             "client auth" 
    15.   
  
  
  
  15.         ], 
    16.   
  
  
  
  16.         "expiry": "876000h" 
    17.   
  
  
  
  17.       } 
    18.   
  
  
  
  18.     } 
    19.   
  
  
  
  19.   } 
    20.   
  
  
  
  20. } 
    21.   
  
  
  
  21.  
    22.   
  
  
  
  22. cat etcd-ca-csr-json 
    23.   
  
  
  
  23. { 
    24.   
  
  
  
  24.   "CN": "etcd", 
    25.   
  
  
  
  25.   "key": { 
    26.   
  
  
  
  26.     "algo": "rsa", 
    27.   
  
  
  
  27.     "size": 2048 
    28.   
  
  
  
  28.   }, 
    29.   
  
  
  
  29.   "names": [ 
    30.   
  
  
  
  30.     { 
    31.   
  
  
  
  31.       "C": "CN", 
    32.   
  
  
  
  32.       "ST": "Shenzhen", 
    33.   
  
  
  
  33.       "L": "Shenzhen", 
    34.   
  
  
  
  34.       "O": "etcd", 
    35.   
  
  
  
  35.       "OU": "Etcd Security" 
    36.   
  
  
  
  36.     } 
    37.   
  
  
  
  37.   ] 
    38.   
  
  
  
  38. } 
    39.   
  
  
  
  39.  
    40.   
  
  
  
  40.  
    41.   
  
  
  
  41. cat etcd-csr.json 
    42.   
  
  
  
  42. { 
    43.   
  
  
  
  43.     "CN": "etcd", 
    44.   
  
  
  
  44.     "hosts": [ 
    45.   
  
  
  
  45.       "127.0.0.1", 
    46.   
  
  
  
  46.       "10.211.55.50", 
    47.   
  
  
  
  47.       "10.211.55.51", 
    48.   
  
  
  
  48.       "10.211.55.52" 
    49.   
  
  
  
  49.     ], 
    50.   
  
  
  
  50.     "key": { 
    51.   
  
  
  
  51.         "algo": "rsa", 
    52.   
  
  
  
  52.         "size": 2048 
    53.   
  
  
  
  53.     }, 
    54.   
  
  
  
  54.     "names": [ 
    55.   
  
  
  
  55.         { 
    56.   
  
  
  
  56.             "C": "CN", 
    57.   
  
  
  
  57.             "ST": "Shenzhen", 
    58.   
  
  
  
  58.             "L": "Shenzhen", 
    59.   
  
  
  
  59.             "O": "etcd", 
    60.   
  
  
  
  60.             "OU": "Etcd Security" 
    61.   
  
  
  
  61.         } 
    62.   
  
  
  
  62.     ] 
    63.   
  
  
  
  63. } 
    64.

3.etcd-ca證書

 
 
 
 
    
  
  
  
  
  1. cfssl gencert -initca etcd-ca-csr.json | cfssljson -bare etcd-ca 
    2.   
  
  
  
  2. # 查看證書文件 
    3.   
  
  
  
  3. [root@etcd1 opt]# ls -al 
    4.   
  
  
  
  4. total 36 
    5.   
  
  
  
  5. drwxr-xr-x.  2 root root  186 May 13 21:53 . 
    6.   
  
  
  
  6. dr-xr-xr-x. 17 root root  244 Oct 21  2020 .. 
    7.   
  
  
  
  7. -rw-------   1 root root  294 Nov 27  2019 ca-config.json 
    8.   
  
  
  
  8. -rw-r--r--   1 root root 1005 May 13 21:53 etcd-ca.csr 
    9.   
  
  
  
  9. -rw-------   1 root root  212 Nov 27  2019 etcd-ca-csr.json 
    10.   
  
  
  
  10. -rw-------   1 root root 1675 May 13 21:53 etcd-ca-key.pem 
    11.   
  
  
  
  11. -rw-r--r--   1 root root 1371 May 13 21:53 etcd-ca.pem 
    12.   
  
  
  
  12. -rw-------   1 root root  374 May 13 21:48 etcd-csr.json 
    13.

4.生成etcd證書

 
 
 
 
    
  
  
  
  
  1. cfssl gencert -ca=etcd-ca.pem -ca-key=etcd-ca-key.pem -config=ca-config.json -profile=kubernetes etcd-csr.json | cfssljson -bare etcd 
    2.   
  
  
  
  2. # 查看證書 
    3.   
  
  
  
  3. ls -al 
    4.   
  
  
  
  4. total 36 
    5.   
  
  
  
  5. drwxr-xr-x.  2 root root  186 May 13 21:53 . 
    6.   
  
  
  
  6. dr-xr-xr-x. 17 root root  244 Oct 21  2020 .. 
    7.   
  
  
  
  7. -rw-------   1 root root  294 Nov 27  2019 ca-config.json 
    8.   
  
  
  
  8. -rw-r--r--   1 root root 1005 May 13 21:53 etcd-ca.csr 
    9.   
  
  
  
  9. -rw-------   1 root root  212 Nov 27  2019 etcd-ca-csr.json 
    10.   
  
  
  
  10. -rw-------   1 root root 1675 May 13 21:53 etcd-ca-key.pem 
    11.   
  
  
  
  11. -rw-r--r--   1 root root 1371 May 13 21:53 etcd-ca.pem 
    12.   
  
  
  
  12. -rw-r--r--   1 root root 1078 May 13 21:53 etcd.csr 
    13.   
  
  
  
  13. -rw-------   1 root root  374 May 13 21:48 etcd-csr.json 
    14.   
  
  
  
  14. -rw-------   1 root root 1679 May 13 21:53 etcd-key.pem 
    15.   
  
  
  
  15. -rw-r--r--   1 root root 1456 May 13 21:53 etcd.pem 
    16.

5.復(fù)制到etcd的證書到證書目錄

 
 
 
 
    
  
  
  
  
  1. mkdir -pv /etc/etcd/ssl && cp etcd*.pem /etc/etcd/ssl 
    2.   
  
  
  
  2. # 復(fù)制證書目錄到其他節(jié)點(diǎn) 
    3.   
  
  
  
  3. scp -r /etc/etcd root@etcd2 
    4.   
  
  
  
  4. scp -r /etc/etcd root@etcd3 
    5.

6.配置成系統(tǒng)服務(wù)

 
 
 
 
    
  
  
  
  
  1. cat etcd.service # 要根據(jù)每個(gè)節(jié)點(diǎn)進(jìn)行修改IP和name 
    2.   
  
  
  
  2. [Unit] 
    3.   
  
  
  
  3. Description=Etcd Server 
    4.   
  
  
  
  4. After=network.target 
    5.   
  
  
  
  5. After=network-online.target 
    6.   
  
  
  
  6. Wants=network-online.target 
    7.   
  
  
  
  7. Documentation=https://github.com/coreos 
    8.   
  
  
  
  8. [Service] 
    9.   
  
  
  
  9. Type=notify 
    10.   
  
  
  
  10. WorkingDirectory=/var/lib/etcd/ 
    11.   
  
  
  
  11. EnvironmentFile=-/etc/etcd/etcd.conf 
    12.   
  
  
  
  12. ExecStart=/usr/local/bin/etcd \ 
    13.   
  
  
  
  13. --name=etcd1 \ 
    14.   
  
  
  
  14. --cert-file=/etc/etcd/ssl/etcd.pem \ 
    15.   
  
  
  
  15. --key-file=/etc/etcd/ssl/etcd-key.pem \ 
    16.   
  
  
  
  16. --peer-cert-file=/etc/etcd/ssl/etcd.pem \ 
    17.   
  
  
  
  17. --peer-key-file=/etc/etcd/ssl/etcd-key.pem \ 
    18.   
  
  
  
  18. --trusted-ca-file=/etc/etcd/ssl/etcd-ca.pem \ 
    19.   
  
  
  
  19. --peer-trusted-ca-file=/etc/etcd/ssl/etcd-ca.pem \ 
    20.   
  
  
  
  20. --initial-advertise-peer-urls=https://10.211.55.50:2380 \ 
    21.   
  
  
  
  21. --listen-peer-urls=https://10.211.55.50:2380 \ 
    22.   
  
  
  
  22. --listen-client-urls=https://10.211.55.50:2379,http://127.0.0.1:2379 \ 
    23.   
  
  
  
  23. --advertise-client-urls=https://10.211.55.50:2379 \ 
    24.   
  
  
  
  24. --initial-cluster-token=etcd-cluster-0 \ 
    25.   
  
  
  
  25. --initial-cluster=etcd1=https://10.211.55.50:2380,etcd2=https://10.211.55.51:2380,etcd3=https://10.211.55.52:2380 \ 
    26.   
  
  
  
  26. --initial-cluster-state=new \ 
    27.   
  
  
  
  27. --data-dir=/var/lib/etcd 
    28.   
  
  
  
  28. Restart=on-failure 
    29.   
  
  
  
  29. RestartSec=5 
    30.   
  
  
  
  30. LimitNOFILE=65536 
    31.   
  
  
  
  31. [Install] 
    32.   
  
  
  
  32. WantedBy=multi-user.target 
    33.

7.啟動(dòng)etcd

 
 
 
 
    
  
  
  
  
  1. # 三個(gè)節(jié)點(diǎn)啟動(dòng)etcd服務(wù) 
    2.   
  
  
  
  2. systemctl daemon-reload && systemctl enable etcd && systemctl start etcd 
    3.

8.檢查集群狀態(tài)

 
 
 
 
    
  
  
  
  
  1. # 檢查member 
    2.   
  
  
  
  2. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.52:2379 member list -w table 
    3.   
  
  
  
  3. +------------------+---------+-------+---------------------------+---------------------------+------------+ 
    4.   
  
  
  
  4. |        ID        | STATUS  | NAME  |        PEER ADDRS         |       CLIENT ADDRS        | IS LEARNER | 
    5.   
  
  
  
  5. +------------------+---------+-------+---------------------------+---------------------------+------------+ 
    6.   
  
  
  
  6. |  ca2cb14b2acc776 | started | etcd3 | https://10.211.55.52:2380 | https://10.211.55.52:2379 |      false | 
    7.   
  
  
  
  7. | 31f517c6aefb1a37 | started | etcd1 | https://10.211.55.50:2380 | https://10.211.55.50:2379 |      false | 
    8.   
  
  
  
  8. | ad1ee26f89ef12f4 | started | etcd2 | https://10.211.55.51:2380 | https://10.211.55.51:2379 |      false | 
    9.   
  
  
  
  9. +------------------+---------+-------+---------------------------+---------------------------+------------+ 
    10.   
  
  
  
  10.  
    11.   
  
  
  
  11. # 查看是否有LD 
    12.   
  
  
  
  12. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379,https://10.211.55.52:2379 endpoint status -w table 
    13.   
  
  
  
  13. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    14.   
  
  
  
  14. |         ENDPOINT          |        ID        | VERSION | DB SIZE | IS LEADER | IS LEARNER | RAFT TERM | RAFT INDEX | RAFT APPLIED INDEX | ERRORS | 
    15.   
  
  
  
  15. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    16.   
  
  
  
  16. | https://10.211.55.50:2379 | 31f517c6aefb1a37 |  3.4.16 |   25 kB |      true |      false |       645 |         54 |                 54 |        | 
    17.   
  
  
  
  17. | https://10.211.55.51:2379 | ad1ee26f89ef12f4 |  3.4.16 |   20 kB |     false |      false |       645 |         54 |                 54 |        | 
    18.   
  
  
  
  18. | https://10.211.55.52:2379 |  ca2cb14b2acc776 |  3.4.16 |   20 kB |     false |      false |       645 |         54 |                 54 |        | 
    19.   
  
  
  
  19. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    20.   
  
  
  
  20.  
    21.   
  
  
  
  21. # 嘗試寫入數(shù)據(jù) 
    22.   
  
  
  
  22. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379,https://10.211.55.52:2379  put foo4 bar4 
    23.   
  
  
  
  23.  
    24.   
  
  
  
  24. # 讀取數(shù)據(jù) 
    25.   
  
  
  
  25. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379,https://10.211.55.52:2379 get  foo4 
    26.   
  
  
  
  26. foo4 
    27.   
  
  
  
  27. bar4 
    28.   
  
  
  
  28.  
    29.   
  
  
  
  29. # 獲取所有key 
    30.   
  
  
  
  30. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379,https://10.211.55.52:2379 get --prefix  --keys-only '' 
    31.   
  
  
  
  31. foo 
    32.   
  
  
  
  32. foo2 
    33.   
  
  
  
  33. foo3 
    34.   
  
  
  
  34. foo4 
    35.   
  
  
  
  35.  
    36.   
  
  
  
  36. # 只獲取value 
    37.   
  
  
  
  37. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379,https://10.211.55.52:2379 get  --print-value-only --prefix=true '' 
    38.   
  
  
  
  38. bar 
    39.   
  
  
  
  39. bar2 
    40.   
  
  
  
  40. bar3 
    41.   
  
  
  
  41. bar 
    42.   
  
  
  
  42.  
    43.   
  
  
  
  43. # 獲取指定key、rev的數(shù)據(jù) 
    44.   
  
  
  
  44. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379,https://10.211.55.52:2379 get  foo4 -w json 
    45.   
  
  
  
  45. {"header":{"cluster_id":9218922165880849559,"member_id":910513364439713654,"revision":10,"raft_term":645},"kvs":[{"key":"Zm9vNA==","create_revision":7,"mod_revision":10,"version":4,"value":"eGl5YW5neGl4aQ=="}],"count":1} 
    46.   
  
  
  
  46.  
    47.   
  
  
  
  47. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379,https://10.211.55.52:2379 get  foo4 -w json --rev=8 
    48.   
  
  
  
  48. {"header":{"cluster_id":9218922165880849559,"member_id":3599809619259234871,"revision":10,"raft_term":645},"kvs":[{"key":"Zm9vNA==","create_revision":7,"mod_revision":8,"version":2,"value":"eGl5YW5neGl4aWE="}],"count":1} 
    49.

二、成員變更

刪除成員

因?yàn)槲业馁Y源有限，所以先模擬刪除成員再添加成員。

 
 
 
 
    
  
  
  
  
  1. # 先檢查集群狀態(tài)并獲取成員ID 
    2.   
  
  
  
  2. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379,https://10.211.55.52:2379 endpoint status -w table 
    3.   
  
  
  
  3. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    4.   
  
  
  
  4. |         ENDPOINT          |        ID        | VERSION | DB SIZE | IS LEADER | IS LEARNER | RAFT TERM | RAFT INDEX | RAFT APPLIED INDEX | ERRORS | 
    5.   
  
  
  
  5. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    6.   
  
  
  
  6. | https://10.211.55.50:2379 | 31f517c6aefb1a37 |  3.4.16 |   25 kB |      true |      false |       645 |         54 |                 54 |        | 
    7.   
  
  
  
  7. | https://10.211.55.51:2379 | ad1ee26f89ef12f4 |  3.4.16 |   20 kB |     false |      false |       645 |         54 |                 54 |        | 
    8.   
  
  
  
  8. | https://10.211.55.52:2379 |  ca2cb14b2acc776 |  3.4.16 |   20 kB |     false |      false |       645 |         54 |                 54 |        | 
    9.   
  
  
  
  9. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    10.   
  
  
  
  10.  
    11.   
  
  
  
  11. # 通過ID刪除成員，這里以刪除10.211.55.52為例 
    12.   
  
  
  
  12. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379 member remove ca2cb14b2acc776 
    13.   
  
  
  
  13. Member  ca2cb14b2acc776 removed from cluster 7ff030ddad4d8497 
    14.   
  
  
  
  14.  
    15.   
  
  
  
  15. # 檢查集群狀態(tài)，只有兩個(gè)節(jié)點(diǎn)了 
    16.   
  
  
  
  16. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379,https://10.211.55.52:2379 endpoint status -w table 
    17.   
  
  
  
  17. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    18.   
  
  
  
  18. |         ENDPOINT          |        ID        | VERSION | DB SIZE | IS LEADER | IS LEARNER | RAFT TERM | RAFT INDEX | RAFT APPLIED INDEX | ERRORS | 
    19.   
  
  
  
  19. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    20.   
  
  
  
  20. | https://10.211.55.50:2379 | 31f517c6aefb1a37 |  3.4.16 |   25 kB |      true |      false |       645 |         58 |                 58 |        | 
    21.   
  
  
  
  21. | https://10.211.55.51:2379 | ad1ee26f89ef12f4 |  3.4.16 |   20 kB |     false |      false |       645 |         58 |                 58 |        | 
    22.   
  
  
  
  22. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    23.   
  
  
  
  23.  
    24.   
  
  
  
  24. # 查看10.211.55.52 etcd狀態(tài)，發(fā)現(xiàn)etcd 
    25.   
  
  
  
  25. systemctl status etcd 
    26.   
  
  
  
  26. ● etcd.service - Etcd Server 
    27.   
  
  
  
  27.    Loaded: loaded (/etc/systemd/system/etcd.service; enabled; vendor preset: disabled) 
    28.   
  
  
  
  28.    Active: inactive (dead) since Sun 2021-07-04 11:39:42 CST; 1min 31s ago 
    29.   
  
  
  
  29.    ...... 
    30.   
  
  
  
  30.     
    31.   
  
  
  
  31. # 嘗試寫入數(shù)據(jù) 
    32.   
  
  
  
  32. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379  put foo4 bar8 
    33.   
  
  
  
  33. OK 
    34.   
  
  
  
  34.  
    35.   
  
  
  
  35. # 嘗試獲取寫入的數(shù)據(jù) 
    36.   
  
  
  
  36. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379  get  foo4  
    37.   
  
  
  
  37. foo4 
    38.   
  
  
  
  38. bar8 
    39.

添加成員

添加成員主要分為兩步，一是通過etcdctl添加成員，二是根據(jù)第一步輸出的配置修改etcd配置并啟動(dòng)etcd

 
 
 
 
    
  
  
  
  
  1. # 先通過etcdctl添加成員 
    2.   
  
  
  
  2. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379  member add etcd3 --peer-urls="https://10.211.55.52:2380" 
    3.   
  
  
  
  3. Member 89088d035064124d added to cluster 7ff030ddad4d8497 
    4.   
  
  
  
  4.  
    5.   
  
  
  
  5. ETCD_NAME="etcd3" 
    6.   
  
  
  
  6. ETCD_INITIAL_CLUSTER="etcd1=https://10.211.55.50:2380,etcd3=https://10.211.55.52:2380,etcd2=https://10.211.55.51:2380" 
    7.   
  
  
  
  7. ETCD_INITIAL_ADVERTISE_PEER_URLS="https://10.211.55.52:2380" 
    8.   
  
  
  
  8. ETCD_INITIAL_CLUSTER_STATE="existing" 
    9.   
  
  
  
  9.  
    10.   
  
  
  
  10. # 更改etcd配置并啟動(dòng)etcd，注意要保證etcd數(shù)據(jù)目錄為空 
    11.   
  
  
  
  11. systemctl cat etcd 
    12.   
  
  
  
  12. # /etc/systemd/system/etcd.service 
    13.   
  
  
  
  13. [Unit] 
    14.   
  
  
  
  14. Description=Etcd Server 
    15.   
  
  
  
  15. After=network.target 
    16.   
  
  
  
  16. After=network-online.target 
    17.   
  
  
  
  17. Wants=network-online.target 
    18.   
  
  
  
  18. Documentation=https://github.com/coreos 
    19.   
  
  
  
  19. [Service] 
    20.   
  
  
  
  20. Type=notify 
    21.   
  
  
  
  21. WorkingDirectory=/var/lib/etcd/ 
    22.   
  
  
  
  22. EnvironmentFile=-/etc/etcd/etcd.conf 
    23.   
  
  
  
  23. ExecStart=/usr/local/bin/etcd \ 
    24.   
  
  
  
  24. --name=etcd3 \ 
    25.   
  
  
  
  25. --cert-file=/etc/etcd/ssl/etcd.pem \ 
    26.   
  
  
  
  26. --key-file=/etc/etcd/ssl/etcd-key.pem \ 
    27.   
  
  
  
  27. --peer-cert-file=/etc/etcd/ssl/etcd.pem \ 
    28.   
  
  
  
  28. --peer-key-file=/etc/etcd/ssl/etcd-key.pem \ 
    29.   
  
  
  
  29. --trusted-ca-file=/etc/etcd/ssl/etcd-ca.pem \ 
    30.   
  
  
  
  30. --peer-trusted-ca-file=/etc/etcd/ssl/etcd-ca.pem \ 
    31.   
  
  
  
  31. --initial-advertise-peer-urls=https://10.211.55.52:2380 \ 
    32.   
  
  
  
  32. --listen-peer-urls=https://10.211.55.52:2380 \ 
    33.   
  
  
  
  33. --listen-client-urls=https://10.211.55.52:2379,http://127.0.0.1:2379 \ 
    34.   
  
  
  
  34. --advertise-client-urls=https://10.211.55.52:2379 \ 
    35.   
  
  
  
  35. --initial-cluster-token=etcd-cluster-0 \ 
    36.   
  
  
  
  36. --initial-cluster=etcd1=https://10.211.55.50:2380,etcd2=https://10.211.55.51:2380,etcd3=https://10.211.55.52:2380 \ 
    37.   
  
  
  
  37. --initial-cluster-state=existing \ 
    38.   
  
  
  
  38. --data-dir=/var/lib/etcd 
    39.   
  
  
  
  39. Restart=on-failure 
    40.   
  
  
  
  40. RestartSec=5 
    41.   
  
  
  
  41. LimitNOFILE=65536 
    42.   
  
  
  
  42. [Install] 
    43.   
  
  
  
  43. WantedBy=multi-user.target 
    44.   
  
  
  
  44.  
    45.   
  
  
  
  45. # 啟動(dòng)etcd 
    46.   
  
  
  
  46. systemctl start etcd && systemctl status etcd 
    47.   
  
  
  
  47.  
    48.   
  
  
  
  48. # 檢查集群狀態(tài) 
    49.   
  
  
  
  49. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379,https://10.211.55.52:2379 endpoint status -w table 
    50.   
  
  
  
  50. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    51.   
  
  
  
  51. |         ENDPOINT          |        ID        | VERSION | DB SIZE | IS LEADER | IS LEARNER | RAFT TERM | RAFT INDEX | RAFT APPLIED INDEX | ERRORS | 
    52.   
  
  
  
  52. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    53.   
  
  
  
  53. | https://10.211.55.50:2379 | 31f517c6aefb1a37 |  3.4.16 |   25 kB |      true |      false |       645 |         62 |                 62 |        | 
    54.   
  
  
  
  54. | https://10.211.55.51:2379 | ad1ee26f89ef12f4 |  3.4.16 |   20 kB |     false |      false |       645 |         62 |                 62 |        | 
    55.   
  
  
  
  55. | https://10.211.55.52:2379 | 89088d035064124d |  3.4.16 |   20 kB |     false |      false |       645 |         62 |                 62 |        | 
    56.   
  
  
  
  56. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    57.

三、數(shù)據(jù)備份

數(shù)據(jù)備份我這里直接使用snapshot人工備份好了，僅用于測試而已。

 
 
 
 
    
  
  
  
  
  1. # 先寫入一個(gè)數(shù)據(jù)，方便后面做測試 
    2.   
  
  
  
  2. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379,https://10.211.55.52:2379  put xiyangxixi  boys 
    3.   
  
  
  
  3. OK 
    4.   
  
  
  
  4.  
    5.   
  
  
  
  5. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379,https://10.211.55.52:2379  get xiyangxixi 
    6.   
  
  
  
  6. xiyangxixi 
    7.   
  
  
  
  7. boys 
    8.   
  
  
  
  8.  
    9.   
  
  
  
  9. # 備份數(shù)據(jù) 
    10.   
  
  
  
  10. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379 snapshot save snapshot-xiyangxixi.db 
    11.   
  
  
  
  11. {"level":"info","ts":1625373129.2212617,"caller":"snapshot/v3_snapshot.go:119","msg":"created temporary db file","path":"snapshot-xiyangxixi.db.part"} 
    12.   
  
  
  
  12. {"level":"info","ts":"2021-07-04T12:32:09.228+0800","caller":"clientv3/maintenance.go:200","msg":"opened snapshot stream; downloading"} 
    13.   
  
  
  
  13. {"level":"info","ts":1625373129.2287908,"caller":"snapshot/v3_snapshot.go:127","msg":"fetching snapshot","endpoint":"https://10.211.55.50:2379"} 
    14.   
  
  
  
  14. {"level":"info","ts":"2021-07-04T12:32:09.231+0800","caller":"clientv3/maintenance.go:208","msg":"completed snapshot read; closing"} 
    15.   
  
  
  
  15. {"level":"info","ts":1625373129.2318149,"caller":"snapshot/v3_snapshot.go:142","msg":"fetched snapshot","endpoint":"https://10.211.55.50:2379","size":"25 kB","took":0.010441635} 
    16.   
  
  
  
  16. {"level":"info","ts":1625373129.2318769,"caller":"snapshot/v3_snapshot.go:152","msg":"saved","path":"snapshot-xiyangxixi.db"} 
    17.   
  
  
  
  17. Snapshot saved at snapshot-xiyangxixi.db 
    18.

四、集群數(shù)據(jù)恢復(fù)

需要使用同一個(gè)備份文件。這里以上面的snapshot-xiyangxixi.db進(jìn)行模擬。

 
 
 
 
    
  
  
  
  
  1. # 注意： 
    2.   
  
  
  
  2. # 1、最好指定一下data-dir我這里沒指定，結(jié)果數(shù)據(jù)都到etcd1.etcd、etcd2.etcd、etcd3.etcd中去了，這樣子還得修改etcd.service文件 
    3.   
  
  
  
  3. # 2、恢復(fù)數(shù)據(jù)前，之前的數(shù)據(jù)目錄記得備份 
    4.   
  
  
  
  4. # 3、如果是單節(jié)點(diǎn)故障，可以考慮刪除該節(jié)點(diǎn)再添加該節(jié)點(diǎn) 
    5.   
  
  
  
  5. # etcd1上執(zhí)行 
    6.   
  
  
  
  6. etcdctl snapshot restore /root/snapshot-xiyangxixi.db  --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem  --name etcd1 --initial-advertise-peer-urls=https://10.211.55.50:2380 --initial-cluster-token=etcd-cluster-1 --initial-cluster=etcd1=https://10.211.55.50:2380,etcd2=https://10.211.55.51:2380,etcd3=https://10.211.55.52:2380 
    7.   
  
  
  
  7. {"level":"info","ts":1625373977.7445557,"caller":"snapshot/v3_snapshot.go:296","msg":"restoring snapshot","path":"/root/snapshot-xiyangxixi.db","wal-dir":"etcd1.etcd/member/wal","data-dir":"etcd1.etcd","snap-dir":"etcd1.etcd/member/snap"} 
    8.   
  
  
  
  8. {"level":"info","ts":1625373977.7477813,"caller":"membership/cluster.go:392","msg":"added member","cluster-id":"a914ec3525c16b4","local-member-id":"0","added-peer-id":"517f2ff3c4b9581b","added-peer-peer-urls":["https://10.211.55.52:2380"]} 
    9.   
  
  
  
  9. {"level":"info","ts":1625373977.7478256,"caller":"membership/cluster.go:392","msg":"added member","cluster-id":"a914ec3525c16b4","local-member-id":"0","added-peer-id":"6856401bd8388bec","added-peer-peer-urls":["https://10.211.55.50:2380"]} 
    10.   
  
  
  
  10. {"level":"info","ts":1625373977.7478426,"caller":"membership/cluster.go:392","msg":"added member","cluster-id":"a914ec3525c16b4","local-member-id":"0","added-peer-id":"6ea7d2ec70c556d5","added-peer-peer-urls":["https://10.211.55.51:2380"]} 
    11.   
  
  
  
  11. {"level":"info","ts":1625373977.7509031,"caller":"snapshot/v3_snapshot.go:309","msg":"restored snapshot","path":"/root/snapshot-xiyangxixi.db","wal-dir":"etcd1.etcd/member/wal","data-dir":"etcd1.etcd","snap-dir":"etcd1.etcd/member/snap"} 
    12.   
  
  
  
  12.  
    13.   
  
  
  
  13. # etcd2上執(zhí)行 
    14.   
  
  
  
  14. etcdctl snapshot restore /root/snapshot-xiyangxixi.db  --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem  --name etcd2 --initial-advertise-peer-urls=https://10.211.55.51:2380 --initial-cluster-token=etcd-cluster-1 --initial-cluster=etcd1=https://10.211.55.50:2380,etcd2=https://10.211.55.51:2380,etcd3=https://10.211.55.52:2380 
    15.   
  
  
  
  15. {"level":"info","ts":1625374104.1673598,"caller":"snapshot/v3_snapshot.go:296","msg":"restoring snapshot","path":"/root/snapshot-xiyangxixi.db","wal-dir":"etcd2.etcd/member/wal","data-dir":"etcd2.etcd","snap-dir":"etcd2.etcd/member/snap"} 
    16.   
  
  
  
  16. {"level":"info","ts":1625374104.1709266,"caller":"membership/cluster.go:392","msg":"added member","cluster-id":"a914ec3525c16b4","local-member-id":"0","added-peer-id":"517f2ff3c4b9581b","added-peer-peer-urls":["https://10.211.55.52:2380"]} 
    17.   
  
  
  
  17. {"level":"info","ts":1625374104.1709714,"caller":"membership/cluster.go:392","msg":"added member","cluster-id":"a914ec3525c16b4","local-member-id":"0","added-peer-id":"6856401bd8388bec","added-peer-peer-urls":["https://10.211.55.50:2380"]} 
    18.   
  
  
  
  18. {"level":"info","ts":1625374104.1709878,"caller":"membership/cluster.go:392","msg":"added member","cluster-id":"a914ec3525c16b4","local-member-id":"0","added-peer-id":"6ea7d2ec70c556d5","added-peer-peer-urls":["https://10.211.55.51:2380"]} 
    19.   
  
  
  
  19. {"level":"info","ts":1625374104.1741195,"caller":"snapshot/v3_snapshot.go:309","msg":"restored snapshot","path":"/root/snapshot-xiyangxixi.db","wal-dir":"etcd2.etcd/member/wal","data-dir":"etcd2.etcd","snap-dir":"etcd2.etcd/member/snap"} 
    20.   
  
  
  
  20.  
    21.   
  
  
  
  21. # etcd3上執(zhí)行 
    22.   
  
  
  
  22. etcdctl snapshot restore /root/snapshot-xiyangxixi.db  --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem  --name etcd3 --initial-advertise-peer-urls=https://10.211.55.52:2380 --initial-cluster-token=etcd-cluster-1 --initial-cluster=etcd1=https://10.211.55.50:2380,etcd2=https://10.211.55.51:2380,etcd3=https://10.211.55.52:2380 
    23.   
  
  
  
  23. {"level":"info","ts":1625374158.713205,"caller":"snapshot/v3_snapshot.go:296","msg":"restoring snapshot","path":"/root/snapshot-xiyangxixi.db","wal-dir":"etcd3.etcd/member/wal","data-dir":"etcd3.etcd","snap-dir":"etcd3.etcd/member/snap"} 
    24.   
  
  
  
  24. {"level":"info","ts":1625374158.7164843,"caller":"membership/cluster.go:392","msg":"added member","cluster-id":"a914ec3525c16b4","local-member-id":"0","added-peer-id":"517f2ff3c4b9581b","added-peer-peer-urls":["https://10.211.55.52:2380"]} 
    25.   
  
  
  
  25. {"level":"info","ts":1625374158.7165308,"caller":"membership/cluster.go:392","msg":"added member","cluster-id":"a914ec3525c16b4","local-member-id":"0","added-peer-id":"6856401bd8388bec","added-peer-peer-urls":["https://10.211.55.50:2380"]} 
    26.   
  
  
  
  26. {"level":"info","ts":1625374158.7165465,"caller":"membership/cluster.go:392","msg":"added member","cluster-id":"a914ec3525c16b4","local-member-id":"0","added-peer-id":"6ea7d2ec70c556d5","added-peer-peer-urls":["https://10.211.55.51:2380"]} 
    27.   
  
  
  
  27. {"level":"info","ts":1625374158.7190611,"caller":"snapshot/v3_snapshot.go:309","msg":"restored snapshot","path":"/root/snapshot-xiyangxixi.db","wal-dir":"etcd3.etcd/member/wal","data-dir":"etcd3.etcd","snap-dir":"etcd3.etcd/member/snap"} 
    28.   
  
  
  
  28.  
    29.   
  
  
  
  29. # 啟動(dòng)etcd 
    30.   
  
  
  
  30. systemctl daemon-reload && systemctl start etcd 
    31.   
  
  
  
  31.  
    32.   
  
  
  
  32. # 查看etcd集群狀態(tài) 
    33.   
  
  
  
  33. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379,https://10.211.55.52:2379 endpoint status -w table 
    34.   
  
  
  
  34. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    35.   
  
  
  
  35. |         ENDPOINT          |        ID        | VERSION | DB SIZE | IS LEADER | IS LEARNER | RAFT TERM | RAFT INDEX | RAFT APPLIED INDEX | ERRORS | 
    36.   
  
  
  
  36. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    37.   
  
  
  
  37. | https://10.211.55.50:2379 | 6856401bd8388bec |  3.4.16 |   25 kB |     false |      false |         4 |          8 |                  8 |        | 
    38.   
  
  
  
  38. | https://10.211.55.51:2379 | 6ea7d2ec70c556d5 |  3.4.16 |   25 kB |      true |      false |         4 |          8 |                  8 |        | 
    39.   
  
  
  
  39. | https://10.211.55.52:2379 | 517f2ff3c4b9581b |  3.4.16 |   25 kB |     false |      false |         4 |          8 |                  8 |        | 
    40.   
  
  
  
  40. +---------------------------+------------------+---------+---------+-----------+------------+-----------+------------+--------------------+--------+ 
    41.   
  
  
  
  41.  
    42.   
  
  
  
  42. # 獲取key為xiyangxixi的數(shù)據(jù) 
    43.   
  
  
  
  43. etcdctl --cacert /etc/etcd/ssl/etcd-ca.pem --cert /etc/etcd/ssl/etcd.pem  --key /etc/etcd/ssl/etcd-key.pem --endpoints=https://10.211.55.50:2379,https://10.211.55.51:2379,https://10.211.55.52:2379  get xiyangxixi 
    44.   
  
  
  
  44. xiyangxixi 
    45.   
  
  
  
  45. boys 
    46.

參考

  • https://etcd.io/docs/v3.4/op-guide/hardware/
  • https://etcd.io/docs/v3.4/op-guide/recovery/
  • https://etcd.io/docs/v3.4/op-guide/clustering/

本文轉(zhuǎn)載自微信公眾號「運(yùn)維開發(fā)故事」，可以通過以下二維碼關(guān)注。轉(zhuǎn)載本文請聯(lián)系運(yùn)維開發(fā)故事公眾號。


分享題目：一篇帶給你ETCD入門指南
網(wǎng)站網(wǎng)址：http://www.5511xx.com/article/cogsggh.html