:::note 注意 jq 工具可能需要单独安装，安装方法参考：jq 安装 :::

1. 创建自定义集群

复制并保存以下内容为脚本文件，修改前三行api_url、token、cluster_name，然后执行脚本。

  1. #!/bin/bash
  3. api_url='https://xxx.domain.com'
  4. api_token='token-5zgl2:tcj5nvfq67rf55r7xxxxxxxxxxx429xrwd4zx'
  5. cluster_name=''
  7. kubernetes_Version='v1.13.5-rancher1-2'
  8. network_plugin='canal'
  9. quota_backend_bytes=${quota_backend_bytes:-6442450944}
  10. auto_compaction_retention=${auto_compaction_retention:-240}
  11. ingress_provider=${ingress_provider:-nginx}
  12. ignoreDocker_Version=${ignoreDocker_Version:-true}
  13. monitoring_provider=${monitoring_provider:-metrics-server}
  14. service_NodePort_Range=${service_NodePort_Range:-'30000-32767'}
  16. create_Cluster=true
  17. add_Node=true
  19. create_cluster_data()
  20. {
  21.   cat <<EOF
  22. {
  23.     "amazonElasticContainerServiceConfig": null,
  24.     "azureKubernetesServiceConfig": null,
  25.     "dockerRootDir": "/var/lib/docker",
  26.     "enableClusterAlerting": false,
  27.     "enableClusterMonitoring": false,
  28.     "googleKubernetesEngineConfig": null,
  29.     "localClusterAuthEndpoint": {
  30.         "enabled": true,
  31.         "type": "/v3/schemas/localClusterAuthEndpoint"
  32.     },
  33.     "name": "$cluster_name",
  34.     "rancherKubernetesEngineConfig": {
  35.         "addonJobTimeout": 30,
  36.         "addonsInclude":[ "https://raw.githubusercontent.com/rook/rook/master/cluster/examples/kubernetes/ceph/operator.yml"
  37.         ],
  38.         "authentication": {
  39.             "strategy": "x509|webhook",
  40.             "type": "/v3/schemas/authnConfig"
  41.         },
  42.         "authorization": {
  43.             "type": "/v3/schemas/authzConfig"
  44.         },
  45.         "bastionHost": {
  46.             "sshAgentAuth": false,
  47.             "type": "/v3/schemas/bastionHost"
  48.         },
  49.         "cloudProvider": {
  50.             "type": "/v3/schemas/cloudProvider"
  51.         },
  52.         "ignoreDockerVersion": "$ignoreDocker_Version",
  53.         "ingress": {
  54.             "provider": "$ingress_provider",
  55.             "type": "/v3/schemas/ingressConfig"
  56.         },
  57.         "kubernetesVersion": "$kubernetes_Version",
  58.         "monitoring": {
  59.             "provider": "$monitoring_provider",
  60.             "type": "/v3/schemas/monitoringConfig"
  61.         },
  62.         "network": {
  63.             "options": {
  64.                 "flannel_backend_type": "vxlan"
  65.             },
  66.             "plugin": "$network_plugin",
  67.             "type": "/v3/schemas/networkConfig"
  68.         },
  69.         "restore": {
  70.             "restore": false,
  71.             "type": "/v3/schemas/restoreConfig"
  72.         },
  73.         "services": {
  74.             "etcd": {
  75.                 "backupConfig": {
  76.                     "enabled": true,
  77.                     "intervalHours": 12,
  78.                     "retention": 6,
  79.                     "s3BackupConfig": null,
  80.                     "type": "/v3/schemas/backupConfig"
  81.                 },
  82.                 "creation": "12h",
  83.                 "extraArgs": {
  84.                     "auto-compaction-retention": "$auto_compaction_retention",
  85.                     "election-timeout": "5000",
  86.                     "heartbeat-interval": "500",
  87.                     "quota-backend-bytes": "$quota_backend_bytes"
  88.                 },
  89.                 "retention": "72h",
  90.                 "snapshot": false,
  91.                 "type": "/v3/schemas/etcdService"
  92.             },
  93.             "kubeApi": {
  94.                 "alwaysPullImages": false,
  95.                 "podSecurityPolicy": false,
  96.                 "serviceNodePortRange": "$service_NodePort_Range",
  97.                 "type": "/v3/schemas/kubeAPIService"
  98.             },
  99.             "kubeController": {
  100.                 "extraArgs": {
  101.                     "node-monitor-grace-period": "20s",
  102.                     "node-monitor-period": "5s",
  103.                     "node-startup-grace-period": "30s",
  104.                     "pod-eviction-timeout": "1m"
  105.                 },
  106.                 "type": "/v3/schemas/kubeControllerService"
  107.             },
  108.             "kubelet": {
  109.                 "extraArgs": {
  110.                     "eviction-hard": "memory.available<300Mi,nodefs.available<10%,imagefs.available<15%,nodefs.inodesFree<5%",
  111.                     "kube-api-burst": "30",
  112.                     "kube-api-qps": "15",
  113.                     "kube-reserved": "memory=250Mi",
  114.                     "max-open-files": "2000000",
  115.                     "max-pods": "250",
  116.                     "network-plugin-mtu": "1500",
  117.                     "pod-infra-container-image": "rancher/pause:3.1",
  118.                     "registry-burst": "10",
  119.                     "registry-qps": "0",
  120.                     "serialize-image-pulls": "false",
  121.                     "sync-frequency": "3s",
  122.                     "system-reserved": "memory=250Mi"
  123.                 },
  124.                 "failSwapOn": false,
  125.                 "type": "/v3/schemas/kubeletService"
  126.             },
  127.             "kubeproxy": {
  128.                 "type": "/v3/schemas/kubeproxyService"
  129.             },
  130.             "scheduler": {
  131.                 "type": "/v3/schemas/schedulerService"
  132.             },
  133.             "type": "/v3/schemas/rkeConfigServices"
  134.         },
  135.         "sshAgentAuth": false,
  136.         "type": "/v3/schemas/rancherKubernetesEngineConfig"
  137.     }
  138. }
  139. EOF
  140. }
  142. curl -k -X POST \
  143.     -H "Authorization: Bearer ${api_token}" \
  144.     -H "Content-Type: application/json" \
  145.     -d "$(create_cluster_data)" $api_url/v3/clusters

2. 生成注册命令

复制并保存以下内容为脚本文件，修改前三行api_url、token、cluster_name，然后执行脚本。

  1. #!/bin/bash
  3. api_url='https://xxx.domain.com'
  4. api_token='token-5zgl2:tcj5nvfq67rf55r7xxxxxxxxxxx429xrwd4zx'
  5. cluster_name=''
  7. # 获取集群ID
  8. cluster_ID=$( curl -s -k -H "Authorization: Bearer ${api_token}" $api_url/v3/clusters | jq -r ".data[] | select(.name == \"$cluster_name\") | .id" )
  10. # 生成注册命令
  11. create_token_data()
  12. {
  13. cat <<EOF
  14. {
  15. "clusterId": "$cluster_ID"
  16. }
  17. EOF
  18. }
  20. curl -k -X POST \
  21.     -H "Authorization: Bearer ${api_token}" \
  22.     -H 'Accept: application/json' \
  23.     -H 'Content-Type: application/json' \
  24.     -d "$(create_token_data)" $api_url/v3/clusterregistrationtokens

3. 获取主机注册命令

复制并保存以下内容为脚本文件，修改前三行api_url、token、cluster_name，然后执行脚本。

  1. #!/bin/bash
  3. api_url='https://xxx.domain.com'
  4. api_token='token-5zgl2:tcj5nvfq67rf55r7xxxxxxxxxxx429xrwd4zx'
  5. cluster_name=''
  7. cluster_ID=$( curl -s -k -H "Authorization: Bearer ${api_token}" $api_url/v3/clusters | jq -r ".data[] | select(.name == \"$cluster_name\") | .id" )
  9. # nodeCommand
  10. curl -s -k -H "Authorization: Bearer ${api_token}" $api_url/v3/clusters/${cluster_ID}/clusterregistrationtokens | jq -r .data[].nodeCommand
  12. # command
  13. curl -s -k -H "Authorization: Bearer ${api_token}" $api_url/v3/clusters/${cluster_ID}/clusterregistrationtokens | jq -r .data[].command