k8s master高可用

每台master都要部署haproxy,keepalived

 

keepalived 配置文件:
! Configuration File for keepalived
global_defs {
router_id LVS_DEVEL
script_user root
enable_script_security
}
vrrp_script chk_apiserver {
script "/etc/keepalived/xxx.sh"
interval 5
weight -5
fall 2
rise 1
}
vrrp_instance VI_1 {
state MASTER
interface ens192
mcast_src_ip 192.168.1.13
virtual_router_id 60
priority 101
advert_int 2
authentication {
auth_type PASS
auth_pass xxxxxxxxxx
}
virtual_ipaddress {
192.16.1.200
}
track_script {
chk_apiserver
}
}

haproxy配置:

frontend k8s-master
bind 0.0.0.0:7443
bind 127.0.0.1:7443
mode tcp
option tcplog
tcp-request inspect-delay 5s
default_backend k8s-master
backend k8s-master
mode tcp
option tcplog
option tcp-check
balance roundrobin
default-server inter 10s downinter 5s rise 2 fall 2 slowstart 60s maxconn 250 maxqueue 256 weight 100
server k8s-m1 192.168.1.12:6443 check
server k8s-m2 192.168.1.13:6443 check
server k8s-m3 192.168.1.14:6443 check

 

 

#################

ETCDCTL_API=3 etcdctl --endpoints masterip:2379 --cert=/etc/kubernetes/pki/etcd/server.crt --key=/etc/kubernetes/pki/etcd/server.key --cacert=/etc/kubernetes/pki/etcd/ca.crt member list