2-3.5 部署controller-manager

3.5.1 集群规划

主机名	角色	IP地址
pg60-21.k8s.host.com	controller-manager	10.20.60.21
pg60-22.k8s.host.com	controller-manager	10.20.60.22
pg60-23.k8s.host.com	controller-manager	10.20.60.23

3.5.2 创建 kube-controller-manager systemd unit 模板文件

在 pg60-21.k8s.host.com 虚机实例上操作

shell> cat > kube-controller-manager.service.template << EOF
[Unit]
Description=Kubernetes Controller Manager
Documentation=https://github.com/GoogleCloudPlatform/kubernetes

[Service]
ExecStart=/opt/kubernetes/server/bin/kube-controller-manager \\
  --address=127.0.0.1 \\
  --cluster-cidr=172.60.0.0/16 \\
  --cluster-name=kubernetes \\
  --cluster-signing-cert-file=/etc/kubernetes/pki/ca.pem \\
  --cluster-signing-key-file=/etc/kubernetes/pki/ca-key.pem \\
  --client-ca-file=/etc/kubernetes/pki/ca.pem \\
  --service-account-private-key-file=/etc/kubernetes/pki/ca-key.pem \\
  --service-cluster-ip-range=10.254.0.0/16 \\
  --root-ca-file=/etc/kubernetes/pki/ca.pem \\
  --master http://127.0.0.1:8080 \\
  --leader-elect=true \\
  --profiling \\
  --kube-api-qps=1000 \\
  --kube-api-burst=2000 \\
  --concurrent-service-syncs=2 \\
  --concurrent-deployment-syncs=10 \\
  --concurrent-gc-syncs=30 \\
  --node-cidr-mask-size=24 \\
  --terminated-pod-gc-threshold=10000 \\
  --use-service-account-credentials=true \\
  --pod-eviction-timeout=3m0s \\
  --controllers=*,bootstrapsigner,tokencleaner \\
  --horizontal-pod-autoscaler-sync-period=10s \\
  --experimental-cluster-signing-duration=876000h \\
  --requestheader-allowed-names="aggregator" \\
  --requestheader-client-ca-file=/etc/kubernetes/pki/ca.pem \\
  --requestheader-extra-headers-prefix="X-Remote-Extra-" \\
  --requestheader-group-headers=X-Remote-Group \\
  --requestheader-username-headers=X-Remote-User \\
  --logtostderr=true \\
  --log-dir=/export/kubernetes/logs/kube-controller-manager \\
  --v=2
Restart=on-failure
RestartSec=5

[Install]
WantedBy=multi-user.target
EOF

shell> mkdir -p /export/kubernetes/logs/kube-controller-manager
shell> cp kube-controller-manager.service.template /etc/systemd/system/kube-controller-manager.service
shell> systemctl daemon-reload && systemctl enable kube-controller-manager && systemctl restart kube-controller-manager

3.5.3 分发到所有 master 节点

shell> scp kube-controller-manager.service.template  ${master_ip}:/etc/systemd/system/kube-controller-manager.service

3.5.4 检查服务运行状态