k8s之node主机修改IP

　　k8s的node主机修改IP以后配置

　　原k8s node主机IP为172.16.20.182需要修改成172.16.20.183

　　查看原node

 

 　　node主机修改IP以后，修改node的kubele配置文件

?

1 2 3 4 5 6 7 8 9 10 11

# cat /opt/kubernetes/cfg/kubelet # cat /opt/kubernetes/cfg/kubelet KUBELET_OPTS="--logtostderr=false \ --log-dir=/opt/kubernetes/logs/kubelet \ --v=4 \ --hostname-override=172.16.20.183 \ --kubeconfig=/opt/kubernetes/cfg/kubelet.kubeconfig \ --bootstrap-kubeconfig=/opt/kubernetes/cfg/bootstrap.kubeconfig \ --config=/opt/kubernetes/cfg/kubelet.config \ --cert-dir=/opt/kubernetes/ssl \ --pod-infra-container-image=registry.cn-hangzhou.aliyuncs.com/google-containers/pause-amd64:3.0"

 　　修改项为--hostname-override

?

1 2 3 4 5 6 7 8 9 10 11 12 13

# cat /opt/kubernetes/cfg/kubelet.config kind: KubeletConfiguration apiVersion: kubelet.config.k8s.io/v1beta1 address: 172.16.20.183 port: 10250 readOnlyPort: 10255 cgroupDriver: cgroupfs clusterDNS: ["172.16.20.2"] clusterDomain: cluster.local. failSwapOn: false authentication:   anonymous:     enabled: true

 　　修改项为address

　　删除原自动生成的ssl证书

?

1	rm -rf /opt/kubernetes/ssl/*

 　　停止kubelet

?

1	systemctl stop kubelet

 　　在k8s的master上查看该node是NotReady状态

 

 　　启动node端kubelet

?

1	systemctl start kubelet

 　　在证书目录下自动生成了对应证书

 

 　　在master上查看csr并通过验证

?

1 2 3 4 5

# kubectl get csr NAME                                                   AGE   REQUESTOR           CONDITION node-csr-YAZO_DoidvRc-HaySrJI9p5qwf4Ju49bKBrys_2lcGA   75s   kubelet-bootstrap   Pending [root@k8s-master rabbitmq]# kubectl certificate approve node-csr-YAZO_DoidvRc-HaySrJI9p5qwf4Ju49bKBrys_2lcGA certificatesigningrequest.certificates.k8s.io/node-csr-YAZO_DoidvRc-HaySrJI9p5qwf4Ju49bKBrys_2lcGA approved

 　　等待片刻新的node处于Ready状态，删除原node

?

1	kubectl delete node 172.16.20.182

 　　同理修改node端的kube-proxy修改成对应IP

?

1 2 3 4 5 6 7 8 9

# cat /opt/kubernetes/cfg/kube-proxy # cat /opt/kubernetes/cfg/kube-proxy KUBE_PROXY_OPTS="--logtostderr=true \ --v=4 \ --hostname-override=172.16.20.183 \ --cluster-cidr=172.16.20.0/24 \ --proxy-mode=ipvs \ --masquerade-all=true \ --kubeconfig=/opt/kubernetes/cfg/kube-proxy.kubeconfig"

 　　重启kube-proxy

?

1 2	systemctl restart kube-proxy systemctl enable kube-proxy