Rancher 2集群安装

adduser rancher
groupadd docker
usermod -a -G rancher,docker rancher

# ssh互信
ssh-keygen -t rsa
chmod 750 ~/.ssh/
chmod 600 ~/.ssh/id_rsa
chmod 600 ~/.ssh/authorized_keys

# 每台机器添加到authorized_keys，并复制到每台机器
id_rsa.pub >> authorized_keys

cp rke_linux-amd64 rke
chomd +x rke
./rek --version

vim cluster.yml
nodes:
  - address: 172.60.20.205 #节点地址
    user: rancher
    role:
      - controlplane
      - etcd
      - worker
  - address: 172.60.20.206
    user: rancher
    role:
      - controlplane
      - etcd
      - worker
  - address: 172.60.20.207
    user: rancher
    role:
      - controlplane
      - etcd
      - worker
cluster_name: sz-cluster
# 外部TLS终止
ingress:
  provider: nginx
  options:
    use-forwarded-headers: "true"

./rke up

cp kube_config_cluster.yml .kube/config/
kubectl get node

wget http://rancher-mirror.cnrancher.com/helm/v3.4.2/helm-v3.4.2-linux-amd64.tar.gz
tar -zxvf helm-v3.4.2-linux-amd64.tar.gz
mv linux-amd64/helm .
chmod +x helm

helm repo add rancher-stable http://rancher-mirror.oss-cn-beijing.aliyuncs.com/server-charts/stable
kubectl create namespace cattle-system

# 使用外部TLS终止
helm install rancher rancher-stable/rancher --namespace cattle-system --set hostname=sz-rancher.bdx.jiankangsn.com --set tls=external

worker_processes 4;
worker_rlimit_nofile 40000;

events {
    worker_connections 8192;
}

http {
    upstream rancher {
        server IP_NODE_1:80;
        server IP_NODE_2:80;
        server IP_NODE_3:80;
    }

    map $http_upgrade $connection_upgrade {
        default Upgrade;
        ''      close;
    }

    server {
        listen 443 ssl http2;
        server_name FQDN;
        ssl_certificate /certs/fullchain.pem;
        ssl_certificate_key /certs/privkey.pem;

        location / {
            proxy_set_header Host $host;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_set_header X-Forwarded-Port $server_port;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass http://rancher;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection $connection_upgrade;
            # 这里将允许您在 Rancher UI 中打开命令行窗口时，窗口可以保留最多15分钟。没有这个参数时，默认值为1分钟，一分钟后在Rancher中的shell会自动关闭。
            proxy_read_timeout 900s;
            proxy_buffering off;
        }
    }

    server {
        listen 80;
        server_name FQDN;
        return 301 https://$server_name$request_uri;
    }
}

fdisk /dev/sdb
mkfs -t ext4 /dev/sdb1
mkdir /var/lib/longhorn #默认路径
mount /dev/sdb1 /var/lib/longhorn
echo '/dev/sdb1  /var/lib/longhorn   ext4    defaults    0   0' >> /etc/fstab