etcd版本 [root@localhost etcd]# ./etcdctl version etcdctl version: 3.5.1 API version: 3.5 系统版本 [root@localhost etcd]# cat /etc/redhat-release CentOS Linux release 7.4.1708 (Core) /data/etcd/etcd.conf etced配置文件 ETCD_NAME="etcd01" ETCD_DATA_DIR="/data/etcddata" ETCD_LISTEN_PEER_URLS="https://192.168.73.130:2380" ETCD_LISTEN_CLIENT_URLS="https://192.168.73.130:2379,https://127.0.0.1:2379" ETCD_INITIAL_ADVERTISE_PEER_URLS="https://192.168.73.130:2380" ETCD_ADVERTISE_CLIENT_URLS="https://192.168.73.130:2379" ETCD_INITIAL_CLUSTER="etcd01=https://192.168.73.130:2380,etcd02=https://192.168.73.131:2380,etcd03=https://192.168.73.132:2380" ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster" ETCD_NAME="etcd02" ETCD_DATA_DIR="/data/etcddata" ETCD_LISTEN_PEER_URLS="https://192.168.73.131:2380" ETCD_LISTEN_CLIENT_URLS="https://192.168.73.131:2379,https://127.0.0.1:2379" ETCD_INITIAL_ADVERTISE_PEER_URLS="https://192.168.73.131:2380" ETCD_ADVERTISE_CLIENT_URLS="https://192.168.73.131:2379" ETCD_INITIAL_CLUSTER="etcd01=https://192.168.73.130:2380,etcd02=https://192.168.73.131:2380,etcd03=https://192.168.73.132:2380" ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster" ETCD_NAME="etcd03" ETCD_DATA_DIR="/data/etcddata" ETCD_LISTEN_PEER_URLS="https://192.168.73.132:2380" ETCD_LISTEN_CLIENT_URLS="https://192.168.73.132:2379,https://127.0.0.1:2379" ETCD_INITIAL_ADVERTISE_PEER_URLS="https://192.168.73.132:2380" ETCD_ADVERTISE_CLIENT_URLS="https://192.168.73.132:2379" ETCD_INITIAL_CLUSTER="etcd01=https://192.168.73.130:2380,etcd02=https://192.168.73.131:2380,etcd03=https://192.168.73.132:2380" ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster" /usr/lib/systemd/system/etcd.service etcd启动文件 [Unit] Description=Etcd Server After=network.target After=network-online.target Wants=network-online.target [Service] Type=notify WorkingDirectory=/data/etcd/ EnvironmentFile=/data/etcd/etcd.conf ExecStart=/data/etcd/etcd --initial-cluster-state=new --cert-file=/data/etcd/ssl/server.pem --key-file=/data/etcd/ssl/server-key.pem --peer-cert-file=/data/etcd/ssl/server.pem --peer-key-file=/data/etcd/ssl/server-key.pem --trusted-ca-file=/data/etcd/ssl/ca.pem --peer-trusted-ca-file=/data/etcd/ssl/ca.pem Restart=on-failure LimitNOFILE=65536 [Install] WantedBy=multi-user.target 13、创建TLS证书 cd /data/ wget https://github.com/cloudflare/cfssl/releases/download/v1.6.1/cfssl-certinfo_1.6.1_linux_amd64 wget https://github.com/cloudflare/cfssl/releases/download/v1.6.1/cfssljson_1.6.1_linux_amd64 wget https://github.com/cloudflare/cfssl/releases/download/v1.6.1/cfssl_1.6.1_linux_amd64 mv cfssl_1.6.1_linux_amd64 cfssl-certinfo mv cfssl_linux-amd64 cfssl mv cfssljson_1.6.1_linux_amd64 cfssljson chmod +x cfssl* tls.sh 文件内容如下全部内容(先修改其中的IP地址,其中hosts尽可能多加) # etcd # cat ca-config.json cat > ca-config.json <ca-csr.json < server-csr.json <
