2.9 KiB
2.9 KiB
Setup and Configuration k8s multiple master (HA)
- Keepalived
- HAProxy
- Kubernetes
Keepalived
- Install and start service
sudo apt-get install haproxy keepalived psmisc -y
sudo systemctl enable keepalived
sudo systemctl start keepalived
- Configuration for master nodes
- k8s-master-1
/etc/keepalived/keepalived.conf
global_defs {
notification_email {
sysadmin@cubetiqhost.net
support@cubetiqhost.net
}
notification_email_from k8s-master-1@cubetiqhost.net
smtp_server localhost
smtp_connect_timeout 30
}
vrrp_instance VI_1 {
state MASTER
interface ens18
virtual_router_id 101
priority 101
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.0.10
}
}
- k8s-master-2 (BACKUP)
/etc/keepalived/keepalived.conf
global_defs {
notification_email {
sysadmin@cubetiqhost.net
support@cubetiqhost.net
}
notification_email_from k8s-master-2@cubetiqhost.net
smtp_server localhost
smtp_connect_timeout 30
}
vrrp_instance VI_1 {
state BACKUP
interface ens18
virtual_router_id 101
priority 100
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.0.10
}
}
- k8s-master-3 (BACKUP)
/etc/keepalived/keepalived.conf
global_defs {
notification_email {
sysadmin@cubetiqhost.net
support@cubetiqhost.net
}
notification_email_from k8s-master-3@cubetiqhost.net
smtp_server localhost
smtp_connect_timeout 30
}
vrrp_instance VI_1 {
state BACKUP
interface ens18
virtual_router_id 101
priority 100
advert_int 1
authentication {
auth_type PASS
auth_pass 1111
}
virtual_ipaddress {
192.168.0.10
}
}
- Restart all nodes for keepalived service
sudo systemctl restart keepalived
- Edit HAProxy config (for all nodes)
sudo nano /etc/haproxy/haproxy.cfg
frontend kubernetes
bind 192.168.0.10:6443
option tcplog
mode tcp
default_backend kubernetes-master-nodes
backend kubernetes-master-nodes
mode tcp
balance roundrobin
option tcp-check
server k8s-master-1 192.168.0.11:6443 check fall 3 rise 2
server k8s-master-2 192.168.0.12:6443 check fall 3 rise 2
server k8s-master-3 192.168.0.13:6443 check fall 3 rise 2
listen stats
bind 192.168.0.10:8080 name hastats
mode http
stats enable
stats uri /
stats realm HAProxy\ Statistics
stats auth admin:haproxy
- Enable HAProxy service
sudo systemctl enable --now haproxy
- Allow for No Local Bind IP Address (Ignore error in HAProxy)
echo "net.ipv4.ip_nonlocal_bind=1" | sudo tee /etc/sysctl.d/ip_nonlocal_bind.conf
sudo sysctl --system
- Restart HAProxy for configuration
sudo systemctl restart haproxy.service