二进制安装kubeedge

下载安装包并解压

kubeedge-1.11.1.zip
kubeedge-v1.11.1-linux-amd64.tar.gz

设置环境变量

设置为你的下载包的对应目录

export KE_INSTALL="/workspace/kubeedge/kubeedge-v1.11.1-linux-amd64"
export KE_PKG="/workspace/kubeedge/kubeedge-1.11.1"

创建CRD

cd $KE_PKG/build/crds/

kubectl apply -f $KE_PKG/build/crds/devices/devices_v1alpha2_devicemodel.yaml
kubectl apply -f $KE_PKG/build/crds/devices/devices_v1alpha2_device.yaml
kubectl apply -f $KE_PKG/build/crds/reliablesyncs/cluster_objectsync_v1alpha1.yaml
kubectl apply -f $KE_PKG/build/crds/reliablesyncs/objectsync_v1alpha1.yaml
kubectl apply -f $KE_PKG/build/crds/router/router_v1_ruleEndpoint.yaml
kubectl apply -f $KE_PKG/build/crds/router/router_v1_rule.yaml

安装cloud

配置文件

默认路径：/etc/kubeedge/config/cloudcore.yaml

生成默认配置文件

cp $KE_INSTALL/cloud/cloudcore/cloudcore /usr/local/bin/
mkdir -p /etc/kubeedge/config/
cloudcore --defaultconfig > /etc/kubeedge/config/cloudcore.yaml

修改配置文件

vim /etc/kubeedge/config/cloudcore.yaml

1. 设置kubeAPIConfig.kubeConfig: "/root/.kube/config"
2. 设置 cloudStream 如下

  cloudStream:
    enable: true
    streamPort: 10003
    tlsStreamCAFile: /etc/kubeedge/ca/rootCA.crt
    tlsStreamCertFile: /etc/kubeedge/certs/server.crt
    tlsStreamPrivateKeyFile: /etc/kubeedge/certs/server.key
    tlsTunnelCAFile: /etc/kubeedge/ca/rootCA.crt
    tlsTunnelCertFile: /etc/kubeedge/certs/server.crt
    tlsTunnelPrivateKeyFile: /etc/kubeedge/certs/server.key
    tunnelPort: 10004

创建证书

安装cfssl

wget https://github.com/cloudflare/cfssl/releases/download/v1.6.1/cfssl_1.6.1_linux_amd64
wget https://github.com/cloudflare/cfssl/releases/download/v1.6.1/cfssljson_1.6.1_linux_amd64
wget https://github.com/cloudflare/cfssl/releases/download/v1.6.1/cfssl-certinfo_1.6.1_linux_amd64
chmod +x cfssl*
mv cfssl_1.6.1_linux_amd64 /usr/local/bin/cfssl
mv cfssljson_1.6.1_linux_amd64 /usr/local/bin/cfssljson
mv cfssl-certinfo_1.6.1_linux_amd64 /usr/bin/cfssl-certinfo

创建 CA 证书

cat > ca-csr.json <<EOF
{
  "CN": "Kubernetes",
  "key": {
    "algo": "rsa",
    "size": 2048
  },
  "names": [
    {
      "C": "CN",
      "ST": "GD",
      "L": "ShenZhen",
      "O": "Kubernetes",
      "OU": "CA"
    }
  ]
}
EOF

cfssl gencert -initca ca-csr.json | cfssljson -bare ca

# 生成 ca.csr  ca-csr.json  ca-key.pem  ca.pem
# ca-key.pem（CA证书密钥） ca.pem（CA证书）

cat > ca-config.json <<EOF
{
  "signing": {
    "default": {
      "expiry": "876000h"
    },
    "profiles": {
      "kubernetes": {
        "usages": [
          "signing",
          "key encipherment",
          "server auth",
          "client auth"
        ],
        "expiry": "876000h"
      }
    }
  }
}
EOF

# ca-config.json: 证书签发配置，用 CA 证书来签发其它证书时需要用

签发服务证书

cat > kubeedge-csr.json <<EOF
{
  "CN": "kubeedge",
  "hosts": [
    "*.com",
    "*.com.cn",
    "*.cn",
    "*.kubeedge.cn",
    "*.kubeedge.com"
  ],
  "key": {
    "algo": "rsa",
    "size": 2048
  },
  "names": [
    {
      "C": "CN",
      "ST": "GD",
      "L": "ShenZhen",
      "O": "kubeedge",
      "OU": "kubeedge"
    }
  ]
}
EOF

cfssl gencert \
  -ca=ca.pem \
  -ca-key=ca-key.pem \
  -config=ca-config.json \
  -profile=kubernetes \
  kubeedge-csr.json | cfssljson -bare kubeedge
  
# 生成 kubeedge-csr.json  kubeedge-key.pem  kubeedge.pem
# kubeedge-key.pem（密钥）kubeedge.pem（证书）

拷贝证书

mkdir -p /etc/kubeedge/ca/
mkdir -p /etc/kubeedge/certs/
cp ca.pem /etc/kubeedge/ca/rootCA.crt
cp ca-key.pem /etc/kubeedge/ca/rootCA.key
cp kubeedge.pem /etc/kubeedge/certs/server.crt
cp kubeedge-key.pem /etc/kubeedge/certs/server.key

启动

cloudcore

安装edge

将$KE_INSTALL/edge/edgecore放到节点机器的/usr/local/bin/

配置文件

默认路径：/etc/kubeedge/config/edgecore.yaml

生成默认配置文件

mkdir -p /etc/kubeedge/config/
edgecore --defaultconfig > /etc/kubeedge/config/edgecore.yaml

添加域名

vim /etc/hosts
# 这里是为了和证书允许的域名匹配上，添加以下
{{ 集群ip }} test.kubeedge.com

修改配置文件

vim /etc/kubeedge/config/edgecore.yaml

# 将相关ip修改为集群的test.kubeedge.com
# edgeStream.enable: true 打开stream才可以 kubectl log -f 
# edged.hostnameOverride: edge-1 这里是节点的名称

拷贝证书

有两种方式：重新生成证书；直接使用服务端的证书
这里直接使用服务端证书
mkdir /etc/kubeedge/ca
mkdir /etc/kubeedge/certs
将服务端的对应证书拷贝到以上目录

启动

edgecore

查看节点

在集群执行kubectl get pods可以看到
edge-1 Ready agent,edge 8s v1.22.6-kubeedge-v1.11.1