在连网环境下，一键部署多master节点的Kubernetes集群
环境依赖
Ansible 2.2+
kubernetes 1.8+
请提前配置好各主机之间基于SSH Key认证的登陆，在各个主机节点上安装好Docker服务
注意
只在ubuntu16.04 64bit 上测试通过，其他平台未测试。
变量文件：environments/test/group_vars/all
ETCD_URL: https://github.com/coreos/etcd/releases/download/v3.2.9/etcd-v3.2.9-linux-amd64.tar.gz
KUBERNETES_CLIENT_URL: https://dl.k8s.io/v1.8.2/kubernetes-client-linux-amd64.tar.gz
KUBERNETES_SERVER_URL: https://dl.k8s.io/v1.8.2/kubernetes-server-linux-amd64.tar.gz
CALICOCTL: https://github.com/projectcalico/calicoctl/releases/download/v1.6.1/calicoctl
TOKEN: b5aa35577173f8a527c2fd08439ac0cc ＃kubelet-bootstrap要适用的token,命令:head -c 16 /dev/urandom | od -An -t x | tr -d ' '
PROXY_PORT: 7443 ＃每个节点nginx需要监听的端口
CLUSTER_CIDR: 10.233.0.0/16
文件 environments/test/inventory
[etcd]
#etcd主机列表,奇数个；如果只指定了一个主机，则部署为单点etcd server
172.31.19.38
172.31.19.37
172.31.19.39
[kubernetes:children]
masters
nodes
[ci]
#指定一个主机部署ci系统（Jenkins或GoCD）
xx.xx.xx.xx
[harbor]
#指定一台主机部署harbor作为集群中的docker registry
xx.xx.xx.xx
[masters]
＃k8s master主机列表
172.31.19.38
172.31.19.37
172.31.19.39
[nodes]
＃k8s node列表
172.31.19.38
172.31.19.37
172.31.19.39
执行命令，一键部署
ansible-playbook -i environments/test/inventory deploy.yml
[root@node01 ~]# kubectl get csr
NAME AGE REQUESTOR CONDITION
node-csr-4F4B43HbwaW8PyJi2BenjTWsAAdLixBplbnTW0Pp1Fc 6m kubelet-bootstrap Approved,Issued
node-csr-9Sz0QlIB06RLlSYIUkoTZFhemTExARe2rkz7OoyDbr0 6m kubelet-bootstrap Pending
node-csr-DsmorB5UHAArgI5AjWGDTBumVFr9Ly5xnd_-246Pp80 6m kubelet-bootstrap Pending
node-csr-GfuEVUCvZXhd8k57Z2_q23LKBO6hChBZ5f-5ofLOS6k 6m kubelet-bootstrap Pending
node-csr-NSr7RpeyGHxrtcXvvHVK_BCDU2cxGqsJPRa5uoHcRMw 6m kubelet-bootstrap Pending
node-csr-Od4bsfvxBAjYWBZfGs5rTuNjlyWdEFNyNnK_6MpJ16c 6m kubelet-bootstrap Pending
node-csr-g_LXQ2uItjRCKv28s8GKt-GDvsLrUprGLqSJtRnlBN4 6m kubelet-bootstrap Pending
node-csr-gjayOP2i93p-gjGhuEN2y3YTOrZurSRTVk1KnT-anxs 6m kubelet-bootstrap Pending
node-csr-klUtaurnG1rush4n91QMbao1d7q-lLjZH6M5q_zYC08 6m kubelet-bootstrap Pending
node-csr-lKX74hZ9nwZuuNB75XW7U5OY1lmhun6P2svX22bypqE 6m kubelet-bootstrap Pending
[root@node01 ~]# kubectl certificate approve NAME