"Kubeadm token create"의 두 판 사이의 차이

2019년 5월 28일 (화) 10:13 기준 최신판

1 개요[ | ]

kubeadm token create

root@master1:~# kubeadm token create
2hn3yd.9n8rhccaad496efj

2 실습[ | ]

master

root@master1:~# kubeadm token list
TOKEN                     TTL       EXPIRES                     USAGES                   DESCRIPTION                                                EXTRA GROUPS
i50r58.e8dx9hd9m6tmv663   6h        2019-05-28T16:17:39+09:00   authentication,signing   The default bootstrap token generated by 'kubeadm init'.   system:bootstrappers:kubeadm:default-node-token

root@master1:~# kubeadm token create
2hn3yd.9n8rhccaad496efj

root@master1:~# kubeadm token list
TOKEN                     TTL       EXPIRES                     USAGES                   DESCRIPTION                                                EXTRA GROUPS
2hn3yd.9n8rhccaad496efj   23h       2019-05-29T09:53:51+09:00   authentication,signing   <none>                                                     system:bootstrappers:kubeadm:default-node-token
i50r58.e8dx9hd9m6tmv663   6h        2019-05-28T16:17:39+09:00   authentication,signing   The default bootstrap token generated by 'kubeadm init'.   system:bootstrappers:kubeadm:default-node-token

root@master1:~# openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex
(stdin)= e8ee89003791b7340e6361b8f20663571d1156d393057fc8a816857b0f965984

worker

root@worker2:~# kubeadm join --token i50r58.e8dx9hd9m6tmv6603 172.20.0.150:6443 --discovery-token-ca-cert-hash sha256:e8ee89003791b7340e6361b8f20663571d1156d393057fc8a816857b0f965984
[preflight] Running pre-flight checks
	[WARNING IsDockerSystemdCheck]: detected "cgroupfs" as the Docker cgroup driver. The recommended driver is "systemd". Please follow the guide at https://kubernetes.io/docs/setup/cri/
[preflight] Reading configuration from the cluster...
[preflight] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -oyaml'
...
This node has joined the cluster:
* Certificate signing request was sent to apiserver and a response was received.
* The Kubelet was informed of the new secure connection details.

Run 'kubectl get nodes' on the control-plane to see this node join the cluster.

3 같이 보기[ | ]

@@ 1번째 줄: / 1번째 줄: @@
+{{소문자}}
 ==개요==
 ;kubeadm token create
 <source lang='console'>
-root@master:~# kubeadm token list
+root@master1:~# kubeadm token create
+hn3yd.9n8rhccaad496efj
+</source>
+==실습==
+{{소스헤더|master}}
+<source lang='console'>
+root@master1:~# kubeadm token list
 TOKEN                     TTL       EXPIRES                     USAGES                   DESCRIPTION                                                EXTRA GROUPS
 i50r58.e8dx9hd9m6tmv663   6h        2019-05-28T16:17:39+09:00   authentication,signing   The default bootstrap token generated by 'kubeadm init'.   system:bootstrappers:kubeadm:default-node-token
 </source>
 <source lang='console'>
-root@master:~# kubeadm token create
+root@master1:~# kubeadm token create
 hn3yd.9n8rhccaad496efj
 </source>
 <source lang='console'>
-root@master:~# kubeadm token list
+root@master1:~# kubeadm token list
 TOKEN                     TTL       EXPIRES                     USAGES                   DESCRIPTION                                                EXTRA GROUPS
 hn3yd.9n8rhccaad496efj   23h       2019-05-29T09:53:51+09:00   authentication,signing   <none>                                                     system:bootstrappers:kubeadm:default-node-token
@@ 18번째 줄: / 26번째 줄: @@
 </source>
 <source lang='console'>
-root@master:~# openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex
+root@master1:~# openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex
 (stdin)= e8ee89003791b7340e6361b8f20663571d1156d393057fc8a816857b0f965984
 </source>
+{{소스헤더|worker}}
 <source lang='console'>
-root@worker2:~# kubeadm join --token 2hn3yd.9n8rhccaad496efj 172.20.0.150:6443 --discovery-token-ca-cert-hash sha256:e8ee89003791b7340e6361b8f20663571d1156d393057fc8a816857b0f965984
+root@worker2:~# kubeadm join --token i50r58.e8dx9hd9m6tmv6603 172.20.0.150:6443 --discovery-token-ca-cert-hash sha256:e8ee89003791b7340e6361b8f20663571d1156d393057fc8a816857b0f965984
 [preflight] Running pre-flight checks
+	[WARNING IsDockerSystemdCheck]: detected "cgroupfs" as the Docker cgroup driver. The recommended driver is "systemd". Please follow the guide at https://kubernetes.io/docs/setup/cri/
 [preflight] Reading configuration from the cluster...
 [preflight] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -oyaml'
 ...
+This node has joined the cluster:
+* Certificate signing request was sent to apiserver and a response was received.
+* The Kubelet was informed of the new secure connection details.
+Run 'kubectl get nodes' on the control-plane to see this node join the cluster.
 </source>
@@ 32번째 줄: / 47번째 줄: @@
 * [[kubeadm token list]]
 * [[kubeadm token]]
+* [[kubeadm join]]
 [[분류: kubeadm]]