CKA [Installation] – Ubuntu 从0架设，验证MasterNode的状态

部署完所有MasterNode所需要的component了之后就需要做验证是否能够正常运作。

1. 创建kubectl client的certificate

cd /root/certificates
{
openssl genrsa -out admin.key 2048

openssl req -new -key admin.key -subj "/CN=admin/O=system:masters" -out admin.csr

openssl x509 -req -in admin.csr -CA ca.crt -CAkey ca.key -CAcreateserial  -out admin.crt -days 1000
}

2. 创建kubectl client的kubeconfig

{
  kubectl config set-cluster kubernetes-from-scratch \
    --certificate-authority=ca.crt \
    --embed-certs=true \
    --server=https://127.0.0.1:6443 \
    --kubeconfig=admin.kubeconfig

  kubectl config set-credentials admin \
    --client-certificate=admin.crt \
    --client-key=admin.key \
    --embed-certs=true \
    --kubeconfig=admin.kubeconfig

  kubectl config set-context default \
    --cluster=kubernetes-from-scratch \
    --user=admin \
    --kubeconfig=admin.kubeconfig

  kubectl config use-context default --kubeconfig=admin.kubeconfig
}

3. 把client的kubeconfig 放进 ~/.kube/config

mkdir ~/.kube/

cp /root/certificates/admin.kubeconfig ~/.kube/config

4. 检查component status , 这个 componentstatuses 已经在 k8s v1.19 淘汰了

kubectl get componentstatuses

5. 验证创建Kubernetes的 Object

kubectl create namespace kplabs

kubectl create secret generic prod-secret --from-literal=username=admin --from-literal=password=password123

kubectl get secret