# install-etcd

**Repository Path**: jack2zhang/install-etcd

## Basic Information

- **Project Name**: install-etcd
- **Description**: No description available
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2018-02-28
- **Last Updated**: 2021-11-02

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

## etcd install cluster

### node

* etcd1 192.168.9.181
* etcd2 192.168.9.192
* etcd3 192.168.9.183

### install

	yum install -y etcd

### config

* conf/etcd.conf
* 改etcd_name和监听的Ip

### 证书安装

* CFSSL 工具安装

		wget https://pkg.cfssl.org/R1.2/cfssl_linux-amd64
		wget https://pkg.cfssl.org/R1.2/cfssljson_linux-amd64
		chmod +x cfssl_linux-amd64 cfssljson_linux-amd64
		mv cfssl_linux-amd64 /usr/local/bin/cfssl
		mv cfssljson_linux-amd64 /usr/local/bin/cfssljson

* 修改etcd-csr.json里面的IP
 
* 生成证书 genCerts.sh

		cfssl gencert --initca=true etcd-root-ca-csr.json | cfssljson --bare etcd-root-ca	
		cfssl gencert --ca etcd-root-ca.pem --ca-key etcd-root-ca-key.pem --config etcd-gencert.json etcd-csr.json | cfssljson --bare etcd

* 分发证书

		ssh root@$IP mkdir /etc/etcd/ssl
	    scp *.pem root@$IP:/etc/etcd/ssl
	    ssh root@$IP chown -R etcd:etcd /etc/etcd/ssl
	    ssh root@$IP chmod -R 644 /etc/etcd/ssl/*
	    ssh root@$IP chmod 755 /etc/etcd/ssl


#### 集群测试

	export ETCDCTL_API=3
 	etcdctl --cacert=/etc/etcd/ssl/etcd-root-ca.pem --cert=/etc/etcd/ssl/etcd.pem --key=/etc/etcd/ssl/etcd-key.pem --endpoints=https://192.168.9.181:2379,https://192.168.9.182:2379,https://192.168.9.183:2379 endpoint health

#### 看日志

journalctl -u etcd