郑州易站通网站公司,dedecms网站信息统计,龙岩做网站哪家最好,网站建设公司行业描述填什么备份只需要在一个节点上备就可以了#xff0c;每个节点上的数据是同步的#xff1b;但是数据恢复是需要在每个主节点上进行
1.查看证书位置 #查看etcd证书
[rootk8s-master01 manifests]# cat /etc/kubernetes/manifests/kube-apiserver.yaml |grep etcd- --etcd-cafile/et…备份只需要在一个节点上备就可以了每个节点上的数据是同步的但是数据恢复是需要在每个主节点上进行
1.查看证书位置 #查看etcd证书
[rootk8s-master01 manifests]# cat /etc/kubernetes/manifests/kube-apiserver.yaml |grep etcd- --etcd-cafile/etc/ssl/etcd/ssl/ca.pem- --etcd-certfile/etc/ssl/etcd/ssl/node-k8s-master01.pem- --etcd-keyfile/etc/ssl/etcd/ssl/node-k8s-master01-key.pem
2.ETCD备份
ETCDCTL_API3 etcdctl snapshot save /root/etcd-snapshot-date %Y%m%d%H%m.db \
--endpointshttps://127.0.0.1:2379 \
--cacert/etc/ssl/etcd/ssl/ca.pem \
--cert/etc/ssl/etcd/ssl/node-k8s-master01.pem \
--key/etc/ssl/etcd/ssl/node-k8s-master01-key.pem3.单master,ETCD还原 rm -rf /var/lib/etcd.bck#移除所有etcd服务实例的数据目录
mv /etc/kubernetes/manifests /etc/kubernetes/manifests.bck
mv /var/lib/etcd /var/lib/etcd.bck#使用20230807-0822.db文件恢复数据到/var/lib/etcd目录
ETCDCTL_API3 etcdctl snapshot restore /root/etcd-snapshot-202308072008.db \
--data-dir/var/lib/etcd#启动kube-apiserver和etcd容器
mv /etc/kubernetes/manifests.bck /etc/kubernetes/manifests#需要重启kubelet不然删除和创建Pod异常
systemctl restart kubelet
3.1多个master还原
rm -rf /var/lib/etcd.bck#移除所有etcd服务实例的数据目录
mv /etc/kubernetes/manifests /etc/kubernetes/manifests.bck
mv /var/lib/etcd /var/lib/etcd.bck# k8s-master01 机器上操作
$ ETCDCTL_API3 etcdctl snapshot restore /root/etcd-snapshot-202308072008.db \--endpoints192.168.1.220 \--name k8s-master01 \--initial-cluster k8s-master01https://192.168.1.220:2380,k8s-master02https://192.168.1.221:2380,k8s-master03https://192.168.1.222:2380 \--initial-cluster-token etcd-cluster-1 \--initial-advertise-peer-urls https://192.168.1.220:2380 \--data-dir/var/lib/etcd# k8s-master02 机器上操作
$ ETCDCTL_API3 etcdctl snapshot restore /root/etcd-snapshot-202308072008.db \--endpoints192.168.1.221 \--name k8s-master02 \--initial-cluster k8s-master01https://192.168.1.220:2380,k8s-master02https://192.168.1.221:2380,k8s-master03https://192.168.1.222:2380 \--initial-cluster-token etcd-cluster-1 \--initial-advertise-peer-urls https://192.168.1.221:2380 \--data-dir/var/lib/etcd# k8s-master03 机器上操作
$ ETCDCTL_API3 etcdctl snapshot restore /root/etcd-snapshot-202308072008.db \--endpoints192.168.1.222 \--name k8s-master03 \--initial-cluster k8s-master01https://192.168.1.220:2380,k8s-master02https://192.168.1.221:2380,k8s-master03https://192.168.1.222:2380 \--initial-cluster-token etcd-cluster-1 \--initial-advertise-peer-urls https://192.168.1.222:2380 \--data-dir/var/lib/etcd#检查etcd
ETCDCTL_API3 etcdctl --endpointshttps://192.168.1.220:2379,https://192.168.1.221:2379,https://192.168.1.222:2379 \
--cacert/etc/ssl/etcd/ssl/ca.pem \
--cert/etc/ssl/etcd/ssl/node-k8s-master01.pem \
--key/etc/ssl/etcd/ssl/node-k8s-master01-key.pem \
member list --write-outtable#检查所有etcd健康状态
ETCDCTL_API3 etcdctl --cacert/etc/ssl/etcd/ssl/ca.pem \
--cert/etc/ssl/etcd/ssl/node-k8s-master01.pem \
--key/etc/ssl/etcd/ssl/node-k8s-master01-key.pem \
--endpointshttps://192.168.1.220:2379,https://192.168.1.221:2379,https://192.168.1.222:2379 \endpoint health -w table#启动kube-apiserver和etcd容器
mv /etc/kubernetes/manifests.bck /etc/kubernetes/manifests#需要重启kubelet不然删除和创建Pod异常
systemctl restart kubelet
4.检查ETCD状态
kubectl get cskubectl get po5.定时备份
whereis etcdctlcat /backups/etcd-bak.sh eof
#!/bin/bashETCDCTL_PATH/usr/local/bin/etcdctl
ENDPOINTShttps://127.0.0.1:2379
ETCD_DATA_DIR/var/lib/etcd
BACKUP_DIR/backups/etcd/etcd-$(date %Y-%m-%d-%H-%M-%S)KEEPBACKUPNUMBER5
ETCDBACKUPPERIOD30
ETCDBACKUPHOURETCDCTL_CERT/etc/ssl/etcd/ssl/node-k8s-master01.pem
ETCDCTL_KEY/etc/ssl/etcd/ssl/node-k8s-master01-key.pem
ETCDCTL_CA_FILE/etc/ssl/etcd/ssl/ca.pem[ ! -d $BACKUP_DIR ] mkdir -p $BACKUP_DIRexport ETCDCTL_API2;$ETCDCTL_PATH backup --data-dir $ETCD_DATA_DIR --backup-dir $BACKUP_DIRsleep 3{
export ETCDCTL_API3;$ETCDCTL_PATH --endpoints$ENDPOINTS snapshot save $BACKUP_DIR/snapshot.db \--cacert$ETCDCTL_CA_FILE \--cert$ETCDCTL_CERT \--key$ETCDCTL_KEY
} /dev/null find /backups/etcd -maxdepth 1 -mtime 7 |xargs -i rm -fr {}
eofchmod x /backups/etcd-bak.sh
cd /backups/5.1 设置定时任务
[rootk8s-master01 backups]# crontab -l
*/5 * * * * /backups/etcd-bak.sh /dev/null 21
