Kubernetes the hard way revisited 〜ゼロダウンタイムクラスタ移行から学ぶクラスタ構築の仕組み〜

CloudNative Days Tokyo 2023 での登壇資料です

Transcript

1. ˜
   -:
   $PSQPSBUJPO -*/&Ϡϑʔגࣜձࣾ ޒ൓ాਖ਼ଠ࿠ ,VCFSOFUFT
   UIF
   IBSE
   XBZ
   SFWJTJUFE
   ʙθϩμ΢ϯλΠϜΫϥελҠߦ͔ΒֶͿΫϥελߏஙͷ࢓૊Έʙ
2. ˜
   -:
   $PSQPSBUJPO • ޒ൓ా ਖ਼ଠ࿠ ˏTHPUBOE • -*/&Ϡϑʔגࣜձࣾ ιϑτ΢ΣΞΤϯδχΞ • ϓϥΠϕʔτΫϥ΢υ7FSEBͷ,BB4։ൃʹैࣄ • ೥-*/&גࣜձࣾ ౰࣌ ʹೖࣾɺҎདྷݱ৬ • ,VCFDPO /"
   Ͱొஃ • “Leveraging Cluster-API for Production-Ready Multi-Regional Infrastructures”  ࣗݾ঺հ
3. ˜
   -:
   $PSQPSBUJPO  ,VCFSOFUFT
   UIF
   IBSE
   XBZ
   SFWJTJUFE
   
   ʙθϩμ΢ϯλΠϜΫϥελҠߦ͔ΒֶͿΫϥελߏஙͷ࢓૊Έʙ ຊϓϨθϯ͔Βֶ΂Δ͜ͱ • ,VCFSOFUFT
   Ϋϥελͷجຊߏ଄ͱٕज़ཁૉ • ΫϥελΛແఀࢭͰҠߦ͢ΔͨΊͷέʔεελσΟ
4. ˜
   -:
   $PSQPSBUJPO  ࣭໰ ,VCFSOFUFTΫϥελʔ࡞ͬͨ͜ͱ͋Γ·͔͢ʁ
5. ˜
   -:
   $PSQPSBUJPO • ύϒϦοΫΫϥ΢υ
   &,4
   (,&
   ",4 • اۀ޲͚੡඼
   3FE)BU 0QFOTIJGU 7.XBSF
   5BO[V • ΦϯϓϨϛε
   ,VCFBEN
   ,VCFTQSBZ
   LPQT
   LJOE
   .JOJLVCF • ͦͷଞ
   ,VCFSFOFUFT UIF )BSE 8BZ  ,VCFSOFUFT
   σΟετϦϏϡʔγϣϯ
6. ˜
   -:
   $PSQPSBUJPO • 7FSEB
   0QFOTUBDL ϕʔεͷࣾ಺Ϋϥ΢υ • 7FSEB ,VCFSOFUFT
   4FSWJDF 7,4 • ॳظ͸3BODIFSΛGPMLͯ͠։ൃ • ݱࡏ $MVTUFS"1* 
   ,VCFBEN ΁ͱҠߦத  7FSEBͰͷ,VCFSOFUFTσΟετϦϏϡʔγϣϯ ˞ຊεϥΠυͰ3BODIFSͱݴٴ͢Δࡍ͸ɺ'PSLͨ͠΋ͷΛࢦ͠·͢ɻΞοϓετϦʔϜͱҰகੑ͸อূ͠·ͤΜ
7. ˜
   -:
   $PSQPSBUJPO • ӡ༻ऀࢹ఺ • ෳ਺ͷσΟετϦϏϡʔγϣϯΛ؅ཧ͢Δͷ͸ਏ͍ • ΫϥελͷҠߦΛਐΊ͍ͨ • ར༻ऀࢹ఺ • طଘͷΫϥελΛ࢖͍ଓ͚͍ͨ • ΫϥελΛ࡞Γ௚ͨ͘͠ͳ͍ • ໨ඪ
   طଘͷΫϥελΛಈ͔ͨ͠··Ҡߦ͢Δ  3BODIFS
   ͔Β$MVTUFS
   "1*,VCFBEN΁ͷҠߦ
8. ˜
   -:
   $PSQPSBUJPO ,VCFSOFUFT UIF )BSE 8BZ 
9. ˜
   -:
   $PSQPSBUJPO • ֶश༻σΟετϦϏϡʔγϣϯ • ֤ίϯϙʔωϯτΛखಈͰઃఆɾߏங • FUDE • LVCFBQJTFSWFS • LVCFDPOUSPMMFSNBOBHFS • LVCFTDIFEVMFS • LVCFMFU • LVCFQSPYZ  ,VCFSOFUFT
   UIF
   IBSE
   XBZͱ͸ https://github.com/kelseyhightower/kubernetes-the-hard-way
10. ˜
    -:
    $PSQPSBUJPO • Ϋϥ΢υϦιʔε࡞੒ • $POUSPM
    1MBOF༻7. • ,VCFSOFUFT
    "1*༻ *1ΞυϨε • 8PSLFS༻7. • ʜ • ຊՈ͸($1͕ͩɺ೿ੜ൛΋͋Δ • "84 • MJCWJSULWN • ʜ  ,5)8෮शɿϦιʔεͷ࡞੒ IP address for apiserver VM VM worker-* (VM) https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/03-compute-resources.md VM VM controller-* (VM)
11. ˜
    -:
    $PSQPSBUJPO • 5-4ɺΩʔϖΞͷੜ੒ • $"ূ໌ॻɾൿີݤ • αʔόʔূ໌ॻɾൿີݤ • ΫϥΠΞϯτূ໌ॻɾൿີݤ • 4FSWJDF"DDPVOU༻ΩʔϖΞ • ֤ϊʔυʹ഑෍  ,5)8෮शɿূ໌ॻΩʔϖΞͷੜ੒ɾ഑෍ https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/04-certificate-authority.md controller-* (VM) worker-* (VM)
12. ˜
    -:
    $PSQPSBUJPO • ,VCFDPOGJHͷੜ੒ • ҎԼΛؚΉ • $"ূ໌ॻ • ΫϥΠΞϯτূ໌ॻɾൿີݤ • "1*
    4FSWFSͷΤϯυϙΠϯτ  ,5)8෮शɿ
    ,VCFDPOGJHͷੜ੒ɾ഑෍ https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/05-kubernetes-configuration-files.md
13. ˜
    -:
    $PSQPSBUJPO • &UDE όΠφϦͷ഑ஔ • ઃఆϑΝΠϧʢTZTUFNEʣͷੜ੒ • $"
    5-4ূ໌ॻ • ॳظͷϝϯόͷΞυϨε • ҉߸Խ • ʜ • &UDEαʔϏεͷىಈ  ,5)8෮शɿ
    &UDE Ϋϥελͷߏங controller-1 (VM) controller-2 (VM) controller-0 (VM) https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/07-bootstrapping-etcd.md
14. ˜
    -:
    $PSQPSBUJPO • όΠφϦͷ഑ஔ • LVCFBQJTFSWFS • LVCFDPOUSPMMFSNBOBHFS • LVCFTDIFEVMFS • ઃఆϑΝΠϧʢTZTUFNEʣͷੜ੒ • $" 5-4ূ໌ॻɾൿີݤ • 1&. • LVCFDPOGJH • ΤϯυϙΠϯτ • FUDEˡˠFUDE • LVCFBQJTFSWFSˠFUDE • LVCFTDIFEVMFSˠLVCFBQJTFSWFS • LVCFDPOUSPMMFSNBOBHFSˠLVCFBQJTFSWFS • ֤αʔϏεͷىಈ  ,5)8෮शɿ
    $POUSPM
    1MBOFͷىಈ https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/08-bootstrapping-kubernetes-controllers.md controller-* (VM)
15. ˜
    -:
    $PSQPSBUJPO • ্ཱ͕ͪͬͨLVCFBQJTFSWFSʹରͯ͠ -PBE#BMBODFSΛ઀ଓ • ࣄલ֬อͨ͠ *1ΞυϨεΛ෇༩ • ,VCFDPOGJHʹࢦఆͨ͠΋ͷ  ,5)8෮शɿ-#ͷ઀ଓ https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/08-bootstrapping-kubernetes-controllers.md ce2(VM) ce3(VM) ce1(VM) LoadBalancer
16. ˜
    -:
    $PSQPSBUJPO • ϗετͷઃఆ • TXBQPGG • ίϯϙʔωϯτͷΠϯετʔϧ • DPOUBJOFSE
    $/*
    QMVHJO ,VCFMFU LVCFQSPYZ • ઃఆϑΝΠϧੜ੒ • 4ZTUFNE 6OJUͷىಈ  ϫʔΧʔϊʔυͷߏஙɾ௥Ճ Worker1 (VM) Worker2 (VM) Worker3 (VM) hSps://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/09-bootstrapping-kubernetes-workers.md
17. ˜
    -:
    $PSQPSBUJPO  ,VCFSOFUFT
    UIF
    IBSE
    XBZ͕ڭ͑ͯ͘Εͨ͜ͱ ,VCFSOFUFT
    UIF
    IBSE
    XBZ
    SFWJTJUFE ֤ίϯϙʔωϯτ͸खಈͰ΋ઃఆͰ͖Δ ֤σΟετϦϏϡʔγϣϯ͸ࣗಈԽͯ͠Δ͚ͩ ˣ ઃఆΛௐ੔͢Ε͹ΠϯετʔϥΛҠߦͰ͖ΔͷͰ͸ʁ
18. ˜
    -:
    $PSQPSBUJPO 3BODIFS͔Β$MVTUFS"1*,VCFBEN ΁ͷΫϥελҠߦ 
19. ˜
    -:
    $PSQPSBUJPO • ҟͳΔόʔδϣϯͷίϯϙʔωϯτ΁ߋ৽ • ྫ
    W
    ˠ
    W • ϊʔυΛ̍ͭͣͭೖΕସ͑ • ࠷ऴతʹશͯͷϊʔυɾίϯϙʔωϯτΛߋ৽  ࢀߟࣄྫ
    ΫϥελΞοϓάϨʔυ v1.27 v1.27 v1.27 v1.28 v1.27 v1.27 v1.28 v1.28 v1.27 v1.28 v1.28 v1.28
20. ˜
    -:
    $PSQPSBUJPO • ҟͳΔઃఆͷίϯϙʔωϯτ΁ߋ৽ • 3BODIFS SLF ˠ
    ,VCFBEN • ϊʔυΛ̍ͭͣͭೖΕସ͑ • ࠷ऴతʹશͯͷϊʔυɾίϯϙʔωϯτΛߋ৽  ઓུɿϊʔυΛͭͣͭೖΕସ͑Δ
21. ˜
    -:
    $PSQPSBUJPO  ݹ͍Ϋϥελ 3BODIFS3,&
    ʹ
    ,VCFBENͰ
    /PEFΛ+PJOͤ͞Δ ͸͡ΊͷҰาɿ8PSLFS
    /PEFΛ௥Ճ͢Δ Join
22. ˜
    -:
    $PSQPSBUJPO  ,VCFBEN +PJO LVCFBEN KPJO
    DPOGJH
    SVOLVCFBENLVCFBENKPJODPOGJHZBNM
23. ˜
    -:
    $PSQPSBUJPO  ,VCFBEN +PJO LVCFBEN KPJO
    DPOGJH
    SVOLVCFBENLVCFBENKPJODPOGJHZBNM
24. ˜
    -:
    $PSQPSBUJPO • ,VCF "1*
    4FSWFSͷΤϯυϙΠϯτ • $"ͷϋογϡ஋ • ೝূ༻ͷ#PPUTUSBQτʔΫϯ  ,VCFBEN +PJOͷͨΊʹ
25. ˜
    -:
    $PSQPSBUJPO  ,VCFMFU͔Β"1*
    4FSWFS΁ͷ઀ଓ LB چߏ੒ʢ3BODIFSʣ ৽ߏ੒ʢ,VCFBENʣ worker worker mycluster.example.com
26. ˜
    -:
    $PSQPSBUJPO • "1*
    4FSWFSʹରͯ͠-#Λ࡞੒ • ,VCFSOFUFT UIF IBSEXBZͱಉ͡ʂ • ৽ߏ੒ʹ߹ΘͤͯυϝΠϯ໊Λ෇༩ • NZDMVTUFSFYBNQMFDPN • ˠ઀ଓΤϥʔ  -#Λ࡞Ε͹ղܾʁ LB worker چߏ੒ʢ3BODIFSʣվ mycluster.example.com
27. ˜
    -:
    $PSQPSBUJPO  5-4ূ໌ॻͷ4"/ͷमਖ਼ • 5-4Ͱ͸4"/ʹ͋ΔυϝΠϯ໊ͷΈ௨৴Մ • 4"/
    4VCKFDU
    "MUFSOBUJWF
    /BNF • ͦ͏Ͱͳ͍ͱݕূΤϥʔͱͳΔ ˣ • ৽ߏ੒ʹԊͬͨυϝΠϯ໊Λ4"/΁௥Ճ • 5-4ূ໌ॻͷߋ৽͸طଘػೳͰ࣮ݱ
28. ˜
    -:
    $PSQPSBUJPO • ,VCF "1*
    4FSWFSͷΤϯυϙΠϯτˡ-#ɾυϝΠϯ࡞੒ˍ4"/ͷमਖ਼ • $"ͷϋογϡ஋ˡ • ೝূ༻ͷ#PPUTUSBQτʔΫϯ  ,VCFBEN +PJOͷͨΊʹ
29. ˜
    -:
    $PSQPSBUJPO • ,VCFSOFUFTͰ͸௨৴ͷ҉߸ԽͷͨΊʹ5-4௨৴Λ׆༻ • ݪଇɺڞ௨ͷ$"Λ༻͍ͯαʔόʔΫϥΠΞϯτূ໌ॻΛੜ੒ • ࣄલʹ഑෍͞Εͨ$"ূ໌ॻΛ༻͍ͯ௨৴Λݕূ • ֤OBNFTQBDFʹ
    LVCFSPPUDBDSU $POGJH.BQͱͯ͠഑෍͞Ε͍ͯΔ • ˢ͜ΕΛ༻͍ͯLVCFBEN༻ʹ$"ͷϋογϡ஋Λੜ੒  ,VCFSOFUFTͱ$"ূ໌ॻ
30. ˜
    -:
    $PSQPSBUJPO • ,VCF "1*
    4FSWFSͷΤϯυϙΠϯτˡ-#ɾυϝΠϯ࡞੒ˍ4"/ͷमਖ਼ • $"ͷϋογϡ஋ ˡ
    LVCFSPPUDBDSU
    $POGJH.BQ͔Βੜ੒ • ೝূ༻ͷ#PPUTUSBQτʔΫϯ ˡ  ,VCFBEN +PJOͷͨΊʹ
31. ˜
    -:
    $PSQPSBUJPO • Ϋϥελͷ࡞੒΍ϊʔυͷ௥Ճ༻ʹ༻ҙ͞Ε͍ͯΔೝূํࣜͷͨΊͷτʔΫϯ • BCDEFGBCDEFG
    ͷΑ͏ͳܗࣜ • CPPUTUSBQLVCFSOFUFTJPUPLFO ܕͷ4FDSFUͱͯ͠؅ཧ • ҎԼͷϑϥάΛઃఆͯ͠༗ޮԽ • LVCFBQJTFSWFS
    FOBCMFCPPUTUSBQUPLFOBVUI • LVCFDPOUSPMMFSNBOBHFS DPOUSPMMFST UPLFODMFBOFS CPPUTUSBQTJHOFS  #PPUTUSBQτʔΫϯͱ͸ https://kubernetes.io/docs/reference/access-authn-authz/bootstrap-tokens/
32. ˜
    -:
    $PSQPSBUJPO • LVCFBEN UPLFO
    DSFBUF
    ίϚϯυͰ࡞੒Մ • ಺෦తʹ͸4FDSFUΛ࡞੒͍ͯ͠Δ͚ͩ • ˠ
    LVCFBENҎ֎Ͱ΋൚༻తʹར༻Ͱ͖Δ  #PPUTUSBQτʔΫϯͷੜ੒ https://kubernetes.io/docs/reference/access-authn-authz/bootstrap-tokens/
33. ˜
    -:
    $PSQPSBUJPO • ,VCF "1*
    4FSWFSͷΤϯυϙΠϯτˡ-#ɾυϝΠϯ࡞੒ˍ4"/ͷमਖ਼ • $"ͷϋογϡ஋ ˡ
    LVCFSPPUDBDSU
    $POGJH.BQ͔Βੜ੒ • ೝূ༻ͷ#PPUTUSBQτʔΫϯ ˡ༗ޮԽˍLVCFBEN UPLFO
    DSFBUF  ,VCFBEN +PJOͷͨΊʹ
34. ˜
    -:
    $PSQPSBUJPO  ,VCFBEN +PJO LVCFBEN KPJO
    DPOpH
    SVOLVCFBENLVCFBENKPJODPOpHZBNM
35. ˜
    -:
    $PSQPSBUJPO  ,VCFBEN +PJO ࣦഊʜ
36. ˜
    -:
    $PSQPSBUJPO • 3#"$ͷઃఆ࿙Ε • 5-4
    #PPUTUSBQQJOH • ֤छઃఆ༻ͷ$POGJH.BQ • ʜ  ࢒Δ໰୊
37. ˜
    -:
    $PSQPSBUJPO • #PPUTUSBQ τʔΫϯͰೝূͰ͖Δ͚ͩͰ͸ಈ͔ͳ͍ • ೝՄઃఆ΋ඞཁ • /PEFҰཡͷऔಘ • $43ؔ࿈  3#"$ͷઃఆ
38. ˜
    -:
    $PSQPSBUJPO  ,VCFBENͷ3#"$ੜ੒ίʔυ IUUQTHJUIVCDPNLVCFSOFUFTLVCFSOFUFTCMPCNBTUFSDNE LVCFBENBQQDNEQIBTFTJOJUCPPUTUSBQUPLFOHP
39. ˜
    -:
    $PSQPSBUJPO • 3#"$ͷઃఆ࿙Εˡ,VCFBENΛࢀߟʹ3PMFCJOEJOH౳࡞੒ • 5-4
    #PPUTUSBQQJOH • ֤छઃఆ༻ͷ$POGJH.BQʜ  ࢒Δ໰୊
40. ˜
    -:
    $PSQPSBUJPO • ,VCFMFU͸ΫϥΠΞϯτূ໌ॻΛ༻͍ͯ"1*
    4FSWFSͱN5-4Ͱ௨৴ • #PPUTUSBQ
    UPLFO͸ىಈ࣌ͷΈ࢖༻ • ΫϥΠΞϯτূ໌ॻ͸$43"1*Λ༻͍ͯLVCFMFUࣗ਎Ͱੜ੒Մೳ • $43 $FSUJGJDBUF 4JHOJOH 3FRVFTU • ,5)8Ͱ͸खಈͰੜ੒ • ैདྷΫϥελͰ͸༗ޮʹͳ͍ͬͯͳ͔ͬͨ • ,VCFBEN޲͚ʹ༗ޮԽ • LVCFDPOUSPMMFSNBOBHFS
    DMVTUFSTJHOJOHLFZGJMF
    DMVTUFSTJHOJOHDFSUGJMF  $43ͱ,VCFMFUͷ5-4
    #PPUTUSBQQJOH https://kubernetes.io/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/
41. ˜
    -:
    $PSQPSBUJPO • 3#"$ͷઃఆ࿙Εˡ,VCFBENΛࢀߟʹ3PMFCJOEJOH౳࡞੒ • 5-4
    #PPUTUSBQQJOH
    ˡ
    $43ͷ༗ޮԽ • ֤छઃఆ༻ͷ$POGJH.BQ • ʜ  ࢒Δ໰୊
42. ˜
    -:
    $PSQPSBUJPO ,VCFBENͷઃఆ؅ཧ • ઃఆϑΝΠϧΛ$POGJH.BQͱͯ͠؅ཧ • LVCFBENDPOGJH • LVCFMFUDPOGJH • LVCFQSPYZ • طଘΫϥελͷઃఆΛݩʹੜ੒  ,VCFBENʹ͓͚Δઃఆ؅ཧ
43. ˜
    -:
    $PSQPSBUJPO • 3#"$ͷઃఆ࿙Εˡ,VCFBENΛࢀߟʹ3PMFCJOEJOH౳࡞੒ • 5-4
    #PPUTUSBQQJOH
    ˡ
    $43ͷ༗ޮԽ • ֤छઃఆ༻ͷ$POGJH.BQˡطଘΫϥελͷઃఆΛݩʹੜ੒ • ʜ  ࢒Δ໰୊
44. ˜
    -:
    $PSQPSBUJPO • ,VCFBEN KPJO༻ͷઃఆϑΝΠϧ४උ • apiserver endpoint • CA ハッシュ • Bootstrapトークン • ͦͷଞඞཁͳௐ੔ • RBAC • Certificate Signing Request API • 設定⽤ConfigMap • …  ·ͱΊɿ8PSLFS
    /PEF௥Ճʹඞཁͳमਖ਼
45. ˜
    -:
    $PSQPSBUJPO • ҟͳΔઃఆͷίϯϙʔωϯτ΁ߋ৽ • 3BODIFS SLF ˠ
    ,VCFBEN • ϊʔυΛ̍ͭͣͭೖΕସ͑ • ࠷ऴతʹશͯͷϊʔυɾίϯϙʔωϯτΛߋ৽  ઓུɿ
    ϊʔυΛͭͣͭೖΕସ͑Δ ࠶ܝ
46. ˜
    -:
    $PSQPSBUJPO  $POUSPM
    1MBOF
    ϊʔυΛೖΕସ͑Δʹ͸ʁ Control Plane Worker Control Plane Control Plane Worker Worker
47. ˜
    -:
    $PSQPSBUJPO • ൿີݤɾূ໌ॻͷෳ੡ • FUDEͷϝϯόʔ؅ཧ • ʜ $POUSPM
    1MBOFϊʔυ௥Ճͷ՝୊
48. ˜
    -:
    $PSQPSBUJPO • σϑΥϧτಈ࡞Ͱ͸ ,VCFBENࣗ਎͕
    ূ໌ॻɾൿີݤΛੜ੒ • ࢦఆύεʹ഑ஔ͢Δ͜ͱͰ$"ূ໌ॻ౳Λ౉͢͜ͱ͕Ͱ͖Δ • طଘΫϥελ޲͚ͷূ໌ॻɾൿີݤΛίϐʔ • σΟετϦϏϡʔγϣϯຖʹ؅ཧํ๏͕ҟͳΔ • $MVTUFS"1*Ͱ͸.BOBHFNFOU
    $MVTUFSʹ໋໊نଇʹԊͬͯ4FDSFUΛ࡞Ε͹0,  ,VCFBENͱূ໌ॻɾൿີݤ
49. ˜
    -:
    $PSQPSBUJPO • ൿີݤɾূ໌ॻͷෳ੡ˡطଘΫϥελ͔Βίϐʔ • FUDEͷϝϯόʔ؅ཧ • ʜ $POUSPM
    1MBOFϊʔυ௥Ճͷ՝୊
50. ˜
    -:
    $PSQPSBUJPO • $POUSPM1MBOF /PEFͷ௥Ճɺ࡟আ࣌ʹFUDEΫϥελΛૢ࡞͢Δඞཁ͕͋Δ • ৽نϝϯόʔͷ௥Ճ࣌
    FUDEͷىಈ࣌ʹطଘϝϯόʔͷΤϯυϙΠϯτࢦఆ • طଘϝϯόʔͷ࡟আ࣌
    ର৅ϝϯόʔΛΫϥελ͔Β࡟আ • FUDEͷΤϯυϙΠϯτ͕Θ͔Βͳ͚Ε͹ૢ࡞Ͱ͖ͳ͍ • ˠͲ͏΍ͬͯϝϯόʔͷΤϯυϙΠϯτΛ؅ཧ͢Δʁ  &UDEϝϯόʔ؅ཧͷඞཁੑ
51. ˜
    -:
    $PSQPSBUJPO • FUDE͸LVCFMFU TUBUJD
    QPEͱ࣮ͯ͠ߦ • )PTU
    /FUXPSL
    Ϟʔυ • ,VCFSOFUFT
    "1*ܦ༝Ͱ৘ใऔಘ • -BCFMͰFUDE 1PETΛࣝผ • DPNQPOFOUFUDE • UJFSDPOUSPMQMBOF • ΤϯυϙΠϯτ͸1PEͷ"OOPUBUJPOʹ֨ೲ • kubeadm.kubernetes.io/etcd.advertise-client-urls  ैདྷͷ&UDEϝϯόʔ؅ཧ control-1 (IP: 10.0.0.1) containerd kubelet 通常Pod etcd Pod listen at 10.0.0.1:2379
52. ˜
    -:
    $PSQPSBUJPO • ैདྷʢ3BODIFSʣ͸%PDLFSίϯςφͱͯ͠ FUDEΛ࣮ߦ • )PTU
    OFUXPSL
    Ϟʔυ • FUDE
    %PDLFSίϯςφ͸3BODIFS͕؅ཧ • ,VCFSOFUFT "1*͔Β͸FUDEίϯςφ͸ ૢ࡞औಘͰ͖ͳ͍  ैདྷͷ&UDEϝϯόʔ؅ཧ ؅ཧ control-1 (IP: 10.0.0.1) containerd kubelet 通常Pod Etcd コンテナ Docker listen at 10.0.0.1:2379
53. ˜
    -:
    $PSQPSBUJPO  μϛʔ1PEʹΑΔFUDEϝϯόʔ৘ใͷ޿ࠂ &UDEϝϯόʔ؅ཧ໰୊ͷղܾࡦ ؅ཧ control-1 (IP: 10.0.0.1) containerd kubelet ダミー etcd Pod Etcd コンテナ Docker listen at 10.0.0.1:2379
54. ˜
    -:
    $PSQPSBUJPO • ൿີݤɾূ໌ॻͷෳ੡ˡطଘΫϥελ͔Βίϐʔ • FUDEͷϝϯόʔ؅ཧˡμϛʔ1PEΛ഑ஔ • ʜ ·ͱΊ
    $POUSPM
    1MBOFϊʔυ௥Ճͷ՝୊
55. ˜
    -:
    $PSQPSBUJPO  Ҡߦ׬ྃ Control Plane Worker Control Plane Control Plane Worker Worker
56. ˜
    -:
    $PSQPSBUJPO l ΦϖϨʔγϣϯͷࣗಈԽɾίϯτϩʔϥʔԽɾ"1*Խ l 3BODIFS$MVTUFS"1*ίϯτϩʔϥͱͷڠௐಈ࡞ l Ҡߦதͷ๦֐ૢ࡞ͷ๷ࢭ l ,VCFBENઃఆϑΝΠϧͷੜ੒౳ l ࡉ͔͍ΧελϜػೳͷରԠ l ؂ࢹγεςϜͷҠߦ l ʜ  ͦͷଞͷ໰୊
57. ˜
    -:
    $PSQPSBUJPO • σΟετϦϏϡʔγϣϯʹґΒͣLVCFSOFUFTͷجຊίϯϙʔωϯτ͸ڞ௨ • LVCFBQJTFSWFS
    LVCFMFU FUD • खಈͰઃఆ͢Ε͹ҟͳΔσΟετϦϏϡʔγϣϯΛҠߦ͢Δ͜ͱ΋Մೳ • l,VCFSOFUFT
    UIF )BSE
    8BZz
    ͠·͠ΐ͏  ·ͱΊ
58. ˜
    -:
    $PSQPSBUJPO ‒ IUUQTHJUIVCDPNLFMTFZIJHIUPXFSLVCFSOFUFTUIFIBSEXBZ ‒ IUUQTLVCFSOFUFTJPEPDTSFGFSFODFTFUVQUPPMTLVCFBENJNQMFNFOUBUJPOEFUBJMT ‒ IUUQTLVCFSOFUFTJPEPDTSFGFSFODFBDDFTTBVUIOBVUI[ • "VUIFOUJDBUJOH
    XJUI
    #PPUTUSBQ
    5PLFOT • $FSUJGJDBUF
    4JHOJOH
    3FRVFTUT • 5-4
    CPPUTUSBQQJOH  ࢀߟϦϯΫ
59. ˜
    -:
    $PSQPSBUJPO 5IBOL
    ZPV
60. ˜
    -:
    $PSQPSBUJPO ෇࿥ɿσΟετϦϏϡʔγϣϯຖͷҧ͍ ,VCFBEN ,5)8 3BODIFS3,& ,VCFMFU࣮ߦ؀ڥ 4ZTUFNE 6OJU
    ౳ QBDLBHF౳ 4ZTUFNE 6OJU TFMG
    CJOBSZ %PDLFS
    ίϯςφ BQJTFSWFS౳࣮ߦ؀ڥ LVCFMFU TUBUJD
    QPE 4ZTUFNE 6OJU TFMG
    CJOBSZ %PDLFS
    ίϯςφ LVCF QSPYZ࣮ߦ؀ڥ %BFNPOTFU %BFNPOTFU %PDLFS
    ίϯςφ BQJTFSWFSˠFUDE௨৴ MPDBMIPTUͷΈ શϝϯόʔྻڍ MPDBMIPTUͷΈ ,VCFMFUˠBQJTFSWFS௨৴ -#౳ܦ༝ -# *1
    "EESFTT ܦ༝ ௚઀ ,VCFMFU༻ূ໌ॻੜ੒ खಈੜ੒ ίϯτϩʔϥͰੜ੒