手动搭建Kubernetes1.8高可用集群（3）ETCD-BravePro

yanglgzh

#!/bin/bash　　MASTERS="node1 node2 node3"
　　HOSTS="node1 node2 node3"
　　set -o errexit
　　set -o pipefail
　　usage()
　　{
　　cat  /dev/null 2>&1
　　openssl req -x509 -new -nodes -key ca-key.pem -days 10000 -out ca.pem -subj "/CN=etcd-ca" > /dev/null 2>&1
　　fi
　　# ETCD member
　　if [ -n "$MASTERS" ]; then
　　for host in $MASTERS; do
　　cn="${host%%.*}"
　　# Member key
　　openssl genrsa -out member-${host}-key.pem 2048 > /dev/null 2>&1
　　openssl req -new -key member-${host}-key.pem -out member-${host}.csr -subj "/CN=etcd-member-${cn}" -config ${CONFIG} > /dev/null 2>&1
　　openssl x509 -req -in member-${host}.csr -CA ca.pem -CAkey ca-key.pem -CAcreateserial -out member-${host}.pem -days 3650 -extensions ssl_client -extfile ${CONFIG} > /dev/null 2>&1
　　# Admin key
　　openssl genrsa -out admin-${host}-key.pem 2048 > /dev/null 2>&1
　　openssl req -new -key admin-${host}-key.pem -out admin-${host}.csr -subj "/CN=etcd-admin-${cn}" > /dev/null 2>&1
　　openssl x509 -req -in admin-${host}.csr -CA ca.pem -CAkey ca-key.pem -CAcreateserial -out admin-${host}.pem -days 3650 -extensions ssl_client  -extfile ${CONFIG} > /dev/null 2>&1
　　done
　　fi
　　# Node keys
　　#if [ -n "$HOSTS" ]; then
　　for host in $HOSTS; do
　　cn="${host%%.*}"
　　openssl genrsa -out node-${host}-key.pem 2048 > /dev/null 2>&1
　　openssl req -new -key node-${host}-key.pem -out node-${host}.csr -subj "/CN=etcd-node-${cn}" > /dev/null 2>&1
　　openssl x509 -req -in node-${host}.csr -CA ca.pem -CAkey ca-key.pem -CAcreateserial -out node-${host}.pem -days 3650 -extensions ssl_client  -extfile ${CONFIG} > /dev/null 2>&1
　　done
　　#fi
　　# Install certs
　　mv *.pem ${SSLDIR}/