-
Notifications
You must be signed in to change notification settings - Fork 450
2.CES安装
Oilbeater edited this page Dec 12, 2021
·
1 revision
-
下载脚本
wget https://raw.githubusercontent.com/f5devcentral/container-egress-service/master/dist/install.sh
-
编辑
install.sh
脚本,根据实际环境编辑以下变量值BIGIP_URL=${BIGIP_URL:-192.168.50.254} # IP address of Big-IP server. CES pod will connect this IP. BIGIP_USERNAME=${BIGIP_USERNAME:-admin} # BigIP username BIGIP_PASSWORD=${BIGIP_PASSWORD:-yourpassword} # BigIP password BIGIP_INSECURE=${BIGIP_INSECURE:-true} # ignore Big-IP TLS error K8S_NAMESPACE=${K8S_NAMESPACE:-kube-system} # namespace in which the controller will be deployed. This ns # also will be for global policy
-
在实际环境部署中,您还需编辑脚本中
[Step 4]
的相关设置。本部分的参数设定将在Configmap设定章节介绍。但如果仅做功能性评估,可保持安装脚本原样。
-
执行脚本进行安装:
bash install.sh
-
确认脚本执行过程无错误。
-
校验以下内容:
[root@ovnmaster kube-ovn-new]# kubectl get crd | grep egress clusteregressrules.kubeovn.io 2021-10-12T07:13:29Z namespaceegressrules.kubeovn.io 2021-10-12T07:13:29Z serviceegressrules.kubeovn.io 2021-10-12T07:13:29Z
[root@ovnmaster kube-ovn-new]# kubectl get sa -A | grep ces kube-system ces-controller 1 42d
[root@ovnmaster kube-ovn-new]# kubectl get clusterrolebindings -A | grep ces ces-controller 42d
[root@ovnmaster kube-ovn-new]# kubectl get cm -A | grep ces kube-system ces-controller-configmap 2 42d
[root@ovnmaster kube-ovn-new]# kubectl get pod -A | grep ces kube-system ces-controller-745bf7498d-ztb6b 1/1 Running 0 18d
-
如上述安装及验证无误,则控制器安装成功。
在CES控制器的deployment中设置启动参数可打开CES的debug日志输出:
command:
- /ces-controller
- --bigip-url=$BIGIP_URL
- --bigip-insecure=$BIGIP_INSECURE
- --bigip-creds-dir=/ces/bigip-creds
- --bigip-conf-dir=/ces
- --v=3
运行以下脚本可卸载
https://raw.githubusercontent.com/f5devcentral/container-egress-service/master/dist/uninstall.sh
下一步:
了解ces-controller-configmap
(即安装脚本中的step 4)的参数配置。点击这里。