kubeadm token create

1 개요[ | ]

kubeadm token create

root@master1:~# kubeadm token create
2hn3yd.9n8rhccaad496efj

2 실습[ | ]

master

root@master1:~# kubeadm token list
TOKEN                     TTL       EXPIRES                     USAGES                   DESCRIPTION                                                EXTRA GROUPS
i50r58.e8dx9hd9m6tmv663   6h        2019-05-28T16:17:39+09:00   authentication,signing   The default bootstrap token generated by 'kubeadm init'.   system:bootstrappers:kubeadm:default-node-token

root@master1:~# kubeadm token create
2hn3yd.9n8rhccaad496efj

root@master1:~# kubeadm token list
TOKEN                     TTL       EXPIRES                     USAGES                   DESCRIPTION                                                EXTRA GROUPS
2hn3yd.9n8rhccaad496efj   23h       2019-05-29T09:53:51+09:00   authentication,signing   <none>                                                     system:bootstrappers:kubeadm:default-node-token
i50r58.e8dx9hd9m6tmv663   6h        2019-05-28T16:17:39+09:00   authentication,signing   The default bootstrap token generated by 'kubeadm init'.   system:bootstrappers:kubeadm:default-node-token

root@master1:~# openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex
(stdin)= e8ee89003791b7340e6361b8f20663571d1156d393057fc8a816857b0f965984

worker

root@worker2:~# kubeadm join --token i50r58.e8dx9hd9m6tmv6603 172.20.0.150:6443 --discovery-token-ca-cert-hash sha256:e8ee89003791b7340e6361b8f20663571d1156d393057fc8a816857b0f965984
[preflight] Running pre-flight checks
	[WARNING IsDockerSystemdCheck]: detected "cgroupfs" as the Docker cgroup driver. The recommended driver is "systemd". Please follow the guide at https://kubernetes.io/docs/setup/cri/
[preflight] Reading configuration from the cluster...
[preflight] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -oyaml'
...
This node has joined the cluster:
* Certificate signing request was sent to apiserver and a response was received.
* The Kubelet was informed of the new secure connection details.

Run 'kubectl get nodes' on the control-plane to see this node join the cluster.

3 같이 보기[ | ]