第 2 章 替换失败的 master 主机

流程

1. 查看与 etcd 关联的 Pod 列表。

   在一个已连接到集群的终端中，运行以下命令：

   $ oc get pods -n openshift-etcd
   NAME                                                     READY   STATUS    RESTARTS   AGE
   etcd-member-ip-10-0-128-73.us-east-2.compute.internal    2/2     Running   0          15h
   etcd-member-ip-10-0-147-172.us-east-2.compute.internal   2/2     Running   7          122m
   etcd-member-ip-10-0-171-108.us-east-2.compute.internal   2/2     Running   0          15h

   Copy to Clipboard Toggle word wrap
2. 访问活跃的 master 主机。

3. 运行 etcd-member-remove.sh 脚本，并传递要删除的 etcd 成员名称：

   [core@ip-10-0-128-73 ~]$ sudo -E /usr/local/bin/etcd-member-remove.sh etcd-member-ip-10-0-147-172.us-east-2.compute.internal
   Downloading etcdctl binary..
   etcdctl version: 3.3.10
   API version: 3.3
   etcd client certs already backed up and available ./assets/backup/
   Member 23e4736df4451b32 removed from cluster 6e25bab1bb556673
   etcd member etcd-member-ip-10-0-147-172.us-east-2.compute.internal with 23e4736df4451b32 successfully removed..

   Copy to Clipboard Toggle word wrap

4. 验证 etcd 成员已从集群中成功移除：

   1. 连接到正在运行的 etcd 容器：

      [core@ip-10-0-128-73 ~] id=$(sudo crictl ps --name etcd-member | awk 'FNR==2{ print $1}') && sudo crictl exec -it $id /bin/sh

      Copy to Clipboard Toggle word wrap

   2. 在 etcd 容器中，导出连接到 etcd 所需的变量：

      sh-4.3# export ETCDCTL_API=3 ETCDCTL_CACERT=/etc/ssl/etcd/ca.crt ETCDCTL_CERT=$(find /etc/ssl/ -name *peer*crt) ETCDCTL_KEY=$(find /etc/ssl/ -name *peer*key)

      Copy to Clipboard Toggle word wrap

   3. 在etcd容器中，执行etcdctl member list并确定删除的成员已不再输出列表中。

      sh-4.3#  etcdctl member list -w table
      
      +------------------+---------+------------------------------------------+------------------------------------------------------------------+---------------------------+
      |        ID        | STATUS  |                   NAME                   |                            PEER ADDRS                            |       CLIENT ADDRS        |
      +------------------+---------+------------------------------------------+------------------------------------------------------------------+---------------------------+
      | 29e461db6be4eaaa | started | etcd-member-ip-10-0-128-73.us-east-2.compute.internal | https://etcd-2.clustername.devcluster.openshift.com:2380 | https://10.0.128.73:2379 |
      |  cbe982c74cbb42f | started |  etcd-member-ip-10-0-171-108.us-east-2.compute.internal | https://etcd-1.clustername.devcluster.openshift.com:2380 |   https://10.0.171.108:2379 |
      +------------------+---------+------------------------------------------+------------------------------------------------------------------+---------------------------+

      Copy to Clipboard Toggle word wrap