René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"本地 kubectl 远程访问 minikube","articleBody":"本地 kubectl 远程访问 minikube\r\n===============================\r\n\r\n### 场景\r\n\r\n使用 `minikube` 在 UCloud 主机搭建了一个单机 Kubernetes 集群.\r\n\u003e 远程服务器是使用 KVM 运行 minikube 的.\r\n\r\n为了方便操作，配置本地使用 `kubectl` 直接连接远程的 Kubernetes 集群.\r\n\r\n### 如何配置\r\n\r\n复制远程服务器 `kubectl` 的配置到本地\r\n```bash\r\n$ scp root@{远程服务器IP} /root/.kube/config /home/h2o/.kube/config\r\n```\r\n\r\n复制相关证书文件到本地\r\n```bash\r\n\r\n$ scp root@{远程服务器IP} /root/.minikube/ca.crt /home/h2o/.kube/uhost/\r\n$ scp root@{远程服务器IP} /root/.minikube/profiles/minikube/client.crt /home/h2o/.kube/uhost/\r\n$ scp root@{远程服务器IP} /root/.minikube/profiles/minikube/client.crt /home/h2o/.kube/uhost/\r\n```\r\n\u003e 证书文件具体路径，可以查看远程服务器 /root/.kube/config 文件\r\n\r\n把 `certificate-authority`, `client-certificate`, `client-key` 替换为本地目录路径.\r\n```bash\r\n$ cat .kube/config\r\napiVersion: v1\r\nclusters:\r\n- cluster:\r\n    certificate-authority: /home/h2o/.kube/uhost/ca.crt\r\n    ...\r\n    server: https://192.168.49.2:8443\r\n  ...\r\n- name: minikube\r\n  user:\r\n    client-certificate: /home/h2o/.kube/uhost/client.crt\r\n    client-key: /home/h2o/.kube/uhost/client.key\r\n```\r\n\r\n这里把 `server: https://192.168.49.2:8443` 替换为 `server: https://127.0.0.1:18443`.  \r\n因为 `192.168.49.2` 是远程服务器 `KVM` 虚拟机的网络地址，一个局域网地址，不对外暴露，本地无法建立连接.  \r\n\r\n替换成本地之后，利用 `ssh` 隧道，本地端口转发进行访问.\r\n```bash\r\n$ ssh -L 18443:192.168.49.2:8443 -N -f root@{远程服务器IP}\r\n```\r\n\r\n\r\n最后，配置完成.\r\n```bash\r\n$ kubectl cluster-info\r\nKubernetes control plane is running at https://127.0.0.1:18443\r\nCoreDNS is running at https://127.0.0.1:18443/api/v1/namespaces/kube-system/services/kube-dns:dns/proxy\r\n\r\nTo further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.\r\n```\r\n\r\n\r\n### 参考\r\n[远程访问minikube](https://cloud-atlas.readthedocs.io/zh_CN/latest/kubernetes/startup_prepare/remote_minikube.html)\r\n","author":{"url":"https://github.com/codcodog","@type":"Person","name":"codcodog"},"datePublished":"2022-08-17T15:16:46.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/134/Blog/issues/134"}