Rancher部署

#### 1、基础环境配置
```bash
mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
wget -O /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-7.repo
sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo
yum install epel-release -y
yum makecache

yum install -y yum-utils device-mapper-persistent-data lvm2
yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo 
sed -i 's+download.docker.com+mirrors.aliyun.com/docker-ce+' /etc/yum.repos.d/docker-ce.repo 
yum makecache fast
yum -y install docker-ce
systemctl start docker
systemctl enable docker
```

设置docker阿里源
```bash
tee /etc/docker/daemon.json <<-'EOF'
{
  "registry-mirrors": ["https://e8uef4us.mirror.aliyuncs.com"]
}
EOF
```

部署时间同步
```bash
yum install -y chrony

cat > /etc/chrony.conf <<-'EOF'
server ntp.aliyun.com iburst
driftfile /var/lib/chrony/drift
makestep 1.0 3
rtcsync
allow 10.0.1.0/24
local stratum 10
keyfile /etc/chrony.conf
leapsectz right/UTC
logdir /var/log/chrony
EOF

systemctl enable chronyd
systemctl start chronyd
timedatectl set-ntp 1
chronyc sourcestats
```
编辑hosts文件
```bash
cat >> /etc/hosts <<-'EOF'
10.0.1.201 rancher01
10.0.1.202 rancher02
10.0.1.203 rancher03
EOF
```
#### 2、部署RKE2
##### 2.1 配置主节点
```bash
mkdir -p /etc/rancher/rke2/
```
```shell
vim /etc/rancher/rke2/config.yaml

token: 59f33308e2d20dafc8f8cb89dca43b96
tls-san:
  - k8s.zhoumx.cn
  - rancher.zhoumx.cn
```
```shell
curl -sfL https://rancher-mirror.oss-cn-beijing.aliyuncs.com/rke2/install.sh | INSTALL_RKE2_MIRROR=cn INSTALL_RKE2_CHANNEL=v1.20 sh - 
```
```bash
systemctl enable rke2-server
systemctl start rke2-server
systemctl status rke2-server
```
##### 2.2 配置从节点
```bash
mkdir -p /etc/rancher/rke2/
```
```shell
vim /etc/rancher/rke2/config.yaml

token: 59f33308e2d20dafc8f8cb89dca43b96
server: https://rancher01.zhoumx.cn:9345
tls-san:
  - k8s.zhoumx.cn
  - rancher.zhoumx.cn
```
```shell
curl -sfL https://rancher-mirror.oss-cn-beijing.aliyuncs.com/rke2/install.sh | INSTALL_RKE2_MIRROR=cn INSTALL_RKE2_CHANNEL=v1.20 sh - 
```
查看部署进度
```shell
/var/lib/rancher/rke2/bin/kubectl \
        --kubeconfig /etc/rancher/rke2/rke2.yaml get nodes
        
/var/lib/rancher/rke2/bin/kubectl \
        --kubeconfig /etc/rancher/rke2/rke2.yaml get pods --all-namespaces
```

#### 3、RKE2安装Rancher
##### 3.1 安装HELM

1. Download your [desired version](https://github.com/helm/helm/releases)
1. Unpack it (tar -zxvf helm-v3.0.0-linux-amd64.tar.gz)
1. Find the helm binary in the unpacked directory, and move it to its desired destination (mv linux-amd64/helm /usr/local/bin/helm)

##### 3.2 安装kubectl
```bash
curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl
```
添加kubeconfig环境变量
```bash
export KUBECONFIG=/etc/rancher/rke2/rke2.yaml
```
##### 3.3 安装rancher
```bash
官方源：
helm repo add rancher-stable https://releases.rancher.com/server-charts/stable
阿里源：
helm repo add rancher-stable http://rancher-mirror.oss-cn-beijing.aliyuncs.com/server-charts/stable
kubectl create namespace cattle-system
```
```shell
# 如果你手动安装了CRD，而不是在Helm安装命令中添加了`--set installCRDs=true`选项，你应该在升级Helm chart之前升级CRD资源。
kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.5.1/cert-manager.crds.yaml

# 添加 Jetstack Helm 仓库

helm repo add jetstack https://charts.jetstack.io

# 更新本地 Helm chart 仓库缓存

helm repo update

# 安装 cert-manager Helm chart

helm install cert-manager jetstack/cert-manager \
  --namespace cert-manager \
  --create-namespace \
  --version v1.5.1

kubectl get pods --namespace cert-manager
```
安装Rancher
```bash
helm install rancher rancher-stable/rancher \
  --namespace cattle-system \
  --set hostname=rancher.zhoumx.cn \  # 域名需要修改为规划的域名
  --set replicas=3
```
查看部署进度
```bash
kubectl -n cattle-system rollout status deploy/rancher
```
### 4、卸载Rancher
```bash
./system-tools remove --kubeconfig <KUBECONFIG> --namespace <NAMESPACE>
# 默认命名空间为cattle-system
```

- 警告： 这条命令会从 etcd 中移除数据。执行这条命令前，请检查是否已经完成etcd 节点备份

### 5、忘记管理员密码
如果你忘记了管理员密码，请通过命令行进行重置。SSH 到其中一个管理节点并运行以下命令：
```
# 切换到 root 并运行：
$ kubectl  -n cattle-system exec $(kubectl --kubeconfig $KUBECONFIG -n cattle-system get pods -l app=rancher --no-headers | head -1 | awk '{ print $1 }') -c rancher -- reset-password
New password for default administrator (user-xxxxx):
<new_password>`
```