etcd: instructions to configure on ns-aws

This commit is contained in:
Brian Cunnie
2021-12-31 16:20:29 -08:00
parent af6c0f8326
commit c4d415887e

View File

@@ -37,3 +37,36 @@ cfssl gencert \
```
The key is saved in LastPass as `etcd-key.pem`
#### Configure ns-aws.sslip.io
Now let's set up etcd on ns-aws:
```shell
ssh ns-aws.sslip.io
cd /etc/etcd
lpass login brian.cunnie@gmail.com --trust
sudo curl -OL https://raw.githubusercontent.com/cunnie/sslip.io/main/etcd/ca.pem
sudo curl -OL https://raw.githubusercontent.com/cunnie/sslip.io/main/etcd/etcd.pem
sudo curl -OL https://raw.githubusercontent.com/cunnie/sslip.io/main/etcd/etcd.conf
lpass show --note etcd-ca-key.pem | sudo tee ca-key.pem
lpass show --note etcd-key.pem | sudo tee etcd-key.pem
sudo chmod 600 *key*
```
Let's fire up etcd:
```shell
sudo systemctl daemon-reload
sudo systemctl enable etcd
sudo systemctl stop etcd
sudo systemctl start etcd
sudo journalctl -xefu etcd # look for any errors on startup
```
If the messages look innocuous (ignore "serving client traffic insecurely; this
is strongly discouraged!"), then check the cluster:
```shell
etcdctl member list # "8e9e05c52164694d, started, default, http://localhost:2380, http://localhost:2379, false"
```