mirror of
https://github.com/cunnie/sslip.io.git
synced 2025-10-05 15:46:50 +08:00
etcd: instructions to configure on ns-aws
This commit is contained in:
@@ -37,3 +37,36 @@ cfssl gencert \
|
||||
```
|
||||
|
||||
The key is saved in LastPass as `etcd-key.pem`
|
||||
|
||||
#### Configure ns-aws.sslip.io
|
||||
|
||||
Now let's set up etcd on ns-aws:
|
||||
|
||||
```shell
|
||||
ssh ns-aws.sslip.io
|
||||
cd /etc/etcd
|
||||
lpass login brian.cunnie@gmail.com --trust
|
||||
sudo curl -OL https://raw.githubusercontent.com/cunnie/sslip.io/main/etcd/ca.pem
|
||||
sudo curl -OL https://raw.githubusercontent.com/cunnie/sslip.io/main/etcd/etcd.pem
|
||||
sudo curl -OL https://raw.githubusercontent.com/cunnie/sslip.io/main/etcd/etcd.conf
|
||||
lpass show --note etcd-ca-key.pem | sudo tee ca-key.pem
|
||||
lpass show --note etcd-key.pem | sudo tee etcd-key.pem
|
||||
sudo chmod 600 *key*
|
||||
```
|
||||
|
||||
Let's fire up etcd:
|
||||
|
||||
```shell
|
||||
sudo systemctl daemon-reload
|
||||
sudo systemctl enable etcd
|
||||
sudo systemctl stop etcd
|
||||
sudo systemctl start etcd
|
||||
sudo journalctl -xefu etcd # look for any errors on startup
|
||||
```
|
||||
|
||||
If the messages look innocuous (ignore "serving client traffic insecurely; this
|
||||
is strongly discouraged!"), then check the cluster:
|
||||
|
||||
```shell
|
||||
etcdctl member list # "8e9e05c52164694d, started, default, http://localhost:2380, http://localhost:2379, false"
|
||||
```
|
||||
|
Reference in New Issue
Block a user