diff --git a/docs/Consul部署说明.md b/docs/Consul部署说明.md index 205a220..8415fa0 100644 --- a/docs/Consul部署说明.md +++ b/docs/Consul部署说明.md @@ -1,33 +1,43 @@ #### 安装 -##### 注意:暂时不兼容consul-1.15.x的版本,已安装1.15.x版本的请先卸载后(删除数据)安装以下版本。 - +> 以下为CentOS7安装说明,其它系统安装部分请参考官网: +> https://developer.hashicorp.com/consul/downloads ```bash # 使用yum部署consul yum install -y yum-utils yum-config-manager --add-repo https://rpm.releases.hashicorp.com/RHEL/hashicorp.repo -yum -y install consul-1.14.5-1 +yum -y install consul # 如果yum下载失败,可以直接下载RPM包安装 -wget https://rpm.releases.hashicorp.com/RHEL/7/x86_64/stable/consul-1.14.5-1.x86_64.rpm -rpm -ivh ./consul-1.14.5-1.x86_64.rpm +wget https://rpm.releases.hashicorp.com/RHEL/7/x86_64/stable/consul-1.16.0-1.x86_64.rpm +rpm -ivh ./consul-1.16.0-1.x86_64.rpm ``` #### 配置 - +> 执行以下命令获取UUID,填写到下面配置末尾部分,作为最高权限的token +```bash +uuidgen +``` +> 编辑配置文件`/etc/consul.d/consul.hcl` ```bash -vi /etc/consul.d/consul.hcl -log_level = "ERROR" #日志级别,日志太多可以只打印error日志,不需要可以去掉这行。 -advertise_addr = "192.168.x.x" #填写你的网卡IP,如果启动或运行有报错,可以尝试去掉这行。 data_dir = "/opt/consul" +log_level = "warn" + +# 服务器有多个IP启动会报错请增加这行配置:填写服务器IP,如果启动或运行有报错,可以尝试去掉这行 +advertise_addr = "192.168.x.x" + client_addr = "0.0.0.0" ui_config{ enabled = true } server = true -bootstrap = true +bootstrap_expect=1 acl = { enabled = true default_policy = "deny" enable_token_persistence = true + tokens = { + initial_management = "生成的UUID" + agent = "生成的UUID,和上面保持一致" + } } ``` @@ -40,24 +50,6 @@ systemctl enable consul.service systemctl start consul.service ``` -### 安装后首次获取登录Token(记录SecretID,即为Consul登录的Token) -```bash -consul acl bootstrap|grep SecretID -``` - - -### 忘记global-management Token,重新生成 -``` -# 记录最后的reset index: xx -consul acl bootstrap - -# 进入consul数据目录执行 -echo 13 > acl-bootstrap-reset - -# 重新创建一个global-management Token -consul acl bootstrap -``` - ### consul kv 备份还原 ``` consul kv export --http-addr=http://127.0.0.1:8500 -token=xxxxxxxx '' > consul_kv_bak.json