Update Consul部署说明.md
parent
2fcba4f99c
commit
88b3444c01
|
@ -1,33 +1,43 @@
|
||||||
#### 安装
|
#### 安装
|
||||||
##### 注意:暂时不兼容consul-1.15.x的版本,已安装1.15.x版本的请先卸载后(删除数据)安装以下版本。
|
> 以下为CentOS7安装说明,其它系统安装部分请参考官网:
|
||||||
|
> https://developer.hashicorp.com/consul/downloads
|
||||||
```bash
|
```bash
|
||||||
# 使用yum部署consul
|
# 使用yum部署consul
|
||||||
yum install -y yum-utils
|
yum install -y yum-utils
|
||||||
yum-config-manager --add-repo https://rpm.releases.hashicorp.com/RHEL/hashicorp.repo
|
yum-config-manager --add-repo https://rpm.releases.hashicorp.com/RHEL/hashicorp.repo
|
||||||
yum -y install consul-1.14.5-1
|
yum -y install consul
|
||||||
# 如果yum下载失败,可以直接下载RPM包安装
|
# 如果yum下载失败,可以直接下载RPM包安装
|
||||||
wget https://rpm.releases.hashicorp.com/RHEL/7/x86_64/stable/consul-1.14.5-1.x86_64.rpm
|
wget https://rpm.releases.hashicorp.com/RHEL/7/x86_64/stable/consul-1.16.0-1.x86_64.rpm
|
||||||
rpm -ivh ./consul-1.14.5-1.x86_64.rpm
|
rpm -ivh ./consul-1.16.0-1.x86_64.rpm
|
||||||
```
|
```
|
||||||
|
|
||||||
#### 配置
|
#### 配置
|
||||||
|
> 执行以下命令获取UUID,填写到下面配置末尾部分,作为最高权限的token
|
||||||
|
```bash
|
||||||
|
uuidgen
|
||||||
|
```
|
||||||
|
> 编辑配置文件`/etc/consul.d/consul.hcl`
|
||||||
```bash
|
```bash
|
||||||
vi /etc/consul.d/consul.hcl
|
|
||||||
log_level = "ERROR" #日志级别,日志太多可以只打印error日志,不需要可以去掉这行。
|
|
||||||
advertise_addr = "192.168.x.x" #填写你的网卡IP,如果启动或运行有报错,可以尝试去掉这行。
|
|
||||||
data_dir = "/opt/consul"
|
data_dir = "/opt/consul"
|
||||||
|
log_level = "warn"
|
||||||
|
|
||||||
|
# 服务器有多个IP启动会报错请增加这行配置:填写服务器IP,如果启动或运行有报错,可以尝试去掉这行
|
||||||
|
advertise_addr = "192.168.x.x"
|
||||||
|
|
||||||
client_addr = "0.0.0.0"
|
client_addr = "0.0.0.0"
|
||||||
ui_config{
|
ui_config{
|
||||||
enabled = true
|
enabled = true
|
||||||
}
|
}
|
||||||
server = true
|
server = true
|
||||||
bootstrap = true
|
bootstrap_expect=1
|
||||||
acl = {
|
acl = {
|
||||||
enabled = true
|
enabled = true
|
||||||
default_policy = "deny"
|
default_policy = "deny"
|
||||||
enable_token_persistence = true
|
enable_token_persistence = true
|
||||||
|
tokens = {
|
||||||
|
initial_management = "生成的UUID"
|
||||||
|
agent = "生成的UUID,和上面保持一致"
|
||||||
|
}
|
||||||
}
|
}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
@ -40,24 +50,6 @@ systemctl enable consul.service
|
||||||
systemctl start consul.service
|
systemctl start consul.service
|
||||||
```
|
```
|
||||||
|
|
||||||
### 安装后首次获取登录Token(记录SecretID,即为Consul登录的Token)
|
|
||||||
```bash
|
|
||||||
consul acl bootstrap|grep SecretID
|
|
||||||
```
|
|
||||||
|
|
||||||
|
|
||||||
### 忘记global-management Token,重新生成
|
|
||||||
```
|
|
||||||
# 记录最后的reset index: xx
|
|
||||||
consul acl bootstrap
|
|
||||||
|
|
||||||
# 进入consul数据目录执行
|
|
||||||
echo 13 > acl-bootstrap-reset
|
|
||||||
|
|
||||||
# 重新创建一个global-management Token
|
|
||||||
consul acl bootstrap
|
|
||||||
```
|
|
||||||
|
|
||||||
### consul kv 备份还原
|
### consul kv 备份还原
|
||||||
```
|
```
|
||||||
consul kv export --http-addr=http://127.0.0.1:8500 -token=xxxxxxxx '' > consul_kv_bak.json
|
consul kv export --http-addr=http://127.0.0.1:8500 -token=xxxxxxxx '' > consul_kv_bak.json
|
||||||
|
|
Loading…
Reference in New Issue