背景
k8s中的网络配置和对象状态信息都会保存到etcd中，所以我们可以通过etcdctl查看保存在数据库中的信息
常用操作
-
查看etcd的各个节点的状态
[root@master3 ~]# etcdctl --endpoints="10.197.115.27:2379,10.197.115.25:2379,10.197.115.26:2379" --cacert=/etc/ssl/etcd/ssl/ca.pem --cert=/etc/ssl/etcd/ssl/member-master3.pem --key=/etc/ssl/etcd/ssl/member-master3-key.pem endpoint health
10.197.115.25:2379 is healthy: successfully committed proposal: took = 11.379015ms
10.197.115.26:2379 is healthy: successfully committed proposal: took = 19.969601ms
10.197.115.27:2379 is healthy: successfully committed proposal: took = 27.590939ms -
k8s所有的资源信息都保存在/registry中
[root@master3 ~]# etcdctl --endpoints="10.197.115.27:2379,10.197.115.25:2379,10.197.115.26:2379" --cacert=/etc/ssl/etcd/ssl/ca.pem --cert=/etc/ssl/etcd/ssl/member-master3.pem --key=/etc/ssl/etcd/ssl/member-master3-key.pem --prefix --keys-only=true get /registry
/registry/apiextensions.k8s.io/customresourcedefinitions/apiservices.management.cattle.io
/registry/apiextensions.k8s.io/customresourcedefinitions/applications.argoproj.io
/registry/apiextensions.k8s.io/customresourcedefinitions/applicationsets.argoproj.io
/registry/apiextensions.k8s.io/customresourcedefinitions/appprojects.argoproj.io
/registry/apiextensions.k8s.io/customresourcedefinitions/apps.catalog.cattle.io
/registry/apiextensions.k8s.io/customresourcedefinitions/authconfigs.management.cattle.io
/registry/apiextensions.k8s.io/customresourcedefinitions/bgpconfigurations.crd.projectcalico.org
/registry/apiextensions.k8s.io/customresourcedefinitions/bgppeers.crd.projectcalico.org
/registry/apiextensions.k8s.io/customresourcedefinitions/blockaffinities.crd.projectcalico.org
/registry/apiextensions.k8s.io/customresourcedefinitions/caliconodestatuses.crd.projectcalico.org
/registry/apiextensions.k8s.io/customresourcedefinitions/clusterinformations.crd.projectcalico.org
/registry/apiextensions.k8s.io/customresourcedefinitions/clusterregistrationtokens.management.cattle.io -
查看保存在registry中的信息，这里以/registry/clusterroles/system:kube-dns为例
[root@master3 ~]# etcdctl --endpoints="10.197.115.27:2379,10.197.115.25:2379,10.197.115.26:2379" --cacert=/etc/ssl/etcd/ssl/ca.pem --cert=/etc/ssl/etcd/ssl/member-master3.pem --key=/etc/ssl/etcd/ssl/member-master3-key.pem --prefix --keys-only=false get /registry/clusterroles/system:kube-dns
