kubernetes安装（一）

参考： https://www.cnblogs.com/liuyangQAQ/p/17299871.html

部署组件包

名称	安装包
kubeadm集群组件	kubelet-1.20.9 kubeadm-1.20.9 kubectl-1.20.9
Docker相关包	docker-ce-20.10.7 docker-ce-cli-20.10.7 containerd.io-1.4.6
网络组件	https://docs.projectcalico.org/v3.8/manifests/calico.yaml

部署环境

节点名称	cpu	内存	磁盘	IP
master	4	8G	130GB	172.16.220.176
node1	2	8G	130GB	172.16.220.175
node2	2	8G	130GB	172.16.220.174

1、安装Docker环境

移除以前Docker相关包

yum remove docker \

docker-client \

docker-client-latest \

docker-common \

docker-latest \

docker-latest-logrotate \

docker-logrotate \

docker-engine

配置yum源

yum install -y yum-utils

yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

安装Docker

yum install -y docker-ce-20.10.7 docker-ce-cli-20.10.7  containerd.io-1.4.6

启动

systemctl enable docker --now

配置加速

可以在阿里云这里查看自己的加速地址

https://cr.console.aliyun.com/cn-hangzhou/instances/mirrors

mkdir -p /etc/docker

tee /etc/docker/daemon.json <<-'EOF'

{

"registry-mirrors": ["https://aau8u01h.mirror.aliyuncs.com"],

"exec-opts": ["native.cgroupdriver=systemd"],

"log-driver": "json-file",

"log-opts": {

"max-size": "100m"

},

"storage-driver": "overlay2"

}

EOF

systemctl daemon-reload

systemctl restart docker

kubeadm创建集群准备基础环境，每个设备配置hostname，将配置的hostname加入到hosts上，并将master额外加一个cluster-endpoint别名

# 将 SELinux 设置为 permissive 模式（相当于将其禁用）

# 临时禁用

sudo setenforce 0

# 永久禁用

sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config

#关闭swap

# 临时关闭

swapoff -a

# 永久关闭

sed -ri 's/.*swap.*/#&/' /etc/fstab

#允许 iptables 检查桥接流量

cat <<EOF | tee /etc/modules-load.d/k8s.conf

br_netfilter

EOF

cat <<EOF | tee /etc/sysctl.d/k8s.conf

net.bridge.bridge-nf-call-ip6tables = 1

net.bridge.bridge-nf-call-iptables = 1

EOF

sysctl --system

systemctl disable firewalld --now

安装kubelet、kubeadm、kubectl

cat <<EOF | tee /etc/yum.repos.d/kubernetes.repo

[kubernetes]

name=Kubernetes

baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64

enabled=1

gpgcheck=0

repo_gpgcheck=0

gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg

http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg

exclude=kubelet kubeadm kubectl

EOF

yum install -y kubelet-1.20.9 kubeadm-1.20.9 kubectl-1.20.9 --disableexcludes=kubernetes

systemctl enable --now kubelet

下载各个机器需要的镜像

tee ./images.sh <<-'EOF'

#!/bin/bash

images=(

kube-apiserver:v1.20.9

kube-proxy:v1.20.9

kube-controller-manager:v1.20.9

kube-scheduler:v1.20.9

coredns:1.7.0

etcd:3.4.13-0

pause:3.2

)

for imageName in ${images[@]} ; do

docker pull registry.cn-hangzhou.aliyuncs.com/lfy_k8s_images/$imageName

done

EOF

chmod +x ./images.sh && ./images.sh

初始化主节点

只在master执行以下操作，进行主节点的初始化

#主节点初始化，这里的apiserver-advertise-address也要修改为192.168.75.133

kubeadm init \

--apiserver-advertise-address=172.16.220.176 \

--control-plane-endpoint=cluster-endpoint \

--image-repository registry.cn-hangzhou.aliyuncs.com/lfy_k8s_images \

--kubernetes-version v1.20.9 \

--service-cidr=10.96.0.0/16 \

--pod-network-cidr=172.16.0.0/16

#所有网络范围不重叠

-------------------------------------------------------

[addons] Applied essential addon: kube-proxy

Your Kubernetes control-plane has initialized successfully!

To start using your cluster, you need to run the following as a regular user:

mkdir -p $HOME/.kube

sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config

sudo chown $(id -u):$(id -g) $HOME/.kube/config

Alternatively, if you are the root user, you can run:

export KUBECONFIG=/etc/kubernetes/admin.conf

You should now deploy a pod network to the cluster.

Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:

https://kubernetes.io/docs/concepts/cluster-administration/addons/

You can now join any number of control-plane nodes by copying certificate authorities

and service account keys on each node and then running the following as root:

kubeadm join cluster-endpoint:6443 --token nw51du.nwtnggtfctgnqbwi \

--discovery-token-ca-cert-hash sha256:50dce4d446b0c03f924f247daaf0ec07a17b17e4bc91be4ecee8823ae40d2490 \

--control-plane

Then you can join any number of worker nodes by running the following on each as root:

kubeadm join cluster-endpoint:6443 --token nw51du.nwtnggtfctgnqbwi \

--discovery-token-ca-cert-hash sha256:50dce4d446b0c03f924f247daaf0ec07a17b17e4bc91be4ecee8823ae40d2490

建议保存上面的内容，因为在后续可能会用到

-------------------------------------------------------

安装初始化完成后给的描述,要开始使用集群，您需要以常规用户身份运行以下操作

mkdir -p $HOME/.kube

cp -i /etc/kubernetes/admin.conf $HOME/.kube/config

chown $(id -u):$(id -g) $HOME/.kube/config

或者，如果您是root用户，则可以运行：

export KUBECONFIG=/etc/kubernetes/admin.conf

安装网络组件

curl https://docs.projectcalico.org/v3.8/manifests/calico.yaml -O

kubectl apply -f calico.yaml

加入node节点，通过下面的命令获取节点接入的命令

kubeadm token create --print-join-command

验证集群

　　kubectl get nodes