k8s搭建实操记录一(master)

#1）关闭CentOS7自带的防火墙服务
systemctl disable firewalld
systemctl stop firewalld

swapoff  -a     ##虚拟机要关闭交换内存。

#2)修改主机名

hostnamectl set-hostname master

hostnamectl set-hostname node1

hostnamectl set-hostname node2

#3）修改/etc/hosts

cat >> /etc/hosts <<EOF

172.16.110.111 master

172.16.110.112 node1

172.16.110.114 node2

EOF

#4)修改时间：

yum -y install ntpdate

ntpdate ntp1.aliyun.com

#5）master上操作安装k8s和docker：

Yum –y install wget

wget -O /etc/yum.repos.d/docker-ce.repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

cat
>>/etc/yum.repos.d/kubernetes.repo <<EOF

[kubernetes]

name=kubernetes Repo

baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/

gpgcheck=1

gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg

enabled=1

EOF

wget https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg

rpm --import rpm-package-key.gpg

yum
-y install docker-ce kubelet kubeadm kubectl

#6）更改环境变量,启动docker：

cat  >>
/usr/lib/systemd/system/docker.service <<EOF

Environment="HTTPS_PROXY=http://www.ik8s.io:10080"

Environment="NO_PROXY=127.0.0.0/8,172.0.0.0/16"

EOF

systemctl
daemon-reload

systemctl
start docker

systemctl
enable docker

systemctl
enable kubelet

#7）#设置下面的参数（设为0即要求iptables不对bridge的数据进行处理）：

cat
>> /etc/sysctl.conf <<EOF

net.ipv4.ip_forward=1

net.bridge.bridge-nf-call-ip6tables
= 1

net.bridge.bridge-nf-call-iptables
= 1

net.bridge.bridge-nf-call-arptables
= 1

EOF

##如果net.bridge.bridge-nf-call-iptables＝1，也就意味着二层的网桥在转发包时也会被#iptables的FORWARD规则所过滤，这样就会出现L3层的iptables rules去过滤L2的帧的问题所以涉及一些dnat, snat就不###生效了，举个例子，具体表现在openstack中就是metadata服#务不好使了。这个说法可参见https://bugzilla.redhat.com/show_bug.cgi?id=512206

rpm
-ql kubelet >>/opt/k8s_master_install.log

#8）初始化（注意要记录好最后的token等）：

kubeadm config
images pull      ##必须先拉镜像。

sed
-i
"s@KUBELET_EXTRA_ARGS=@KUBELET_EXTRA_ARGS="--fail-swap-on=false"@g"
/etc/sysconfig/kubelet

kubeadm init --kubernetes-version=v1.16.1
--apiserver-advertise-address=172.16.110.111 --pod-network-cidr=10.244.0.0/16
--service-cidr=10.96.0.0/12 --ignore-preflight-errors=Swap

#以下是最后的输出结果：

#Your Kubernetes control-plane has
initialized successfully!

#To start using your cluster, you need to
run the following as a regular user:

#mkdir -p $HOME/.kube

#sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config

#sudo chown $(id -u):$(id -g) $HOME/.kube/config

#You should now deploy a pod network to the
cluster.

#Run "kubectl apply -f
[podnetwork].yaml" with one of the options listed at:

https://kubernetes.io/docs/concepts/cluster-administration/addons/

#Then you can join any number of worker
nodes by running the following on each as root:

#kubeadm join 172.16.110.111:6443 --token
gmxuck.nybmu19vbe3j7vm8 \

--discovery-token-ca-cert-hash
sha256:99a8e071df1a498bcf0797812640d58edf08fb6a0c6f8f496641021b27d0dbf4

#############################################################################

##查看端口情况，以下是按最后的输出要求操作

ss -ntl

mkdir -p $HOME/.kube

sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config

kubectl
get cs

kubectl cluster-info

##添加环境变量：

echo "export
KUBECONFIG=/etc/kubernetes/admin.conf" >> ~/.bash_profile

source 
~/.bash_profile

##失败则要用kubeadm reset重置

# 9）部署网络插件flannel

kubectl apply -f
https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml

curl
-sSL
"https://github.com/coreos/flannel/blob/master/Documentation/kube-flannel.yml?raw=true"
| kubectl create –f –

##检查：

kubectl
get pods -n kube-system

kubectl get 
nodes

##10）配置文件传到node1、node2(建议先安装好node1\2,同步安装也行)

scp /usr/lib/systemd/system/docker.service
node1:/usr/lib/systemd/system/docker.service

scp
/etc/sysconfig/kubelet node1:/etc/sysconfig/

#11）nodes操作完成后检查：

kubectl
get pods -n kube-system -o wide

kubectl
get nodes

#12）其它维护命令：

kubadm token list       systemctl restart kubelet   #重启kubelet

kubectl get
componentstatuses //查看node节点组件状态

kubectl get svc -n
kube-system //查看应用

kubectl cluster-info
//查看集群信息

kubectl describe
--namespace kube-system service kubernetes-dashboard //详细服务信息

kubectl apply -f
kube-apiserver.yaml   //更新kube-apiserver容器

kubectl delete -f
/root/k8s/k8s_images/kubernetes-dashboard.yaml //删除应用

kubectl  delete
service example-server //删除服务

systemctl  start
kube-apiserver.service //启动服务。

kubectl get
deployment --all-namespaces //启动的应用

kubectl get pod
 -o wide  --all-namespaces //查看pod上跑哪些服务

kubectl get pod -o
wide -n kube-system //查看应用在哪个node上

kubectl describe pod
--namespace=kube-system //查看pod上活动信息

kubectl describe
depoly kubernetes-dashboard -n kube-system

kubectl get depoly
kubernetes-dashboard -n kube-system -o yaml

kubectl get service
kubernetes-dashboard -n kube-system //查看应用

kubectl delete -f
kubernetes-dashboard.yaml //删除应用

kubectl get events //查看事件

kubectl get
rc/kubectl get svc

kubectl get namespace
//获取namespace信息

kubectl delete node 节点名 //删除节点