参考： https://www.cnblogs.com/liuyangQAQ/p/17299871.html
部署组件包
|
名称 |
安装包 |
|
kubeadm集群组件 |
kubelet-1.20.9 kubeadm-1.20.9 kubectl-1.20.9 |
|
Docker相关包 |
docker-ce-20.10.7 docker-ce-cli-20.10.7 containerd.io-1.4.6 |
|
网络组件 |
部署环境
|
节点名称 |
cpu |
内存 |
磁盘 |
IP |
|
master |
4 |
8G |
130GB |
172.16.220.176 |
|
node1 |
2 |
8G |
130GB |
172.16.220.175 |
|
node2 |
2 |
8G |
130GB |
172.16.220.174 |
1、安装Docker环境
移除以前Docker相关包
yum remove docker \
docker-client \
docker-client-latest \
docker-common \
docker-latest \
docker-latest-logrotate \
docker-logrotate \
docker-engine
配置yum源
yum install -y yum-utils
yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
安装Docker
yum install -y docker-ce-20.10.7 docker-ce-cli-20.10.7 containerd.io-1.4.6
启动
systemctl enable docker --now
配置加速
可以在阿里云这里查看自己的加速地址
https://cr.console.aliyun.com/cn-hangzhou/instances/mirrors
mkdir -p /etc/docker
tee /etc/docker/daemon.json <<-'EOF'
{
"registry-mirrors": ["https://aau8u01h.mirror.aliyuncs.com"],
"exec-opts": ["native.cgroupdriver=systemd"],
"log-driver": "json-file",
"log-opts": {
"max-size": "100m"
},
"storage-driver": "overlay2"
}
EOF
systemctl daemon-reload
systemctl restart docker
kubeadm创建集群准备基础环境，每个设备配置hostname，将配置的hostname加入到hosts上，并将master额外加一个cluster-endpoint别名
# 将 SELinux 设置为 permissive 模式（相当于将其禁用）
# 临时禁用
sudo setenforce 0
# 永久禁用
sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config
#关闭swap
# 临时关闭
swapoff -a
# 永久关闭
sed -ri 's/.*swap.*/#&/' /etc/fstab
#允许 iptables 检查桥接流量
cat <<EOF | tee /etc/modules-load.d/k8s.conf
br_netfilter
EOF
cat <<EOF | tee /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF
sysctl --system
systemctl disable firewalld --now
安装kubelet、kubeadm、kubectl
cat <<EOF | tee /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
exclude=kubelet kubeadm kubectl
EOF
yum install -y kubelet-1.20.9 kubeadm-1.20.9 kubectl-1.20.9 --disableexcludes=kubernetes
systemctl enable --now kubelet
下载各个机器需要的镜像
tee ./images.sh <<-'EOF'
#!/bin/bash
images=(
kube-apiserver:v1.20.9
kube-proxy:v1.20.9
kube-controller-manager:v1.20.9
kube-scheduler:v1.20.9
coredns:1.7.0
etcd:3.4.13-0
pause:3.2
)
for imageName in ${images[@]} ; do
docker pull registry.cn-hangzhou.aliyuncs.com/lfy_k8s_images/$imageName
done
EOF
chmod +x ./images.sh && ./images.sh
初始化主节点
只在master执行以下操作，进行主节点的初始化
#主节点初始化，这里的apiserver-advertise-address也要修改为192.168.75.133
kubeadm init \
--apiserver-advertise-address=172.16.220.176 \
--control-plane-endpoint=cluster-endpoint \
--image-repository registry.cn-hangzhou.aliyuncs.com/lfy_k8s_images \
--kubernetes-version v1.20.9 \
--service-cidr=10.96.0.0/16 \
--pod-network-cidr=172.16.0.0/16
#所有网络范围不重叠
-------------------------------------------------------
[addons] Applied essential addon: kube-proxy
Your Kubernetes control-plane has initialized successfully!
To start using your cluster, you need to run the following as a regular user:
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config
Alternatively, if you are the root user, you can run:
export KUBECONFIG=/etc/kubernetes/admin.conf
You should now deploy a pod network to the cluster.
Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
https://kubernetes.io/docs/concepts/cluster-administration/addons/
You can now join any number of control-plane nodes by copying certificate authorities
and service account keys on each node and then running the following as root:
kubeadm join cluster-endpoint:6443 --token nw51du.nwtnggtfctgnqbwi \
--discovery-token-ca-cert-hash sha256:50dce4d446b0c03f924f247daaf0ec07a17b17e4bc91be4ecee8823ae40d2490 \
--control-plane
Then you can join any number of worker nodes by running the following on each as root:
kubeadm join cluster-endpoint:6443 --token nw51du.nwtnggtfctgnqbwi \
--discovery-token-ca-cert-hash sha256:50dce4d446b0c03f924f247daaf0ec07a17b17e4bc91be4ecee8823ae40d2490
建议保存上面的内容，因为在后续可能会用到
-------------------------------------------------------
安装初始化完成后给的描述,要开始使用集群，您需要以常规用户身份运行以下操作
mkdir -p $HOME/.kube
cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
chown $(id -u):$(id -g) $HOME/.kube/config
或者，如果您是root用户，则可以运行：
export KUBECONFIG=/etc/kubernetes/admin.conf
安装网络组件
curl https://docs.projectcalico.org/v3.8/manifests/calico.yaml -O
kubectl apply -f calico.yaml
加入node节点，通过下面的命令获取节点接入的命令
kubeadm token create --print-join-command
验证集群
kubectl get nodes
