gitlab+jenkins+harbor+k8s安装操作流程之rancher

关闭防火墙

systemctl stop firewalld

yum安装依赖

yum update -y 更新依赖好使如果rancher安装不上请降低rancher版本v2.5.6

yum install -y yum-utils device-mapper-persistent-data lvm2

下载docker-ce.repo源

wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo -O /etc/yum.repos.d/docker-ce.repo

安装docker

yum install -y docker-ce docker-ce-cli containerd.io

如果报错如下

添加镜像如下

[docker-ce-stable]
name=Docker CE Stable - $basearch
baseurl=https://mirrors.aliyun.com/docker-ce/linux/centos/7/$basearch/stable
enabled=1
gpgcheck=1
gpgkey=https://mirrors.aliyun.com/docker-ce/linux/centos/gpg

清理缓存

sudo yum clean all
sudo yum makecache

单独安装

sudo yum install docker-compose-plugin-2.27.1-1.el7.x86_64

启动

systemctl start docker.service

systemctl enable docker.service

编辑/etc/docker/daemon.json

tee /etc/docker/daemon.json <<-'EOF'
{
"registry-mirrors": [
"http://hub-mirror.c.163.com",
"https://mirrors.tuna.tsinghua.edu.cn",
"http://mirrors.sohu.com",
"https://ustc-edu-cn.mirror.aliyuncs.com",
"https://ccr.ccs.tencentyun.com",
"https://docker.m.daocloud.io",
"https://docker.awsl9527.cn"
]
}
EOF

下面这个也行

{
"registry-mirrors": ["https://ysmprsek.mirror.aliyuncs.com","https://ustc-edu-cn.mirror.aliyuncs.com","http://hub-mirror.c.163.com","https://mirrors.tuna.tsinghua.edu.cn","http://mirrors.sohu.com","https://ccr.ccs.tencentyun.com","https://docker.m.daocloud.io","https://docker.awsl9527.cn"],
"exec-opts": ["native.cgroupdriver=systemd"],
"log-driver": "json-file",
"log-opts": {
"max-size": "500m", "max-file": "3"
}
}

重启docker

systemctl restart docker.service

安装rancher

docker run --privileged -d --restart=unless-stopped -p 80:80 -p 443:443 -v /water/runfile/docker_volume/rancher_home/cni:/var/lib/cni -v /water/runfile/docker_volume/rancher_home/kubelet:/var/lib/kubelet -v /water/runfile/docker_volume/rancher_home/rancher:/var/lib/rancher -v /water/runfile/docker_volume/rancher_home/log:/var/log/log --name rancher -e JAVA_OPTS="-Xmx1024m" rancher/rancher

查看rancher登录密码

docker logs 2668b0ee7d98 2>$1 |grep "Bootstrap Password:"

登录进去之后，如果有k8s集群，选择添加集群

点击下一步，到如下图，仔细看红框图片

导入上面命令的时候，会报错，查看node节点的kubelet配置中的USER_ACCOUNT 默认是default-auth

报错提示，如果k8s组件有controller-manager 和scheduler状态 Unhealthy，但是组件运行正确

检查kube-scheduler和kube-controller-manager组件配置是否禁用了非安全端口
vim /etc/kubernetes/manifests/kube-scheduler.yaml
vim /etc/kubernetes/manifests/kube-controller-manager.yaml