k8s安装

k8s搭建

转载 最后发布于2020-03-04 18:05:24 阅读数 21 收藏
分类专栏： k8s
原文链接：https://www.jianshu.com/p/ed10cf0f162d
展开

转载：https://www.jianshu.com/p/ed10cf0f162d

1.0 准备

准备这个CentOS-7-x86_64-Minimal-1810
然后用vmware 或者virtualbox 安装他

1.1 切换阿里的yum源

 

  1.  
    #安装wget
  2.  
    yum install -y wget
  3.  
    #切换yum源
  4.  
    wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
  5.  
    yum makecache
  6.  
    #安装网络工具
  7.  
    yum install -y net-tools

1.2关闭防火墙

systemctl stop firewalld & systemctl disable firewalld

1.3关闭swap

 

  1.  
    #临时关闭
  2.  
    swapoff -a
  3.  
    #永久关闭,重启后生效
  4.  
    vi /etc/fstab
  5.  
    #注释以下代码

/dev/mapper/centos-swap swap ...

1.4 配置docker 源

 

  1.  
    yum -y install yum-utils
  2.  
    yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
  3.  
    yum makecache

1.5 关闭selinux

 

  1.  
    #获取状态
  2.  
    getenforce
  3.  
    #暂时关闭
  4.  
    setenforce 0
  5.  
    #永久关闭 需重启
  6.  
    vi /etc/sysconfig/selinux
  7.  
    #注释以下代码

SELINUX=disabled

2.0 配置服务器

准备3台机子

 

  1.  
    #3台服务器ip信息
  2.  
     
  3.  
    172.16.253.129
  4.  
    172.16.253.130
  5.  
    172.16.253.131

2.1 设置host

在3台服务器上都执行以下代码

 

  1.  
    echo "172.16.253.129 172.16.253.129" >> /etc/hosts
  2.  
    echo "172.16.253.130 172.16.253.130" >> /etc/hosts
  3.  
    echo "172.16.253.131 srv.node1" >> /etc/hosts

3.1搭建etcd

 

  1.  
    #登录etcd服务器
  2.  
    ssh root@172.16.253.130
  3.  
    #下载etcd
  4.  
    yum -y install etcd
  5.  
    #配置config
  6.  
    vi /etc/etcd/etcd.conf
  7.  
    #设置如下

ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:2379"
ETCD_ADVERTISE_CLIENT_URLS="http://172.16.253.130:2379"

3.2 运行etcd

 

  1.  
    #设置开机启动 且启动服务
  2.  
    systemctl enable etcd && systemctl start etcd

[root@localhost ~]# netstat -nlp | grep etcd
tcp 0 0 127.0.0.1:2380 0.0.0.0:* LISTEN 7130/etcd
tcp6 0 0 :::2379

3.3配置etcd内网信息  #这儿有问题

 

  1.  
    #设置 (就像定义一个变量一样)
  2.  
    etcdctl -C http://172.16.253.130:2379 set /atomic.io/network/config '{"Network":"172.17.0.0/16"}'
  3.  
     
  4.  
    #获取
  5.  
    # etcdctl -C http://172.16.253.130:2379 get /atomic.io/network/config
  6.  
    {"Network":"172.17.0.0/16"}  

注:
172.17.0.0/16这个是节点主机Docker网卡的网段。  #这儿有问题
/atomic.io/network/config类似定义的变量名，在节点机中Flanneld配置里的FLANNEL_ETCD_PREFIX项对应。

4.1 master服务器上安装服务

 

  1.  
    #登录master服务器
  2.  
    ssh root@172.16.253.129
  3.  
    #安装服务
  4.  
    yum -y install kubernetes-master
  5.  
    #配置config
  6.  
    vi /etc/kubernetes/apiserver
  7.  
    # 配置如下

KUBE_API_ADDRESS="--insecure-bind-address=0.0.0.0"
KUBE_ETCD_SERVERS="--etcd-servers=http://172.16.253.130:2379"

 

  1.  
    #配置config
  2.  
    vi /etc/kubernetes/config
  3.  
    #配置如下

KUBE_MASTER="--master=http://172.16.253.129:8080"

4.3 启动

 

  1.  
    systemctl enable kube-apiserver kube-scheduler kube-controller-manager
  2.  
    systemctl start kube-apiserver kube-scheduler kube-controller-manager

[root@localhost ~]# netstat -nlpt | grep kube
tcp6 0 0 :::6443 :::* LISTEN 15190/kube-apiserve
tcp6 0 0 :::10251 :::* LISTEN 15191/kube-schedule
tcp6 0 0 :::10252 :::* LISTEN 15192/kube-controll
tcp6 0 0 :::8080 :::* LISTEN 15190/kube-apiserve

4.4 测试

curl http://172.16.253.129:8080/version

4.5 若创建pod认证失败

 

  1.  
    #修改配置
  2.  
    vi /etc/kubernetes/apiserver
  3.  
    #修改如下文

KUBE_ADMISSION_CONTROL="--admission-control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota"

在该行删除ServiceAccount SecurityContextDeny 这2个选项

 

  1.  
    #重启服务
  2.  
    systemctl restart kube-apiserver

删除pod,重新创建

5.0部署node

ssh root@172.16.253.131

5.1安装docker

 

  1.  
    #安装docker
  2.  
    yum -y install docker
  3.  
    #开机自启 并启动
  4.  
    systemctl enable docker && systemctl start docker

 

  1.  
    [root@localhost ~]# ip a s docker0
  2.  
    3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
  3.  
    link/ether 02:42:35:d7:43:6f brd ff:ff:ff:ff:ff:ff
  4.  
    inet 172.17.0.1/16 scope global docker0
  5.  
    valid_lft forever preferred_lft forever
  6.  
     

 

  1.  
    #修改config
  2.  
    vi /etc/docker/daemon.json
  3.  
    #设置如下

"registry-mirrors": ["https://registry.docker-cn.com"]

 

  1.  
    #重启
  2.  
    systemctl restart docker
  3.  
    #查看仓库源是否设置成功
  4.  
    docker info

5.2部署flannel

 

  1.  
    #安装
  2.  
    yum -y install flannel
  3.  
    #修改配置
  4.  
    vi /etc/sysconfig/flanneld
  5.  
    #修改如下

FLANNEL_ETCD_ENDPOINTS="http://172.16.253.130:2379"
FLANNEL_ETCD_PREFIX="/atomic.io/network"

 

  1.  
    #开机自启并启动服务
  2.  
    systemctl enable flanneld && systemctl restart flanneld`

 

  1.  
    [root@localhost ~]# netstat -nlp | grep flanneld
  2.  
    udp 0 0 172.16.253.131:8285 0.0.0.0:* 7670/flanneld

5.3 部署k8s-node

 

  1.  
    #安装服务
  2.  
    yum -y install kubernetes-node
  3.  
    #修改配置
  4.  
    vi /etc/kubernetes/config
  5.  
    #修改如下文

KUBE_MASTER="--master=http://172.16.253.129:8080"

 

  1.  
    #修改配置
  2.  
    vi /etc/kubernetes/kubelet
  3.  
    #修改如下

KUBELET_HOSTNAME="--hostname-override=srv.node1"
KUBELET_API_SERVER="--api-servers=http://172.16.253.129:8080"

 

  1.  
    #启动服务
  2.  
    systemctl enable kubelet kube-proxy && systemctl start kubelet kube-proxy

 

  1.  
    [root@localhost ~]# netstat -ntlp | grep kube
  2.  
    tcp 0 0 127.0.0.1:10248 0.0.0.0:* LISTEN 7838/kubelet
  3.  
    tcp 0 0 127.0.0.1:10249 0.0.0.0:* LISTEN 7842/kube-proxy
  4.  
    tcp 0 0 127.0.0.1:10250 0.0.0.0:* LISTEN 7838/kubelet
  5.  
    tcp 0 0 127.0.0.1:10255 0.0.0.0:* LISTEN 7838/kubelet
  6.  
    tcp6 0 0 :::4194 :::* LISTEN 7838/kubelet

5.4 处理潜在bug

创建pod 节点若出现/etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt: no such file or directory

以下解决方案

 

  1.  
    yum install *rhsm* -y
  2.  
     
  3.  
    wget http://mirror.centos.org/centos/7/os/x86_64/Packages/python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm
  4.  
     
  5.  
    rpm2cpio python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm | cpio -iv --to-stdout ./etc/rhsm/ca/redhat-uep.pem | tee /etc/rhsm/ca/redhat-uep.pem
  6.  
     
  7.  
    docker pull registry.access.redhat.com/rhel7/pod-infrastructure:latest

6.0验证

 

  1.  
    #登录到master服务器上
  2.  
    #查看节点信息
  3.  
    kubectl get nodes

[root@localhost ~]# kubectl get nodes
NAME STATUS AGE
srv.node1 Ready 1m

posted on 2020-04-28 13:38  王大拿  阅读(177)  评论(0)    收藏  举报

导航