一、部署步驟
在所有節(jié)點(diǎn)上安裝Docker和kubeadm
部署Kubernetes Master
部署容器網(wǎng)絡(luò)插件
部署 Kubernetes Node，將節(jié)點(diǎn)加入Kubernetes集群中
部署 Dashboard Web 頁面，可視化查看Kubernetes資源
二、部署kubernetes
實(shí)驗(yàn)環(huán)境
| 服務(wù)器 | IP地址 | 主要組件 |
|---|---|---|
| master | 192.168.10.130 | docker/kubeadm/kubelet/kubectl/flannel |
| node01 | 192.168.10.133 | docker/kubeadm/kubelet/kubectl/flannel |
| node02 | 192.168.10.132 | docker/kubeadm/kubelet/kubectl/flannel |
1、所有節(jié)點(diǎn)關(guān)閉防火墻 核心防護(hù) iptables規(guī)則 swap交換
[root@master01 ~]#setenforce 0
setenforce: SELinux is disabled
[root@master01 ~]#systemctl disable --now firewalld
[root@master01 ~]#sed -i 's/enforcing/disabled/' /etc/selinux/config
[root@master01 ~]#iptables -F && iptables -t nat -F && iptables -t mangle -F && iptables -X
[root@master01 ~]#swapoff -a
[root@master01 ~]#sed -ri 's/.*swap.*/#&/' /etc/fstab
[root@master01 ~]#for i in $(ls /usr/lib/modules/$(uname -r)/kernel/net/netfilter/ipvs|grep -o "^[^.]*");do echo $i; /sbin/modinfo -F filename $i >/dev/null 2>&1 && /sbin/modprobe $i;done
注：這里只用一臺(tái)機(jī)子做展示
2、修改主機(jī)名
并寫入三臺(tái)機(jī)子的hosts中
[root@master01 ~]#cat >> /etc/hosts << EOF
192.168.10.130 master
192.168.10.132 node01
192.168.10.133 node02
EOF
3、調(diào)整內(nèi)核參數(shù)
將橋接的 IPV4 流量傳遞到 iptables 鏈
[root@master01 ~]#cat > /etc/sysctl.d/kubernetes.conf << EOF
#開啟網(wǎng)橋模式，可將網(wǎng)橋的流量傳遞給iptables鏈
net.bridge.bridge-nf-call-ip6tables=1
net.bridge.bridge-nf-call-iptables=1
#關(guān)閉ipv6協(xié)議
net.ipv6.conf.all.disable_ipv6=1
net.ipv4.ip_forward=1
EOF
[root@master01 ~]#sysctl --system
三、安裝Docker
1、所有節(jié)點(diǎn)安裝docker
[root@master01 ~]#yum install -y yum-utils device-mapper-persistent-data lvm2
[root@master01 ~]#yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
[root@master01 ~]#mkdir /etc/docker/
[root@master01 ~]#cat > /etc/docker/daemon.json <<EOF
{
"registry-mirrors": ["https://6ijb8ubo.mirror.aliyuncs.com"],
"exec-opts": ["native.cgroupdriver=systemd"],
"log-driver": "json-file",
"log-opts": {
"max-size": "100m"
}
}
EOF
[root@master01 ~]#systemctl daemon-reload
[root@master01 ~]#systemctl restart docker.service
[root@master01 ~]#systemctl enable docker.service
2、所有節(jié)點(diǎn)配置Kubernetes源
[root@master01 ~]#cat > /etc/yum.repos.d/kubernetes.repo << EOF
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF
3、所有節(jié)點(diǎn)安裝kubeadm，kubelet和kubectl
[root@master01 ~]#yum install -y kubelet-1.20.11 kubeadm-1.20.11 kubectl-1.20.11
[root@master01 ~]#systemctl enable kubelet.service
四、部署k8s集群
1、查看初始化需要的鏡像
[root@master01 ~]#kubeadm config images list
[root@master01 opt]#unzip v1.20.11.zip -d /opt/k8s/
[root@master01 opt]#cd /opt/k8s/v1.20.11/
[root@master01 v1.20.11]#for i in $(ls *.tar); do docker load -i $i; done
#復(fù)制鏡像和腳本到 node 節(jié)點(diǎn)，并在 node 節(jié)點(diǎn)上執(zhí)行腳本加載鏡像文件
[root@master01 v1.20.11]#scp -r /opt/k8s/ root@192.168.10.132:/opt/
[root@master01 v1.20.11]#scp -r /opt/k8s/ root@192.168.10.133:/opt/
[root@node01 ~]# for i in $(ls *.tar); do docker load -i $i; done
[root@node02 ~]# for i in $(ls *.tar); do docker load -i $i; done
2、初始化kubeadm
[root@master01 v1.20.11]#kubeadm init \
--apiserver-advertise-address=192.168.10.130 \
--image-repository registry.aliyuncs.com/google_containers \
--kubernetes-version=v1.20.11 \
--service-cidr=10.96.0.0/16 \
--pod-network-cidr=10.244.0.0/16 \
--token-ttl=0
3、設(shè)定kubectl
kubectl需經(jīng)由API server認(rèn)證及授權(quán)后方能執(zhí)行相應(yīng)的管理操作，kubeadm 部署的集群為其生成了一個(gè)具有管理員權(quán)限的認(rèn)證配置文件 /etc/kubernetes/admin.conf，它可由 kubectl 通過默認(rèn)的 “$HOME/.kube/config” 的路徑進(jìn)行加載。
[root@master01 v1.20.11]#mkdir -p $HOME/.kube
[root@master01 v1.20.11]#cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
[root@master01 v1.20.11]#chown $(id -u):$(id -g) $HOME/.kube/config
[root@master01 v1.20.11]#kubectl edit cm kube-proxy -n=kube-system #修改mode為ipvs
[root@master01 v1.20.11]#kubectl get cs
#如果 kubectl get cs 發(fā)現(xiàn)集群不健康，更改以下兩個(gè)文件
[root@master01 v1.20.11]#vim /etc/kubernetes/manifests/kube-scheduler.yaml
[root@master01 v1.20.11]#vim /etc/kubernetes/manifests/kube-controller-manager.yaml
把httpGet:字段下的hosts由127.0.0.1變成192.168.10.130（有兩處）
#- --port=0 # 搜索port=0，把這一行注釋掉
[root@master01 v1.20.11]#systemctl restart kubelet.service
[root@master01 v1.20.11]#kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml
4、在 node 節(jié)點(diǎn)上執(zhí)行 kubeadm join 命令加入群集
[root@node01 ~]# kubeadm join 192.168.10.130:6443 --token v9j0q9.qfqlv6blwhey7xkr \
> --discovery-token-ca-cert-hash sha256:6a2e1807937153b2243535a0a3bb5d8002c8034f611f905fee3462ace2e8d0d6
[root@node02 ~]#kubeadm join 192.168.10.130:6443 --token rc0kfs.a1sfe3gl4dvopck5 --discovery-token-ca-cert-hash sha256:864fe553c812df2af262b406b707db68b0fd450dc08b34efb73dd5a4771d37a2
5、在master節(jié)點(diǎn)查看節(jié)點(diǎn)狀態(tài)
[root@master01 v1.20.11]#systemctl restart kubelet
[root@master01 v1.20.11]#kubectl get nodes
[root@master01 v1.20.11]#kubectl get pods -n kube-system
6、測試pod創(chuàng)建資源
[root@master01 v1.20.11]#kubectl create deployment nginx --image=nginx
[root@master01 v1.20.11]#kubectl get pods -o wide
[root@master01 v1.20.11]#kubectl get pods -o wide
NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
nginx-6799fc88d8-n4jr7 1/1 Running 0 29s 10.244.2.2 node02 <none> <none>
7、暴露端口提供服務(wù)
[root@master01 v1.20.11]#kubectl expose deployment nginx --port=80 --type=NodePort
[root@master01 v1.20.11]#kubectl get svc
文章來源：http://www.zghlxwxcb.cn/news/detail-439654.html
8、測試訪問
文章來源地址http://www.zghlxwxcb.cn/news/detail-439654.html
到了這里，關(guān)于【云原生】Kubeadm部署k8s的文章就介紹完了。如果您還想了解更多內(nèi)容，請?jiān)谟疑辖撬阉鱐OY模板網(wǎng)以前的文章或繼續(xù)瀏覽下面的相關(guān)文章，希望大家以后多多支持TOY模板網(wǎng)！
