? ? ? ?
目錄
單機K8S
docker
containerd
image依賴
kubeadm初始化
驗證
crictl工具
K8S核心組件
上文安裝單機docker是很簡單docker，但是生產(chǎn)環(huán)境需要多個主機，主機上啟動多個docker容器，相同容器會綁定形成1個服務(wù)service，微服務(wù)場景中多個service會互相調(diào)用，那么就需要保證多個service服務(wù)的編排、高可用、負(fù)載均衡，docker提供了自己的解決方案：docker-compose + docker-swarm，也可以不用docker提供的解決方案，自己通過Nginx+服務(wù)網(wǎng)關(guān)+HaProxy實現(xiàn)。
? ? ? ? 但是基本上所有線上生產(chǎn)環(huán)境都是用K8S來服務(wù)治理，這也被認(rèn)為是標(biāo)準(zhǔn)答案，K8S從V1.24版本不支持docker而是contained做為默認(rèn)容器管理，contained實際上是輕量化的docker，本次搭建k8s+containerd的集群，因此k8s多節(jié)點集群相對繁瑣且有資源要求，本次單機搭建。
單機K8S
????????2022年k8s的1.24版本正式剔除dockershim，不再支持讓docker去調(diào)用containerd，而是直接操作containerd，先安裝containerd來替換CRI接口調(diào)用，本次使用最新版本v1.28.0；
?
docker
安裝docker用于后續(xù)依賴?image拉??；
containerd
# 下載 containerd
wget https://github.com/containerd/containerd/releases/download/v1.6.19/containerd-1.6.19-linux-amd64.tar.gz
# 下載contained服務(wù)
wget https://raw.githubusercontent.com/containerd/containerd/main/containerd.service -o /usr/lib/systemd/system/containerd.service
# 啟動服務(wù)
systemctl daemon-reload && systemctl enable containerd
# 配置文件
mkdir /etc/containerd
containerd config default > /etc/containerd/config.toml
# 需要鏡像地址為國內(nèi)的
vi /etc/containerd/config.toml
將 sandbox_image = "registry.k8s.io/pause:3.6"
修改為 sandbox_image = "registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.6"
# 配置鏡像加速器，在 [plugins."io.containerd.grpc.v1.cri".registry.mirrors] 后面增加兩行配置，注意縮進
[plugins."io.containerd.grpc.v1.cri".registry.mirrors]
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
endpoint = ["http://mirrors.ustc.edu.cn"]
[plugins."io.containerd.grpc.v1.cri".registry.mirrors."*"]
endpoint = ["http://hub-mirror.c.163.com"]
# 啟動服務(wù)
systemctl restart containerd
image依賴
kubeadm：用來初始化集群的指令，kubelet在集群中的每個節(jié)點上用來啟動 Pod 和容器等，kubectl：用來與集群通信的命令行工具，步驟中的docker image安裝可以不用；
# 關(guān)閉selinux
setenforce 0
# 增加yum源
vi /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
# yum 安裝
yum makecache all
yum install -y kubelet kubeadm kubectl
# 啟動kubelet
systemctl enable kubelet && systemctl start kubelet
# docker依賴安裝(可選)
vi install.sh
#!/bin/bash
images=(
kube-apiserver:v1.28.0
kube-controller-manager:v1.13.2
kube-scheduler:v1.28.0
kube-proxy:v1.28.0
pause:3.6
etcd:3.2.24
coredns:1.2.6
)
for imageName in ${images[@]} ; do
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/${imageName}
docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/${imageName} k8s.gcr.io/${imageName}
docker rmi registry.cn-hangzhou.aliyuncs.com/google_containers/${imageName}
done
# 運行install.sh(可選)
sh -x install.sh
# 查看鏡像(可選)
docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
k8s.gcr.io/kube-apiserver v1.28.0 bb5e0dde9054 2 days ago 126 MB
k8s.gcr.io/kube-controller-manager v1.28.0 4be79c38a4ba 2 days ago 122 MB
k8s.gcr.io/kube-scheduler v1.28.0 f6f496300a2a 2 days ago 60.1 MB
k8s.gcr.io/kube-proxy v1.28.0 ea1030da44aa 2 days ago 73.1 MB
docker.io/becivells/soar-web latest 93daf9d511a1 11 months ago 134 MB
k8s.gcr.io/coredns 1.2.6 f59dcacceff4 4 years ago 40 MB
k8s.gcr.io/etcd 3.2.24 3cab8e1b9802 4 years ago 220 MB
k8s.gcr.io/pause 3.1 da86e6ba6ca1 5 years ago 742 kB
# 網(wǎng)絡(luò)
vi /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1kubeadm初始化
# 使用root啟動設(shè)置環(huán)境變量
export KUBECONFIG=/etc/kubernetes/admin.conf
# 初始化
kubeadm init --apiserver-advertise-address=10.121.198.235 --image-repository registry.aliyuncs.com/google_containers --kubernetes-version=v1.28.0 --service-cidr=172.96.0.0/12 --pod-network-cidr=10.244.0.0/16驗證
# 查看集群信息
kubectl cluster-info
Kubernetes control plane is running at https://10.121.198.235:6443
CoreDNS is running at https://10.121.198.235:6443/api/v1/namespaces/kube-system/services/kube-dns:dns/proxy
# 查看pod信息
get pod -n kube-system
NAME READY STATUS RESTARTS AGE
coredns-66f779496c-d4rk9 1/1 Running 0 71m
coredns-66f779496c-fvmzn 1/1 Running 0 71m
etcd-localhost.localdomain 1/1 Running 0 71m
kube-apiserver-localhost.localdomain 1/1 Running 0 71m
kube-controller-manager-localhost.localdomain 1/1 Running 0 71m
kube-proxy-tr75q 1/1 Running 0 71m
kube-scheduler-localhost.localdomain 1/1 Running 0 71m
crictl工具
# 安裝 containerd 的 cli 管理工具（此步驟是非必選項）
# 官方文檔https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md
# 下載解壓
wget https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz
tar zxvf crictl-v1.26.0-linux-amd64.tar.gz -C /usr/local/bin
# 創(chuàng)建配置文件，運行 crictl config 命令可獲取參數(shù)說明
cat <<EOF | sudo tee /etc/crictl.yaml
runtime-endpoint: unix:///run/containerd/containerd.sock
image-endpoint: unix:///run/containerd/containerd.sock
timeout: 2
debug: false
pull-image-on-create: false
disable-pull-on-run: false
EOF
# 測試
crictl pods
POD ID CREATED STATE NAME NAMESPACE ATTEMPT RUNTIME
c9f1f5a8e5f3b About an hour ago Ready coredns-66f779496c-fvmzn kube-system 0 (default)
92acc7d225059 About an hour ago Ready coredns-66f779496c-d4rk9 kube-system 0 (default)
2fdff0229921a About an hour ago Ready kube-proxy-tr75q kube-system 0 (default)
8cad99418e8dd About an hour ago Ready kube-apiserver-localhost.localdomain kube-system 0 (default)
2f366285dbe4e About an hour ago Ready kube-controller-manager-localhost.localdomain kube-system 0 (default)
ab2fb7aa95e40 About an hour ago Ready kube-scheduler-localhost.localdomain kube-system 0 (default)
c25f77697cc84 About an hour ago Ready etcd-localhost.localdomain kube-system 0 (default)
K8S核心組件
待續(xù)
參考：搭建containerd+k8s集群-v1.26文章來源：http://www.zghlxwxcb.cn/news/detail-667331.html
參考：安裝docker依賴文章來源地址http://www.zghlxwxcb.cn/news/detail-667331.html
到了這里，關(guān)于容器和云原生（三）：kubernetes搭建與使用的文章就介紹完了。如果您還想了解更多內(nèi)容，請在右上角搜索TOY模板網(wǎng)以前的文章或繼續(xù)瀏覽下面的相關(guān)文章，希望大家以后多多支持TOY模板網(wǎng)！
