一.主機準(zhǔn)備
1.1主機配置與操作系統(tǒng)說明
| centos7u9 |
|---|
1.2主機硬件配置說明
| 序號 | 主機名 | ip地址 | CPU | 內(nèi)存 | 硬盤 |
|---|---|---|---|---|---|
| 1 | k8s-master1 | 192.168.1.200 | 2C | 2G | 100G |
| 2 | k8s-worker1 | 192.168.1.201 | 2C | 2G | 100G |
| 3 | k8s-worker2 | 192.168.1.202 | 2C | 2G | 100G |
1.3主機配置
1.3.1主機名配置
hostnamectl set-hostname k8s-master01
1.3.2主機IP地址配置
vi /etc/sysconfig/network-scripts/ifcfg-ens33
TYPE="Ethernet"
PROXY_METHOD="none"
BROWSER_ONLY="no"
BOOTPROTO="none"
DEFROUTE="yes"
IPV4_FAILURE_FATAL="no"
IPV6INIT="yes"
IPV6_AUTOCONF="yes"
IPV6_DEFROUTE="yes"
IPV6_FAILURE_FATAL="no"
IPV6_ADDR_GEN_MODE="stable-privacy"
NAME="ens33"
UUID="f2c1c981-22ee-4e43-8209-2d6bf20ac6ca"
DEVICE="ens33"
ONBOOT="yes"
IPV6_PRIVACY="no"
IPADDR="192.168.1.200"
PREFIX="24"
GATEWAY="192.168.1.54"
DNS1=119.29.29.29
systemctl restart network
1.3.3主機名與IP地址解析(hosts)
vi /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.1.200 master1
192.168.1.201 worker1
192.168.1.202 worker2
1.3.4防火墻配置
關(guān)閉防火墻firewalld
systemctl disable firewalld
systemctl stop firewalld
systemctl status firewalld
1.3.5SELINUX配置
修改后需要重啟
sed -ri 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
sestatus
1.3.6時間同步配置
yum -y install ntpdate
crontab -e
0 */1 * * * ntpdate time1.aliyun.com
crontab -l
ntpdate time1.aliyun.com
1.3.7升級操作系統(tǒng)內(nèi)核
不要一下子升太高,也不要使用很低的內(nèi)核版本
導(dǎo)入elrepo gpg key [軟件安裝驗證密鑰]
rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org
安裝elrepo YUM源倉庫
yum -y install https://www.elrepo.org/elrepo-release-7.0-4.el7.elrepo.noarch.rpm
安裝kernel-lt版本,ml為長期穩(wěn)定版本,lt為長期維護(hù)版本
yum --enablerepo="elrepo-kernel" -y install kernel-lt.x86_64
設(shè)置更新的內(nèi)核為默認(rèn)引導(dǎo)
grub2-set-default 0
重新生成grub2引導(dǎo)文件
grub2-mkconfig -o /boot/grub2/grub.cfg
更新后,需要重啟,使升級的內(nèi)核生效
驗證內(nèi)核是否為更新的版本
uname -r
1.3.8配置內(nèi)核轉(zhuǎn)發(fā)及網(wǎng)橋過濾
添加網(wǎng)橋過濾及內(nèi)核轉(zhuǎn)發(fā)配置文件
cat > /etc/sysctl.d/k8s.conf << EOF
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward = 1
vm.swappiness = 0
EOF
加載br_netfilter模塊
modprobe br_netfilter
查看是否加載
lsmod |grep br_netfilter
vim /etc/sysconfig/modules/br_netfilter.modules 設(shè)置環(huán)境變量
#!/bin/bash
modprobe br_netfilter
chmod 755 /etc/sysconfig/modules/br_netfilter.modules
1.3.9安裝ipset及ipvsadm
安裝ipset及ipvsadm
yum -y install ipset ipvsadm
cat > /etc/sysconfig/modules/ipvs.modules << EOF
#!/bin/bash
modprobe -- ip_vs
modprobe -- ip_vs_rr
modprobe -- ip_vs_wrr
modprobe -- ip_vs_sh
modprobe -- nf_conntrack
EOF
授權(quán)、運行、檢查是否加載
chmod 755 /etc/sysconfig/modules/ipvs.modules && bash /etc/sysconfig/modules/ipvs.modules && lsmod | grep -e ip_vs -e nf_conntrack
1.3.10關(guān)閉SWAP分區(qū)
vim /etc/fstab
臨時關(guān)閉
swapoff -a
永久關(guān)閉SWAP分區(qū)
#
# /etc/fstab
# Created by anaconda on Sun Nov 12 23:08:40 2023
#
# Accessible filesystems, by reference, are maintained under '/dev/disk'
# See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info
#
/dev/mapper/centos-root / xfs defaults 0 0
UUID=90946160-91fa-4b5c-afbb-97e6e82341ea /boot xfs defaults 0 0
/dev/mapper/centos-home /home xfs defaults 0 0
#/dev/mapper/centos-swap swap swap defaults 0 0 #注釋掉
二.容器運行時Containerd準(zhǔn)備
Containerd準(zhǔn)備
2.1.1Containerd部署文件獲取
下載cri-containerd
wget https://github.com/containerd/containerd/releases/download/v1.7.8/cri-containerd-1.7.8-linux-amd64.tar.gz
解壓到根目錄
tar xf -cri-containerd-1.7.8-linux-amd64.tar.gz -C /
2.1.2Containerd配置文件生成并修改
mkdir /etc/containerd
containerd config default > /etc/containerd/config.toml
vim /etc/containerd/config.toml
sandibox_image = "registry.k8s.io/pause:3.9" #k8s 1.28默認(rèn)使用3.9
#2.1.3Containerd啟動及開機自啟動
systemctl enable --now containerd #--now是啟動選項
驗證版本
containerd --version
crictl images
runc替換
2.2.1libseccomp準(zhǔn)備
wget https://github.com/opencontainers/runc/releases/download/v1.1.10/libseccomp-2.5.4.tar.gz
tar xf libseccomp-2.5.4.tar.gz
cd libseccomp-2.5.4
yum -y install gperf
./configure
make && make install
find / -name "libseccomp.so"
2.2.2runc替換
wget https://github.com/opencontainers/runc/releases/download/v1.1.10/runc.amd64
which runc
rm -rf 'which runc'
mv runc.amd64 /usr/local/sbin/runc
chmod +x runc
runc
runc --version
三.kubeadm部署k8s集群
k8sYUM源準(zhǔn)備
官方源
# 此操作會覆蓋 /etc/yum.repos.d/kubernetes.repo 中現(xiàn)存的所有配置
cat <<EOF | sudo tee /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://pkgs.k8s.io/core:/stable:/v1.28/rpm/
enabled=1
gpgcheck=1
gpgkey=https://pkgs.k8s.io/core:/stable:/v1.28/rpm/repodata/repomd.xml.key
exclude=kubelet kubeadm kubectl cri-tools kubernetes-cni
EOF
3.2k8s集群軟件安裝
3.2.1安裝及設(shè)置自啟動
sudo yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes
sudo systemctl enable --now kubelet
3.2.1配置kubelet
vim /etc/sysconfig/kubelet
KUBELET_EXTRA_ARGS="--cgroup-driver=systemd"
3.3k8s集群初始化
master節(jié)點操作
kubeadm init --pod-network-cidr=10.244.0.0/16 -apiserver-advertise-address=192.168.1.200
3.3.1kubectl api配置
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config
kubectl get nodes
3.3.2工作節(jié)點加入集群
不一定相同，請復(fù)制實際中輸出的內(nèi)容
在工作節(jié)點執(zhí)行命令
kubeadm join 192.168.1.200:6443 --token 5jz1bl.dt6etzj1m49646vd \
--discovery-token-ca-cert-hash sha256:5e15bad72866d0b00b3f287f21d7140831ee97f665dd5d63226f50bdca0894fa
結(jié)果
kubectl get nodes
NAME STATUS ROLES AGE VERSION
k8s-master1 NotReady control-plane 110s v1.28.3
k8s-worker1 NotReady <none> 7s v1.28.3
k8s-worker2 NotReady <none> 4s v1.28.3
kubectl get pods -n kube-system
NAME READY STATUS RESTARTS AGE
coredns-5dd5756b68-9g67g 0/1 Pending 0 2m30s
coredns-5dd5756b68-nv68x 0/1 Pending 0 2m30s
etcd-k8s-master1 1/1 Running 0 2m44s
kube-apiserver-k8s-master1 1/1 Running 0 2m44s
kube-controller-manager-k8s-master1 1/1 Running 0 2m44s
kube-proxy-77m25 1/1 Running 0 2m30s
kube-proxy-hlk5h 1/1 Running 0 65s
kube-proxy-zjg9r 1/1 Running 0 62s
kube-scheduler-k8s-master1 1/1 Running 0 2m44s
四.calico網(wǎng)絡(luò)插件
4.1安裝calico operator
kubectl create -f https://raw.githubusercontent.com/projectcalico/calico/v3.26.3/manifests/tigera-operator.yaml
kubectl get ns #查看命名空間
#NAME STATUS AGE
#default Active 10m
#kube-node-lease Active 10m
#kube-public Active 10m
#kube-system Active 10m
#?。igera-operator Active 26s
一定要等待tigera-operator這個pod狀態(tài)為運行（作用是對calico進(jìn)行部署）
kubectl get pods -n tigera-operator
NAME READY STATUS RESTARTS AGE
tigera-operator-597bf4ddf6-nstgk 1/1 Running 0 45s
4.2下載并編輯calico配置文件
wget https://raw.githubusercontent.com/projectcalico/calico/v3.26.3/manifests/custom-resources.yaml
vim custom-resources.yaml
#cidr: 10.244.0.0/16
kubectl create -f custom-resources.yaml
kubectl get ns
kubectl get pods -n calico-system
watch kubectl get pods -n calico-system#監(jiān)視pods直至全部ready
檢查coredns是否已經(jīng)獲得ip地址
kubectl get pods -n kube-system
NAME READY STATUS RESTARTS AGE
coredns-5dd5756b68-9g67g 1/1 Running 0 23m
coredns-5dd5756b68-nv68x 1/1 Running 0 23m
etcd-k8s-master1 1/1 Running 0 23m
kube-apiserver-k8s-master1 1/1 Running 0 23m
kube-controller-manager-k8s-master1 1/1 Running 0 23m
kube-proxy-77m25 1/1 Running 0 23m
kube-proxy-hlk5h 1/1 Running 0 21m
kube-proxy-zjg9r 1/1 Running 0 21m
kube-scheduler-k8s-master1 1/1 Running 0 23m
kubectl get pods -n kube-system -o wide
NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
coredns-5dd5756b68-9g67g 1/1 Running 0 24m 10.244.159.131 k8s-master1 <none> <none>
coredns-5dd5756b68-nv68x 1/1 Running 0 24m 10.244.159.129 k8s-master1 <none> <none>
etcd-k8s-master1 1/1 Running 0 24m 192.168.1.200 k8s-master1 <none> <none>
kube-apiserver-k8s-master1 1/1 Running 0 24m 192.168.1.200 k8s-master1 <none> <none>
kube-controller-manager-k8s-master1 1/1 Running 0 24m 192.168.1.200 k8s-master1 <none> <none>
kube-proxy-77m25 1/1 Running 0 24m 192.168.1.200 k8s-master1 <none> <none>
kube-proxy-hlk5h 1/1 Running 0 22m 192.168.1.201 k8s-worker1 <none> <none>
kube-proxy-zjg9r 1/1 Running 0 22m 192.168.1.202 k8s-worker2 <none> <none>
kube-scheduler-k8s-master1 1/1 Running 0 24m 192.168.1.200 k8s-master1 <none> <none>
檢查域名解析服務(wù)
kubectl get svc -n kube-system
yum install bind-utils#安裝dig命令
dig -t a www.baidu.com @10.96.0.10
;; ANSWER SECTION:
www.baidu.com. 5 IN A 198.18.0.169
解析成功
4.3檢查集群是否可用
添加nginx-pod.yml文件創(chuàng)建pod
apiVersion: v1
kind: Pod
metadata:
name: nginx
labels:
app: nginx
spec:
containers:
- name: nginx
image: nginx:alpine
ports:
- containerPort: 80
使用命令 kubectl apply 創(chuàng)建 pod：
kubectl apply -f nginx-pod.yml
kubectl get pods nginx -o wide
watch kubectl get pods nginx -o wide
NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
nginx 1/1 Running 0 3m3s 10.244.194.67 k8s-worker1 <none> <none>
ready后使用curl工具測試
curl 10.244.194.67
<!DOCTYPE html>
<html>
<head>
<title>Welcome to nginx!</title>
<style>
html { color-scheme: light dark; }
body { width: 35em; margin: 0 auto;
font-family: Tahoma, Verdana, Arial, sans-serif; }
</style>
</head>
<body>
<h1>Welcome to nginx!</h1>
<p>If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.</p>
<p>For online documentation and support please refer to
<a href="http://nginx.org/">nginx.org</a>.<br/>
Commercial support is available at
<a href="http://nginx.com/">nginx.com</a>.</p>
<p><em>Thank you for using nginx.</em></p>
</body>
</html>
測試外部訪問
kubectl get svc
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 21d
nginx-service NodePort 10.104.74.104 <none> 80:30080/TCP 21d
使用宿主機打開<控制面板ip>:30080即192.168.1.200:30080
4.4查看集群健康狀態(tài)
kubectl cluster-info
Kubernetes control plane is running at https://192.168.1.200:6443
CoreDNS is running at https://192.168.1.200:6443/api/v1/namespaces/kube-system/services/kube-dns:dns/proxy
文章來源：http://www.zghlxwxcb.cn/news/detail-791403.html
mkdir /.kube && cd /.kube
scp master1:/root/.kube/config .
有了這個文件就可以在目標(biāo)節(jié)點使用kubectl連接到apiserver,即可以使用kubectl命令管理集群文章來源地址http://www.zghlxwxcb.cn/news/detail-791403.html
到了這里，關(guān)于基于containerd容器運行時,kubeadmin部署k8s 1.28集群的文章就介紹完了。如果您還想了解更多內(nèi)容，請在右上角搜索TOY模板網(wǎng)以前的文章或繼續(xù)瀏覽下面的相關(guān)文章，希望大家以后多多支持TOY模板網(wǎng)！
