k8s初始化环境

26 min read

初始化环境

# 关闭防火墙
systemctl stop firewalld
systemctl disable firewalld

# 关闭selinux
sed -i 's/enforcing/disabled/' /etc/selinux/config  # 永久
setenforce 0  # 临时

# 关闭swap
swapoff -a  # 临时
sed -ri 's/.*swap.*/#&/' /etc/fstab    # 永久

# 根据规划设置主机名
hostnamectl set-hostname <hostname>
  
 # 修改各节点的host地址
 cat >> /etc/hosts << EOF
192.168.2.20 k8smaster
192.168.2.21 k8snode1
192.168.2.22 k8snode2
EOF

# 时间同步
yum install ntpdate -y
ntpdate time.windows.com

# 配置静态IP
nmtui

# centos7的网卡重启方法
systemctl restart network

# 将桥接的IPv4流量传递到iptables的链
cat > /etc/sysctl.d/k8s.conf << EOF
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF
sysctl --system  # 生效

Docker 安装

# docker 安装
wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo -O /etc/yum.repos.d/docker-ce.repo
yum -y install docker-ce
systemctl enable docker && systemctl start docker

# docker 安装验证
docker --version



# Docker 配置源加速修改 cgroup为 systemd
cat > /etc/docker/daemon.json << EOF
{
  "registry-mirrors": ["https://b9pmyelo.mirror.aliyuncs.com"],
    "exec-opts": ["native.cgroupdriver=systemd"],
}
EOF

# 重新加载配置

systemctl daemon-reload
systemctl restart docker

添加阿里云YUM软件

# 更改源

cat > /etc/yum.repos.d/kubernetes.repo << EOF
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF


# 安装kubeadm，kubelet和kubectl
yum install -y kubelet-1.21.3 kubeadm-1.21.3 kubectl-1.21.3

# 加入开机启动
systemctl enable kubelet

重启kubelet

systemctl daemon-reload 
systemctl restart kubelet

初始化master 节点

kubeadm init \
  --apiserver-advertise-address=192.168.4.56 \
  --image-repository registry.aliyuncs.com/google_containers \
  --kubernetes-version v1.20.0 \
  --service-cidr=10.96.0.0/12 \
  --pod-network-cidr=10.244.0.0/16


mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config

# 查看节点信息
kubectl get nodes

部署网络

# 部署CNI网络插件
wget https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml

# 指定网络,修改kube-flannel.yml
containers:
      - name: kube-flannel
        image: quay.io/coreos/flannel:v0.10.0-amd64
        command:
        - /opt/bin/flanneld
        args:
        - --ip-masq
        - --kube-subnet-mgr
        - --iface=eth0

# 应用网络
kubectl apply -f kube-flannel.yml

# 应用kube-flannel-rbac.
kubectl apply -f  https://raw.githubusercontent.com/flannel-io/flannel/master/Documentation/k8s-manifests/kube-flannel-rbac.yml

镜像拉取

# 查看kubernets集群需要的镜像包
kubeadm config images list --kubernetes-version v1.21.3

# 从阿里云仓库拉取镜像包

docker pull registry.aliyuncs.com/google_containers/kube-apiserver:v1.21.3
docker pull registry.aliyuncs.com/google_containers/kube-controller-manager:v1.21.3
docker pull registry.aliyuncs.com/google_containers/kube-scheduler:v1.21.3
docker pull registry.aliyuncs.com/google_containers/kube-proxy:v1.21.3
docker pull registry.aliyuncs.com/google_containers/pause:3.4.1
docker pull registry.aliyuncs.com/google_containers/etcd:3.4.13-0
docker pull registry.aliyuncs.com/google_containers/coredns:1.8.0

# 给镜像包设置别名

docker tag registry.aliyuncs.com/google_containers/kube-apiserver:v1.21.3  k8s.gcr.io/kube-apiserver:v1.21.3
docker tag registry.aliyuncs.com/google_containers/kube-controller-manager:v1.21.3 k8s.gcr.io/kube-controller-manager:v1.21.3
docker tag registry.aliyuncs.com/google_containers/kube-scheduler:v1.21.3 k8s.gcr.io/kube-scheduler:v1.21.3
docker tag registry.aliyuncs.com/google_containers/kube-proxy:v1.21.3 k8s.gcr.io/kube-proxy:v1.21.3
docker tag registry.aliyuncs.com/google_containers/pause:3.4.1 k8s.gcr.io/pause:3.4.1
docker tag registry.aliyuncs.com/google_containers/etcd:3.4.13-0 k8s.gcr.io/etcd:3.4.13-0
docker tag registry.aliyuncs.com/google_containers/coredns:1.8.0 k8s.gcr.io/coredns/coredns:v1.8.0

服务发现和重置

# 重新获取node join信息
kubeadm token create --print-join-command

# 重置节点
kubeadm reset
rm -rf $HOME/.kube
rm -rf /etc/cni/net.d

测试

kubectl create deployment nginx --image=nginx
kubectl expose deployment nginx --port=80 --type=NodePort
kubectl get pod,svc

kubernetes集群节点多网卡，calico/flannel组件如何指定网卡

containers:
      - name: kube-flannel
        image: quay.io/coreos/flannel:v0.10.0-amd64
        command:
        - /opt/bin/flanneld
        args:
        - --ip-masq
        - --kube-subnet-mgr
        - --iface=eth0