单节点运用kubesphere3.0实现容器管理

单节点运用kubesphere3.0实现容器管理

kubesphere3.0优点

颜值高
有完善的权限发布控制功能
安装简单
功能较为完善
支持可视化流水线编辑

基础环境准备

# 关闭防火墙
systemctl stop firewalld.service
systemctl disable firewalld
firewall-cmd --reload

# 关闭selinux
setenforce 0  # 临时
sed -i 's/enforcing/disabled/' /etc/selinux/config  # 永久

#设置hostname
hostnamectl set-hostname k8s-master01

/etc/hosts添加一行内容：
47.115.183.185  k8s-master01



# 关闭swap
swapoff -a  # 临时
sed -ri 's/.*swap.*/#&/' /etc/fstab    # 永久


# 将桥接的IPv4流量传递到iptables的链
cat > /etc/sysctl.d/k8s.conf << EOF
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF
sysctl --system  # 生效

-----------------------------------同步机器时间-------------------------------

#安装chrony
yum -y install chrony

#修改同步服务器地址为阿里云
sed -i.bak '3,6d' /etc/chrony.conf && sed -i '3cserver ntp1.aliyun.com iburst' \
/etc/chrony.conf

# 启动chronyd及加入开机自启
systemctl start chronyd && systemctl enable chronyd

#查看同步结果
chronyc sources

harbor私有仓库的安装

https://blog.csdn.net/ZHONGZEWEI/article/details/106869179?ops_request_misc=%257B%2522request%255Fid%2522%253A%2522160076746619721941900332%2522%252C%2522scm%2522%253A%252220140713.130102334.pc%255Fblog.%2522%257D&request_id=160076746619721941900332&biz_id=0&utm_medium=distribute.pc_search_result.none-task-blog-2~blog~first_rank_v1~rank_blog_v1-1-106869179.pc_v1_rank_blog_v1&utm_term=harbor&spm=1018.2118.3001.4187

docker准备

# 下载docker压缩包
https://download.docker.com/linux/static/stable/x86_64/docker-19.03.11.tgz

# 解压二进制包、移动加压文件
tar zxvf docker-19.03.11.tgz
mv docker/* /usr/bin


# systemd管理docker
cat > /usr/lib/systemd/system/docker.service << EOF
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service
Wants=network-online.target

[Service]
Type=notify
ExecStart=/usr/bin/dockerd
ExecReload=/bin/kill -s HUP $MAINPID
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity
TimeoutStartSec=0
Delegate=yes
KillMode=process
Restart=on-failure
StartLimitBurst=3
StartLimitInterval=60s

[Install]
WantedBy=multi-user.target
EOF



#创建配置文件
mkdir /etc/docker

cat > /etc/docker/daemon.json << EOF
{
  "registry-mirrors": ["https://b9pmyelo.mirror.aliyuncs.com"]
}
EOF

#启动并设置开机启动
systemctl daemon-reload
systemctl start docker
systemctl enable docker

安装kubesphere3.0最小化安装

#提前安装一些工具包
yum install -y socat
yum install -y nfs-utils
yum install -y conntrack-tools

#下载KubeKey
wget -c https://kubesphere.io/download/kubekey-v1.0.0-linux-amd64.tar.gz -O - | tar -xz
# 授权KubeKey
chmod +x kk
# 安装kubesphere3.0，这一步过程比较慢，大部分时间在拉取几个G的镜像
./kk create cluster --with-kubernetes v1.17.9 --with-kubesphere v3.0.0

安装KubeSphere App Store插件

注意：一定要完成kubesphere3.0最小化安装安装之后，才能进行各种插件的安装。

安装KubeSphere App Store插件个人感觉没有什么用，可以不安装。不安装的可以跳过这一节

下载cluster-configuration.yaml文件

https://raw.githubusercontent.com/kubesphere/ks-installer/v3.0.0/deploy/cluster-configuration.yaml

修改cluster-configuration.yaml配置

openpitrix:
    enabled: true # Change "false" to "true"

启动插件相关的pod

kubectl apply -f cluster-configuration.yaml

等待一段时间，看网速了

安装KubeSphere DevOps System插件

类似KubeSphere App Store插件的安装，我们主要修改上一步的cluster-configuration.yaml文件，然后重新kubectl apply -f cluster-configuration.yaml即可。

修改cluster-configuration.yaml配置

devops:
    enabled: true # Change "false" to "true"

启动插件相关的pod

kubectl apply -f cluster-configuration.yaml

等待一段时间，看网速了