k8s 安装

1. 环境准备

sudo yum install -y wget
mv /etc/yum.repos.d /etc/yum.repos.d.backup
mkdir -p /etc/yum.repos.d
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
# mv /etc/yum.repos.d/epel.repo /etc/yum.repos.d/epel.repo.backup 
# mv /etc/yum.repos.d/epel-testing.repo /etc/yum.repos.d/epel-testing.repo.backup
wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo

yum clean all
yum makecache
yum repolist
yum update

内核升级

rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-3.el7.elrepo.noarch.rpm 
yum --enablerepo=elrepo-kernel install -y kernel-lt
grep initrd16 /boot/grub2/grub.cfg
grub2-set-default 0
reboot

关闭防火墙和selinux

systemctl stop firewalld
systemctl disable firewalld
sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/sysconfig/selinux
set enforce0

网桥过滤

vi /etc/sysctl.conf
net.bridge.bridge-nf-call-ip6tables = 1 
net.bridge.bridge-nf-call-iptables = 1 
net.bridge.bridge-nf-call-arptables = 1 
net.ipv4.ip_forward=1 
net.ipv4.ip_forward_use_pmtu = 0
# 生效命令
sysctl --system
# 查看效果
sysctl -a|grep "ip_forward"

开启IPVS

yum -y install ipset ipvsadm

编辑 /etc/sysconfig/modules/ipvs.modules

#!/bin/bash
modprobe --  ip_vs
modprobe -- ip_vs_rr
modprobe -- ip_vs_wrr
modprobe -- ip_vs_sh
modprobe -- nf_conntrack

赋予权限并执行

chmod 755 /etc/sysconfig/modules/ipvs.modules 
bash /etc/sysconfig/modules/ipvs.modules 
lsmod | grep -e ip_vs -e nf_conntrack
reboot

同步时间

# 安装软件
yum -y install ntpdate
# 向阿里云服务器同步时间
ntpdate time1.aliyun.com
# 删除本地时间并设置时区为上海
rm -rf /etc/localtime
ln -s /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
# 查看时间
date -R || date

自动补全

yum -y install bash-completion bash-completion-extras
source /etc/profile.d/bash_completion.sh

永久关闭: swap
将文件中的/dev/mapper/centos-swap这行代码注释掉

# vi /etc/fstab 

#/dev/mapper/centos-swap swap swap defaults 0 0

2. 安装docker

yum install -y yum-utils device-mapper-persistent-data lvm2
yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
yum makecache fast
yum list docker-ce --showduplicates | sort -r


# yum -y install docker-ce
yum -y install docker-ce-18.09.8
systemctl start docker
systemctl status docker
systemctl enable docker

镜像加速

mkdir -p /etc/docker
tee /etc/docker/daemon.json <<-'EOF' {
	"exec-opts": ["native.cgroupdriver=systemd"],
	"registry-mirrors": ["自己的阿里云镜像加速地址"] 
}
EOF
sudo systemctl daemon-reload 
sudo systemctl restart docker
sudo usermod -aG docker ${USER}
#修改　cgroup driver 查看修改后状态:
docker info | grep Cgroup 

3. k8s 安装

修改 /etc/yum.repos.d/kubernates.repo 文件。

[kubernetes]
name=Kubernetes 
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64 
enabled=1
gpgcheck=1
repo_gpgcheck=1 
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
	https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg

yum clean all
yum -y makecache
yum list | grep kubeadm
yum list kubelet --showduplicates | sort -r
yum  install  -y  kubelet-1.17.5  kubeadm-1.17.5  kubectl-1.17.5

修改 /etc/sysconfig/kubelet 文件

KUBELET_EXTRA_ARGS="--cgroup-driver=systemd"
systemctl enable  kubelet

4. 初始化镜像

# 查看安装集群需要的镜像
kubeadm config images  list
mkdir -p /data 
cd /data

添加 images.sh 文件

# 下面的镜像应该去除"k8s.gcr.io"的前缀，版本换成kubeadm config images list命令获取 到的版本
images=(
	kube-apiserver:v1.17.5 
	kube-controller-manager:v1.17.5 
	kube-scheduler:v1.17.5 
	kube-proxy:v1.17.5
	pause:3.1 
	etcd:3.4.3-0 
	coredns:1.6.5
)
for imageName in ${images[@]};
do
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName
docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName k8s.gcr.io/$imageName
docker rmi registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName 
done

chmod +x images.sh
bash images.sh

导出镜像

docker save -o k8s.1.17.5.tar \ 
	k8s.gcr.io/kube-proxy:v1.17.5 \ 
	k8s.gcr.io/kube-apiserver:v1.17.5 \
	k8s.gcr.io/kube-controller-manager:v1.17.5 \ 
	k8s.gcr.io/kube-scheduler:v1.17.5 \ 
	k8s.gcr.io/coredns:1.6.5 \ 
	k8s.gcr.io/etcd:3.4.3-0 \ 
	k8s.gcr.io/pause:3.1 

docker load -i k8s.1.17.5.tar

5. 初始化集群

https://docs.projectcalico.org/v3.14/manifests/calico.yaml 下载 calio.yaml

docker pull calico/cni:v3.14.2
docker pull calico/pod2daemon-flexvol:v3.14.2 
docker pull calico/node:v3.14.2
docker pull calico/kube-controllers:v3.14.2

# 修改hostname
hostnamectl set-hostname k8s-master01
#  自动补全
echo"source<(kubectlcompletionbash)">>~/.bash_profile 2 source~/.bash_profile
echo "unset MAILCHECK">> /etc/profile
source /etc/profile

初始化master

kubeadm init --apiserver-advertise-address=指定IP \
	--kubernetes-version v1.17.5 \
	--service-cidr=10.1.0.0/16 \
	--pod-network-cidr=10.81.0.0/16

kubernetes 要求集群内各节点(包括 master 节点)能通过 Pod 网段互联互通。calico 使用 IPIP 或 BGP 技术（默认为 IPIP）为各节点创建一个可以互通的 Pod 网络。

# 只用在master上执行
curl https://docs.projectcalico.org/v3.10/manifests/calico-policy-only.yaml -o calico.yaml

kubectl apply -f  calico.yaml

然后根据kubeadm init 输出的信息加入works 节点。

scp master:/etc/kubernates/admin.conf worker:/etc/kubernates/admin.conf 
echo "export KUBECONFIG=/etc/kubernetes/admin.conf" >> ~/.bash_profile
source ~/.bash_profile

zsh 补全

#kubectl补全                                                                                                                                                                                                   
source <(kubectl completion zsh)
echo "source <(kubectl completion zsh)" >> ~/.zshrc