3、kubeadm部署Kubernetes 网络插件flannel、Calico、weave 并设置集群角色

Kubernetes（k8s）是自动化容器操作的开源平台，这些操作包括部署，调度和节点集群间扩展。 Kubernetes不仅支持Docker，还支持Rocket，这是另一种容器技术。

使用Kubernetes可以实现如下功能：

• 自动化容器的部署和复制；
• 随时扩展或收缩容器规模；
• 将容器组织成组，并且提供容器间的负载均衡；
• 很容易地升级应用程序容器的新版本；
• 提供容器弹性，如果容器失效就替换它等。

 一、环境信息

名称	IP地址	主机名	节点角色
master	10.70.36.251	master	master
node	10.70.36.252	node1	worker
node	10.70.36.253	node2	worker

基础环境准备

master/node节点 

1、master/node节点（设置主机名、主机名解析）

[root@master ~]# hostnamectl set-hostname master
[root@master ~]# cat /etc/hosts
master	10.70.36.251
node1	10.70.36.252
node2	10.70.36.253

2、master/node节点需要先关闭防火墙、selinux和swap

[root@master ~]# systemctl stop firewalld &&systemctl disable firewalld 
[root@master ~]# setenforce 0
[root@master ~]# sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config
[root@master ~]# swapoff -a # 临时
[root@master ~]# sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab #永久需重启
[root@master ~]# free -m                                       #查看
[root@master ~]# free -m
              total        used        free      shared  buff/cache   available
Mem:           7783         184        7410          10         188        7340
Swap:             0           0           0

3、master/node节点配置内核参数，将桥接的IPv4流量传递到iptables的链

[root@master ~]# cat >> /etc/sysctl.d/k8s.conf << EOF
net.bridge.bridge‐nf‐call‐ip6tables = 1
net.bridge.bridge‐nf‐call‐iptables = 1
EOF

[root@master ~]# modprobe br_netfilter
[root@master ~]# sysctl -p
[root@master ~]# lsmod | grep br_netfilter
br_netfilter           22256  0 
bridge                151336  2 br_netfilter,ebtable_broute

[root@master ~]# sysctl --system
* Applying /usr/lib/sysctl.d/00-system.conf ...
* Applying /usr/lib/sysctl.d/10-default-yama-scope.conf ...
kernel.yama.ptrace_scope = 0
* Applying /usr/lib/sysctl.d/50-default.conf ...
kernel.sysrq = 16
kernel.core_uses_pid = 1
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
net.ipv4.conf.all.accept_source_route = 0
net.ipv4.conf.default.promote_secondaries = 1
net.ipv4.conf.all.promote_secondaries = 1
fs.protected_hardlinks = 1
fs.protected_symlinks = 1
* Applying /etc/sysctl.d/99-sysctl.conf ...
* Applying /etc/sysctl.d/k8s.conf ...
* Applying /etc/sysctl.conf ...
[root@master ~]# sysctl --system
* Applying /usr/lib/sysctl.d/00-system.conf ...
* Applying /usr/lib/sysctl.d/10-default-yama-scope.conf ...
kernel.yama.ptrace_scope = 0
* Applying /usr/lib/sysctl.d/50-default.conf ...
kernel.sysrq = 16
kernel.core_uses_pid = 1
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
net.ipv4.conf.all.accept_source_route = 0
net.ipv4.conf.default.promote_secondaries = 1
net.ipv4.conf.all.promote_secondaries = 1
fs.protected_hardlinks = 1
fs.protected_symlinks = 1
* Applying /etc/sysctl.d/99-sysctl.conf ...
* Applying /etc/sysctl.d/k8s.conf ...
* Applying /etc/sysctl.conf ...

ERROR FileContent--proc-sys-net-bridge-bridge-nf-call-iptables 设置错误导致kubeadm安装k8s失败

解决办法:

echo "1">/proc/sys/net/bridge/bridge-nf-call-iptables

echo "1">/proc/sys/net/bridge/bridge-nf-call-ip6tables

4、master/node节点安装基本安装包

[root@master ~]#  yum install wget net‐tools vim bash‐comp* ‐y

5、master/node节点配置阿里云的kubernetes、docker的yum源、

[root@master ~]# cat >>/etc/yum.repos.d/kubernetes.repo <<EOF
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF
[root@master ~]# wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo -O /etc/yum.repos.d/docker-ce.repo
[root@master ~]# yum clean all &&yum repolist
已加载插件：fastestmirror
正在清理软件源： base docker-ce-stable extras kubernetes
               : updates
Cleaning up list of fastest mirrors
已加载插件：fastestmirror
Determining fastest mirrors
 * base: mirror.bit.edu.cn
 * extras: mirror.bit.edu.cn
 * updates: mirror.bit.edu.cn
base                              | 3.6 kB     00:00     
docker-ce-stable                  | 3.5 kB     00:00     
extras                            | 2.9 kB     00:00     
kubernetes/signature              |  454 B     00:00     
从 https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg 检索密钥
导入 GPG key 0xA7317B0F:
 用户ID     : "Google Cloud Packages Automatic Signing Key <gc-team@google.com>"
 指纹       : d0bc 747f d8ca f711 7500 d6fa 3746 c208 a731 7b0f
 来自       : https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
是否继续？[y/N]：y
从 https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg 检索密钥
kubernetes/signature              | 1.4 kB     00:02 !!! 
updates                           | 2.9 kB     00:00     
(1/7): base/7/x86_64/group_gz       | 153 kB   00:00     
(2/7): extras/7/x86_64/primary_db   | 206 kB   00:00     
(3/7): kubernetes/primary           |  79 kB   00:00     
(4/7): docker-ce-stable/x86_64/upda |   55 B   00:00     
(5/7): updates/7/x86_64/primary_db  | 4.5 MB   00:00     
(6/7): base/7/x86_64/primary_db     | 6.1 MB   00:00     
(7/7): docker-ce-stable/x86_64/prim |  46 kB   00:01     
kubernetes                                       579/579
源标识                  源名称                     状态
base/7/x86_64           CentOS-7 - Base            10,070
docker-ce-stable/x86_64 Docker CE Stable - x86_64      82
extras/7/x86_64         CentOS-7 - Extras             413
kubernetes              Kubernetes                    579
updates/7/x86_64        CentOS-7 - Updates          1,134
repolist: 12,278

 6、master/node节点安装docker-ce并开机自启动

[root@master ~]# yum install docker-ce -y
[root@master ~]# systemctl start docker && systemctl enable docker
Created symlink from /etc/systemd/system/multi-user.target.wants/docker.service to /usr/lib/systemd/system/docker.service.

在安装的时候还出现这个警告 处理方式如下 

 

cat <<EOF> /etc/docker/daemon.json 
 {
   "exec-opts": ["native.cgroupdriver=systemd"]
}
EOF

#重启docker

systemctl restart docker

7、master/node节点kubelet、kubeadm、kubectl安装

[root@master ~]# yum install kubelet kubeadm kubectl -y
# 设置kubelet的开机自启
[root@master ~]#  systemctl enable kubelet
Created symlink from /etc/systemd/system/multi-user.target.wants/kubelet.service to /usr/lib/systemd/system/kubelet.service.