kubernetes&&简单安装部署

最新推荐文章于 2021-03-29 16:14:59 发布

默行默致

最新推荐文章于 2021-03-29 16:14:59 发布

阅读量195

点赞数

分类专栏： kubernetes

原文链接：wwww.shangguigu

版权

kubernetes 专栏收录该内容

26 篇文章 0 订阅

订阅专栏

kubernetes&&简单安装部署

资源分配

准备几个虚拟机或物理机并按实际需求划分资源，此处实验环境下资源分配如下：

主机名 - ip - 作用
k8s-master01 - 192.168.0.200 - k8s的主节点01
k8s-node01 - 192.168.0.210 - k8s的从节点01
k8s-node02 - 192.168.0.211 - k8s的从节点02
k8s-

固化主机名与ip对应关系

其目的是为了便于识别且方面主机之间的访问
此处暂时以通过修改hosts的方式实现，真实环境通过DNS服务实现即可。

# 固化主机名
hostnamectl set-hostname k8s-master01
# 固化IP地址
[root@k8s-master01 ~]# cat /etc/sysconfig/network-scripts/ifcfg-ens33
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens33
DEVICE=ens33
ONBOOT=yes
IPADDR=192.168.0.200
NETMASK=255.255.255.0
GATEWAY=192.168.0.1
DNS1=192.168.0.1
# 重启网卡生效
# 固化主机名和IP对应关系
[root@k8s-master01 ~]# cat /etc/hosts
192.168.0.200  k8s-master01
192.168.0.210  k8s-node01
192.168.0.211  k8s-node02
# 检测
[root@k8s-master01 ~]# ping k8s-master01
PING k8s-master01 (192.168.0.200) 56(84) bytes of data.
64 bytes from k8s-master01 (192.168.0.200): icmp_seq=1 ttl=64 time=0.061 ms

安装依赖包

yum  install  -y  conntrack  ntpdate  ntp  ipvsadm  ipset  jq  iptables curl  sysstat libseccomp  wget  vim  net-tools  git

关闭firewalld并禁止自启动，安装iptables并清空规则并保存并设置开机自启

systemctl  stop firewalld && systemctl disable firewalld
yum  -y  install iptables-services
systemctl  start iptables
systemctl enable iptables
iptables -F
service  iptables save

关闭SELINUX

# 关闭swap虚拟内存分区
swapoff -a && sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab
setenforce 0 && sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config

调整内核参数

[root@k8s-master01 etc]# cat /etc/sysctl.d/kubernetes.conf 
net.bridge.bridge-nf-call-iptables=1
net.bridge.bridge-nf-call-ip6tables=1
net.ipv4.ip_forward=1
net.ipv4.tcp_tw_recycle=0
vm.swappiness=0
vm.overcommit_memory=1
vm.panic_on_oom=0
fs.inotify.max_user_instances=8192
fs.inotify.max_user_watches=1048576
fs.file-max=52706963
fs.nr_open=52706963
net.ipv6.conf.all.disable_ipv6=1
net.netfilter.nf_conntrack_max=2310720
# 加载所需模块
modprobe ip_conntrack
modprobe  br_netfilter
# 检测
lsmod | grep br_netfilter
# 生效
sysctl -p /etc/sysctl.d/kubernetes.conf

net.ipv6.conf.all.disable_ipv6=1 : 关闭ipv6的协议
net.bridge.bridge-nf-call-iptables=1 : 开启网桥模式
vm.swappiness=0 : 禁止使用swap空间，只有当系统OOM时才允许使用它
vm.overcommit_memory=1 : 不检查物理内存是否够用
vm.panic_on_oom=0 : 开启OOM
fs.file-max=52706963 : 设置文件的句柄数目
fs.nr_open=52706963 : 设置文件的最大打开数据
/etc/sysctl.d/ : 该目录下的文件将在服务器开机时被调用

设置时区并重启与时间有关的服务

# 设置系统时区为 中国/上海
timedatectl set-timezone Asia/Shanghai
# 将当前的UTC时间写入硬件时钟
timedatectl set-local-rtc 0
systemctl  restart rsyslog
systemctl  restart crond
# 停止并禁止自启动无关服务
systemctl stop postfix
systemctl disable postfix

设置rsyslogd和systemd journald

# 创建持久化保存日志的目录
mkdir /var/log/journal
mkdir /etc/systemd/journald.conf.d
[root@k8s-master01 etc]# cat /etc/systemd/journald.conf.d/99-prophet.conf
[Journal]
# 持久化保存到磁盘
Storage=persistent
# 压缩历史日志
Compress=yes
SyncIntervalSec=5m
RateLimitInterval=30s
RateLimitBurst=1000
# 最大占用空间 10G
SystemMaxUse=10G
# 单日志文件最大 200M
SystemMaxFileSize=200M
# 日志保存时间 2周
MaxRetentionSec=2week
# 不将日志转发到syslog
ForwardToSyslog=no
# 重启服务
systemctl restart systemd-journald

升级系统内核为4.44

其目的是为了避免kubernetes、docker运行不稳定的bug

rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-3.el7.elrepo.noarch.rpm
# 安装完成后检查/boot/grub2/grub.cfg中对应内核menuentry中是否包含initrd16配置，如果没有，再安装一次
yum --enablerepo=elrepo-kernel install -y  kernel-lt
# 设置开机从新内核启动
grub2-set-default "CentOS Linux (4.4.224-1.el7.elrepo.x86_64) 7 (Core)"

kube-proxy开启ipvs的前置条件

modprobe  br_netfilter
[root@k8s-master01 etc]# cat /etc/sysconfig/modules/ipvs.modules
#!/bin/bash
modprobe  --  ip_vs
modprobe  --  ip_vs_rr
modprobe  --  ip_vs_wrr
modprobe  --  ip_vs_sh
modprobe  --  nf_conntrack_ipv4
# 授权
chmod  755 /etc/sysconfig/modules/ipvs.modules
# 执行
bash /etc/sysconfig/modules/ipvs.modules
# 检测
lsmod | grep -e ip_vs -e nf_conn

安装docker软件

yum install -y yum-utils device-mapper-persistent-data lvm2
yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
yum update -y  &&  yum install -y  docker-ce
# 创建目录
mkdir /etc/docker
# 配置daemon
[root@k8s-master01 local]# cat /etc/docker/daemon.json 
{
    "exec-opts": ["native.cgroupdriver=systemd"],
    "log-driver": "json-file",
    "log-opts": {
        "max-size": "100m"
    }
}
# 创建目录用于存放docker的配置文件
mkdir  -p  /etc/systemd/system/docker.service.d
systemctl daemon-reload && systemctl restart docker && systemctl enable docker
# 重启令配置生效
grub2-set-default "CentOS Linux (4.4.224-1.el7.elrepo.x86_64) 7 (Core)" && reboot

安装kubeadm主从配置

[root@k8s-master01 local]# cat /etc/yum.repos.d/kubernetes.repo 
[kubernetes]
name=Kubernetes
baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg

yum  -y  install  kubeadm-1.15.1 kubectl-1.15.1 kubelet-1.15.1
systemctl enable kubelet.service

导入基础镜像（可选）

# 下载docker基本镜像
[root@k8s-master01 etc]# cd /usr/local/
# 导入镜像
[root@k8s-master01 local]# cat load_images.sh 
#!/bin/bash

ls  /usr/local/kubeadm-basic.images  > /tmp/image-list.txt

cd  /usr/local/kubeadm-basic.images

for i in $( cat /tmp/image-list.txt)
do
    docker  load  -i  $i
done

rm -r /tmp/image-list.txt

初始化主节点

kubeadm config print init-defaults > kubeadm-config.yaml
[root@k8s-master01 local]# cat /usr/local/install-k8s/core/kubeadm-config.yaml 
apiVersion: kubeadm.k8s.io/v1beta2
bootstrapTokens:
- groups:
  - system:bootstrappers:kubeadm:default-node-token
  token: abcdef.0123456789abcdef
  ttl: 24h0m0s
  usages:
  - signing
  - authentication
kind: InitConfiguration
localAPIEndpoint:
  advertiseAddress: 192.168.1.135
  bindPort: 6443
nodeRegistration:
  criSocket: /var/run/dockershim.sock
  name: k8s-master01
  taints:
  - effect: NoSchedule
    key: node-role.kubernetes.io/master
---
apiServer:
  timeoutForControlPlane: 4m0s
apiVersion: kubeadm.k8s.io/v1beta2
certificatesDir: /etc/kubernetes/pki
clusterName: kubernetes
controllerManager: {}
dns:
  type: CoreDNS
etcd:
  local:
    dataDir: /var/lib/etcd
imageRepository: k8s.gcr.io
kind: ClusterConfiguration
kubernetesVersion: v1.15.1
networking:
  dnsDomain: cluster.local
  podSubnet: "10.244.0.0/16"
  serviceSubnet: 10.96.0.0/12
scheduler: {}
---
apiVersion: kubeproxy.config.k8s.io/v1alpha1
kind: KubeProxyConfiguration
featureGates:
  SupportIPVSProxyMode: true
mode: ipvs

# 若需要重启初始化，需提前执行reset命令
#kubeadm reset
#iptables -F && iptables -t nat -F && iptables -t mangle -F && iptables -X
# 初始化
kubeadm init --config=kubeadm-config.yaml  --experimental-upload-certs | tee kubeadm-init.log
cat kubeadm-init.log
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config

在这里插入图片描述

部署网络

wget https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml
kubectl create -f kube-flannel.yml

加入主节点及其他节点

kubeadm join 192.168.1.135:6443 --token abcdef.0123456789abcdef \
    --discovery-token-ca-cert-hash sha256:566f8c22bade6a88bf3a697f2d6aefc284d13dbd7a2331785eaf52f9b572fa2c
# 若卡住了，重新生成token再次尝试即可
#kubeadm token create --ttl 0