通过kubeadm部署集群master节点

1.1准备:
满足安装docker所需要求:64位Linux系统,3.10以上内核,最低2c2G配置

安装阿里yum源:

wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo 
yum makecache

关闭防火墙:

systemctl stop firewalld & systemctl disable firewalld

关闭swap:

swapoff -a
#vim /etc/fstab  #注释swap
#sed -i 's/\/dev\/mapper\/centos-swap/#\/dev\/mapper\/centos-swap/g' /etc/fstab 

关闭selinux:

setenforce 0
#vi /etc/selinux/config   #修改SELINUX=的值
#SELINUX=disabled
sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

修改hostname:

hostnamectl set-hostname master
修改配置文件/etc/hosts
cat <<EOF > /etc/hosts
192.168.0.62 master-1
192.168.0.212 node-1
192.168.0.199 node-2
EOF

reboot

1.2安装docker:

添加阿里docker仓库:

yum -y install yum-utils
yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
yum makecache

安装docker:

yum install docker-ce -y

查看版本:

docker version

启动并设置开机启动:

systemctl start docker & systemctl enable docker
systemctl status docker

1.3安装k8s:
配置k8s的yum源(阿里仓库):
--------------------------复制执行下面的所有内容---------------

cat <<EOF > /etc/yum.repos.d/kubernetes.repo

[kubernetes]

name=Kubernetes

baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64

enabled=1

gpgcheck=0

repo_gpgcheck=0

gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg

EOF

-------------------------截止到这里为止-------------------------

echo 1 > /proc/sys/net/bridge/bridge-nf-call-iptables
echo 1 > /proc/sys/net/bridge/bridge-nf-call-ip6tables

1.4拉取k8s组件镜像（本步骤可省略，1.1.6中自动使用阿里云镜像）

执行自建脚本image.sh （注意版本，将对应的版本号改为需要的）
sh image.sh

-------------------- vim image.sh -----------------------------
docker pull mirrorgooglecontainers/kube-apiserver:v1.14.3
docker pull mirrorgooglecontainers/kube-controller-manager:v1.14.3
docker pull mirrorgooglecontainers/kube-scheduler:v1.14.3
docker pull mirrorgooglecontainers/kube-proxy:v1.14.3
docker pull mirrorgooglecontainers/pause:3.1
docker pull mirrorgooglecontainers/etcd:3.3.10
docker pull coredns/coredns:1.3.1

docker tag mirrorgooglecontainers/kube-proxy:v1.14.3  k8s.gcr.io/kube-proxy:v1.14.3
docker tag mirrorgooglecontainers/kube-scheduler:v1.14.3 k8s.gcr.io/kube-scheduler:v1.14.3
docker tag mirrorgooglecontainers/kube-apiserver:v1.14.3 k8s.gcr.io/kube-apiserver:v1.14.3
docker tag mirrorgooglecontainers/kube-controller-manager:v1.14.3 k8s.gcr.io/kube-controller-manager:v1.14.3
docker tag mirrorgooglecontainers/etcd:3.3.10  k8s.gcr.io/etcd:3.3.10
docker tag coredns/coredns:1.3.1 k8s.gcr.io/coredns:1.3.1
docker tag mirrorgooglecontainers/pause:3.1  k8s.gcr.io/pause:3.1


docker rmi mirrorgooglecontainers/kube-apiserver:v1.14.3
docker rmi mirrorgooglecontainers/kube-controller-manager:v1.14.3
docker rmi mirrorgooglecontainers/kube-scheduler:v1.14.3
docker rmi mirrorgooglecontainers/kube-proxy:v1.14.3
docker rmi mirrorgooglecontainers/pause:3.1
docker rmi mirrorgooglecontainers/etcd:3.3.10
docker rmi coredns/coredns:1.3.1
----------------------------- image.sh end --------------------------

查看是否pull:

docker images

1.5初始化集群：

Master执行：

安装三组件:

yum install -y kubelet kubeadm kubectl

#注：此处需要指定版本去安装，安装错误版本要先卸载重新安装，如：

yum install -y kubelet-1.16.2 kubeadm-1.16.2 kubectl-1.16.2

kubeadm init --image-repository registry.aliyuncs.com/google_containers --pod-network-cidr=192.168.0.0/16 --apiserver-advertise-address=192.168.56.101
# 修改:
# --pod-network-cidr=     指定集群使用的网段
# --kubernetes-version=    k8s的版本号
# --apiserver-advertise-address=   k8s的apiserver地址(启动master的服务器IP地址)
# 执行kubeadm init出错或强制终止，再执行该命令时，需要先执行kubeadm reset重置
# --image-repository registry.aliyuncs.com/google_containers  使用阿里云镜像

成功显示:

创建文件:
kubeadm init初始化后(上面的截图可以看到),需要创建文件并赋权
配置常规用户如何使用kubectl访问集群

  mkdir -p $HOME/.kube
  sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  sudo chown $(id -u):$(id -g) $HOME/.kube/config

查看k8s版本号:

kubeadm version

报错(master也是worker):

0/1 nodes are available: 1 node(s) had taints that the pod didn’t tolerate.
解决:
默认情况下kubernetes中的master并不能运行用户的Pod. 因此需要删除 Train，允许master执行Pod,执行下面的命令:

kubectl taint nodes --all node-role.kubernetes.io/master-

1.6网络配置:

方式1(常用): flannel
执行:

kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml
//或者: 
curl -sSL "https://github.com/coreos/flannel/blob/master/Documentation/kube-flannel.yml?raw=true" | kubectl create -f -

查看:

kubectl get pods -n kube-system

方式2:calico
kubectl apply -f https://docs.projectcalico.org/v3.1/getting-started/kubernetes/installation/hosted/kubeadm/1.7/calico.yaml

注意版本,可以访问https://docs.projectcalico.org手工下载编辑

报错1：
[root@master opt]# kubectl logs -f kube-flannel-ds-amd64-czghp -n kube-system
I0414 09:51:09.538492 1 main.go:518] Determining IP address of default interface
I0414 09:51:09.538868 1 main.go:531] Using interface with name eth1 and address 123.56.54.198
I0414 09:51:09.538892 1 main.go:548] Defaulting external address to interface address (123.56.54.198)
W0414 09:51:09.538907 1 client_config.go:517] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work.
I0414 09:51:09.635833 1 kube.go:119] Waiting 10m0s for node controller to sync
I0414 09:51:09.635912 1 kube.go:306] Starting kube subnet manager
I0414 09:51:10.636067 1 kube.go:126] Node controller sync successful
I0414 09:51:10.636112 1 main.go:246] Created subnet manager: Kubernetes Subnet Manager - master
I0414 09:51:10.636117 1 main.go:249] Installing signal handlers
I0414 09:51:10.636262 1 main.go:390] Found network config - Backend type: vxlan
I0414 09:51:10.636373 1 vxlan.go:121] VXLAN config: VNI=1 Port=0 GBP=false Learning=false DirectRouting=false
E0414 09:51:10.636731 1 main.go:291] Error registering network: failed to acquire lease: node “master” pod cidr not assigned
I0414 09:51:10.636795 1 main.go:370] Stopping shutdownHandler…

解决：
Kubeadm时，必须指定和flannel对应的网段

1.2通过kubeadm部署集群node节点

1.2.1加入集群

进行master部署的步骤5.1.1------5.1.5，然后执行master生成的日志kubeadm join：

删除节点时,需要在节点上执行kubeadm reset之后,才可以加入集群

示例操作步骤：

      cat /etc/hosts
      vm /etc/hosts
      vim /etc/hosts
      hostnamectl set-hostname node-02
      reboot
      systemctl stop firewalld && systemctl disable firewalld
      sed -i 's/enforcing/disabled/' /etc/selinux/config
      swapoff -a
      yum install ntpdate -y
     ntpdate ntp.api.bz
     cd /etc/yum.repos.d/
     wget http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
     vi /etc/yum.repos.d/kubernetes.repo
     yum install -y kubelet kubeadm kubectl docker-ce
     systemctl enable kubelet docker
     systemctl start kubelet docker
     kubeadm join 39.105.17.16:6443 --token m89vif.xr1woexmf4izmn3v     --discovery-token-ca-cert-hash sha256:a86d2f0877d26cc3349a134869246cb1634f62afc88e8d0ed44a9ed5380477e6
     kubectl label nodes node-02 node-role.kubernetes.io/node=
     mkdir ~/.kube/
     vim ~/.kube/config
     kubectl label nodes node-02 node-role.kubernetes.io/node=
     docker pull registry.cn-beijing.aliyuncs.com/xuzequn/kube-proxy-amd64:0.0.1
     docker tag registry.cn-beijing.aliyuncs.com/xuzequn/kube-proxy-amd64:0.0.1 k8s.gcr.io/kube-proxy:v1.16.2
     docker rmi registry.cn-beijing.aliyuncs.com/xuzequn/kube-proxy-amd64:0.0.1
     docker pull registry.cn-beijing.aliyuncs.com/xuzequn/pause-amd64:0.0.1
     docker tag registry.cn-beijing.aliyuncs.com/xuzequn/pause-amd64:0.0.1 k8s.gcr.io/pause:3.1
     docker rmi registry.cn-beijing.aliyuncs.com/xuzequn/pause-amd64:0.0.1
     vim /etc/docker/daemon.json
     systemctl restart docker
     ip a
     kubectl get pod -n app