2020-10-15

k8s的安装

1：关闭防火墙

systemctl stop firewalld
setenforce  0

2：时间同步

yum -y install ntpdate
ntpdate pool.ntp.org

3：修改主机名

hostnamectl set-hostname k8s-master
hostnamectl set-hostname k8s-node1
hostnamectl set-hostname k8s-node2

4: 编辑hosts文件

vim /etc/hosts
192.168.1.7 k8s-master
192.168.1.8 k8s-node1
192.168.1.9 k8s-node2

5: 安装指定版本的docker

wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo -O /etc/yum.repos.d/docker-ce.repo
yum -y install docker-ce-18.06.3.ce-3.el7

6：运行docker

systemctl enable docker
systemctl start docker

7：docker镜像加速

[root@k8s-master docker]# cat daemon.json 
{
    "exec-opts": ["native.cgroupdriver=systemd"],
    "log-driver": "json-file",
    "log-opts": {
    "max-size": "100m"
    },
    "storage-driver": "overlay2",
    "registry-mirrors":[
        "https://kfwkfulq.mirror.aliyuncs.com",
        "https://2lqq34jg.mirror.aliyuncs.com",
        "https://pee6w651.mirror.aliyuncs.com",
        "http://hub-mirror.c.163.com",
        "https://docker.mirrors.ustc.edu.cn",
        "https://registry.docker-cn.com"
    ]
}

重启：

systemctl restart docker

8：上传k8s的yum源

yum -y install kubelet-1.17.0 kubeadm-1.17.0 kubectl-1.17.0

9：设置kubelet 开机自启

systemctl enable kubelet

先不要启动它！！

10 初始化集群
在master节点上执行：

kubeadm init --apiserver-advertise-address=192.168.176.137 --image-repository registry.aliyuncs.com/google_containers --kubernetes-version v1.17.0 --service-cidr=10.1.0.0/16 --pod-network-cidr=10.244.0.0/16

报错处理：

[ERROR FileContent–proc-sys-net-bridge-bridge-nf-call-iptables]: /proc/sys/net/bridge/bridge-nf-call-iptables contents are not set to 1
echo “1” > /proc/sys/net/bridge/bridge-nf-call-iptables
[ERROR Swap]: running with swap on is not supported. Please disable swap
swapoff -a （3个节点都要执行）

master上执行：

mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config

11 将node节点加入到集群中：

kubeadm join 192.168.1.7:6443 --token sbky7r.d2upkq8dhkjz033s \--discovery-token-ca-cert-hash sha256:d48fbf3738fddea473d9540b0966a723b1295e79a0adad71d7c731bb73e87994

验证：

[root@k8s-master yum.repos.d]# kubectl get nodes

NAME         STATUS     ROLES    AGE     VERSION
k8s-master   NotReady   master   7m24s   v1.17.0
k8s-node1    NotReady   <none>   2m23s   v1.17.0
k8s-node2    NotReady   <none>   27s     v1.17.0

12： 安装k8s的网络组件falneel

[root@k8s-master k8s-v1.17.0]# kubectl apply -f kube-flannel.yml 
podsecuritypolicy.policy/psp.flannel.unprivileged created
clusterrole.rbac.authorization.k8s.io/flannel created
clusterrolebinding.rbac.authorization.k8s.io/flannel created
serviceaccount/flannel created
configmap/kube-flannel-cfg created
daemonset.apps/kube-flannel-ds-amd64 created
daemonset.apps/kube-flannel-ds-arm64 created
daemonset.apps/kube-flannel-ds-arm created
daemonset.apps/kube-flannel-ds-ppc64le created
daemonset.apps/kube-flannel-ds-s390x created

13: 查看pod转态

[root@k8s-master k8s-v1.17.0]# kubectl get pod -A
NAMESPACE     NAME                                 READY   STATUS    RESTARTS   AGE
kube-system   coredns-9d85f5447-jf28g              1/1     Running   0          14m
kube-system   coredns-9d85f5447-xrwgf              1/1     Running   0          14m
kube-system   etcd-k8s-master                      1/1     Running   0          14m
kube-system   kube-apiserver-k8s-master            1/1     Running   0          14m
kube-system   kube-controller-manager-k8s-master   1/1     Running   0          14m
kube-system   kube-flannel-ds-amd64-9qbnz          1/1     Running   0          29s
kube-system   kube-flannel-ds-amd64-jjzx9          1/1     Running   0          29s
kube-system   kube-flannel-ds-amd64-mq68h          1/1     Running   0          29s
kube-system   kube-proxy-5j497                     1/1     Running   0          10m
kube-system   kube-proxy-cl655                     1/1     Running   0          8m20s
kube-system   kube-proxy-d7wrw                     1/1     Running   0          14m
kube-system   kube-scheduler-k8s-master            1/1     Running   0          14m

14： 再次查看node状态

[root@k8s-master k8s-v1.17.0]# kubectl get nodes
NAME         STATUS   ROLES    AGE     VERSION
k8s-master   Ready    master   16m     v1.17.0
k8s-node1    Ready    <none>   11m     v1.17.0
k8s-node2    Ready    <none>   9m12s   v1.17.0

已经变为ready！！

(查看token)

kubectl get secret -A|grep dashboard
kubectl describe secret dashboard-admin-token-5m2lx
kubectl describe secret dashboard-admin-token-5m2lx -n kubernetes-dashboard