条件:
- 三台机器,操作系统用1804保持网络畅通
- 硬件配置:2GB或更多RAM,2个CPU或更多CPU,硬盘30GB或更多
- 可以访问外网,需要拉取镜像,如果服务器不能上网,需要提前下载镜像并导入节点
- 禁止swap分区
准备环境:(所有节点均执行)
节点 IP
master 10.30.59.189
node-1 10.30.59.206
node-2 10.30.59.218
(1)关闭防火墙
[root@localhost ~]# systemctl stop firewalld && systemctl disable firewalld
Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
(2)关闭selinux
[root@localhost ~]# sed -i 's/enforcing/disabled/' /etc/selinux/config //永久
[root@localhost ~]# setenforce 0 //l临时
(3)关闭swap
[root@localhost ~]# swapoff -a //l临时
[root@localhost ~]# sed -ri 's/.*swap.*/#&/' /etc/fstab //永久
(4)设置主机名
[root@localhost ~]# hostnamectl set-hostname master
[root@localhost ~]# bash
[root@master ~]#
[root@localhost ~]# hostnamectl set-hostname node-1
[root@localhost ~]# bash
[root@node-1 ~]#
[root@localhost ~]# hostnamectl set-hostname node-2
[root@localhost ~]# bash
[root@node-2 ~]#
(5)向master,node-1,node-2添加hosts
[root@master ~]# cat /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
10.30.59.189 master
10.30.59.206 node-1
10.30.59.218 node-2
(6)将桥接的IPv4流量传递到iptables的链
[root@master ~]# vi /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
[root@master ~]# sysctl --system //生效
* Applying /usr/lib/sysctl.d/00-system.conf ...
* Applying /usr/lib/sysctl.d/10-default-yama-scope.conf ...
kernel.yama.ptrace_scope = 0
* Applying /usr/lib/sysctl.d/50-default.conf ...
kernel.sysrq = 16
kernel.core_uses_pid = 1
net.ipv4.conf.default.rp_filter = 1