kubespray2，java工程师面试宝典下载

7. 下载kubespray，我这里下载的是v2.11.0版本：

wget https://github.com/kubernetes-sigs/kubespray/archive/v2.11.0.tar.gz

8. 解压：

tar -zxvf v2.11.0.tar.gz

9. 进入解压后的目录：

cd kubespray-2.11.0/

10. 安装kubespray所需的应用(注意是pip3)：

pip3 install -r requirements.txt

11. 复制一份demo配置信息到目录inventory/mycluster：

cp -rfp inventory/sample inventory/mycluster

12. 进去看一下，可见mycluster目录下复制了很多文件：

[root@ansible kubespray-2.11.0]# tree inventory/

inventory/

├── local

│ ├── group_vars -> …/sample/group_vars

│ └── hosts.ini

├── mycluster

│ ├── group_vars

│ │ ├── all

│ │ │ ├── all.yml

│ │ │ ├── azure.yml

│ │ │ ├── coreos.yml

│ │ │ ├── docker.yml

│ │ │ ├── oci.yml

│ │ │ └── openstack.yml

│ │ ├── etcd.yml

│ │ └── k8s-cluster

│ │ ├── addons.yml

│ │ ├── k8s-cluster.yml

│ │ ├── k8s-net-calico.yml

│ │ ├── k8s-net-canal.yml

│ │ ├── k8s-net-cilium.yml

│ │ ├── k8s-net-contiv.yml

│ │ ├── k8s-net-flannel.yml

│ │ ├── k8s-net-kube-router.yml

│ │ ├── k8s-net-macvlan.yml

│ │ └── k8s-net-weave.yml

│ └── inventory.ini

13. 设置集群信息(当前目录仍旧是kubespray-2.11.0)：

declare -a IPS=(192.168.133.139 192.168.133.140 192.168.133.141)

14. 配置ansible：

CONFIG_FILE=inventory/mycluster/hosts.yml python3 contrib/inventory_builder/inventory.py ${IPS[@]}

此时kubespray的脚本根据输入的IP信息做好了集群规划，具体信息可见inventory/mycluster/hosts.yml，如下所示，您也可以自行修改此文件：

all:

hosts:

node1:

ansible_host: 192.168.133.139

ip: 192.168.133.139

access_ip: 192.168.133.139

node2:

ansible_host: 192.168.133.140

ip: 192.168.133.140

access_ip: 192.168.133.140

node3:

ansible_host: 192.168.133.141

ip: 192.168.133.141

access_ip: 192.168.133.141

children:

kube-master:

hosts:

node1:

node2:

kube-node:

hosts:

node1:

node2:

node3:

etcd:

hosts:

node1:

node2:

node3:

k8s-cluster:

children:

kube-master:

kube-node:

calico-rr:

hosts: {}

15. 执行以下命令即可开始安装，在线安装比较耗时请耐心等待：

ansible-playbook -i inventory/mycluster/hosts.yml --become --become-user=root cluster.yml

安装完成时控制台输出类似如下的信息：

PLAY RECAP ********************************************************************************************************************************************************************************

localhost : ok=1 changed=0 unreachable=0 failed=0

node1 : ok=658 changed=95 unreachable=0 failed=0

node2 : ok=566 changed=77 unreachable=0 failed=0

【一线大厂Java面试题解析+后端开发学习笔记+最新架构讲解视频+实战项目源码讲义】

浏览器打开：qq.cn.hn/FTf 免费领取

node3 : ok=475 changed=66 unreachable=0 failed=0

Sunday 17 November 2019 17:31:19 +0800 (0:00:00.064) 0:09:56.193 *******

===============================================================================

kubernetes/master : kubeadm | Init other uninitialized masters -------------------------------------------------------------------------------------------------------------------- 94.91s

kubernetes/master : kubeadm | Initialize first master ----------------------------------------------------------------------------------------------------------------------------- 42.95s

etcd : Install | Copy etcdctl binary from docker container ------------------------------------------------------------------------------------------------------------------------ 14.26s

download : download_container | Download image if required ------------------------------------------------------------------------------------------------------------------------ 12.87s

download : download_container | Download image if required ------------------------------------------------------------------------------------------------------------------------ 12.28s

download : download_container | Download image if required ------------------------------------------------------------------------------------------------------------------------ 10.79s

etcd : reload etcd ---------------------------------------------------------------------------------------------------------------------------------------------------------------- 10.71s

download : download_container | Download image if required ------------------------------------------------------------------------------------------------------------------------- 9.71s

download : download_container | Download image if required ------------------------------------------------------------------------------------------------------------------------- 9.48s

download : download_container | Download image if required ------------------------------------------------------------------------------------------------------------------------- 8.02s

download : download_container | Download image if required ------------------------------------------------------------------------------------------------------------------------- 7.88s

etcd : wait for etcd up ------------------------------------------------------------------------------------------------------------------------------------------------------------ 7.16s

etcd : Gen_certs | Write etcd master certs ----------------------------------------------------------------------------------------------------------------------------------------- 6.39s

download : download_container | Download image if required ------------------------------------------------------------------------------------------------------------------------- 5.75s

download : download_container | Download image if required ------------------------------------------------------------------------------------------------------------------------- 5.53s

download : download_container | Download image if required ------------------------------------------------------------------------------------------------------------------------- 5.42s

download : download_container | Download image if required ------------------------------------------------------------------------------------------------------------------------- 5.41s

download : download_container | Download image if required ------------------------------------------------------------------------------------------------------------------------- 5.06s

download : download_container | Download image if required ------------------------------------------------------------------------------------------------------------------------- 4.87s

kubernetes-apps/ansible : Kubernetes Apps | Start Resources ------------------------------------------------------------------------------------------------------------------------ 4.78s

至此，kubernetes集群环境部署完成，接下来简单验证一下环境是否可用；

检查环境

1. ssh登录a001机器；

2. 查看节点、service、pod：

[root@node1 ~]# kubectl get nodes

NAME STATUS ROLES AGE VERSION

node1 Ready master 25m v1.15.3

node2 Ready master 23m v1.15.3

node3 Ready 23m v1.15.3

[root@node1 ~]# kubectl get services --all-namespaces

NAMESPACE NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE

default kubernetes ClusterIP 10.233.0.1 443/TCP 25m

kube-system coredns ClusterIP 10.233.0.3 53/UDP,53/TCP,9153/TCP 22m

kube-system kubernetes-dashboard ClusterIP 10.233.35.1 443/TCP 22m

[root@node1 ~]# kubectl get pods --all-namespaces

NAMESPACE NAME READY STATUS RESTARTS AGE

kube-system calico-kube-controllers-c6fb79b8b-v24nq 1/1 Running 0 22m

kube-system calico-node-46s8t 1/1 Running 0 23m

kube-system calico-node-mcjfs 1/1 Running 0 23m

kube-system calico-node-q989m 1/1 Running 1 23m

kube-system coredns-74c9d4d795-4xz6s 1/1 Running 0 22m

kube-system coredns-74c9d4d795-kh6vl 1/1 Running 0 22m

kube-system dns-autoscaler-7d95989447-gmcrl 1/1 Running 0 22m

kube-system kube-apiserver-node1 1/1 Running 0 24m

kube-system kube-apiserver-node2 1/1 Running 0 23m

kube-system kube-controller-manager-node1 1/1 Running 0 24m

kube-system kube-controller-manager-node2 1/1 Running 0 23m

kube-system kube-proxy-2zhwn 1/1 Running 0 23m

kube-system kube-proxy-59qx8 1/1 Running 0 23m

kube-system kube-proxy-fgpx6 1/1 Running 0 23m

kube-system kube-scheduler-node1 1/1 Running 0 24m

kube-system kube-scheduler-node2 1/1 Running 0 23m

kube-system kubernetes-dashboard-7c547b4c64-x7nfq 1/1 Running 0 22m

kube-system nginx-proxy-node3 1/1 Running 0 23m

kube-system nodelocaldns-8khfq 1/1 Running 0 22m

kube-system nodelocaldns-pzx2p 1/1 Running 0 22m

kube-system nodelocaldns-s5kcd 1/1 Running 0 22m

访问dashboard

dashboard可以查看kubernetes系统的整体情况，为了访问dashboard页面，需要增加RBAC：

1. ssh登录a001机器；

2. 执行以下命令，创建文件admin-user.yaml：

tee admin-user.yaml <<-‘EOF’

apiVersion: v1

kind: ServiceAccount

metadata:

name: admin-user

namespace: kube-system

EOF

3. 执行以下命令，创建文件admin-user-role.yaml：

tee admin-user-role.yaml <<-‘EOF’

apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRoleBinding

metadata:

name: admin-user

roleRef:

apiGroup: rbac.authorization.k8s.io

kind: ClusterRole

name: cluster-admin

subjects:

• kind: ServiceAccount

name: admin-user

namespace: kube-system

EOF

4. 创建ServiceAccount和ClusterRoleBinding：