linux-centos7防火墙设置

firewalld：

启动： systemctl start firewalld

查看状态： systemctl status firewalld 

停止：systemctl stop firewalld 

禁用：systemctl disable firewalld

禁用SELINUX:

sed -i 's/enforcing/disabled/' /etc/selinux/config
setenforce 0

禁用SWAP:

swapoff -a
sed -i '/swap/ s/^\(.*\)$/#\1/g'  /etc/fstab

配置阿里云yum源:

cd /etc/yum.repos.d/
wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo

cat <<EOF > /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF

K8S支持转发：

创建 /etc/sysctl.d/k8s.conf 文件，添加如下内容：
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward = 1

执行如下命令使修改生效：
modprobe br_netfilter
sysctl -p /etc/sysctl.d/k8s.conf
sysctl --system