Kubernetes集群安装

最新推荐文章于 2024-05-13 16:59:19 发布
最新推荐文章于 2024-05-13 16:59:19 发布
阅读量242 收藏 1
点赞数
文章标签： kubernetes docker 容器
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/qq_45887180/article/details/121877370
版权
本文档详细介绍了在虚拟机上搭建Kubernetes集群的步骤，包括创建虚拟机、安装Docker、配置kubelet、kubeadm和kubectl，以及初始化master节点、安装pod网络插件Flannel。在过程中，还解决了如错误警告、镜像版本不匹配等问题，确保所有节点成功加入集群并运行正常。
摘要由CSDN通过智能技术生成

Kubernetes集群安装

一、创建三个虚拟机

分别修改三个虚拟机的hostname

hostnamectl set-hostname k8s-node1
hostnamectl set-hostname k8s-node2
hostnamectl set-hostname k8s-node3

保证三台虚拟机都可以联网

二、安装docker

跳转链接====> 安装docker

三、安装kubelet、kubeadm、kubectl

1、配置kubernetes阿里源
vim /etc/yum.repos/ali-k8s.repo

[aliyun]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg

把以下下功能打开，否则会报错

cat > /etc/sysctl.d/k8s.conf << EOF
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF

安装

yum install -y kubelet-1.17.3 kubeadm-1.17.3 kubectl-1.17.3

设置开机启动

systemctl enable kubelet
systemctl start kubelet
systemctl status kubelet

到这一步所有节点都安装好命令

四、初始化

4.1、初始化master

首先要# 关闭Swap选项

cat << EOF >/etc/sysconfig/kubelet
KUBELET_EXTRA_ARGS="--fail-swap-on=false"
EOF

下载镜像，执行脚本创建一个.sh文件，并执行

#!/bin/bash

images=(
	kube-apiserver:v1.17.3
    kube-proxy:v1.17.3
	kube-controller-manager:v1.17.3
	kube-scheduler:v1.17.3
	coredns:1.6.5
	etcd:3.4.3-0
    pause:3.1
)

for imageName in ${images[@]} ; do
    docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName
    docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName  k8s.gcr.io/$imageName
done

创建好镜像好是这样的
在这里插入图片描述
把原来的镜像都删除，剩下这些
在这里插入图片描述

执行初始化

kubeadm init --kubernetes-version=v1.17.3 \
--pod-network-cidr=10.244.0.0/16 \
--service-cidr=10.96.0.0/16 \
--ignore-preflight-errors=Swap

4.2、安装pod网络插件

创建一个kube-flannel.yml

---
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
  name: psp.flannel.unprivileged
  annotations:
    seccomp.security.alpha.kubernetes.io/allowedProfileNames: docker/default
    seccomp.security.alpha.kubernetes.io/defaultProfileName: docker/default
    apparmor.security.beta.kubernetes.io/allowedProfileNames: runtime/default
    apparmor.security.beta.kubernetes.io/defaultProfileName: runtime/default
spec:
  privileged: false
  volumes:
    - configMap
    - secret
    - emptyDir
    - hostPath
  allowedHostPaths:
    - pathPrefix: "/etc/cni/net.d"
    - pathPrefix: "/etc/kube-flannel"
    - pathPrefix: "/run/flannel"
  readOnlyRootFilesystem: false
  # Users and groups
  runAsUser:
    rule: RunAsAny
  supplementalGroups:
    rule: RunAsAny
  fsGroup:
    rule: RunAsAny
  # Privilege Escalation
  allowPrivilegeEscalation: false
  defaultAllowPrivilegeEscalation: false
  # Capabilities
  allowedCapabilities: ['NET_ADMIN']
  defaultAddCapabilities: []
  requiredDropCapabilities: []
  # Host namespaces
  hostPID: false
  hostIPC: false
  hostNetwork: true
  hostPorts:
  - min: 0
    max: 65535
  # SELinux
  seLinux:
    # SELinux is unused in CaaSP
    rule: 'RunAsAny'
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: flannel
rules:
  - apiGroups: ['extensions']
    resources: ['podsecuritypolicies']
    verbs: ['use']
    resourceNames: ['psp.flannel.unprivileged']
  - apiGroups:
      - ""
    resources:
      - pods
    verbs:
      - get
  - apiGroups:
      - ""
    resources:
      - nodes
    verbs:
      - list
      - watch
  - apiGroups:
      - ""
    resources:
      - nodes/status
    verbs:
      - patch
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: flannel
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: flannel
subjects:
- kind: ServiceAccount
  name: flannel
  namespace: kube-system
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: flannel
  namespace: kube-system
---
kind: ConfigMap
apiVersion: v1
metadata:
  name: kube-flannel-cfg
  namespace: kube-system
  labels:
    tier: node
    app: flannel
data:
  cni-conf.json: |
    {
      "name": "cbr0",
      "cniVersion": "0.3.1",
      "plugins": [
        {
          "type": "flannel",
          "delegate": {
            "hairpinMode": true,
            "isDefaultGateway": true
          }
        },
        {
          "type": "portmap",
          "capabilities": {
            "portMappings": true
          }
        }
      ]
    }
  net-conf.json: |
    {
      "Network": "10.244.0.0/16",
      "Backend": {
        "Type": "vxlan"
      }
    }
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: kube-flannel-ds-amd64
  namespace: kube-system
  labels:
    tier: node
    app: flannel
spec:
  selector:
    matchLabels:
      app: flannel
  template:
    metadata:
      labels:
        tier: node
        app: flannel
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: beta.kubernetes.io/os
                    operator: In
                    values:
                      - linux
                  - key: beta.kubernetes.io/arch
                    operator: In
                    values:
                      - amd64
      hostNetwork: true
      tolerations:
      - operator: Exists
        effect: NoSchedule
      serviceAccountName: flannel
      initContainers:
      - name: install-cni
        image: quay.io/coreos/flannel:v0.11.0-amd64
        command:
        - cp
        args:
        - -f
        - /etc/kube-flannel/cni-conf.json
        - /etc/cni/net.d/10-flannel.conflist
        volumeMounts:
        - name: cni
          mountPath: /etc/cni/net.d
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      containers:
      - name: kube-flannel
        image: quay.io/coreos/flannel:v0.11.0-amd64
        command:
        - /opt/bin/flanneld
        args:
        - --ip-masq
        - --kube-subnet-mgr
        resources:
          requests:
            cpu: "100m"
            memory: "50Mi"
          limits:
            cpu: "100m"
            memory: "50Mi"
        securityContext:
          privileged: false
          capabilities:
            add: ["NET_ADMIN"]
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        volumeMounts:
        - name: run
          mountPath: /run/flannel
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      volumes:
        - name: run
          hostPath:
            path: /run/flannel
        - name: cni
          hostPath:
            path: /etc/cni/net.d
        - name: flannel-cfg
          configMap:
            name: kube-flannel-cfg
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: kube-flannel-ds-arm64
  namespace: kube-system
  labels:
    tier: node
    app: flannel
spec:
  selector:
    matchLabels:
      app: flannel
  template:
    metadata:
      labels:
        tier: node
        app: flannel
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: beta.kubernetes.io/os
                    operator: In
                    values:
                      - linux
                  - key: beta.kubernetes.io/arch
                    operator: In
                    values:
                      - arm64
      hostNetwork: true
      tolerations:
      - operator: Exists
        effect: NoSchedule
      serviceAccountName: flannel
      initContainers:
      - name: install-cni
        image: quay.io/coreos/flannel:v0.11.0-arm64
        command:
        - cp
        args:
        - -f
        - /etc/kube-flannel/cni-conf.json
        - /etc/cni/net.d/10-flannel.conflist
        volumeMounts:
        - name: cni
          mountPath: /etc/cni/net.d
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      containers:
      - name: kube-flannel
        image: quay.io/coreos/flannel:v0.11.0-arm64
        command:
        - /opt/bin/flanneld
        args:
        - --ip-masq
        - --kube-subnet-mgr
        resources:
          requests:
            cpu: "100m"
            memory: "50Mi"
          limits:
            cpu: "100m"
            memory: "50Mi"
        securityContext:
          privileged: false
          capabilities:
             add: ["NET_ADMIN"]
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        volumeMounts:
        - name: run
          mountPath: /run/flannel
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      volumes:
        - name: run
          hostPath:
            path: /run/flannel
        - name: cni
          hostPath:
            path: /etc/cni/net.d
        - name: flannel-cfg
          configMap:
            name: kube-flannel-cfg
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: kube-flannel-ds-arm
  namespace: kube-system
  labels:
    tier: node
    app: flannel
spec:
  selector:
    matchLabels:
      app: flannel
  template:
    metadata:
      labels:
        tier: node
        app: flannel
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: beta.kubernetes.io/os
                    operator: In
                    values:
                      - linux
                  - key: beta.kubernetes.io/arch
                    operator: In
                    values:
                      - arm
      hostNetwork: true
      tolerations:
      - operator: Exists
        effect: NoSchedule
      serviceAccountName: flannel
      initContainers:
      - name: install-cni
        image: quay.io/coreos/flannel:v0.11.0-arm
        command:
        - cp
        args:
        - -f
        - /etc/kube-flannel/cni-conf.json
        - /etc/cni/net.d/10-flannel.conflist
        volumeMounts:
        - name: cni
          mountPath: /etc/cni/net.d
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      containers:
      - name: kube-flannel
        image: quay.io/coreos/flannel:v0.11.0-arm
        command:
        - /opt/bin/flanneld
        args:
        - --ip-masq
        - --kube-subnet-mgr
        resources:
          requests:
            cpu: "100m"
            memory: "50Mi"
          limits:
            cpu: "100m"
            memory: "50Mi"
        securityContext:
          privileged: false
          capabilities:
             add: ["NET_ADMIN"]
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        volumeMounts:
        - name: run
          mountPath: /run/flannel
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      volumes:
        - name: run
          hostPath:
            path: /run/flannel
        - name: cni
          hostPath:
            path: /etc/cni/net.d
        - name: flannel-cfg
          configMap:
            name: kube-flannel-cfg
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: kube-flannel-ds-ppc64le
  namespace: kube-system
  labels:
    tier: node
    app: flannel
spec:
  selector:
    matchLabels:
      app: flannel
  template:
    metadata:
      labels:
        tier: node
        app: flannel
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: beta.kubernetes.io/os
                    operator: In
                    values:
                      - linux
                  - key: beta.kubernetes.io/arch
                    operator: In
                    values:
                      - ppc64le
      hostNetwork: true
      tolerations:
      - operator: Exists
        effect: NoSchedule
      serviceAccountName: flannel
      initContainers:
      - name: install-cni
        image: quay.io/coreos/flannel:v0.11.0-ppc64le
        command:
        - cp
        args:
        - -f
        - /etc/kube-flannel/cni-conf.json
        - /etc/cni/net.d/10-flannel.conflist
        volumeMounts:
        - name: cni
          mountPath: /etc/cni/net.d
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      containers:
      - name: kube-flannel
        image: quay.io/coreos/flannel:v0.11.0-ppc64le
        command:
        - /opt/bin/flanneld
        args:
        - --ip-masq
        - --kube-subnet-mgr
        resources:
          requests:
            cpu: "100m"
            memory: "50Mi"
          limits:
            cpu: "100m"
            memory: "50Mi"
        securityContext:
          privileged: false
          capabilities:
             add: ["NET_ADMIN"]
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        volumeMounts:
        - name: run
          mountPath: /run/flannel
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      volumes:
        - name: run
          hostPath:
            path: /run/flannel
        - name: cni
          hostPath:
            path: /etc/cni/net.d
        - name: flannel-cfg
          configMap:
            name: kube-flannel-cfg
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: kube-flannel-ds-s390x
  namespace: kube-system
  labels:
    tier: node
    app: flannel
spec:
  selector:
    matchLabels:
      app: flannel
  template:
    metadata:
      labels:
        tier: node
        app: flannel
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: beta.kubernetes.io/os
                    operator: In
                    values:
                      - linux
                  - key: beta.kubernetes.io/arch
                    operator: In
                    values:
                      - s390x
      hostNetwork: true
      tolerations:
      - operator: Exists
        effect: NoSchedule
      serviceAccountName: flannel
      initContainers:
      - name: install-cni
        image: quay.io/coreos/flannel:v0.11.0-s390x
        command:
        - cp
        args:
        - -f
        - /etc/kube-flannel/cni-conf.json
        - /etc/cni/net.d/10-flannel.conflist
        volumeMounts:
        - name: cni
          mountPath: /etc/cni/net.d
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      containers:
      - name: kube-flannel
        image: quay.io/coreos/flannel:v0.11.0-s390x
        command:
        - /opt/bin/flanneld
        args:
        - --ip-masq
        - --kube-subnet-mgr
        resources:
          requests:
            cpu: "100m"
            memory: "50Mi"
          limits:
            cpu: "100m"
            memory: "50Mi"
        securityContext:
          privileged: false
          capabilities:
             add: ["NET_ADMIN"]
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        volumeMounts:
        - name: run
          mountPath: /run/flannel
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      volumes:
        - name: run
          hostPath:
            path: /run/flannel
        - name: cni
          hostPath:
            path: /etc/cni/net.d
        - name: flannel-cfg
          configMap:
            name: kube-flannel-cfg

应用这个flannel

kubectl apply -f kube-flannel.yml

在这里插入图片描述

4.3、把另外两个节点加入到集群中

在master节点运行获取token

kubeadm token create --print-join-command

去另外两个节点执行

kubeadm join 192.168.137.201:6443 --token v2o3ft.do3gwbavj5zj7dww     --discovery-token-ca-cert-hash sha256:d364368a57abfadbbcafeb19e4efc26ac1704d8f68e8078dbb372277653d9f0d

回到master节点执行kubectl get nodes
在这里插入图片描述
执行监控命令

watch kubectl get pod -n kube-system -o wide

等到所有status都变味running的时候
在这里插入图片描述
重新执行kubectl get nodes
所有的nodes都是ready状态，集群就搭建成功了
在这里插入图片描述

五、遇到的问题

1、第一个warning
在这里插入图片描述
推荐使用systemd命令驱动
给 /etc/docker/daemon.json文件中添加一个

{
"exec-opts":["native.cgroupdriver=systemd"]
}

然后systemctl restart docker
2、第二个warning
在这里插入图片描述
docker的版本过高，最新只支持19.03的版本

关闭docker服务

systemctl stop docker.service

降低docker版本到19.03

yum downgrade --setopt=obsoletes=0 -y docker-ce-19.03.15-3.el7 docker-ce-cli-19.03.15-3.el7 containerd.io-1.3.9-3.1.el7

接着再执行一次init

kubeadm init --kubernetes-version=v1.17.3 \
--pod-network-cidr=10.244.0.0/16 \ 
--service-cidr=10.96.0.0/16 \
--ignore-preflight-errors=Swap

初始化就成功了
在这里插入图片描述
3、ERROR问题
在这里插入图片描述

echo "1" >/proc/sys/net/bridge/bridge-nf-call-iptables

执行一下这个就可以了

4、博主在安装的时候经常出现这个问题

[kubelet-check] Initial timeout of 40s passed.
在这里插入图片描述
参考这个文章之后，系统恢复到一开始。重新安装就成功安装了。
链接: kubeadm init初始化k8s集群时报错，[kubelet-check] Initial timeout of 40s passed.

依赖，已成瘾
关注
Kubernetes - 一键安装Kubernetes集群
wanght笔记
06-17 7321
文章目录集群方案一，集群安装准备主控服务器下载离线文件，安装Docker安装 python、pip、ansible工作节点二，配置集群安装环境启动 kubeasz 容器设置参数允许离线安装配置免密登录其他服务器创建集群配置配置服务器地址执行一键安装设置 kubectl 命令的别名 集群方案 使用三台物理机或VMware虚拟机来搭建集群环境，一台主控服务器，两台工作节点服务器。 如果资源有限也可以去掉一个工作节点，使用两台服务器。 一，集群安装准备 kubeasz项目(https://github.
kubernetes笔记（七）
最新发布
qq_42750608的博客
10-07 634
kubernetes笔记（七） service管理
kubernetes集群安装
m0_37642477的博客
03-05 623
Kubernetes集群安装 ip 版本 172.30.101.14（master） CentOS Linux release 8.2.2004 (Core) 172.30.101.15（node） CentOS Linux release 8.2.2004 (Core) 设置主机名并配置hosts配置文件 [root@localhost ~]# hostnamectl set-hostname master [root@localhost ~]# hostnamectl set-h
安装Kubernetes 集群
weixin_61395392的博客
01-05 725
准备工作 克隆centos8命名为k1，将ip设为192.168.64.191 kubeasz项目(https://github.com/easzlab/kubeasz)，下载Kubernetes项目，并解压 将ezdown文件拖入/root/目录 将kubeasz文件夹拖入/etc/目录 将images.gz压缩包拖入/root/目录 给ezdown文件添加执行权限 chmod +x ./ezdown 使用工具脚本下载离线文件，并安装Docker 默认下载最新推荐k8s/docker等
kubernetes集群安装.doc
07-13
kubernetes集群安装是指使用kubeadm工具快速部署kubernetes集群的过程。下面是kubernetes集群安装的详细知识点： 1. 环境要求： * 一台或多台机器，操作系统CentOS 7.x-86_x64 * 硬件配置：内存2GB或2G+，CPU 2核...
2+3+4、Kubernetes 集群安装+Kubernetes 资源清单+Deployment 控制器-V4.pdf
10-11
Kubernetes 集群安装和配置 Kubernetes 是一个开源容器编排系统，提供了自动化部署、扩展和管理容器化应用程序的功能。本文档将指导读者完成 Kubernetes 集群的安装和配置。 Kubernetes 集群安装 Kubernetes 集群...
Kubernetes集群安装文档
06-05
Kubernetes集群安装,亲测可用
Kubernetes：Kubernetes集群安装与配置.docx
08-28
Kubernetes：Kubernetes集群安装与配置.docx
Kubernetes集群安装步骤（MD格式）
07-20
Kubernetes集群安装步骤（MD格式）
跟着我安装kubernetes 集群
11-09
从零开始布置kubernetes集群,理解kubernetes组件和应用 。
安装Kubernetes集群
m0_71689113的博客
05-13 890
裸机搭建一般有两种用方式“kubernetes方式”和“二进制方式”，Kubernetes是一个K8s部署工具，提供kubeadm init 和kubeadm join，用于快速部署Kubernete集群，二进制方式需将所有组件安装，非常的复杂，所以一般采用kubeadm方式。
Kubernetes集群的安装部署
这里将承载一段最初的记忆
01-16 441
Kubernetes集群的安装部署 此文参照https://www.cnblogs.com/zhenyuyaodidiao/p/6500830.html，并根据实操过程略作修改。 1、环境介绍及准备： 1.1 物理机操作系统 　　物理机操作系统采用Centos7.3 64位，细节如下。 [root@k8s-master ~]# unam...
Kubernetes（K8s）集群安装部署
WX17520510319的博客
07-20 1954
Kubernetes（K8s）二进制安装部署，使用2台centos 7.9
kubernetes 安装
程序员
04-03 167
1、关闭防火墙 systemctl stop firewalld systemctl disable firewalld 2、关闭selinux sed -i 's/enforcing/disabled/' /etc/selinux/config setenforce 0 3、关闭swap(内存交换，不关闭会导致k8s性能下降) swapoff -a //临时 sed -ri 's/.*swap.*/#&/' /etc/fstab //永久 4、设置hostname hostn.
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值