Centos 7下Kubernetes 1.13.3的集群搭建

Centos 7下Kubernetes 1.13.3的集群搭建

配置

Linux虚拟机：双核4G

前期准备

查看IP

vi /etc/sysconfig/network-scripts/ifcfg-ens33

service network start

ip addr

配置selinux和firewalld

Set Selinux in permissive mode

setenforce 0

sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config

Stop and disable firwalld

systemctl disable firewalld --now

系统参数与内核模块

修改内核参数

cat <<EOF >etc/sysctl.d/k8s.conf

net.bridge.bridge-nf-call-ip6tables = 1

net.bridge.bridge-nf-iptables = 1

EOF

sysctl --system

加载内核模块

modprobe br_netfilter

lsmod | grep br_netfilter

配置yum源

cd /etc/yum.repos.d
mv CentOS-Base.repo CentOS-Base.repo.bak
curl -o CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
sed -i 's/gpgcheck=1/gpgcheck=0/g' /etc/yum.repos.d/CentOS-Base.repo

curl -o docker-ce.repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

cat <<EOF > /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
        http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF

yum makecache  

yum repolist

禁用swap

swapoff -a

echo "vm.swappiness = 0 ">> /etc/sysctl.conf

sysctl -p

安装docker

查看
先看一下有哪些可用版本：

yum list docker-ce --showduplicates | sort -r

我们选择一个版本安装：

yum install docker-ce-<VERSION STRING>

这里我选择18.03.1，所以我用的命令是：

yum install docker-ce-18.03.1

启动docker：

systemctl enable docker --now

查看服务状态：

systemctl status docker

安装Kubernetes

yum install -y kubelet-1.13.3
yum install –y kubectl-1.13.3
yum install –y kubeadm-1.13.3

最后启动kubelet，并设置为开机自启：

systemctl enable kubelet
systemctl start kubelet

查看需要下载的镜像

kubeadm config images list

然后去拉取相应的镜像，打为相应的标签。

镜像准备为了解决国内普遍访问不到k8s.gcr.io的问题，我们从mirrorgooglecontainers下载image，然后打个tag来绕过网络限制：

docker pull docker.io/mirrorgooglecontainers/kube-apiserver-amd64:v1.13.3
docker tag docker.io/mirrorgooglecontainers/kube-apiserver-amd64:v1.13.3 k8s.gcr.io/kube-apiserver:v1.13.3
docker pull docker.io/mirrorgooglecontainers/kube-controller-manager-amd64:v1.13.3
docker tag docker.io/mirrorgooglecontainers/kube-controller-manager-amd64:v1.13.3 k8s.gcr.io/kube-controller-manager:v1.13.3
docker pull docker.io/mirrorgooglecontainers/kube-scheduler-amd64:v1.13.3
docker tag docker.io/mirrorgooglecontainers/kube-scheduler-amd64:v1.13.3 k8s.gcr.io/kube-scheduler:v1.13.3
docker pull docker.io/mirrorgooglecontainers/kube-proxy-amd64:v1.13.3
docker tag docker.io/mirrorgooglecontainers/kube-proxy-amd64:v1.13.3 k8s.gcr.io/kube-proxy:v1.13.3
docker pull docker.io/mirrorgooglecontainers/pause-amd64:3.1
docker tag docker.io/mirrorgooglecontainers/pause-amd64:3.1 k8s.gcr.io/pause:3.1
docker pull docker.io/mirrorgooglecontainers/etcd-amd64:3.2.24
docker tag docker.io/mirrorgooglecontainers/etcd-amd64:3.2.24 k8s.gcr.io/etcd:3.2.24
docker pull docker.io/coredns/coredns:1.2.6
docker tag docker.io/coredns/coredns:1.2.6 k8s.gcr.io/coredns:1.2.6

>搭建k8s master节点，ip使用当前虚拟机的IP地址。

kubeadm init --kubernetes-version=1.13.3 --pod-network-cidr=10.224.0.0/16 --apiserver-advertise-address=

如果遇到报错，对着错误信息修正一下。比如没有关闭swap会遇到error，系统cpu不够会遇到error，网络不通等等都会出错，仔细看一下错误信息一般都好解决～
跑完上面的init命令后，会看到类似如下的输出：

Your Kubernetes master has initialized successfully!

To start using your cluster, you need to run the following as a regular user:

  mkdir -p $HOME/.kube
  sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  sudo chown $(id -u):$(id -g) $HOME/.kube/config

You should now deploy a pod network to the cluster.
Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
  https://kubernetes.io/docs/concepts/cluster-administration/addons/

You can now join any number of machines by running the following on each node
as root:

  kubeadm join 192.168.19.100:6443 --token i472cq.tr9a81qxnyqc5zj2 --discovery-token-ca-cert-hash sha256:acba957db29e0efbffe2cf4e484521b3b7e0f9d5c2ab7f9db68a5e31565d0d66

然后执行

mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config

创建node节点，重复上面操作，但不执行 kubeadm init…这条命令；
执行master节点返回的：

kubeadm join 192.168.19.100:6443 --token i472cq.tr9a81qxnyqc5zj2 --discovery-token-ca-cert-hash sha256:acba957db29e0efbffe2cf4e484521b3b7e0f9d5c2ab7f9db68a5e31565d0d66

这个返回值一天之后就会过期，重新生成token：

kubeadm  token create

然后将返回的token的遇上面的token进行替换即可。

安装网络插件，这里采用的事calico v3.6

kubectl apply -f \
https://docs.projectcalico.org/v3.6/getting-started/kubernetes/installation/hosted/kubernetes-datastore/calico-networking/1.7/calico.yaml

最后在master上执行

kubectl get nodes

如果显示的是ready，表示集群搭建成功，notready可能是网络插件没没安装好。