安装 k8s
在 centos 7 上 直接运行
yum -y install etcd kubernetes
Kubernetes 依赖 Etcd 服务来维护所有主节点的状态。
修改配置文件
修改
# vim /etc/sysconfig/docker
OPTIONS='--selinux-enabled=false --insecure-registry gcr.io'
修改 k8s apiserver 的配置文件
vim /etc/kubernetes/apiserver
把
KUBE_ADMISSION_CONTROL="--admission-control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota"
中的 SecurityContextDeny,ServiceAccount 删掉。
启动服务
1.设置为开机自启动
systemctl enable docker
systemctl enable etcd
systemctl enable kube-apiserver
systemctl enable kube-controller-manager
systemctl enable kube-scheduller
systemctl enable kube-scheduler
systemctl enable kubelet
systemctl enable kube-proxy
2.启动
systemctl start docker
systemctl start etcd
systemctl start kube-apiserver
systemctl start kube-controller-manager
systemctl start kube-scheduller
systemctl start kube-scheduler
systemctl start kubelet
systemctl start kube-proxy
至此，一个单机版的k8s 集群就安装好了。
1.查看版本
kubectl version
输出
[root@centos ~]# kubectl version
Client Version: version.Info{Major:"1", Minor:"5", GitVersion:"v1.5.2", GitCommit:"269f928217957e7126dc87e6adfa82242bfe5b1e", GitTreeState:"clean", BuildDate:"2017-07-03T15:31:10Z", GoVersion:"go1.7.4", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"5", GitVersion:"v1.5.2", GitCommit:"269f928217957e7126dc87e6adfa82242bfe5b1e", GitTreeState:"clean", BuildDate:"2017-07-03T15:31:10Z", GoVersion:"go1.7.4", Compiler:"gc", Platform:"linux/amd64"}
2.查看服务
[root@centos ~]# kubectl get service
NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes 10.254.0.1 <none> 443/TCP 12h
[root@centos ~]# kubectl describe services kubernetes
Name: kubernetes
Namespace: default
Labels: component=apiserver
provider=kubernetes
Selector: <none>
Type: ClusterIP
IP: 10.254.0.1
Port: https 443/TCP
Endpoints: 192.168.10.115:6443
Session Affinity: ClientIP
No events.
定义 MYSQL RC 配置
我们创建一个 mysql-rc.yaml 的文件，内容如下：
apiVersion: v1
kind: ReplicationController # 副本控制器 RC
metadata:
name: mysql # RC名称，全局唯一
spec:
replicas: 1 # Pod副本期待数量
selector:
app: mysql # 符合目标 Pod拥有此标签
template: # 根据此模板创建 Pod 的副本（实例）
metadata:
labels:
app: mysql # Pod 副本拥有的标签，对应 RC 的Selector
spec:
containers: # Pod 内容的定义部分
- name: mysql #容器的名称
image: mysql #容器对应的 Docker Image
ports:
- containerPort: 3306 # 容器暴露的端口号
env: # 注入到容器的环境变量
- name: MYSQL_ROOT_PASSWORD
value: "123456"
说明
创建好 mysql-rc.yaml 文件以后，为了将它发布到 k8s 集群中，我们在 Master 节点执行命令：
kubectl create -f mysql-rc.yaml
提示如下
[root@centos ~]# kubectl create -f mysql-rc.yaml
replicationcontroller "mysql" created
提示如下错误请注意yaml 文件的格式是否正确以及配置参数是否输入正确
error: error validating "mysql-rc.yaml": error validating data: kind not set; if you choose to ignore these errors, turn validation off with --validate=false
查看 RC
[root@centos ~]# kubectl get rc
NAME DESIRED CURRENT READY AGE
mysql 1 1 0 1m
查看 Pod
[root@centos ~]# kubectl get pods
NAME READY STATUS RESTARTS AGE
mysql-cvg6c 0/1 ContainerCreating 0 3m
我们看到一个名为 mysql-xxxx的 Pod 实例，这是 k8s 根据 mysql 的这个 RC 文件的定义自动创建的 Pod。 由于其创建需要一些时间，因此我们一开始看到的 Pod 状态是 Pending，待最终完成会被更新为 Running
但是我们这边看到的状态是 ContainerCreating ,我们执行
[root@centos ~]# kubectl describe pod mysql
Name: mysql-cvg6c
Namespace: default
Node: 127.0.0.1/127.0.0.1
Start Time: Sat, 03 Mar 2018 09:22:42 +0800
Labels: app=mysql
Status: Pending
IP:
Controllers: ReplicationController/mysql
Containers:
mysql:
Container ID:
Image: mysql
Image ID:
Port: 3306/TCP
State: Waiting
Reason: ContainerCreating
Ready: False
Restart Count: 0
Volume Mounts: <none>
Environment Variables:
MYSQL_ROOT_PASSWORD: 123456
Conditions:
Type Status
Initialized True
Ready False
PodScheduled True
No volumes.
QoS Class: BestEffort
Tolerations: <none>
Events:
FirstSeen LastSeen Count From SubObjectPath Type Reason Message
--------- -------- ----- ---- ------------- -------- ------ -------
8m 8m 1 {default-scheduler } Normal Scheduled Successfully assigned mysql-cvg6c to 127.0.0.1
8m 3m 6 {kubelet 127.0.0.1} Warning FailedSync Error syncing pod, skipping: failed to "StartContainer" for "POD" with ErrImagePull: "image pull failed for registry.access.redhat.com/rhel7/pod-infrastructure:latest, this may be because there are no credentials on this request. details: (open /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt: no such file or directory)"
8m 12s 35 {kubelet 127.0.0.1} Warning FailedSync Error syncing pod, skipping: failed to "StartContainer" for "POD" with ImagePullBackOff: "Back-off pulling image \"registry.access.redhat.com/rhel7/pod-infrastructure:latest\""
可以看出是镜像下载失败了
Error syncing pod, skipping: failed to "StartContainer" for "POD" with ErrImagePull: "image pull failed for registry.access.redhat.com/rhel7/pod-infrastructure:latest, this may be because there are no credentials on this request. details: (open /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt: no such file or directory)"
解决办法:
yum install *rhsm*
因为没有这个文件或目录，这个解决办法，来自这里
然后删除 RC
[root@centos ~]# kubectl delete -f mysql-rc.yaml
replicationcontroller "mysql" deleted
重新创建
[root@centos ~]# kubectl create -f mysql-rc.yaml
replicationcontroller "mysql" created
[root@centos ~]# kubectl get rc
NAME DESIRED CURRENT READY AGE
mysql 1 1 0 10s
[root@centos ~]# kubectl get pods
NAME READY STATUS RESTARTS AGE
mysql-7blh0 0/1 ContainerCreating 0 13s
mysql-cvg6c 0/1 Terminating 0 21m
发现还是不行
[root@centos ~]# kubectl describe pods mysql
Name: mysql-j6vpx
Namespace: default
Node: 127.0.0.1/127.0.0.1
Start Time: Sat, 03 Mar 2018 09:51:30 +0800
Labels: app=mysql
Status: Pending
IP:
Controllers: ReplicationController/mysql
Containers:
mysql:
Container ID:
Image: mysql
Image ID:
Port: 3306/TCP
State: Waiting
Reason: ContainerCreating
Ready: False
Restart Count: 0
Volume Mounts: <none>
Environment Variables:
MYSQL_ROOT_PASSWORD: 123456
Conditions:
Type Status
Initialized True
Ready False
PodScheduled True
No volumes.
QoS Class: BestEffort
Tolerations: <none>
Events:
FirstSeen LastSeen Count From SubObjectPath Type Reason Message
--------- -------- ----- ---- ------------- -------- ------ -------
59m 59m 1 {default-scheduler } Normal Scheduled Successfully assigned mysql-j6vpx to 127.0.0.1
32m 32m 1 {kubelet 127.0.0.1} Warning MissingClusterDNS kubelet does not have ClusterDNS IP configured and cannot create Pod using "ClusterFirst" policy. Falling back to DNSDefault policy.
32m 32m 1 {kubelet 127.0.0.1} spec.containers{mysql} Normal Pulling pulling image "mysql"
1m 1m 1 {kubelet 127.0.0.1} Warning MissingClusterDNS kubelet does not have ClusterDNS IP configured and cannot create Pod using "ClusterFirst" policy. Falling back to DNSDefault policy.
59s 59s 1 {kubelet 127.0.0.1} spec.containers{mysql} Normal Pulling pulling image "mysql"
镜像一直在下载，原因是因为gcr.io 无法访问，需要翻墙。
郁闷啊，查找资料发现，可以直接修改pod-infrastructure:latest 的配置文件。如下
打开/etc/kubernetes/kubelet配置文件。
vim /etc/kubernetes/kubelet
###
# kubernetes kubelet (minion) config
# The address for the info server to serve on (set to 0.0.0.0 or "" for all interfaces)
KUBELET_ADDRESS="--address=0.0.0.0"
# The port for the info server to serve on
# KUBELET_PORT="--port=10250"
# You may leave this blank to use the actual hostname
KUBELET_HOSTNAME="--hostname-override=10.0.11.150"
# location of the api-server
KUBELET_API_SERVER="--api-servers=http://10.0.11.150:8080"
# pod infrastructure container
KUBELET_POD_INFRA_CONTAINER="--pod-infra-container-image=registry.access.redhat.com/rhel7/pod-infrastructure:latest"
# Add your own!
KUBELET_ARGS=""
将 上述 KUBELET_POD_INFRA_CONTAINER="--pod-infra-container-image=registry.access.redhat.com/rhel7/pod-infrastructure:latest"
换成国内可以下载的镜像地址。
docker search pod-infrastructure
[root@master ~]# docker search pod-infrastructure
INDEX NAME DESCRIPTION STARS OFFICIAL AUTOMATED
docker.io docker.io/tianyebj/pod-infrastructure registry.access.redhat.com/rhel7/pod-infra... 1
docker.io docker.io/w564791/pod-infrastructure latest 1
docker.io docker.io/grapeupci/infrastructure 0
docker.io docker.io/infrastructureascode/hello-world A tiny "Hello World" web server with a hea... 0 [OK]
docker.io docker.io/jqka/pod-infrastructure redhat pod 0 [OK]
docker.io docker.io/ocpqe/hello-pod Copy form docker.io/deshuai/hello-pod:latest 0
我们选择第一个。
修改前：KUBELET_POD_INFRA_CONTAINER="--pod-infra-container-image=registry.access.redhat.com/rhel7/pod-infrastructure:latest"
修改后：KUBELET_POD_INFRA_CONTAINER="--pod-infra-container-image=docker.io/tianyebj/pod-infrastructure:latest"
重启相关服务
systemctl restart kubelet docker kube-apiserver kube-controller-manager kube-scheduler
节点状态
节点的状态主要是用来描述处于 Running 的节点。当前可用的有 NodeReachable 和 NodeReady。以后可能会增加其他状态。NodeReachable 表示集群可达。NodeReady 表示 kubelet 返回 Status Ok 并且 HTTP 状态检查健康。
定义 MYSQL Service 配置
[root@centos ~]# cat mysql-
mysql-rc.yaml mysql-svc.yaml
[root@centos ~]# cat mysql-svc.yaml
apiVersion: v1
kind: Service #表明是kubernetes Service
metadata:
name: mysql
spec:
ports:
- port: 3306
selector:
app: mysql
创建 Service
[root@centos ~]# kubectl create -f mysql-svc.yaml
service "mysql" created
查看刚刚创建的Service
[root@centos ~]# kubectl get svc
NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes 10.254.0.1 <none> 443/TCP 13h
mysql 10.254.248.63 <none> 3306/TCP 1m
注意 Mysql 已经被分配了一个 10.254.248.63 的IP,我们可以通过 CLUSTER-IP+PORT的方式访问
[root@centos ~]# telnet 10.254.248.63 3306
Trying 10.254.248.63...
Connected to 10.254.248.63.
Escape character is '^]'.
J
5.7.21[8e-7}H8e;-bigi3mysql_native_password
定义 Tomcat RC 配置
创建Tomcat，创建一个 RC 文件 myweb-rc.yaml，内容如下
kind: ReplicationController
metadata:
name: myweb
spec:
replicas: 5
selector:
app: myweb
template:
metadata:
labels:
app: myweb
spec:
containers:
- name: myweb
image: kubeguide/tomcat-app:v1
ports:
-containerPort: 8080
env:
#此处如果在未安装域名解析的情况下，会无法将mysql对应的IP解析到env环境变量中，因此先注释掉！
# - name: MYSQL_SERVICE_HOST
# value: 'mysql'
- name: MYSQL_SERVICE_PORT
value: '3306'
执行
kubectl create -f myweb-rc.yaml
查看 pods
[root@centos ~]# kubectl get pods
NAME READY STATUS RESTARTS AGE
mysql-j6vpx 1/1 Running 0 10h
myweb-2bswt 1/1 Running 0 1m
myweb-5wq91 1/1 Running 0 1m
myweb-67j9n 1/1 Running 0 1m
myweb-r74qq 1/1 Running 0 1m
myweb-svz49 1/1 Running 0 1m
定义 Tomcat Service 配置
然后继续创建 myweb-svc.yaml，内容如下
apiVersion: v1
kind: Service
metadata:
name: myweb
spec:
type: NodePort
ports:
- port: 8080 # 容器端口
nodePort: 30001 # 外网映射的端口，可以通过30001 访问容器的8080端口
selector:
app: myweb
创建 Service
[root@centos ~]# kubectl create -f myweb-svc.yaml
service "myweb" created
查看 Service
[root@centos ~]# kubectl get services
NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes 10.254.0.1 <none> 443/TCP 22h
mysql 10.254.248.63 <none> 3306/TCP 9h
myweb 10.254.193.35 <nodes> 8080:30001/TCP 32s
删除 rc
[root@centos ~]# kubectl delete -f myweb-rc.yaml
查看 rc
[root@centos ~]# kubectl get rc
NAME DESIRED CURRENT READY AGE
mysql 1 1 1 11h
myweb 5 5 0 4s
访问，需要防火墙放行 30001 端口
参考文章： https://awen.me/post/26561.html
https://blog.csdn.net/A632189007/article/details/78730903
扫一扫
1642
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
