K8s 1.23.8手动部署

docker：20.10.17 

#若在线安装docker，则执行以下命令即可，本文因已准备好包，因此不涉及
yum list docker-ce --showduplicates | sort -r
yum install docker-ce-20.10.8-3.el7 -y

#1、永久关闭seLinux(需重启系统生效)

setenforce 0

sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

#2、永久关闭swap(需重启系统生效)

swapoff -a # 临时关闭

sed -i 's/.*swap.*/#&/g' /etc/fstab # 永久关闭

#3、关闭防火墙
systemctl disable firewalld && systemctl stop firewalld

iptables -F && iptables -t nat -F && iptables -t mangle -F && iptables -X && iptables -P FORWARD ACCEPT && service iptables save

#4、加载IPVS模块，所有的安装包已上传至CSDN资源

yum install *

cat > /etc/sysconfig/modules/ipvs.modules <<EOF

modprobe -- ip_vs

modprobe -- ip_vs_rr

modprobe -- ip_vs_wrr

modprobe -- ip_vs_sh

modprobe -- nf_conntrack

modprobe -- nf_conntrack_ipv4

EOF


modprobe -- nf_conntrack


chmod 755 /etc/sysconfig/modules/ipvs.modules && bash /etc/sysconfig/modules/ipvs.modules && lsmod | grep -e ip_vs -e nf_conntrack

#5、开启br_netfilter

cat <<EOF | sudo tee /etc/modules-load.d/containerd.conf

overlay

br_netfilter

EOF


modprobe overlay

modprobe br_netfilter



cat <<EOF | sudo tee /etc/sysctl.d/99-kubernetes-cri.conf

net.bridge.bridge-nf-call-iptables = 1

net.ipv4.ip_forward = 1

net.bridge.bridge-nf-call-ip6tables = 1

EOF


sudo sysctl --system

#6、安装docker,上步已安装，直接进入下来的操作即可


systemctl enable docker --now


cat > /etc/docker/daemon.json <<EOF

{

"registry-mirrors": ["https://7vnz06qj.mirror.aliyuncs.com"],

"insecure-registries":["192.10.11.120"],

"exec-opts": ["native.cgroupdriver=systemd"],

"log-driver": "json-file",

"log-opts": {

"max-size": "100m"

},

"storage-driver": "overlay2",

"storage-opts": [

"overlay2.override_kernel_check=true"

]

}

EOF


systemctl daemon-reload && systemctl restart docker

#7、只有主节点操作：


mkdir ~/kubeadm_init && cd ~/kubeadm_init


cat > kubeadm-init.yaml << EOF

apiVersion: kubeadm.k8s.io/v1beta2

bootstrapTokens:

- groups:

- system:bootstrappers:kubeadm:default-node-token

token: abcdef.0123456789abcdef

ttl: 24h0m0s

usages:

- signing

- authentication

kind: InitConfiguration

localAPIEndpoint:

advertiseAddress: 192.10.1.101 #修改自己的ip

bindPort: 6443

nodeRegistration:

criSocket: /var/run/dockershim.sock

name: master

taints:

- effect: "NoSchedule"

key: "node-role.kubernetes.io/master"

---

apiServer:

timeoutForControlPlane: 4m0s

apiVersion: kubeadm.k8s.io/v1beta2

certificatesDir: /etc/kubernetes/pki

clusterName: kubernetes

controllerManager: {}

dns:

type: CoreDNS

etcd:

local:

dataDir: /var/lib/etcd

imageRepository: registry.aliyuncs.com/google_containers

kind: ClusterConfiguration

kubernetesVersion: v1.23.8

networking:

dnsDomain: cluster.local

serviceSubnet: 10.96.0.0/12

podSubnet: 10.244.0.0/16

scheduler: {}

---

apiVersion: kubeproxy.config.k8s.io/v1alpha1

kind: KubeProxyConfiguration

mode: ipvs

---

apiVersion: kubelet.config.k8s.io/v1beta1

kind: KubeletConfiguration

cgroupDriver: systemd

EOF

#8、预拉取镜像，资源包中有，导入即可，前面若完成则此步骤可跳过

kubeadm config images pull --config kubeadm-init.yaml

# 9.集群初始化

kubeadm init --config=kubeadm-init.yaml | tee kubeadm-init.log

#10、根据初始化后的提示操作主节点执行以下，主节点执行以下三句，从节点执行join
mkdir -p $HOME/.kube

sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config

sudo chown $(id -u):$(id -g) $HOME/.kube/config

systemctl enable kubelet.service (三台全执行)

#11、安装网络插件
wget https://kgithub.com/projectcalico/calico/raw/v3.24.1/manifests/calico.yaml

calico修改以下部分内容：

修改CIDR

- name: CALICO_IPV4POOL_CIDR

value: "10.244.0.0/16"

kubectl apply -f calico.yaml