kube-flannel.yml(已修改镜像下载数据源)

已于 2023-01-03 13:54:23 修改
阅读量1.1w 收藏 60
点赞数 29
文章标签： kubernetes
于 2020-11-18 11:36:44 首次发布
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/weixin_43298522/article/details/109769013
版权
手动创建 kube-flannel.yml文件
[root@k8smaster ~]# vim kube-flannel.yml
内容(镜像地址已经更换阿里数据源)
---
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
  name: psp.flannel.unprivileged
  annotations:
    seccomp.security.alpha.kubernetes.io/allowedProfileNames: docker/default
    seccomp.security.alpha.kubernetes.io/defaultProfileName: docker/default
    apparmor.security.beta.kubernetes.io/allowedProfileNames: runtime/default
    apparmor.security.beta.kubernetes.io/defaultProfileName: runtime/default
spec:
  privileged: false
  volumes:
    - configMap
    - secret
    - emptyDir
    - hostPath
  allowedHostPaths:
    - pathPrefix: "/etc/cni/net.d"
    - pathPrefix: "/etc/kube-flannel"
    - pathPrefix: "/run/flannel"
  readOnlyRootFilesystem: false
  # Users and groups
  runAsUser:
    rule: RunAsAny
  supplementalGroups:
    rule: RunAsAny
  fsGroup:
    rule: RunAsAny
  # Privilege Escalation
  allowPrivilegeEscalation: false
  defaultAllowPrivilegeEscalation: false
  # Capabilities
  allowedCapabilities: ['NET_ADMIN']
  defaultAddCapabilities: []
  requiredDropCapabilities: []
  # Host namespaces
  hostPID: false
  hostIPC: false
  hostNetwork: true
  hostPorts:
  - min: 0
    max: 65535
  # SELinux
  seLinux:
    # SELinux is unused in CaaSP
    rule: 'RunAsAny'
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: flannel
rules:
  - apiGroups: ['extensions']
    resources: ['podsecuritypolicies']
    verbs: ['use']
    resourceNames: ['psp.flannel.unprivileged']
  - apiGroups:
      - ""
    resources:
      - pods
    verbs:
      - get
  - apiGroups:
      - ""
    resources:
      - nodes
    verbs:
      - list
      - watch
  - apiGroups:
      - ""
    resources:
      - nodes/status
    verbs:
      - patch
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: flannel
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: flannel
subjects:
- kind: ServiceAccount
  name: flannel
  namespace: kube-system
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: flannel
  namespace: kube-system
---
kind: ConfigMap
apiVersion: v1
metadata:
  name: kube-flannel-cfg
  namespace: kube-system
  labels:
    tier: node
    app: flannel
data:
  cni-conf.json: |
    {
      "name": "cbr0",
      "cniVersion": "0.3.1",
      "plugins": [
        {
          "type": "flannel",
          "delegate": {
            "hairpinMode": true,
            "isDefaultGateway": true
          }
        },
        {
          "type": "portmap",
          "capabilities": {
            "portMappings": true
          }
        }
      ]
    }
  net-conf.json: |
    {
      "Network": "10.244.0.0/16",
      "Backend": {
        "Type": "vxlan"
      }
    }
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: kube-flannel-ds-amd64
  namespace: kube-system
  labels:
    tier: node
    app: flannel
spec:
  selector:
    matchLabels:
      app: flannel
  template:
    metadata:
      labels:
        tier: node
        app: flannel
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: kubernetes.io/os
                    operator: In
                    values:
                      - linux
                  - key: kubernetes.io/arch
                    operator: In
                    values:
                      - amd64
      hostNetwork: true
      tolerations:
      - operator: Exists
        effect: NoSchedule
      serviceAccountName: flannel
      initContainers:
      - name: install-cni
        image: registry.cn-zhangjiakou.aliyuncs.com/test-lab/coreos-flannel:amd64
        command:
        - cp
        args:
        - -f
        - /etc/kube-flannel/cni-conf.json
        - /etc/cni/net.d/10-flannel.conflist
        volumeMounts:
        - name: cni
          mountPath: /etc/cni/net.d
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      containers:
      - name: kube-flannel
        image: registry.cn-zhangjiakou.aliyuncs.com/test-lab/coreos-flannel:amd64
        command:
        - /opt/bin/flanneld
        args:
        - --ip-masq
        - --kube-subnet-mgr
        resources:
          requests:
            cpu: "100m"
            memory: "50Mi"
          limits:
            cpu: "100m"
            memory: "50Mi"
        securityContext:
          privileged: false
          capabilities:
            add: ["NET_ADMIN"]
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        volumeMounts:
        - name: run
          mountPath: /run/flannel
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      volumes:
        - name: run
          hostPath:
            path: /run/flannel
        - name: cni
          hostPath:
            path: /etc/cni/net.d
        - name: flannel-cfg
          configMap:
            name: kube-flannel-cfg
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: kube-flannel-ds-arm64
  namespace: kube-system
  labels:
    tier: node
    app: flannel
spec:
  selector:
    matchLabels:
      app: flannel
  template:
    metadata:
      labels:
        tier: node
        app: flannel
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: kubernetes.io/os
                    operator: In
                    values:
                      - linux
                  - key: kubernetes.io/arch
                    operator: In
                    values:
                      - arm64
      hostNetwork: true
      tolerations:
      - operator: Exists
        effect: NoSchedule
      serviceAccountName: flannel
      initContainers:
      - name: install-cni
        image: registry.cn-zhangjiakou.aliyuncs.com/test-lab/coreos-flannel:arm64
        command:
        - cp
        args:
        - -f
        - /etc/kube-flannel/cni-conf.json
        - /etc/cni/net.d/10-flannel.conflist
        volumeMounts:
        - name: cni
          mountPath: /etc/cni/net.d
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      containers:
      - name: kube-flannel
        image: registry.cn-zhangjiakou.aliyuncs.com/test-lab/coreos-flannel:arm64
        command:
        - /opt/bin/flanneld
        args:
        - --ip-masq
        - --kube-subnet-mgr
        resources:
          requests:
            cpu: "100m"
            memory: "50Mi"
          limits:
            cpu: "100m"
            memory: "50Mi"
        securityContext:
          privileged: false
          capabilities:
             add: ["NET_ADMIN"]
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        volumeMounts:
        - name: run
          mountPath: /run/flannel
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      volumes:
        - name: run
          hostPath:
            path: /run/flannel
        - name: cni
          hostPath:
            path: /etc/cni/net.d
        - name: flannel-cfg
          configMap:
            name: kube-flannel-cfg
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: kube-flannel-ds-arm
  namespace: kube-system
  labels:
    tier: node
    app: flannel
spec:
  selector:
    matchLabels:
      app: flannel
  template:
    metadata:
      labels:
        tier: node
        app: flannel
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: kubernetes.io/os
                    operator: In
                    values:
                      - linux
                  - key: kubernetes.io/arch
                    operator: In
                    values:
                      - arm
      hostNetwork: true
      tolerations:
      - operator: Exists
        effect: NoSchedule
      serviceAccountName: flannel
      initContainers:
      - name: install-cni
        image: registry.cn-zhangjiakou.aliyuncs.com/test-lab/coreos-flannel:arm
        command:
        - cp
        args:
        - -f
        - /etc/kube-flannel/cni-conf.json
        - /etc/cni/net.d/10-flannel.conflist
        volumeMounts:
        - name: cni
          mountPath: /etc/cni/net.d
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      containers:
      - name: kube-flannel
        image: registry.cn-zhangjiakou.aliyuncs.com/test-lab/coreos-flannel:arm
        command:
        - /opt/bin/flanneld
        args:
        - --ip-masq
        - --kube-subnet-mgr
        resources:
          requests:
            cpu: "100m"
            memory: "50Mi"
          limits:
            cpu: "100m"
            memory: "50Mi"
        securityContext:
          privileged: false
          capabilities:
             add: ["NET_ADMIN"]
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        volumeMounts:
        - name: run
          mountPath: /run/flannel
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      volumes:
        - name: run
          hostPath:
            path: /run/flannel
        - name: cni
          hostPath:
            path: /etc/cni/net.d
        - name: flannel-cfg
          configMap:
            name: kube-flannel-cfg
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: kube-flannel-ds-ppc64le
  namespace: kube-system
  labels:
    tier: node
    app: flannel
spec:
  selector:
    matchLabels:
      app: flannel
  template:
    metadata:
      labels:
        tier: node
        app: flannel
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: kubernetes.io/os
                    operator: In
                    values:
                      - linux
                  - key: kubernetes.io/arch
                    operator: In
                    values:
                      - ppc64le
      hostNetwork: true
      tolerations:
      - operator: Exists
        effect: NoSchedule
      serviceAccountName: flannel
      initContainers:
      - name: install-cni
        image: registry.cn-zhangjiakou.aliyuncs.com/test-lab/coreos-flannel:ppc64le
        command:
        - cp
        args:
        - -f
        - /etc/kube-flannel/cni-conf.json
        - /etc/cni/net.d/10-flannel.conflist
        volumeMounts:
        - name: cni
          mountPath: /etc/cni/net.d
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      containers:
      - name: kube-flannel
        image: registry.cn-zhangjiakou.aliyuncs.com/test-lab/coreos-flannel:ppc64le
        command:
        - /opt/bin/flanneld
        args:
        - --ip-masq
        - --kube-subnet-mgr
        resources:
          requests:
            cpu: "100m"
            memory: "50Mi"
          limits:
            cpu: "100m"
            memory: "50Mi"
        securityContext:
          privileged: false
          capabilities:
             add: ["NET_ADMIN"]
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        volumeMounts:
        - name: run
          mountPath: /run/flannel
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      volumes:
        - name: run
          hostPath:
            path: /run/flannel
        - name: cni
          hostPath:
            path: /etc/cni/net.d
        - name: flannel-cfg
          configMap:
            name: kube-flannel-cfg
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: kube-flannel-ds-s390x
  namespace: kube-system
  labels:
    tier: node
    app: flannel
spec:
  selector:
    matchLabels:
      app: flannel
  template:
    metadata:
      labels:
        tier: node
        app: flannel
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: kubernetes.io/os
                    operator: In
                    values:
                      - linux
                  - key: kubernetes.io/arch
                    operator: In
                    values:
                      - s390x
      hostNetwork: true
      tolerations:
      - operator: Exists
        effect: NoSchedule
      serviceAccountName: flannel
      initContainers:
      - name: install-cni
        image: registry.cn-zhangjiakou.aliyuncs.com/test-lab/coreos-flannel:s390x
        command:
        - cp
        args:
        - -f
        - /etc/kube-flannel/cni-conf.json
        - /etc/cni/net.d/10-flannel.conflist
        volumeMounts:
        - name: cni
          mountPath: /etc/cni/net.d
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      containers:
      - name: kube-flannel
        image: registry.cn-zhangjiakou.aliyuncs.com/test-lab/coreos-flannel:s390x
        command:
        - /opt/bin/flanneld
        args:
        - --ip-masq
        - --kube-subnet-mgr
        resources:
          requests:
            cpu: "100m"
            memory: "50Mi"
          limits:
            cpu: "100m"
            memory: "50Mi"
        securityContext:
          privileged: false
          capabilities:
             add: ["NET_ADMIN"]
        env:
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        volumeMounts:
        - name: run
          mountPath: /run/flannel
        - name: flannel-cfg
          mountPath: /etc/kube-flannel/
      volumes:
        - name: run
          hostPath:
            path: /run/flannel
        - name: cni
          hostPath:
            path: /etc/cni/net.d
        - name: flannel-cfg
          configMap:
            name: kube-flannel-cfg
启动
[root@k8smaster ~]# kubectl apply -f kube-flannel.yml
查看
[root@k8smaster ~]# kubectl get pods -n kube-system
NAME                                READY   STATUS    RESTARTS   AGE
coredns-7ff77c879f-5476h            1/1     Running   0          13h
coredns-7ff77c879f-d9xbg            1/1     Running   0          13h
etcd-k8smaster                      1/1     Running   3          13h
kube-apiserver-k8smaster            1/1     Running   3          13h
kube-controller-manager-k8smaster   1/1     Running   3          13h
kube-flannel-ds-amd64-7wx8g         1/1     Running   0          7m38s
kube-flannel-ds-amd64-f78h7         1/1     Running   0          7m38s
kube-flannel-ds-amd64-xvp7h         1/1     Running   0          7m38s
kube-proxy-4pgx7                    1/1     Running   0          13h
kube-proxy-9qqfh                    1/1     Running   3          13h
kube-proxy-whcnq                    1/1     Running   0          13h
kube-scheduler-k8smaster            1/1     Running   3          13h
Mr.Xu (徐刘)
关注
  • 29
    点赞
  • 踩
  • 60
    收藏
    觉得还不错? 一键收藏
  • 13
    评论
kube-flannel.yml
06-30
kubectl apply -f kube-flannel.yml
flannel镜像安装文件
01-17
flannel安装文件
部署k8s的时候kube-flannel.yml下载不下来解决
热门推荐
chen_haoren的博客
09-14 1万+
wget https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml wget kube-flannel.yml的时候显示连接失败 是因为网站被墙了，建议在/etc/hosts文件添加一条 199.232.68.133 raw.githubusercontent.com 就可以正常下载了。 下载完成后创建并查看 kubectl create -f kube-flannel.yml kube
k8s系列-使用containerd下载镜像并导入
最新发布
u011197085的博客
06-05 726
sudo ctr image pull docker.io/rancher/rancher-webhook:v0.4.3sudo ctr image export rancher-webhook-v0.4.3.tar docker.io/rancher/rancher-webhook:v0.4.3sudo ctr -n k8s.io images import rancher-webhook-v0.4.3.tar
kubernetes安装（国内网络+阿里云）
爱做梦的锤子
02-24 6955
本篇是一个安装教程，包含了docker安装，kubernetes安装以及kube-flannel网络插件的安装，整个安装过程使用的为国内网络环境，在阿里云的镜像服务的加持下，最后得以安装成功，本篇文章仅作为学习kubernetes过程中的一个服务安装参考，如有纰漏，欢迎指正。
基于公网 IP 搭建 K8s 集群
小哈哈的博客
04-25 453
3.1安装 kubeadm, kubelete, kubectl（所有节点）2.7kube-proxy开启ipvs的前置条件（所有节点）四、安装Fannel（子节点安装。2.4关闭防火墙并配置iptables规则（所有节点）3.2修改kubelet启动参数（所有节点）3.3重启kubelet（所有节点）2.8安装docker（所有节点）五、子节点加入工作节点（子节点）2.3安装依赖文件（所有节点）2.6调整系统参数（所有节点）3.4拉取所需镜像（所有节点）3.5初始化主节点（主节点）
kube-flannel.yml下载
zhanwuguo8346的博客
12-23 1811
是在https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml下载的kube-flannel.yml，需要的自取吧 链接：https://pan.baidu.com/s/1KUzyw0_kYKyJ-mYhNlvWEw 提取码：b1r0
K8S安装网络插件flannel
nnitxufd的博客
12-14 2708
K8S安装flannel网络插件
quay.io/coreos/flannel:v0.11.0-amd64镜像包
12-01
quay.io/coreos/flannel:v0.11.0-amd64镜像包，版本为v0.11.0-amd64 使用步骤 1、解压flanneld-v0.11.0-amd64.docker.zip 2、docker load -i flanneld-v0.11.0-amd64.docker 3、docker tag quay.io/coreos/flannel:v0.11.0-amd64 quay-mirror.qiniu.com/coreos/flannel:v0.11.0-amd64
flannel_v0.10.0-adm64镜像
01-22
flannel的镜像，版本v0.10.0-adm64，可以下载导入本地镜像库，然后快速安装网络插件flannel
flannel-v0.12.0.zip
04-11
解压flanneldockertar.tar.gz docker load -i *.tar 把这几个image push 到私有镜像库 例如registry 修改kube-flannel.yaml中image: 配置对应的registry地址 执行安装命令 kubectl apply -f kube-flannel.yaml
kube-flannel.yml.yml
05-12
https://github.com/coreos/flannel/blob/master/Documentation/kube-flannel.yml
网络插件kube-flannel.yml.zip
01-03
kube flannel yml 资源
kube-flannel-rbac.yml kube-flannel.yml
01-20
在Kubernetes环境中，`kube-flannel-rbac.yml` 和 `kube-flannel.yml` 文件是用来配置Flannel网络插件的权限和部署的。Flannel是一个轻量级的网络解决方案，它为Kubernetes集群提供跨节点的网络通信。让我们深入探讨...
k8s中flannel:镜像下载不了
qq_29860591的博客
12-19 5313
重新部署一套K8S集群时，由于K8S需要扁平化的网络，所以当执行下面的 root@master ~]# kubectl apply -f kube-flannel.yml 会开始下载镜像，然后去启动，结果等了几分钟，一直没有好 [root@k8s-master ~]# kubectl get pod -n kube-system NAME ...
flannel:v0.11.0-amd64镜像如何使用
08-27
flannel:v0.11.0-amd64是一个用于容器网络的镜像，可以用于在容器化环境中创建和管理虚拟网络。 使用flannel:v0.11.0-amd64镜像，首先需要在支持Docker的操作系统上安装Docker引擎。然后，可以使用Docker命令行或Docker Compose等工具来部署flannel镜像。 具体操作步骤如下： 1. 下载安装Docker：根据操作系统类型，在官方网站上下载最新版本的Docker引擎，并按照官方文档进行安装。 2. 部署flannel镜像：使用以下命令将flannel:v0.11.0-amd64镜像部署到Docker中： ``` docker run -d --net=host --privileged -v /dev/net:/dev/net quay.io/coreos/flannel:v0.11.0-amd64 /opt/bin/flanneld --ip-masq --kube-subnet-mgr ``` 解释一下上述命令： "docke run"是运行容器的命令，"-d"表示以守护进程方式运行，"--net=host"表示与主机共享网络命名空间，"--privileged"是为了启用容器内部的特权模式，"-v /dev/net:/dev/net"用于将主机网络设备挂载到容器中。 3. 验证部署：使用以下命令验证flannel是否成功部署： ``` docker ps -a ``` 如果flannel容器处于运行状态，即表示部署成功。 4. 配置flannel网络：根据具体的需求，可以通过修改配置文件或环境变量来配置flannel网络。可以在文档或官方GitHub页面上查找相关的配置说明。 总结：通过以上步骤，就可以使用flannel:v0.11.0-amd64镜像来创建和管理容器网络。需要注意的是，此版本的flannel可能会有更新，建议查看官方文档和GitHub页面以获取最新版本的说明和操作指南。
评论 13
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值