centos7安装k8s

关闭防火墙 & selinux

systemctl stop firewalld && systemctl disable firewalld
sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

添加阿里yum源 docker yum源

https://download.docker.com/linux/centos/docker-ce.repo

cat >> /etc/yum.repos.d/kubernetes.repo << EOF
[kubernetes]
name=Kubernetes
baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
EOF

安装：工具

查看指定版本：
yum list kubeadm --showduplicates

yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes

开启服务

systemctl enable docker
systemctl start docker
systemctl start kubelet
systemctl enable kubelet

服务器没外网，配置docker使用代理上网 （如果有跳过）

#环境是在centos下，如果没有新建下面这个文件夹
sudo mkdir -p /etc/systemd/system/docker.service.d
#之后新建下面这个文件走http代理
vim /etc/systemd/system/docker.service.d/http-proxy.conf
#填入
[Service]
Environment="HTTP_PROXY=http://192.168.100.100:80/"

#编辑下面这个文件走https代理
vim /etc/systemd/system/docker.service.d/https-proxy.conf
[Service]
Environment="HTTPS_PROXY=http://192.168.100.100:80/"

修改为标准主机名：

hostnamectl set-hostname k8s-master

下载安装k8s包，不能访问google，用国内源或梯子

docker pull mirrorgooglecontainers/kube-apiserver:v1.14.0
docker pull mirrorgooglecontainers/kube-controller-manager:v1.14.0
docker pull mirrorgooglecontainers/kube-scheduler:v1.14.0
docker pull mirrorgooglecontainers/kube-proxy:v1.14.0
docker pull mirrorgooglecontainers/pause:3.1
docker pull mirrorgooglecontainers/etcd:3.3.10
docker pull coredns/coredns:1.3.1

docker tag docker.io/mirrorgooglecontainers/kube-apiserver:v1.14.0 k8s.gcr.io/kube-apiserver:v1.14.0
docker tag docker.io/mirrorgooglecontainers/kube-controller-manager:v1.14.0 k8s.gcr.io/kube-controller-manager:v1.14.0
docker tag docker.io/mirrorgooglecontainers/kube-scheduler:v1.14.0 k8s.gcr.io/kube-scheduler:v1.14.0
docker tag docker.io/mirrorgooglecontainers/kube-proxy:v1.14.0 k8s.gcr.io/kube-proxy:v1.14.0
docker tag docker.io/mirrorgooglecontainers/pause:3.1 k8s.gcr.io/pause:3.1
docker tag docker.io/mirrorgooglecontainers/etcd:3.3.10 k8s.gcr.io/etcd:3.3.10
docker tag docker.io/coredns/coredns:1.3.1 k8s.gcr.io/coredns:1.3.1

vi xie.yaml

apiVersion: kubeadm.k8s.io/v1beta1
kind: ClusterConfiguration
imageRepository:  k8s.gcr.io
kubernetesVersion: v1.14.0
networking:
  podSubnet: "192.168.0.0/16"

kubeadm init --config=xie.yaml

安装后提示的：

mkdir -p $HOME/.kube
  sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  sudo chown $(id -u):$(id -g) $HOME/.kube/config

kubectl get -n kube-system configmap

kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"

或
kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml

node1：

yum install docker-ce-18.09.0
yum install  kubelet-1.14.0-0 kubeadm-1.14.0-0  --disableexcludes=kubernetes

systemctl enable docker
systemctl start docker
systemctl start kubelet
systemctl enable kubelet

apiVersion: kubeadm.k8s.io/v1beta1
kind: ClusterConfiguration
controllerManagerExtraArgs:
  horizontal-pod-autoscaler-use-rest-clients: "true"
  horizontal-pod-autoscaler-sync-period: "10s"
  node-monitor-grace-period: "10s"
apiServerExtraArgs:
  runtime-config: "api/all=true"
kubernetesVersion: v1.14.0

kubeadm join --config=join.yaml

#日志：
kubectl --namespace=kube-system describe pod kube-proxy-pzf96

#加入集群token过期
kubeadm token create
kubeadm token list

#查看master信息yaml
kubectl -n kube-system get cm kubeadm-config -oyaml

journalctl -u kubelet --no-pager

master 2

USER=root
CONTROL_PLANE_IPS="master的ip"
for host in ${CONTROL_PLANE_IPS}; do
    ssh "${USER}"@$host "mkdir -p /etc/kubernetes/pki/etcd"
    scp /etc/kubernetes/pki/ca.* "${USER}"@$host:/etc/kubernetes/pki/
    scp /etc/kubernetes/pki/sa.* "${USER}"@$host:/etc/kubernetes/pki/
    scp /etc/kubernetes/pki/front-proxy-ca.* "${USER}"@$host:/etc/kubernetes/pki/
    scp /etc/kubernetes/pki/etcd/ca.* "${USER}"@$host:/etc/kubernetes/pki/etcd/
    scp /etc/kubernetes/admin.conf "${USER}"@$host:/etc/kubernetes/
done


kubeadm join 10.254.40.214:6443 --token k0l5kt.ukade976ftswl07s     --discovery-token-ca-cert-hash sha256:87bf666cbc4addb9da33ed9f4333de8cdb7dca4fefa6f244acea8445968d48cf --experimental-control-plane

参考链接

https://www.kubernetes.org.cn/5551.html

https://blog.csdn.net/networken/article/details/85607593

其他

#查看mastertoken是否过期
kubeadm token list

#生成不过期的token
kubeadm token create --ttl 0 --print-join-command


kubeadm token create 
#获取ca证书的hash值，不变的
openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'

kubectl -n kube-system get cm kubeadm-config -oyaml