Centos 7.9 使用kubeadm安装K8S 1.25.0

安装过程中有问题可以给我留言看到会回复,如发现文档有问题的望指正.

一、机器准备

hostname	ip地址	系统版本	cpu	内存
k8s-master	192.168.88.35	centos 7.9	4核	8G
k8s-node	192.168.88.37	centos 7.9	4核	8G

二、初始化配置

1. master和node设置主机名

hostnamectl set-hostname k8s-master
hostnamectl set-hostname k8s-node

2. 设置hosts解析

cat >> /etc/hosts << EOF
192.168.88.35 k8s-master
192.168.88.37 k8s-node
EOF

3. 关闭防火墙

systemctl stop firewalld
systemctl disable firewalld

4. 关闭selinux

setenforce 0 
sed -i 's/enforcing/disabled/' /etc/selinux/config

5. 关闭swap交换分区

swapoff -a
sed -i '/swap/s/^/#/' /etc/fstab

6. 设置内核参数

modprobe br_netfilter
cat >> /etc/sysctl.conf  << EOF
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward=1
EOF
sysctl -p

7. 设置系统时区为上海

timedatectl set-timezone Asia/Shanghai

三、安装Docker

自 1.24.x版起,Docker不能再作为Kubernetes的容器运行时了,但因安装Docker会默认安装Containerd且个人觉得Docker用的顺手，所以这里还是安装Docker，也可以直接安装Containerd节省资源

1. 添加阿里yum源

yum install -y yum-utils device-mapper-persistent-data lvm2
yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

2. 安装并启动

yum -y install docker-ce
#也可以直接安装containerd    
#yum -y install containerd
#如果安装的containerd可以忽略下面操作直接跳到 配置Containerd
systemctl start docker
systemctl enable docker

3. 添加阿里的镜像源

cat > /etc/docker/daemon.json  << EOF
{
"registry-mirrors": ["https://r3ucysd2.mirror.aliyuncs.com"],
"exec-opts": ["native.cgroupdriver=systemd"],
"storage-driver": "overlay2"
}
EOF

4. 重启更新配置

systemctl daemon-reload
systemctl restart docker

四、配置Containerd

1. 生成默认配置文件并修改

containerd config default > /etc/containerd/config.toml
sed -i 's/k8s.gcr.io/registry.aliyuncs.com\/google_containers/' /etc/containerd/config.toml

2. 重启加载配置

systemctl daemon-reload
systemctl restart containerd

五、安装kubeadm、kubelet、kubectl

1. 添加K8S阿里源

cat > /etc/yum.repos.d/kubernetes.repo << EOF
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF

2. 查看可安装版本并安装

yum list --showduplicates kubeadm
yum install -y kubelet-1.25.0 kubeadm-1.25.0 kubectl-1.25.0

3. 设置kubelet开机自启

systemctl enable kubelet

六、初始化主节点

1. 在主节点设置集群信息

kubeadm init \
  --apiserver-advertise-address=192.168.88.35  \
  --image-repository registry.aliyuncs.com/google_containers \
  --kubernetes-version v1.25.0 \
  --service-cidr=10.96.0.0/12 \
  --pod-network-cidr=10.244.0.0/16 \
  --ignore-preflight-errors=all

2. 按照初始化日志提示创建目录

mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config

3. 按照初始化日志提示将从节点加入集群

kubeadm join 192.168.88.35:6443 --token geald1.4kx7yoiofgh0wtk8 \
--discovery-token-ca-cert-hash sha256:ec36596f455d84ee9119eaa2b1c4d84006c890edbddc92caba8f1e61d7fdad71
#第一行最后会有个"."要删除掉否则报错

4. kubectl命令补全

yum -y install bash-competion
echo "source <(kubectl completion bash)" >> ~/.bashrc
bash

七、安装Canal网络插件

不安装网络插件节点无法正常通信 状态为NotReady

1. 下载Canal的 yaml 文件
官网参考文档

curl https://raw.githubusercontent.com/projectcalico/calico/v3.24.1/manifests/canal.yaml -O
#不喜欢用Canal的也可以用Calico两个插件安装方法一样
curl https://projectcalico.docs.tigera.io/archive/v3.23/manifests/calico-etcd.yaml -O

2. 修改文件CALICO_IPV4POOL_CIDR字段

#原文如下：
        ---
        # The default IPv4 pool to create on startup if none exists. Pod IPs will be
        # chosen from this range. Changing this value after installation will have
        # no effect. This should fall within `--cluster-cidr`.
        # - name: CALICO_IPV4POOL_CIDR
        #   value: "192.168.0.0/16"

        
#修改IP为master初始化 --pod-network-cidr选项的IP，并去掉注释格式与其他字段对齐，修改后如下：
       ---
       # The default IPv4 pool to create on startup if none exists. Pod IPs will be
       # chosen from this range. Changing this value after installation will have
       # no effect. This should fall within `--cluster-cidr`.
       - name: CALICO_IPV4POOL_CIDR
         value: "10.244.0.0/16"

3. 执行修改后的yaml，安装Canal

kubectl apply -f canal.yaml

4. 查看节点状态是否Ready

[root@k8s-master ~]# kubectl get nodes
NAME         STATUS   ROLES           AGE   VERSION
k8s-master   Ready    control-plane   17h   v1.25.0
k8s-node     Ready    <none>          17h   v1.25.0

到此K8S 1.25.0 的安装及初始化就完成了，安装过程有问题可以给我留言看到会回复,如发现文档有问题的望指正.