kubeadm部署k8s

k8s搭建

1.集群环境

hostname	IP	remark	os
k8s-master	172.19.100.210	docker、kubectl、kubelet、kubeadm、flannel	centos7.*
k8s-node1	172.19.100.211	docker、kubectl、kubelet、kubeadm	centos7.*
k8s-node2	172.19.100.212	docker、kubectl、kubelet、kubeadm	centos7.*

2.软件版本

1. k8s=v1.12.3
2. flannel=v0.10.0-amd64 

3.环境准备

3.1设置主机名称

hostnamectl set-hostname k8s-master
hostnamectl set-hostname k8s-node1
hostnamectl set-hostname k8s-node2

3.2配置主机映射

172.19.100.210 k8s-master
172.19.100.211 k8s-node1
172.19.100.212 k8s-node2

3.3关闭防火墙

systemctl stop firewalld
systemctl disable firewalld

3.4关闭selinux

setenforce  0
sed -i "s/^SELINUX=enforcing/SELINUX=disabled/g" /etc/sysconfig/selinux
sed -i "s/^SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config
sed -i "s/^SELINUX=permissive/SELINUX=disabled/g" /etc/sysconfig/selinux 
sed -i "s/^SELINUX=permissive/SELINUX=disabled/g" /etc/selinux/config

3.5关闭Swap

swapoff -a //零时关闭，重启后失效
sed -i 's/.*swap.*/#&/' /etc/fstab  //永久关闭，重启后生效

3.6同步时间

yum install ntpdate -y
ntpdate  ntp.api.bz
timedatectl set-timezone Asia/Shanghai

3.7添加阿里云YUM软件源

cat << EOF > /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF

3.8设置内核(可选)

echo "* soft nofile 65536" >> /etc/security/limits.conf
echo "* hard nofile 65536" >> /etc/security/limits.conf
echo "* soft nproc 65536"  >> /etc/security/limits.conf
echo "* hard nproc 65536"  >> /etc/security/limits.conf
echo "* soft  memlock  unlimited"  >> /etc/security/limits.conf
echo "* hard memlock  unlimited"  >> /etc/security/limits.conf

3.9配置转发参数

//转发配置
cat <<EOF >  /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF
//系统生效
sysctl --system

4.docker安装

yum remove docker docker-common docker-selinux //卸载旧版本
yum install -y yum-utils device-mapper-persistent-data lvm2 //安装依赖
yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo //配置稳定仓库
yum install -y https://download.docker.com/linux/centos/7/x86_64/stable/Packages/docker-ce-selinux-17.03.0.ce-1.el7.centos.noarch.rpm
yum install docker-ce-17.03.0.ce-1.el7.centos.x86_64
systemctl enable docker
systemctl start docker
Tip: docker-ce-selinux的版本要与docker的版本一致，否则会有问题

5.安装kubeadm，kubelet，kubectl

yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes
systemctl enable kubelet
systemctl start kubelet

6.使用kubeadm创建单个Master集群

1.kubeadm init --kubernetes-version=1.12.3 --pod-network-cidr=172.20.0.0/16 --apiserver-advertise-address=172.19.100.210
2.mkdir -p $HOME/.kube
3.cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
4.chown $(id -u):$(id -g) $HOME/.kube/config
Tip: 如果1步骤执行，出现拉取镜像超时,原因是默认下载镜像地址在国外,无法访问所以需要根据提示准备镜像
K8S_VERSION=v1.12.3
ETCD_VERSION=3.2.24
DASHBOARD_VERSION=v1.8.3
FLANNEL_VERSION=v0.10.0-amd64
DNS_VERSION=1.2.2
PAUSE_VERSION=3.1
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-apiserver-amd64:$K8S_VERSION
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-controller-manager-amd64:$K8S_VERSION
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-scheduler-amd64:$K8S_VERSION
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-proxy-amd64:$K8S_VERSION
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/etcd-amd64:$ETCD_VERSION
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/pause:$PAUSE_VERSION
docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/coredns:$DNS_VERSION
docker pull quay.io/coreos/flannel:$FLANNEL_VERSION
docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kube-apiserver-amd64:$K8S_VERSION k8s.gcr.io/kube-apiserver:$K8S_VERSION
docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kube-controller-manager-amd64:$K8S_VERSION k8s.gcr.io/kube-controller-manager:$K8S_VERSION
docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kube-scheduler-amd64:$K8S_VERSION k8s.gcr.io/kube-scheduler:$K8S_VERSION
docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kube-proxy-amd64:$K8S_VERSION k8s.gcr.io/kube-proxy:$K8S_VERSION
docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/etcd-amd64:$ETCD_VERSION k8s.gcr.io/etcd:$ETCD_VERSION
docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/pause:$PAUSE_VERSION k8s.gcr.io/pause:$PAUSE_VERSION
docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/coredns:$DNS_VERSION k8s.gcr.io/coredns:$DNS_VERSION

7.加入Node

在Node节点切换到root账号
kubeadm join 172.19.100.210:6443 --token maqmd6.m0nib6xccbfmfuqa --discovery-token-ca-cert-hash sha256:be9ee64c2ebd0b2abd8c14cac6cfa622ff965ac77e7d84005ce24a488d5501e4
Tip: 
1.token获取：需在master节点执行kubeadm token create获取。有过期效应，如果过期重新执行该命令获取
2.ca证书sha256编码hash值：openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'

8.安装Pod网络插件flannel

wget https://raw.githubusercontent.com/coreos/flannel/v0.10.0/Documentation/kube-flannel.yml
kubectl apply -f kube-flannel.yml
Tip：文件中修改下面配置项
"Network": "172.20.0.0/16"

9.运维

//重启kubelet
[root@k8s-master /]# systemctl enable kubelet && systemctl start kubelet 

//重新初始化
[root@k8s-master /]# kubeadm reset 
[root@k8s-master /]# kubeadm init ....

//修改NodePort端口范围
[root@k8s-master /]# vi /etc/kubernetes/manifests/kube-apiserver.yaml
...
spec:
  containers:
  - command:
  - --service-node-port-range=1-65535
...
[root@k8s-master /]# systemctl enable kubelet && systemctl start kubelet

//k8s创建docker-registry类型的Secret认证私有镜像库
//删除
[root@k8s-master /]# kubectl delete secret registry-secrets -n default
//创建
[root@k8s-master /]# kubectl create secret docker-registry registry-secrets -n default --docker-server=... --docker-username=... --docker-password=...

10.附录

问题：https://blog.csdn.net/qq_34857250/article/details/82562514

来源：oschina

链接：https://my.oschina.net/u/2544373/blog/2992833