#vim /etc/docker/daemon.json
{
"exec-opts"
: [
"native.cgroupdriver=cgroupfs"
]
}
#systemctl enable docker && systemctl start docker
#/etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
備註這兩個需要×××:
packages.cloud.google.com
raw.githubusercontent.com
#setenforce 0
# yum install -y kubelet kubeadm kubectl ebtables
# systemctl enable kubelet && systemctl start kubelet
#sysctl --system 關閉防火牆
# systemctl disable iptables-services firewalld
# systemctl stop iptables-services firewalld
#rm -r -f /etc/kubernetes /var/lib/kubelet /var/lib/etcd /etc/etcd
# swapoff -a 關閉swap分區
禁用ipv6:
# /etc/sysctl.d/k8s.conf
net.bridge.bridge - nf - call - ip6tables = 1 net.bridge.bridge - nf - call - iptables = 1 |
初始化你的master
# kubeadm init –pod-network-cidr=10.244.0.0/16
# mkdir -p $HOME/.kube
# cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
# chown $(id -u):$(id -g) $HOME/.kube/config
查看服務狀態:
#kubectl get pods --all-namespaces -o wide
創建calico 網絡
下載 rabc yaml: https://docs.projectcalico.org/v3.1/getting-started/kubernetes/installation/hosted/rbac-kdd.yaml
修改 calico.yaml 的網段爲 10.244.0.0/16。 key爲 CALICO_IPV4POOL_CIDR
安裝: kubectl apply -f rbac-kdd.yaml && kubectl apply -f calico.yaml
#systemctl status kubelet
#systemctl restart kubelet
重啓kube dns pod: 只需要強制刪除dns pod即可重啓
#kubectl delete pod --grace-period=0 --force --namespace=kube-system kube-dns-6f4fd4bdf-kn7rs
開啓master節點允許部署pod: kubectl taint nodes --all node-role.kubernetes.io/master-
安裝kube-dashboard:
確定以前是否開啓proxy, 8001端口沒有被佔用
開啓代理 - kubectl proxy --address='192.168.35.71' --accept-hosts='^*$' &
#kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/master/src/deploy/recommended/kubernetes-dashboard.yaml
應用dashboard權限: kubectl apply -f kube-dashboard-access.yaml
默認dashboard只能本機訪問,
其他可選安裝設置
--service-cluster-ip-range=10.254.0.0/16
--service-node-port-range=30000-32767
##############節點加入到集羣######
yum install -y docker 參考 CentOS Install Docker
yum install -y kubeadm 1.11.1-0
yum install -y kubectl 1.11.1-0
yum install -y kubelet 1.11.1-0
2.0 啓動依賴
setenforce 0
systemctl enable docker && systemctl start docker
systemctl enable kubelet && systemctl start kubelet
3.0 安裝依賴鏡像
依賴鏡像 - calico部分
設置
echo
'1' > /proc/sys/net/bridge/bridge-nf-call-iptables
4.0 執行join
shell
kubeadm join 192.168.35.51:6443 --token tpbi9f.3ot14qcehsmts4mj --discovery-token-ca-cert-hash sha256:xxxxx
k8s安裝istio:
#mkdir -p $HOME/istio/helm
#helm template install/kubernetes/helm/istio --name istio --namespace istio-system > $HOME/istio/helm/istio.yaml
#kc apply -f $HOME/istio/helm/istio.yaml
|