k8s搭建

轉載：https://www.jianshu.com/p/ed10cf0f162d

1.0 準備

準備這個CentOS-7-x86_64-Minimal-1810
然後用vmware 或者virtualbox 安裝他

1.1 切換阿里的yum源

 

#安裝wget
yum install -y wget
#切換yum源
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
yum makecache
#安裝網絡工具
yum install -y net-tools

1.2關閉防火牆

systemctl stop firewalld & systemctl disable firewalld

1.3關閉swap

 

#臨時關閉
swapoff -a
#永久關閉,重啓後生效
vi /etc/fstab
#註釋以下代碼

/dev/mapper/centos-swap swap ...

1.4 配置docker 源

 

yum -y install yum-utils
yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
yum makecache

1.5 關閉selinux

 

#獲取狀態
getenforce
#暫時關閉
setenforce 0
#永久關閉 需重啓
vi /etc/sysconfig/selinux
#註釋以下代碼

SELINUX=disabled

2.0 配置服務器

準備3臺機子

 

#3臺服務器ip信息

172.16.253.129
172.16.253.130
172.16.253.131

2.1 設置host

在3臺服務器上都執行以下代碼

 

echo "172.16.253.129 srv.master" >> /etc/hosts
echo "172.16.253.130 srv.etcd" >> /etc/hosts
echo "172.16.253.131 srv.node1" >> /etc/hosts

3.1搭建etcd

 

#登錄etcd服務器
ssh [email protected]
#下載etcd
yum -y install etcd
#配置config
vi /etc/etcd/etcd.conf
#設置如下

ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:2379"
ETCD_ADVERTISE_CLIENT_URLS="http://srv.etcd:2379"

3.2 運行etcd

 

#設置開機啓動 且啓動服務
systemctl enable etcd && systemctl start etcd

[root@localhost ~]# netstat -nlp | grep etcd
tcp 0 0 127.0.0.1:2380 0.0.0.0:* LISTEN 7130/etcd
tcp6 0 0 :::2379

3.3配置etcd內網信息

 

#設置 (就像定義一個變量一樣)
etcdctl -C http://172.16.253.130:2379 set /atomic.io/network/config '{"Network":"172.17.0.0/16"}' 
 
#獲取
# etcdctl -C http://172.16.253.130:2379 get /atomic.io/network/config
{"Network":"172.17.0.0/16"}

注:
172.17.0.0/16這個是節點主機Docker網卡的網段。
/atomic.io/network/config類似定義的變量名，在節點機中Flanneld配置裏的FLANNEL_ETCD_PREFIX項對應。

4.1 master服務器上安裝服務

 

#登錄master服務器
ssh [email protected]
#安裝服務
yum -y install kubernetes-master
#配置config
vi /etc/kubernetes/apiserver
# 配置如下

KUBE_API_ADDRESS="--insecure-bind-address=0.0.0.0"
KUBE_ETCD_SERVERS="--etcd-servers=http://srv.etcd:2379"

 

#配置config
vi  /etc/kubernetes/config
#配置如下

KUBE_MASTER="--master=http://srv.master:8080"

4.3 啓動

 

systemctl enable kube-apiserver kube-scheduler kube-controller-manager
systemctl start kube-apiserver kube-scheduler kube-controller-manager

[root@localhost ~]# netstat -nlpt | grep kube
tcp6 0 0 :::6443 :::* LISTEN 15190/kube-apiserve
tcp6 0 0 :::10251 :::* LISTEN 15191/kube-schedule
tcp6 0 0 :::10252 :::* LISTEN 15192/kube-controll
tcp6 0 0 :::8080 :::* LISTEN 15190/kube-apiserve

4.4 測試

curl http://172.16.253.129:8080/version

4.5 若創建pod認證失敗

 

#修改配置
vi /etc/kubernetes/apiserver
#修改如下文

KUBE_ADMISSION_CONTROL="--admission-control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota"

在該行刪除ServiceAccount SecurityContextDeny 這2個選項

 

#重啓服務
systemctl restart kube-apiserver

刪除pod,重新創建

5.0部署node

ssh [email protected]

5.1安裝docker

 

#安裝docker 
yum -y install docker
#開機自啓 並啓動
systemctl enable docker  && systemctl start docker

 

[root@localhost ~]# ip a s docker0
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
    link/ether 02:42:35:d7:43:6f brd ff:ff:ff:ff:ff:ff
    inet 172.17.0.1/16 scope global docker0
       valid_lft forever preferred_lft forever

 

#修改config
vi  /etc/docker/daemon.json
#設置如下

"registry-mirrors": ["https://registry.docker-cn.com"]

 

#重啓
systemctl restart docker
#查看倉庫源是否設置成功
docker info

5.2部署flannel

 

#安裝
yum -y install flannel
#修改配置
vi /etc/sysconfig/flanneld
#修改如下

FLANNEL_ETCD_ENDPOINTS="http://srv.etcd:2379"
FLANNEL_ETCD_PREFIX="/atomic.io/network"

 

#開機自啓並啓動服務
systemctl enable flanneld && systemctl restart flanneld`

 

[root@localhost ~]# netstat -nlp | grep flanneld
udp        0      0 172.16.253.131:8285     0.0.0.0:*                           7670/flanneld     

5.3 部署k8s-node

 

#安裝服務
yum -y install kubernetes-node
#修改配置
vi /etc/kubernetes/config
#修改如下文

KUBE_MASTER="--master=http://srv.master:8080"

 

#修改配置
vi /etc/kubernetes/kubelet
#修改如下

KUBELET_HOSTNAME="--hostname-override=srv.node1"
KUBELET_API_SERVER="--api-servers=http://srv.master:8080"

 

#啓動服務
systemctl enable kubelet kube-proxy  && systemctl start kubelet kube-proxy

 

[root@localhost ~]# netstat -ntlp | grep kube
tcp        0      0 127.0.0.1:10248         0.0.0.0:*               LISTEN      7838/kubelet        
tcp        0      0 127.0.0.1:10249         0.0.0.0:*               LISTEN      7842/kube-proxy     
tcp        0      0 127.0.0.1:10250         0.0.0.0:*               LISTEN      7838/kubelet        
tcp        0      0 127.0.0.1:10255         0.0.0.0:*               LISTEN      7838/kubelet        
tcp6       0      0 :::4194                 :::*                    LISTEN      7838/kubelet  

5.4 處理潛在bug

創建pod 節點若出現/etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt: no such file or directory

以下解決方案

 

yum install *rhsm* -y

wget http://mirror.centos.org/centos/7/os/x86_64/Packages/python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm

rpm2cpio python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm | cpio -iv --to-stdout ./etc/rhsm/ca/redhat-uep.pem | tee /etc/rhsm/ca/redhat-uep.pem

docker pull registry.access.redhat.com/rhel7/pod-infrastructure:latest

6.0驗證

 

#登錄到master服務器上 
#查看節點信息
kubectl get nodes

[root@localhost ~]# kubectl get nodes
NAME STATUS AGE
srv.node1 Ready 1m