k8s安装教程--纯享版
·
1 检查环境（master/node）
# 检查时间同步问题
date
rpm -q chronyd
yum install -y chronyd
# 检查防火墙
systemctl status firewalld
systemctl stop firewalld && systemctl disable firewalld
iptables -vnL
# 关停swap
swapoff -a
永久关停
Vi /etc/fstab 注释掉swap
# 禁用SELinux 永久
vim /etc/sysconfig/selinux
SELINUX=disabled
临时 禁用SELinux,让容器可以读取主机文件系统
setenforce 0
# 启用 IPv4 数据包转发，调整br_netfilter内核参数，调整命名空间内核参数
cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward = 1
user.max_user_namespaces=28633
EOF
sudo sysctl --system
2 containerd 安装（master/node）
# 安装
yum install -y yum-utils
yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
yum install containerd
containerd config default > /etc/containerd/config.toml
# 修改配置文件
vim /etc/containerd/config.toml
原来的是
sandbox_image = "registry.k8s.io/pause:3.6"
改成
sandbox_image = "registry.aliyuncs.com/google_containers/pause:3.10"
systemctl start containerd
vi /etc/crictl.yaml
runtime-endpoint: unix:///var/run/containerd/containerd.sock
image-endpoint: unix:///var/run/containerd/containerd.sock
timeout: 10
debug: false
3 组件安装（master/node）
# 安装镜像仓库
cat <<EOF | tee /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes-new/core/stable/v1.31/rpm/
enabled=1
gpgcheck=1
gpgkey=https://mirrors.aliyun.com/kubernetes-new/core/stable/v1.31/rpm/repodata/repomd.xml.key
EOF
# 仓库更新
yum clean all && yum makecache
# 安装对应版本的kubelet kubeadm kubectl
yum install -y kubelet kubeadm kubectl
systemctl enable kubelet
# 列出k8s需要的镜像版本：
kubeadm config images list --image-repository registry.aliyuncs.com/google_containers
# 拉取以上镜像
crictl pull registry.aliyuncs.com/google_containers/kube-apiserver:v1.31.14
crictl pull registry.aliyuncs.com/google_containers/kube-controller-manager:v1.31.14
crictl pull registry.aliyuncs.com/google_containers/kube-scheduler:v1.31.14
crictl pull registry.aliyuncs.com/google_containers/kube-proxy:v1.31.14
crictl pull registry.aliyuncs.com/google_containers/coredns:v1.11.3
crictl pull registry.aliyuncs.com/google_containers/pause:3.10
crictl pull registry.aliyuncs.com/google_containers/etcd:3.5.24-0
4 集群初始化（master）
kubeadm init \
--apiserver-advertise-address=192.168.126.130 \
--image-repository registry.aliyuncs.com/google_containers \
--kubernetes-version v1.31.14 \
--service-cidr=11.1.0.0/16 \
--pod-network-cidr=10.244.0.0/16 \
--control-plane-endpoint m
完成后执行
mkdir -p $HOME/.kube
cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
chown $(id -u):$(id -g) $HOME/.kube/config
5 配置calico（master）
# 拉去镜像
ctr -n k8s.io image pull docker.m.daocloud.io/calico/pod2daemon-flexvol:v3.28.0
ctr -n k8s.io image pull docker.m.daocloud.io/calico/typha:v3.28.0
ctr -n k8s.io image pull docker.m.daocloud.io/calico/kube-controllers:v3.28.0
ctr -n k8s.io image pull docker.m.daocloud.io/calico/apiserver:v3.28.0
ctr -n k8s.io image pull docker.m.daocloud.io/calico/csi:v3.28.0
ctr -n k8s.io image pull docker.m.daocloud.io/calico/cni:v3.28.0
ctr -n k8s.io image pull docker.m.daocloud.io/calico/node:v3.28.0
ctr -n k8s.io image pull docker.m.daocloud.io/calico/node-driver-registrar:v3.28.0
#打标签
ctr -n k8s.io image tag docker.m.daocloud.io/calico/pod2daemon-flexvol:v3.28.0 docker.io/calico/pod2daemon-flexvol:v3.28.0
ctr -n k8s.io image tag docker.m.daocloud.io/calico/typha:v3.28.0 docker.io/calico/typha:v3.28.0
ctr -n k8s.io image tag docker.m.daocloud.io/calico/kube-controllers:v3.28.0 docker.io/calico/kube-controllers:v3.28.0
ctr -n k8s.io image tag docker.m.daocloud.io/calico/apiserver:v3.28.0 docker.io/calico/apiserver:v3.28.0
ctr -n k8s.io image tag docker.m.daocloud.io/calico/csi:v3.28.0 docker.io/calico/csi:v3.28.0
ctr -n k8s.io image tag docker.m.daocloud.io/calico/cni:v3.28.0 docker.io/calico/cni:v3.28.0
ctr -n k8s.io image tag docker.m.daocloud.io/calico/node:v3.28.0 docker.io/calico/node:v3.28.0
ctr -n k8s.io image tag docker.m.daocloud.io/calico/node-driver-registrar:v3.28.0 docker.io/calico/node-driver-registrar:v3.28.0
# 下载配置文件
Tigera Operator
wget https://raw.githubusercontent.com/projectcalico/calico/v3.28.0/manifests/tigera-operator.yaml
自定义资源
wget https://raw.githubusercontent.com/projectcalico/calico/v3.28.0/manifests/custom-resources.yaml
vim custom-resources.yaml
编辑配置文件修改pod cidr
cidr: 10.244.0.0/16
安装
kubectl create -f tigera-operator.yaml
kubectl create -f custom-resources.yaml
检查安装
kubectl get tigerastatus
注node集群需要拉取部分镜像进行使用
6 集群状态检查（master）
可以看到节点状态是ready，命名空间已创建，pod已全部运行
[root@m install-calico]# kubectl get namespace
NAME STATUS AGE
calico-apiserver Active 21m
calico-system Active 16h
default Active 17h
kube-node-lease Active 17h
kube-public Active 17h
kube-system Active 17h
tigera-operator Active 16h
[root@m install-calico]# kubectl get pod -A
NAMESPACE NAME READY STATUS RESTARTS AGE
calico-apiserver calico-apiserver-5898cb4fdf-ckp7c 1/1 Running 0 21m
calico-apiserver calico-apiserver-5898cb4fdf-nd2hg 1/1 Running 0 21m
calico-system calico-kube-controllers-67cbcd8f6-rfhwn 1/1 Running 0 16h
calico-system calico-node-pjd44 1/1 Running 0 16h
calico-system calico-typha-757d4d64bd-qn4qk 1/1 Running 0 16h
calico-system csi-node-driver-gtbq4 2/2 Running 0 16h
kube-system coredns-855c4dd65d-5dfd8 1/1 Running 0 17h
kube-system coredns-855c4dd65d-pjjzn 1/1 Running 0 17h
kube-system etcd-m 1/1 Running 0 17h
kube-system kube-apiserver-m 1/1 Running 0 17h
kube-system kube-controller-manager-m 1/1 Running 1 (15h ago) 17h
kube-system kube-proxy-c4grr 1/1 Running 0 17h
kube-system kube-scheduler-m 1/1 Running 1 (15h ago) 17h
tigera-operator tigera-operator-6847585ccf-bkz8n 1/1 Running 1 (15h ago) 16h
[root@m install-calico]# kubectl get node
NAME STATUS ROLES AGE VERSION
m Ready control-plane 17h v1.31.14
7 后期节点加入（node）
# 默认token在24小时后过期，后续的node要加入集群需要在master节点上用下面的命令重新生成token。
kubeadm token create
kubeadm token list
# 加入集群
kubeadm join --token (填写自己集群的信息) k8-m1:6443 --discovery-token-ca-cert-hash sha256:(填写自己集群的信息)
更多推荐
3
0- 0
已为社区贡献2条内容
所有评论(0)