kubeadm安装k8s 1.15版本集群
文章目录安装前准备工作安装docker-ce-18.06.1安装kubectlkubeadminkubelete 等1.15的版本安装k8s 1.15版本的master安装flannel 网络组件node 节点加入集群清理安装前准备工作时间同步yuminstallntpntpdate -ysystemctlstart ntpdsystemctlenablentpd基本常用的命令的安装yumclea
·
文章目录
安装前准备工作
- 时间同步
yum install ntp ntpdate -y
systemctl start ntpd
systemctl enable ntpd
- 基本常用的命令的安装
yum clean all
yum -y install psmisc gcc gcc-c++ texinfo wget unzip zip gcc libticonv-devel libcurl-devel curl nmap iotop dstat tree mlocate ntpdate openssh-clients net-tools vim unzip zip wget ftp ntsysv nmap curl lrzsz sysstat libselinux-python pcre pcre-devel zlib zlib-devel openssl openssl-devel readline-devel bzip2 mysql mysql-devel httpd-devel python-devel python-pip python-setuptools lsof nscd bind-utils telnet rsync tcpdump expect nc ntp lftp bash-completion
- 关闭 firewalld
systemctl stop firewalld
systemctl disable firewalld
- 关闭swap 分区
swapoff -a
sed -i '/swap/d' /etc/fstab
mount -a
- 关闭 selinux
setenforce 0
sed -i "s/^SELINUX=enforcing/SELINUX=disabled/g" /etc/sysconfig/selinux
sed -i "s/^SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config
sed -i "s/^SELINUX=permissive/SELINUX=disabled/g" /etc/sysconfig/selinux
sed -i "s/^SELINUX=permissive/SELINUX=disabled/g" /etc/selinux/config
- k8s 安装内核参数调整
cat <<EOF > /etc/sysctl.d/k8s.conf
net.ipv4.ip_forward = 1
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF
sysctl -p /etc/sysctl.d/k8s.conf
安装docker-ce-18.06.1
yum remove docker docker-common docker-selinux docker-engine
yum install -y yum-utils device-mapper-persistent-data lvm2
yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
yum repolist
yum install docker-ce-18.06.1.ce-3.el7 -y
mkdir -p /etc/docker
cat > /etc/docker/daemon.json <<EOF
{
"exec-opts": ["native.cgroupdriver=systemd"],
"log-driver": "json-file",
"log-opts": {
"max-size": "100m",
"max-file": "10"
},
"oom-score-adjust": -1000,
"registry-mirrors": ["http://f1361db2.m.daocloud.io"],
"storage-driver": "overlay2",
"storage-opts":["overlay2.override_kernel_check=true"],
"live-restore": true
}
EOF
systemctl enable docker && systemctl start docker
安装kubectl kubeadmin kubelete 等1.15的版本
cat > /etc/yum.repos.d/kubernetes.repo << EOF
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF
yum install -y kubelet-1.15.0 kubeadm-1.15.0 kubectl-1.15.0
systemctl enable kubelet
安装k8s 1.15版本的master
- 第一种安装方式
masterIP=$(ip addr show | grep ens | grep inet | awk -F '/' '{print $1}' | awk '{print $2}')
kubeadm init \
--apiserver-advertise-address=${masterIP} \
--image-repository registry.aliyuncs.com/google_containers \
--kubernetes-version v1.15.0 \
--service-cidr=10.1.0.0/16 \
--pod-network-cidr=10.244.0.0/16
- 第二种安装方式
kubeadm config print init-defaults > kubeadm-init-config.yaml
kubeadm init --config kubeadm-init-config.yaml
安装flannel 网络组件
wget https://raw.githubusercontent.com/coreos/flannel/a70459be0084506e4ec919aa1c114638878db11b/Documentation/kube-flannel.yaml
kubectl create -f kube-flannel.yaml
node 节点加入集群
-
第一种方式: 安装前的准备工作和docker 与 kubeadm 等都安装和配置好后,根据master 安装后生成的kubeadm join 命令语句执行即可
-
第二种方式
- 生成配置文件
kubeadm config print join-defaults > kubeadm-join-config.yaml
- 修改配置文件kubeadm-join-config.yaml
- apiServerEndpoint:连接apiserver的地址,即master的api地址,这里可以改为IP:6443,如果master集群高可用部署的话,这里需要改为集群vip地址
- token及tlsBootstrapToken:连接master使用的token,这里需要与master上的InitConfiguration中的token配置一致
- name:node节点的名称,如果使用主机名,需要确保master节点可以解析该主机名。否则的话可直接使用ip地址
- 把node 节点加入集群
kubeadm join --config kubeadm-join-config.yaml
- 生成配置文件
证书过期问题
清理
kubeadm reset
rm /etc/kubernetes/* -rf
rm ~/.kube/* -rf
rm /var/lib/etcd/* -rf
iptables -F && iptables -t nat -F && iptables -t mangle -F && iptables -X
更多推荐
已为社区贡献13条内容
所有评论(0)