K8s简单集群部署

1、安装虚拟机

 

 

2、这里的网络选择NAT模式与主机连接，启用DHCP 子网192.168.190.0 网关192.168.190.2 DNS 是阿里云的 223.5.5.5

 

3、配置静态IP：ip地址  子网掩码  网关  DNS配置如下

 

4、开启网络自动连接

 

5、这里的网卡驱动有问题，需要借助CCleaner Free修复驱动

 

 

6、重启网络

 

7、配置本地hosts解析

/etc/hosts

192.168.190.131 master

192.168.190.132 node1

192.168.190.133 node2

8、最小参数要求

2g内存  2核cpu  50G磁盘

9、启用时间同步

systemctl  start   chronyd

systemctl  enable chronyd

10、关闭防火墙及selinux

/etc/selinux/config  disabled

systemctl stop iptables

systemctl stop firewalld

systemctl disable iptables

systemctl disable firewalld

11、禁用swap分区

/etc/fstab

#swap

12、配置k8s网络

/etc/sysctl.d/kubernetes.conf

net.bridge.bridge-nf-call-ip6tables = 1

net.bridge.bridge-nf-call-iptables = 1

net.ipv4.ip_forward = 1

13、加载配置

sysctl -p

14、配置ipset

yum install ipset ipvsadmin -y

modprobe br_netfilter

lsmod | grep br_netfilter

cat <<EOF > /etc/sysconfig/modules/ipvs.modules

#!/bin/bash

modprobe -- ip_vs

modprobe -- ip_vs_rr

modprobe -- ip_vs_wrr

modprobe -- ip_vs_sh

modprobe -- nf_conntrack_ipv4

EOF

15、配置ipvs

chmod +x /etc/sysconfig/modules/ipvs.modules

/bin/bash /etc/sysconfig/modules/ipvs.modules

lsmod | grep -e ip_vs -e nf_conntrack_ipv4

16、重启生效

reboot

17、安装docker

wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo -O /etc/yum.repos.d/docker-ce.repo

yum list docker-ce --showduplicates

yum -y install --setopt=obsoletes=0 docker-ce-18.06.3.ce-3.el7

mkdir /etc/docker

18、配置网络加速

cat <<EOF > /etc/docker/daemon.json

{

   “exec-opts”: [“native.cgroupdriver=systemd”],

   “registry-mirrors”: [“https://kn0t2bca.mirror.aliyuncs.com”]

}

EOF

systemctl  restart docker

19、检查docker

docker version

20、配置k8s源，这里需要先下载基础镜像，国网网站慢或者翻墙。这里选择aly的。然后打tag即可。

/etc/yum.repos.d/kubernetes.repo

cat <<EOF > /etc/yum.repos.d/kubernetes.repo

[kubernetes]

name=Kubernetes

baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64

enabled=1

gpgcheck=0

repo_gpgcheck=0

gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg

       http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg

EOF

21、下载镜像并打tag

docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-apiserver:v1.17.4

docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-controller-manager:v1.17.4

docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-proxy:v1.17.4

docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.1

docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/etcd:3.4.3-0

docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/coredns:1.6.5

docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-scheduler:v1.17.4

docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kube-apiserver:v1.17.4  k8s.gcr.io/kube-apiserver:v1.17.4

docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kube-controller-manager:v1.17.4  k8s.gcr.io/kube-controller-manager:v1.17.4

docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kube-scheduler:v1.17.4  k8s.gcr.io/kube-scheduler:v1.17.4

docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kube-proxy:v1.17.4  k8s.gcr.io/kube-proxy:v1.17.4

docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.1  k8s.gcr.io/pause:3.1

docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/etcd:3.4.3-0  k8s.gcr.io/etcd:3.4.3-0

docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/coredns:1.6.5  k8s.gcr.io/coredns:1.6.5

docker rmi registry.cn-hangzhou.aliyuncs.com/google_containers/kube-apiserver:v1.17.4

docker rmi registry.cn-hangzhou.aliyuncs.com/google_containers/kube-controller-manager:v1.17.4

docker rmi registry.cn-hangzhou.aliyuncs.com/google_containers/kube-proxy:v1.17.4

docker rmi registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.1

docker rmi registry.cn-hangzhou.aliyuncs.com/google_containers/etcd:3.4.3-0

docker rmi registry.cn-hangzhou.aliyuncs.com/google_containers/coredns:1.6.5

docker rmi registry.cn-hangzhou.aliyuncs.com/google_containers/kube-scheduler:v1.17.4

1. 设置docker开机自启动

systemctl enable docker.service

22、安装k8s，三台主机都要安装

yum install --setopt=obsolete=0 kubeadm-1.17.4-0 kubelet-1.17.4-0 kubectl-1.17.4-0

/etc/sysconfig/kubelet

KUBELET_CGROUP_ARGS="--cgroup-driver=systemd"

KUB_PROXY_MODE="ipvs"

systemctl enable kubelet

23、配置主节点

kubeadm init --kubernetes-version=v1.17.4 --pod-network-cidr=10.244.0.0/16 --service-cidr=10.96.0.0/12 --apiserver-advertise-address=192.168.190.131

mkdir -p $HOME/.kube

sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config

sudo chown $(id -u):$(id -g) $HOME/.kube/config

24、配置node节点，这里都要执行包括master

kubeadm join 192.168.190.131:6443 --token g4g207.46na22pl36t0hx4l \

>     --discovery-token-ca-cert-hash sha256:da53134b17a67fc72494e7e264dad8ab0fabe1661c064fa3202db5fbc30be3ef

25、验证

[root@master ~]# kubectl get nodes

NAME     STATUS     ROLES    AGE     VERSION

master   NotReady   master   3m34s   v1.17.4

node1    NotReady   <none>   18s     v1.17.4

node2    NotReady   <none>   5s      v1.17.4

26、加载k8s网络

wget  https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml

kubectl apply -f kube-flannel.yml

[root@master ~]# kubectl apply -f kube-flannel.yml

podsecuritypolicy.policy/psp.flannel.unprivileged created

clusterrole.rbac.authorization.k8s.io/flannel created

clusterrolebinding.rbac.authorization.k8s.io/flannel created

serviceaccount/flannel created

configmap/kube-flannel-cfg created

daemonset.apps/kube-flannel-ds created

27、验证nodes

[root@master ~]# kubectl get nodes

NAME     STATUS   ROLES    AGE   VERSION

master   Ready    master   13m   v1.17.4

node1    Ready    <none>   10m   v1.17.4

node2    Ready    <none>   10m   v1.17.4

28、创建ngnix容器

[root@master ~]# kubectl   create  deployment  nginx  --image=nginx:1.14-alpine

deployment.apps/nginx created

 

29、配置NodePort

[root@master ~]# kubectl    expose   deployment   nginx  --port=80  --type=NodePort

service/nginx exposed

30、查看结果

[root@master ~]# kubectl get deployments

NAME    READY   UP-TO-DATE   AVAILABLE   AGE

nginx   1/1     1            1           4m29s