167 lines
3.4 KiB
Markdown
167 lines
3.4 KiB
Markdown
|
### 1. 关闭防火墙
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
systemctl stop firewalld
|
|||
|
|
systemctl disable firewalld
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 2. 关闭selinux
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
sed -i 's/enforcing/disabled/' /etc/selinux/config # 永久
|
|||
|
|
setenforce 0 # 临时
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 3. 关闭swap
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
swapoff -a # 临时
|
|||
|
|
sed -ri 's/.*swap.*/#&/' /etc/fstab # 永久
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 4. 关闭完swap后，一定要重启一下虚拟机
|
|||
|
|
|
|||
|
|
### 5. 根据规划设置主机名
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
hostnamectl set-hostname
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 6. 在master添加hosts
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
cat >> /etc/hosts << EOF
|
|||
|
|
192.168.0.30 c-m-01
|
|||
|
|
192.168.0.35 c-w-01
|
|||
|
|
192.168.0.36 c-w-02
|
|||
|
|
EOF
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 7. 将桥接的IPv4流量传递到iptables的链
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
cat > /etc/sysctl.d/k8s.conf << EOF
|
|||
|
|
net.bridge.bridge-nf-call-ip6tables = 1
|
|||
|
|
net.bridge.bridge-nf-call-iptables = 1
|
|||
|
|
EOF
|
|||
|
|
sysctl --system # 生效
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 8. 时间同步
|
|||
|
|
|
|||
|
|
- centos7
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
yum install ntpdate -y
|
|||
|
|
ntpdate time.windows.com
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
- centos8
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
yum install -y chrony
|
|||
|
|
systemctl enable chronyd --now
|
|||
|
|
mv /etc/chrony.conf /etc/chrony.conf.bak
|
|||
|
|
cat >> /etc/chrony.conf << EOF
|
|||
|
|
server ntp.aliyun.com iburst
|
|||
|
|
server cn.ntp.org.cn iburst
|
|||
|
|
EOF
|
|||
|
|
systemctl restart chronyd.service
|
|||
|
|
chronyc sources -v
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 9. 添加软件源
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
cat > /etc/yum.repos.d/kubernetes.repo << EOF
|
|||
|
|
[kubernetes]
|
|||
|
|
name=Kubernetes
|
|||
|
|
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
|
|||
|
|
enabled=1
|
|||
|
|
gpgcheck=0
|
|||
|
|
repo_gpgcheck=0
|
|||
|
|
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
|
|||
|
|
EOF
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 10. 安装启动kubelet
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
yum install -y kubelet-1.23.6 kubeadm-1.23.6 kubectl-1.23.6
|
|||
|
|
systemctl enable kubelet
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 11.配置关闭 Docker 的 cgroups，修改 /etc/docker/daemon.json
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
cat > /etc/docker/daemon.json << EOF
|
|||
|
|
{"exec-opts": ["native.cgroupdriver=systemd"]}
|
|||
|
|
EOF
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 12. 重启 docker
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
systemctl daemon-reload
|
|||
|
|
systemctl restart docker
|
|||
|
|
systemctl restart kubelet
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 13. 在 Master 节点下执行
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
kubeadm init \
|
|||
|
|
--apiserver-advertise-address=192.168.0.30 \
|
|||
|
|
--image-repository registry.aliyuncs.com/google_containers \
|
|||
|
|
--kubernetes-version v1.23.6 \
|
|||
|
|
--service-cidr=10.96.0.0/12 \
|
|||
|
|
--pod-network-cidr=10.244.0.0/16
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 14. 安装成功后，复制如下配置并执行
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
mkdir -p $HOME/.kube
|
|||
|
|
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
|
|||
|
|
sudo chown $(id -u):$(id -g) $HOME/.kube/config
|
|||
|
|
kubectl get nodes
|
|||
|
|
|
|||
|
|
|
|||
|
|
kubeadm join 192.168.0.20:6443 --token 1rqvtc.llsvwdbyynmsccnu \
|
|||
|
|
--discovery-token-ca-cert-hash sha256:b9c12195b80ef6b8997b8275fc650ed252f64053a6e8273cbf59ec703112f6cf
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 15. 部署CNI网络插件,在 master 节点上执行
|
|||
|
|
|
|||
|
|
#### 15.1 下载 calico 配置文件，可能会网络超时
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
curl https://raw.githubusercontent.com/projectcalico/calico/v3.26.1/manifests/calico.yaml -O
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
#### 15.2 修改 calico.yaml 文件中的 CALICO_IPV4POOL_CIDR 配置，修改为与初始化的 cidr 相同
|
|||
|
|
|
|||
|
|
#### 15.3 修改 IP_AUTODETECTION_METHOD 下的网卡名称（新版没有）
|
|||
|
|
|
|||
|
|
#### 15.4 删除镜像 docker.io/ 前缀，避免下载过慢导致失败
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
sed -i 's#docker.io/##g' calico.yaml
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### 16. 任意节点都可使用kubectl
|
|||
|
|
|
|||
|
|
#### 16.1 将 master 节点中 /etc/kubernetes/admin.conf 拷贝到需要运行的服务器的 /etc/kubernetes 目录中
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
scp /etc/kubernetes/admin.conf root@vm-worker-01:/etc/kubernetes
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
#### 16.2 在对应的服务器上配置环境变量
|
|||
|
|
|
|||
|
|
```sh
|
|||
|
|
echo "export KUBECONFIG=/etc/kubernetes/admin.conf" >> ~/.bash_profile
|
|||
|
|
source ~/.bash_profile
|
|||
|
|
```
|
|||
|
|
|