ubuntu18单机部署k8s(v1.14.1)

1.准备工作

• 关闭防火墙

sudo ufw disable

• 关闭系统swap

sudo swapoff -a

• 安装docker

建议版本: docker-ce-18.0x

2.准备k8s安装环境

• 下载并添加Kubernetes安装的密钥

sudo apt update && sudo apt install -y apt-transport-https curl
curl -s https://mirrors.aliyun.com/kubernetes/apt/doc/apt-key.gpg | sudo apt-key add -

• 配置k8s的源

sudo touch /etc/apt/sources.list.d/kubernetes.list 
sudo echo "deb http://apt.kubernetes.io/ kubernetes-xenial main" >> /etc/apt/sources.list.d/kubernetes.list

• 安装kubeadm及kubelet等工具

sudo apt-get update
sudo apt-get install -y kubelet kubeadm kubectl
# 保持版本，取消自动更新
sudo apt-mark hold kubelet kubeadm kubectl

3.kubeadm初始化集群

• 执行初始化操作

sudo kubeadm init --image-repository registry.aliyuncs.com/google_containers --kubernetes-version v1.14.1 --pod-network-cidr=10.240.0.0/16

成功的话，会输出类似以下的这些内容:

// ...
Your Kubernetes control-plane has initialized successfully!

To start using your cluster, you need to run the following as a regular user:

  mkdir -p $HOME/.kube
  sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  sudo chown $(id -u):$(id -g) $HOME/.kube/config

You should now deploy a pod network to the cluster.
Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
  https://kubernetes.io/docs/concepts/cluster-administration/addons/

Then you can join any number of worker nodes by running the following on each as root:

kubeadm join 192.168.200.212:6443 --token q1guce.z76o2a2bb65vhd0u \
    --discovery-token-ca-cert-hash sha256:2a57a27853c66d608bc544742b57602a21d47c3d09fe58eef15258946d4341c0 

• 如果我们想在非root用户下操作kubectl命令, 可以这样配置:

mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config

• 查看k8s集群的pod状态

xiaomo@xiaomo:~$ kubectl get pods --all-namespaces
NAMESPACE     NAME                             READY   STATUS    RESTARTS   AGE
kube-system   coredns-8686dcc4fd-4kjld         0/1     Pending   0          14m
kube-system   coredns-8686dcc4fd-4z6st         0/1     Pending   0          14m
kube-system   etcd-xiaomo                      1/1     Running   0          13m
kube-system   kube-apiserver-xiaomo            1/1     Running   0          13m
kube-system   kube-controller-manager-xiaomo   1/1     Running   0          13m
kube-system   kube-proxy-n7xq9                 1/1     Running   0          14m
kube-system   kube-scheduler-xiaomo            1/1     Running   0          14m

可以看到目前coredns处于pending状态，一般是因为还没安装网络插件(这里选calico)．

• 安装calico插件

# 从国内的一个源里下载
kubectl apply -f http://mirror.faasx.com/k8s/calico/v3.3.2/rbac-kdd.yaml
kubectl apply -f http://mirror.faasx.com/k8s/calico/v3.3.2/calico.yaml

• Master隔离解除(主节点也能部署工作任务)

kubectl taint nodes --all node-role.kubernetes.io/master-

# 成功时会输出类似提示:
node/xiaomo untainted

4.加入工作节点(假设有其他的节点需要加入到集群)

1)SSH到目标机器
2)切换至root用户，如: sudo su
2)根据上面`kubeadm init`命令得到的提示结果，运行`kubeadm join`：

kubeadm join --token <token> <master-ip>:<master-port> --discovery-token-ca-cert-hash sha256:<hash>

# kubeadm token list (可以获取的值)
# kubeadm token create (可以创建新的值)

# --discovery-token-ca-cert-hash (以下命令可以获取 --discovery-token-ca-cert-hash的值)
# openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'

5.查看集群状态

xiaomo@xiaomo:~$ kubectl get pods -n kube-system
NAME                                       READY   STATUS    RESTARTS   AGE
calico-node-tmcmn                          2/2     Running   0          55m
coredns-8686dcc4fd-4kjld                   1/1     Running   5          79m
coredns-8686dcc4fd-4z6st                   1/1     Running   5          79m
etcd-xiaomo                                1/1     Running   0          78m
kube-apiserver-xiaomo                      1/1     Running   0          79m
kube-controller-manager-xiaomo             1/1     Running   0          78m
kube-proxy-n7xq9                           1/1     Running   0          79m
kube-scheduler-xiaomo                      1/1     Running   0          79m
kubernetes-dashboard-5f7b999d65-f9m7d      1/1     Running   0          6m24s