- 节点信息
ip 主机名 角色 操作系统
192.168.157.130 master 主 centeos7.6+
192.168.157.131 ode1 节点 Centos7.6+
192.168.157.132 node2 节点 Centos7.6+- 关闭防火墙相关
systemctl stop firewalld.service
systemctl stop iptables.service
systemctl disable firewalld.service
systemctl disable iptables.service将 SELinux 设置为 permissive 模式(将其禁用)
setenforce 0
sed -i 's/^SELINUX=enforcing$/SELINUX=disabled/' /etc/selinux/config关闭swap
swapoff -a
# 永久关闭, 需要注释掉/dev开头的文字
vim /etc/fstab 如下:
UUID=ed95c595-4813-480e-992b-85b1347842e8 / ext4 defaults 1 1
# /dev/vgdata/lvdata /data ext4 defaults 0 0 3. 网桥配置
modprobe br_netfilter
cat < /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF 使配置生效
sysctl -p /etc/sysctl.d/k8s.conf
ls /proc/sys/net/bridge4. 安装docker
安装基本服务
yum install -y net-tools epel-release vim yum-utils device-mapper-persistent-data lvm2配置docker和安装docker
yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
yum install -y docker-ce-18.06.0.ce
systemctl enable docker
systemctl start docker
cat < /etc/docker/daemon.json
{
"insecure-registries":["0.0.0.0/0"],
"exec-opts": ["native.cgroupdriver=systemd"]
}
EOF
systemctl restart docker 5. 安装k8s相关
配置k8syum源
cat < /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF 安装kubectl、kubelet、kubenetes-cni、kubeadm
yum install -y kubectl-1.14.1 kubelet-1.14.1 kubernetes-cni-0.7.5 kubeadm-1.14.1设置开机启动
systemctl enable kubelet准备k8s 需要的docker 镜像（因为外网原因，不能下载镜像）
cat > pullimages.sh << EOF
# 添加如下内容
docker pull mirrorgooglecontainers/kube-apiserver-amd64:v1.14.1
docker pull mirrorgooglecontainers/kube-controller-manager-amd64:v1.14.1
docker pull mirrorgooglecontainers/kube-scheduler-amd64:v1.14.1
docker pull mirrorgooglecontainers/kube-proxy-amd64:v1.14.1
docker pull mirrorgooglecontainers/pause:3.1
docker pull mirrorgooglecontainers/etcd-amd64:3.3.10
docker pull coredns/coredns:1.3.1
docker tag mirrorgooglecontainers/kube-controller-manager-amd64:v1.14.1 k8s.gcr.io/kube-controller-manager:v1.14.1
docker tag mirrorgooglecontainers/kube-scheduler-amd64:v1.14.1 k8s.gcr.io/kube-scheduler:v1.14.1
docker tag mirrorgooglecontainers/kube-apiserver-amd64:v1.14.1 k8s.gcr.io/kube-apiserver:v1.14.1
docker tag mirrorgooglecontainers/kube-proxy-amd64:v1.14.1 k8s.gcr.io/kube-proxy:v1.14.1
docker tag mirrorgooglecontainers/pause:3.1 k8s.gcr.io/pause:3.1
docker tag mirrorgooglecontainers/etcd-amd64:3.3.10 k8s.gcr.io/etcd:3.3.10
docker tag coredns/coredns:1.3.1 k8s.gcr.io/coredns:1.3.1
docker rmi mirrorgooglecontainers/kube-apiserver-amd64:v1.14.1
docker rmi mirrorgooglecontainers/kube-controller-manager-amd64:v1.14.1
docker rmi mirrorgooglecontainers/kube-scheduler-amd64:v1.14.1
docker rmi mirrorgooglecontainers/kube-proxy-amd64:v1.14.1
docker rmi mirrorgooglecontainers/pause:3.1
docker rmi mirrorgooglecontainers/etcd-amd64:3.3.10
docker rmi coredns/coredns:1.3.1
EOF
# 执行脚本
sh pullimages.sh6. 主节点初始化
集群初始化（请记录初始化最后打印出的kubeadm join 信息）（IP根据实际情况修改）
kubeadm init \
--kubernetes-version=v1.14.1 \
--pod-network-cidr=10.244.0.0/16 \
--apiserver-advertise-address=`ifconfig eth0 |awk '{print $2}'|sed -n "2,1p"`
记录：
kubeadm join ${IP_ADDRESS}:6443 --token p2f3ud.l44djf21s0nj7a5y \
--discovery-token-ca-cert-hash sha256:866d6131855e1847bcec7481a184b42ea8616bbe95a9ffcf8dfcc64cdb38a905
# 复制配置
mkdir ~/.kube
cp -i /etc/kubernetes/admin.conf ~/.kube/config
chown $(id -u):$(id -g) ~/.kube/config7. 主节点配置flannel网络
wget https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml
kubectl apply -f kube-flannel.yml使 master 节点参与工作负载
kubectl describe node | grep Taint
kubectl taint nodes --all node-role.kubernetes.io/master-8. 子节点加入集群
注意: 【子节点执行】子节点加入集群（IP根据实际情况修改）
kubeadm join ${IP_ADDRESS}:6443 --token p2f3ud.l44djf21s0nj7a5y \
--discovery-token-ca-cert-hash sha256:866d6131855e1847bcec7481a184b42ea8616bbe95a9ffcf8dfcc64cdb38a905
# 确认日志无报错
# 复制配置
mkdir ~/.kube
拷贝主节点的 ~/.kube/config 到 ~/.kube（命令:scp -r ${IP_ADDRESS}:/root/.kube/config ~/.kube/）
chown $(id -u):$(id -g) ~/.kube/config
# 在主节点查询 Ready 说明节点加入集群正常
kubectl get nodes