k8s.sh

安装Python

yum clean all
yum makecache
yum -y install gcc make zlib-devel openssl-devel bzip2-devel expat-devel gdbm-devel readline-devel sqlite-devel
yum -y install libSM libXrender libXext libffi-devel wget
wget -P /home/ "https://www.python.org/ftp/python/3.7.9/Python-3.7.9.tgz"
tar -xvf /home/Python-3.7.9.tgz -C /home/
cd /home/Python-3.7.9
./configure --prefix=/usr/local/python3
make && make install
ln -s /usr/local/python3/bin/python3 /usr/local/python3/bin/python
/usr/local/python3/bin/pip3 install --upgrade pip -i https://pypi.tuna.tsinghua.edu.cn/simple
rm -f /usr/bin/pip
ln -s /usr/local/python3/bin/pip3 /usr/bin/pip
ln -s /usr/local/python3/bin/python3 /usr/bin/python3
ln -s /usr/local/python3/bin/pip3 /usr/bin/pip3
echo export PATH=/usr/local/python3/bin:PATH >> /etc/profile.d/source_profile.sh
rm -rf /home/*
yum clean all
rm -rf /var/cache/yum

vi /etc/sysconfig/network-scripts/ifcfg-eth0
service network restart

cat >> /etc/hosts << EOF
192.168.137.130 K8SMASTER
192.168.137.131 K8SNODE1
192.168.137.132 K8SNODE2
EOF

更换yum源

curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo

配置安装k8s需要的yum源

cat < /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF

按照必备组件

yum -y install wget net-tools nfs-utils lrzsz gcc gcc-c++ make cmake libxml2-devel openssl-devel curl curl-devel unzip sudo ntp libaio-devel vim ncurses-devel autoconf automake zlib-devel python-devel epel-release openssh-server socat ipvsadm conntrack bind-utils libffi-devel device-mapper-persistent-data lvm2 yum-utils ntpdate

关闭防火墙

systemctl disable firewalld && systemctl stop firewalld
yum install -y iptables-services
iptables -F && service iptables save
service iptables stop && systemctl disable iptables

同步时间

ntpdate -u cn.pool.ntp.org

关闭selinux

sed -i 's/SELINUX=permissive/SELINUX=disabled/' /etc/sysconfig/selinux
sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config
setenforce 0

关闭swap

swapoff -a
sed -i 's/.swap./#&/' /etc/fstab

配置阿里云的docker源

yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

清理缓存

yum clean all
yum makecache fast

安装和启动docker

yum install docker-ce-19.03.12 docker-ce-cli-19.03.12 containerd.io
systemctl enable docker && systemctl start docker

修改Docker配置

cat > /etc/docker/daemon.json < {
"exec-opts": ["native.cgroupdriver=systemd"]
"oom-score-adjust": -1000,
"log-driver": "json-file",
"log-opts": {
"max-size": "100m",
"max-file": "3"
},
"max-concurrent-downloads": 10,
"max-concurrent-uploads": 10,
"registry-mirrors": ["https://2inti5wg.mirror.aliyuncs.com"],
"storage-driver": "overlay2",
"storage-opts": [
"overlay2.override_kernel_check=true"
]
}
EOF

systemctl daemon-reload && systemctl restart docker

开启k8s网络桥接相关内核配置

设置网桥包经IPTables，core文件生成路径，配置永久生效

echo 1 > /proc/sys/net/bridge/bridge-nf-call-iptables
echo 1 >/proc/sys/net/bridge/bridge-nf-call-ip6tables

cat > /etc/sysctl.d/k8s.conf << EOF
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF

cat >> /etc/sysctl.conf << EOF
vm.swappiness = 0
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward = 1
net.bridge.bridge-nf-call-ip6tables = 1
EOF

sysctl -p

开启ipvs，不开启ipvs将会使用iptables，但是效率低，所以官网推荐需要开通ipvs内核

cat > /etc/sysconfig/modules/ipvs.modules < ipvs_modules="ip_vs ip_vs_lc ip_vs_wlc ip_vs_rr ip_vs_wrr ip_vs_lblc ip_vs_lblcr ip_vs_dh ip_vs_sh ip_vs_nq ip_vs_sed ip_vs_ftp nf_conntrack"
for kernel_module in ${ipvs_modules}; do
/sbin/modinfo -F filename ${kernel_module} > /dev/null 2>&1
if [ {kernel_module}
fi
done
EOF

chmod 755 /etc/sysconfig/modules/ipvs.modules

bash /etc/sysconfig/modules/ipvs.modules

lsmod | grep ip_vs

安装网络

curl -o calico.yaml https://docs.projectcalico.org/v3.18/manifests/calico.yaml

下载镜像

docker pull docker.io/calico/cni:v3.18.5
docker pull docker.io/calico/pod2daemon-flexvol:v3.18.5
docker pull docker.io/calico/node:v3.18.5
docker pull docker.io/calico/kube-controllers:v3.18.5

kubectl apply -f calico.yaml

卸载

kubectl delete -f calico.yaml

安装K8S

yum install kubeadm-1.18.2 kubelet-1.18.2 kubectl-1.18.2 -y && systemctl enable kubelet && systemctl start kubelet

启动主节点

kubeadm init --image-repository registry.aliyuncs.com/google_containers --kubernetes-version v1.18.2 --apiserver-advertise-address 192.168.137.130 --pod-network-cidr=10.244.0.0/16 --token-ttl 0

重置

kubeadm reset
rm -rf ~/.kube/
rm -rf /etc/kubernetes/
rm -rf /var/lib/kubelet/
rm -rf /var/lib/etcd
rm -rf /var/lib/dockershim
rm -rf /var/run/kubernetes
rm -rf /var/lib/cni
rm -rf /etc/cni/net.d