Kubernetes 自动化安装脚本(单节点在线安装)

环境情况

• 操作系统：centos 7或者centos 8(最小安装)
• k8s 版本：1.24.1
• 容器版本：containerd 1.6.5
• 服务器可以访问互联网

准备工作

1. 安装centos 操作系统，选择最小安装
2. 将必要的文件下载到服务器的本地目录，下载的文件包括
   链接：https://pan.baidu.com/s/1ljNtZPA_fnkvzKUujM9qxg
   提取码：wktf

3. 根据实际情况修改install.sh脚本中的主机名和IP地址

   
   
   修改脚本中红色方框中标记的内容
4. 修改脚本可执行属性
   chmod +x ./install.sh
5. 执行脚本
   ./install.sh

脚本内容

#!/bin/bash
# 准备基础环境，支持的操作系统为centos 7、centos 8
os_version=$(cat /etc/redhat-release |grep -P "[1-9].[0-9].[0-9]*" -o)
echo "os version is ${os_version}"

# 设置软件源为国内镜像源
if [ ${os_version:0:1}x == '8'x ]; then
    repo_url="https://mirrors.aliyun.com/repo/Centos-vault-8.5.2111.repo"
elif [ ${os_version:0:1}x == '7'x ]; then
    repo_url="https://mirrors.aliyun.com/repo/Centos-7.repo"
else
    echo "os ${os_version} is unsupported"
    exit
fi
echo "repo source "${repo_url}""
mv /etc/yum.repos.d /etc/yum.repos.d.bak
mkdir -p /etc/yum.repos.d
curl -o "/etc/yum.repos.d/CentOS-Base.repo" ${repo_url}
yum makecache
echo "change repo source complete"

# 设置时区为上海
echo "set time zone to Asia/Shanghai"
timedatectl set-timezone "Asia/Shanghai"
timedatectl set-local-rtc 0
systemctl restart rsyslog 
systemctl restart crond
timedatectl show

# 设置主机名
local_node="k8s-node1"
nodes_name=(k8s-node1)
nodes_ip=(172.168.1.109)
hostnamectl set-hostname ${local_node}
for i in $(seq 0 `expr ${#nodes_name[@]} - 1`); do
    var="${nodes_ip[i]}  ${nodes_name[i]}"
    echo ${var}
    sed -i '$a\'"${var}"'' /etc/hosts
done

#关闭防火墙
echo "disable the firewall"
systemctl disable firewalld
systemctl stop firewalld

#关闭swap
echo "disable the swap"
swapoff -a
sed -i 's/^[^#].*swap*/#&/g' /etc/fstab

#关闭selinux功能
echo "close selinux"
setenforce 0
sed -i 's/^SELINUX=enforcing/#&/' /etc/selinux/config
sed -i 's/^SELINUX=disabled/#&/' /etc/selinux/config
sed -i '$a\SELINUX=disabled' /etc/selinux/config

#配置及加加载内核模块
cat << EOF > /etc/modules-load.d/containerd.conf
overlay
br_netfilter
EOF
modprobe overlay
modprobe br_netfilter

conntack_module="nf_conntrack"
if [ ${os_version:0:1} != '8' ]
then
        conntack_module="nf_conntrack_ipv4"
fi
echo ${conntack_module}
cat << EOF > /etc/modules-load.d/ipvs.conf
ip_vs
ip_vs_rr
ip_vs_wrr
ip_vs_sh
${conntack_module}
EOF
modprobe ip_vs
modprobe ip_vs_rr
modprobe ip_vs_wrr
modprobe ip_vs_sh
modprobe ${conntack_module}
lsmod | grep -e ip_vs -e nf_conntrack

systemctl restart systemd-modules-load.service

if ! type ipset >/dev/null 2>&1; then
    yum install -y ipset;
    echo "install ipset"
else
    echo 'ipset 已安装';
fi

if ! type ipvsadm >/dev/null 2>&1; then
    yum install -y ipvsadm;
    echo "install ipvsadm"
else
    echo 'ipvsadm 已安装';
fi

if ! type libseccomp  >/dev/null 2>&1; then
    yum install -y libseccomp;
    echo "install libseccomp"
else
    echo 'libseccomp  已安装';
fi

#安装containerd
yum install -y tar
tar xf ./cri-containerd-cni-1.6.5-linux-amd64.tar.gz -C /
mkdir -p /etc/containerd && containerd config default > /etc/containerd/config.toml

sed -i '/SystemdCgroup/s/^/#/' /etc/containerd/config.toml
sed -i '/SystemdCgroup/a\
            SystemdCgroup = true' /etc/containerd/config.toml

sed -i '/sandbox_image/s/^/#/' /etc/containerd/config.toml
sed -i '/sandbox_image/a\
    sandbox_image = "registry.aliyuncs.com/k8sxio/pause:3.7"' /etc/containerd/config.toml
    
sed -i '/plugins."io.containerd.grpc.v1.cri".registry.mirrors/a\
      [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]\
        endpoint = ["https://bqr1dr1n.mirror.aliyuncs.com"]\
      [plugins."io.containerd.grpc.v1.cri".registry.mirrors."k8s.gcr.io"]\
        endpoint = ["https://registry.aliyuncs.com/k8sxio"]' /etc/containerd/config.toml

sed -i '/Delegate/s/^/#/' /etc/systemd/system/containerd.service
sed -i '/Delegate/a\
Delegate = yes' /etc/systemd/system/containerd.service
sed -i '/KillMode/s/^/#/' /etc/systemd/system/containerd.service
sed -i '/KillMode/a\
KillMode=process' /etc/systemd/system/containerd.service

#安装kubeadm
kube_repo_file=/etc/yum.repos.d/kubernetes.repo
if test -f "${kube_repo_file}"; then
    echo "${kube_repo_file} exist"
else 
cat < /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=0
gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF
fi

yum makecache
if ! type kubelet >/dev/null 2>&1; then
    yum install -y kubelet;
fi
if ! type kubeadm >/dev/null 2>&1; then
    yum install -y kubeadm;
fi
if ! type kubectl >/dev/null 2>&1; then
    yum install -y kubectl;
fi



# 优化内核参数
cat > ./kubernetes.conf <

访问dashboard

1. 执行命令查看服务端口：kubectl get svc kubernetes-dashboard -n kubernetes-dashboard
   端口为红色标记的内容
   
2. 浏览器访问：https://nodeip:32271
3. 生成token：kubectl -n kubernetes-dashboard create token admin-user