在VMware Workstation虚拟机中创建三台CentOS-8.1.1911-x86_64-dvd1镜像的虚拟机安装kubernetes（k8s）
在VMware Workstation虚拟机中创建三台CentOS-8.1.1911-x86_64-dvd1安装kubernetes环境
虚拟机环境
1、网络配置选择：桥接模式（其他的不容易网络联通）
2、cpu选择2核
3、内存选择3G
4、磁盘默认20G
创建完成后记录三台虚拟机的ip分别是：
192.168.3.87
192.168.3.88
192.168.3.89
所有虚拟机都要执行的脚本：
执行脚本start.sh：
sh start.sh
脚本内容如下：
cat <<EOF >> /etc/hosts
192.168.3.87 master
192.168.3.88 node1
192.168.3.89 node2
EOF
cat > /etc/sysctl.d/k8s.conf << EOF
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF
sysctl --system
sed -ri 's/.*swap.*/#&/' /etc/fstab
swapoff -a
systemctl stop firewalld
systemctl disable firewalld
sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config
setenforce 0
sudo yum remove podman
swapoff -a
cat /etc/fstab
cat > /etc/resolv.conf << EOF
nameserver 8.8.8.8
nameserver 8.8.4.4
EOF
nmcli c reload
nmcli c up ens160
rm -f /etc/yum.repos.d/CentOS-AppStream.repo
mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-vault-8.5.2111.repo
yum clean all
yum makecache
yum install chrony -y
vim /etc/chrony.conf
修改时间同步的软件的配置文件：vim /etc/chrony.conf
添加内容为server ntp.aliyun.com iburst
# Use public servers from the pool.ntp.org project.
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
#pool 2.centos.pool.ntp.org iburst # 注释原来的
server ntp.aliyun.com iburst # 使用阿里的
执行脚本start2.sh：
sh start2.sh
脚本内容如下：
systemctl restart chronyd.service
chronyc sources -v
yum install -y yum-utils device-mapper-persistent-data lvm2
yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
yum -y install docker-ce
docker --version
sudo mkdir -p /etc/docker
cat <<EOF > /etc/docker/daemon.json
{
"exec-opts": ["native.cgroupdriver=systemd"],
"registry-mirrors": ["https://9oggfmz6.mirror.aliyuncs.com"]
}
EOF
systemctl daemon-reload
systemctl restart docker
cat > /etc/yum.repos.d/kubernetes.repo << EOF
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF
systemctl daemon-reload && systemctl restart docker
yum install -y kubelet-1.23.1 kubeadm-1.23.1 kubectl-1.23.1 docker-ce
mkdir -p $HOME/.kube
master服务器执行的命令行：
kubeadm init --image-repository=registry.aliyuncs.com/google_containers
kubeadm init --pod-network-cidr=10.244.0.0/16 --image-repository=registry.aliyuncs.com/google_containers
生成内容有一部分是：
# 等着令牌显示出来即可
Your Kubernetes control-plane has initialized successfully!
To start using your cluster, you need to run the following as a regular user:
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config
You should now deploy a pod network to the cluster.
Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
https://kubernetes.io/docs/concepts/cluster-administration/addons/
Then you can join any number of worker nodes by running the following on each as root:
kubeadm join 192.168.189.128:6443 --token 3wk0qd.piun73d9s25vu7v7 \
--discovery-token-ca-cert-hash sha256:cc0d0e1a9d4ec6d356a789a6265ff88d62d3ef61fbb745337695eede1ce37031
master 节点添加认证
mkdir -p $HOME/.kube
cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
chown $(id -u):$(id -g) $HOME/.kube/config
worker服务器执行的命令行：
# 从上面找到并记录下这一句，在各个node节点虚拟机执行
kubeadm join 192.168.189.128:6443 --token 3wk0qd.piun73d9s25vu7v7 \
--discovery-token-ca-cert-hash sha256:cc0d0e1a9d4ec6d356a789a6265ff88d62d3ef61fbb745337695eede1ce37031
master服务器执行的命令行：
kubectl get nodes
wget -c https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml
kubectl apply -f kube-flannel.yml
# 1、使用下面的命令操作使得master 可以作为node使用 承载pod
kubectl taint nodes --all node-role.kubernetes.io/master-
# 可能会出现下面的结果 因为taint（master标记的污点已经被去掉了）没有关系
# taint "node-role.kubernetes.io/master" not found
# taint "node-role.kubernetes.io/master" not found
# 2、可以用下面的命令确认一下taint已经没有了
kubectl describe nodes master |grep Taint
# Taints: 测试集群
kubectl create deployment nginx --image=nginx
kubectl expose deployment nginx --port=80 --type=NodePort
# 查看
kubectl get svc nginx
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
nginx NodePort 10.99.68.218 <none> 80:31033/TCP 3m42s
本地访问地址
http://master:32696/
http://node1:32696/
http://node2:32696/
dashboard部署
官网地址：dashboard
kubernetes 部署 dashboard（详细步骤）
# 版本很重要
kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0-beta8/aio/deploy/recommended.yaml
# 启动控制台（一共有3种方式）
kubectl proxy --port=8888 --address="192.168.0.7" --accept-hosts="^.*"
# 控制台访问
http://192.168.0.7:8888/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/#/login
使用token登录
[root@master ~]# kubectl create serviceaccount dashboard-admin -n kube-system
serviceaccount/dashboard-admin created
[root@master ~]# kubectl create clusterrolebinding dashboard-cluster-admin --clusterrole=cluster-admin --serviceaccount=kube-system:dashboard-admin
clusterrolebinding.rbac.authorization.k8s.io/dashboard-cluster-admin created
[root@master ~]# kubectl get secrets -n kube-system | grep dashboard
dashboard-admin-token-g448b kubernetes.io/service-account-token 3 25s
[root@master ~]# kubectl describe secrets -n kube-system dashboard-admin-token-g448b
Name: dashboard-admin-token-g448b
Namespace: kube-system
Labels: <none>
Annotations: kubernetes.io/service-account.name: dashboard-admin
kubernetes.io/service-account.uid: 2a5574cf-af67-481b-a5bc-6f13c87765ad
Type: kubernetes.io/service-account-token
Data
====
token: eyJhbGciOiJSUzI1NiIsImtpZCI6IllpbE8yckpURExsQU1CMHlSemg3RTFvdTR0Z3kwbjNSZk1sdHVQWUh4bmcifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJkYXNoYm9hcmQtYWRtaW4tdG9rZW4tZzQ0OGIiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC5uYW1lIjoiZGFzaGJvYXJkLWFkbWluIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQudWlkIjoiMmE1NTc0Y2YtYWY2Ny00ODFiLWE1YmMtNmYxM2M4Nzc2NWFkIiwic3ViIjoic3lzdGVtOnNlcnZpY2VhY2NvdW50Omt1YmUtc3lzdGVtOmRhc2hib2FyZC1hZG1pbiJ9.f082BlD037t39QBYPs-7v1yW55z7kK68LwkM6OCaQCeDZZEmpBPHxuxQR5cog8AGPQXIBGA-JcB5rqHZV-zk3aoOw8ZfAZDc7lyVCqkkZdup0qxwGj2ywetvAkR9JMPIK-tZjpXnQLrMwvMGthiOjVGqYJXI2Gp1lu9E1440WD6boAiH0p_vTWeKUqsUE6_4UQdVtwUnzTBwcz6ASMigXytUDvM7iTpQTU-F9ZasaixYoIzcR9FTW9vIoF-bAhCG8Biri7V7ubFAzLzBmFTtTA9vU92pTWSS-0iz1YlFFa_RwGKY6daPVOtepcgB3FNrBDFxgVtBC_KTD2sjZY2_Cw
ca.crt: 1099 bytes
namespace: 11 bytes
Kubernetes的两种登录方式和三种可视化UI界面
k8s dashboard服务安装 运行pod
# 删除之前的service
kubectl delete service kubernetes-dashboard --namespace=kubernetes-dashboard
# 启动dashboard服务
kubectl apply -f dashboard-svc.yaml
dashboard-svc.yaml内容
kind: Service
apiVersion: v1
metadata:
labels:
k8s-app: kubernetes-dashboard
name: kubernetes-dashboard
namespace: kubernetes-dashboard
spec:
type: NodePort # 增加
ports:
- port: 443
targetPort: 8443
nodePort: 30000 # 增加
selector:
k8s-app: kubernetes-dashboard
# 查看端口号
kubectl get svc -n kube-system
【问题解决】您的连接不是私密连接；因为此网站发送了 Google Chrome 无法处理的杂乱凭据。网络错误和攻击通常是暂时的，因此，此网页稍后可能会恢复正常。
当前页面点击任意空白处，直接键盘输入“thisisunsafe”即可解决。
原理是chrome认为这个网站是不安全的，不让你访问。而你输入了这句话，就类似于签了生死状，了解了风险。chrome就放你进去，但那之后再出问题也就没有责任了。
端口号访问dashboard控制台
https://192.168.0.7:30000/