一、初始化#  關(guān)閉swap分區(qū)n$ swapoff -anvim /etc/fastabn   #/dev/mapper/centos-swap swap                    swap    defau

一、初始化

# 關(guān)閉swap分區(qū)n$ swapoff -anvim /etc/fastabn #/dev/mapper/centos-swap swap swap defaults 0 0n$ grep "#" fstab |grep "swap" >/dev/null || sed -i 's/^.*swap/#&/g' fstabn# 關(guān)閉防火墻n$ iptables -Fn$ systemctl stop firewalldn# 關(guān)閉selinuxn$ sed -i '7s/enforcing/disabled/' /etc/selinux/confign$ setenforce 0n# 設(shè)置免密登錄n$ ssh-keygenn$ ssh-copy-id $IPn# 修改主機(jī)名稱n# hostnamectl set-hostname $hostnamen# 修改/etc/hosts文件，保證節(jié)點(diǎn)間能通過主機(jī)名進(jìn)行訪問n# 在所有節(jié)點(diǎn)上安裝docker和k8s相關(guān)軟件n# 安裝dockern$ yum -y install yum-utilsn# 添加docker yum源倉庫n$ yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repon# 建立yum倉庫n$ yum makecachen# 安裝dockern$ yum install docker-ce -yn# 查看版本n$ docker versionn# 安裝kubelet kubeadm kubectln# 配置K8Syum源倉庫nvim t/etc/yum.repos.d/kubernetes.repon [kubernetes]n name=Kubernetesn baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64n enabled=1n gpgcheck=0n repo_gpgcheck=0n gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg tttthttp://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpgn# 配置內(nèi)核參數(shù)，將橋接的IPv4流量傳遞到iptables的鏈n$ vim /etc/sysctl.d/k8s.confn net.bridge.bridge-nf-call-ip6tables = 1n net.bridge.bridge-nf-call-iptables = 1n net.ipv4.ip_forward = 1n# 安裝kubelet kubeadm kubectl n$ yum install -y kubelet-1.17.3 kubeadm-1.17.3 kubectl-1.17.3n# 查看kubelet和docker的cgroup,如果不同修改為相同驅(qū)動(dòng)類型n# 見K8s排坑n$ systemctl enable kubelet & systemctl restart kubelet

二、主節(jié)點(diǎn)初始化集群

# 在主節(jié)點(diǎn)初始化集群n$ kubeadm init --image-repository registry.aliyuncs.com/google_containers --pod-network-cidr=10.244.0.0/16 --ignore-preflight-errors=cri --control-plane-endpoint "118.31.166.138:6443" --kubernetes-version=1.17.3n# 參數(shù)詳解n --image-repository registry.aliyuncs.com/google_containers 鏡像倉庫地地址n --pod-network-cidr=10.244.0.0/16 pod通信網(wǎng)段n --ignore-preflight-errors=cri 將錯(cuò)誤顯示為警告的檢查列表進(jìn)行忽略n --control-plane-endpoint "118.31.166.138:6443" 通過這個(gè)地址訪問apiservern --kubernetes-version=1.17.3 指定版本n# 安裝flannel插件n# 上傳flannel的yml文件nhttps://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.ymln# 創(chuàng)建flanneln$ kubectl apply -f flannel.ymln# 刪除flanneln$ kubectl delete -f kube-flannel.ymln# 查看k8s的node節(jié)點(diǎn)狀態(tài)n$ kubectl get nodesn# 查看各組件狀態(tài)n$ kubectl get pod -o wide --all-namespaces n# 安裝kuboard n# 獲取yaml文件nhttps://kuboard.cn/install-script/kuboard.yamln# 創(chuàng)建n$ kubectl apply -f kuboard.yaml n# 獲取tokenn$ echo $(kubectl -n kube-system get secret $(kubectl -n kube-system get secret | grep kuboard-user | awk '{print $1}') -o go-template='{{.data.token}}' | base64 -d)

三、向集群添加或刪除master、node節(jié)點(diǎn)

# 通過kubeadm獲取加入集群的命令n$ kubeadm token create --print-join-commandn# 添加node節(jié)點(diǎn)n$ kubeadm join 192.168.220.11:6443 --token 2jbg3t.6nst8modlquuek8h --discovery-token-ca-cert-hash sha256:c1b9b5deb4fcb168fbb13056fe01d8c1ed10d2d5e4a0c974e9e7707363da3bb2n# 添加master節(jié)點(diǎn)n# 創(chuàng)建目錄n$ mkdir -p /etc/kubernetes/pki/etcd/n# 傳輸相關(guān)文件n$ sh join-master.shn scp -r /etc/kubernetes/admin.conf master02:/etc/kubernetes/n scp -r /etc/kubernetes/pki/ca* master02:/etc/kubernetes/pki/n scp -r /etc/kubernetes/pki/sa* master02:/etc/kubernetes/pki/n scp -r /etc/kubernetes/pki/front* master02:/etc/kubernetes/pki/n scp -r /etc/kubernetes/pki/etcd/ca* master02:/etc/kubernetes/pki/etcd/n# 在master執(zhí)行命令n$ kubeadm join 192.168.220.11:6443 --token 2jbg3t.6nst8modlquuek8h --discovery-token-ca-cert-hash sha256:c1b9b5deb4fcb168fbb13056fe01d8c1ed10d2d5e4a0c974e9e7707363da3bb2 --control-plane n# 可以提前將master01的鏡像通過docker命令拉取到master02本地nn# 加入主節(jié)點(diǎn)的第二種方式n$ kubeadm init phase upload-certs --upload-certsn$ kubeadm token create --print-join-commandn# 生成信息拼接n$ kubeadm join 192.168.3.156:8000 --token ht53d3.la3fkq53ln6hkaex --discovery-token-ca-cert-hash sha256:c1c27fac502a0c7de29846831adf404dcc76ca8390b26988e263d9eb15dd6917 --control-plane --certificate-key 4b44d7dc3fcf9132f8c8e7cb97e00cb398eb8fae9bec881c5c5325a93ecf5fcc