環(huán)境配置

1.安裝docker-ce

curl -fsSL https://get.docker.com | bash -s docker --mirror Aliyun

2.安裝kubernetes

sudo apt update && sudo apt install -y apt-transport-https curl
curl -s https://mirrors.aliyun.com/kubernetes/apt/doc/apt-key.gpg | sudo apt-key add -

sudo vim /etc/apt/sources.list.d/kubernetes.list
deb https://mirrors.aliyun.com/kubernetes/apt/ kubernetes-xenial main

sudo apt update
sudo apt install -y kubelet kubeadm kubectl
sudo apt-mark hold kubelet kubeadm kubectl
systemctl restart kubelet  && systemctl restart kubectl

3.禁用swap

sudo swapoff -a
sudo vi /etc/fstab 注釋swap
sudo reboot

4.初始化

sudo kubeadm init --image-repository registry.aliyuncs.com/google_containers --kubernetes-version v1.13.1 --pod-network-cidr=192.168.0.0/16
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config

kubectl get pods --all-namespaces
查看節(jié)點(diǎn)信息
kubectl -n kube-system get cm kubeadm-config -oyaml

5.安裝網(wǎng)絡(luò)插件

sudo kubectl apply -f https://docs.projectcalico.org/v3.3/getting-started/kubernetes/installation/hosted/rbac-kdd.yaml
sudo kubectl apply -f https://docs.projectcalico.org/v3.3/getting-started/kubernetes/installation/hosted/kubernetes-datastore/calico-networking/1.7/calico.yaml
查看狀態(tài)
sudo kubectl get pods --all-namespaces
sudo kubeadm version

默認(rèn)情況下，由于安全原因，集群并不會(huì)將pods部署在Master節(jié)點(diǎn)上。但是在開發(fā)環(huán)境下，我們可能就只有一個(gè)Master節(jié)點(diǎn)，這時(shí)可以使用下面的命令來解除這個(gè)限制：
kubectl taint nodes --all node-role.kubernetes.io/master-

6.node加入到master當(dāng)中

（sudo apt install -y kubelet kubeadm kubectl）
kubeadm join 192.168.1.60:6443 --token gdubb8.7aiem184caduec74 --discovery-token-ca-cert-hash sha256:cdebda5469e0fab9a5695782df577c7c3423193388b8390ad1e3a56276254a8a

token 24小時(shí)有效
重新生成token

kubeadm token create

重新生成--discovery-token-ca-cert-hash

openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'

kubeadm join 192.168.1.50:6443 --token bo5g6k.qbb3v6m096uavkrz --discovery-token-ca-cert-hash sha256:f9541fc10907c7374568fff6572a3cbe2042c2149ee2572072db64cb13520a42

給node加上標(biāo)簽，要不然默認(rèn)顯示none

kubectl label node k8s-node1 node-role.kubernetes.io/worker=worker
kubectl label node k8s-node2 node-role.kubernetes.io/worker=worker