本文實(shí)操為主，記錄環(huán)境搭建過(guò)程，關(guān)于kubeadm或K8S細(xì)節(jié)可參考 官方文檔 或附注的參考鏈接
1、主機(jī)規(guī)劃
虛擬機(jī)3臺(tái)：2cpu、4G內(nèi)存、20G存儲(chǔ)、雙網(wǎng)卡
- 網(wǎng)絡(luò)說(shuō)明：
- 網(wǎng)絡(luò)地址轉(zhuǎn)化（Net）： 使用宿主網(wǎng)絡(luò)訪問(wèn)互聯(lián)網(wǎng)
- Net網(wǎng)絡(luò) ：網(wǎng)段 192.168.10.0/24 分配固定ip保證k8s內(nèi)部通訊
- 系統(tǒng)版本：ubuntu 64 18.04
| 序號(hào) | 主機(jī)名 | ip | 類型 | 備注 |
|---|---|---|---|---|
| 1 | k8s-master | 192.168.10.70 | master | 管理節(jié)點(diǎn) |
| 2 | k8s-node1 | 192.168.10.80 | node | 應(yīng)用節(jié)點(diǎn) |
| 3 | k8s-node2 | 192.168.10.90 | node | 應(yīng)用節(jié)點(diǎn) |
2、主機(jī)初始化 【master、node都執(zhí)行】
- 設(shè)置時(shí)區(qū)
sudo timedatectl set-timezone Asia/Shanghai
- 配置 hosts
##/etc/hosts
##3臺(tái)主機(jī)分別添加
192.168.10.70 k8s-master
192.168.10.80 k8s-node1
192.168.10.90 k8s-node2
- 配置鏡像源
##這里使用清華的鏡像源
## /etc/apt/source.list
deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic main restricted universe multiverse
# deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic main restricted universe multiverse
deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-updates main restricted universe multiverse
# deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-updates main restricted universe multiverse
deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-backports main restricted universe multiverse
# deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-backports main restricted universe multiverse
deb https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-security main restricted universe multiverse
# deb-src https://mirrors.tuna.tsinghua.edu.cn/ubuntu/ bionic-security main restricted universe multiverse
- 設(shè)置主機(jī)名稱
##master主機(jī)執(zhí)行
sudo hostnamectl set-hostname "k8s-master"
exec bash
##node1執(zhí)行
sudo hostnamectl set-hostname "k8s-node1"
exec bash
##node2執(zhí)行
sudo hostnamectl set-hostname "k8s-node2"
exec bash
- 關(guān)閉swap
sudo swapoff -a
##修改配置，避免重啟恢復(fù) /etc/fstab
##注釋掉swap
- 配置ip
## 網(wǎng)卡名稱查看，不同節(jié)點(diǎn)按規(guī)劃進(jìn)行ip修改
ls /sys/class/net
##修改 /etc/netplan/50-cloud-init.yaml
# This file is generated from information provided by
# the datasource. Changes to it will not persist across an instance.
# To disable cloud-init's network configuration capabilities, write a file
# /etc/cloud/cloud.cfg.d/99-disable-network-config.cfg with the following:
# network: {config: disabled}
network:
ethernets:
enp0s3:
dhcp4: true
enp0s8:
addresses: [192.168.10.70/24]
dhcp4: false
version: 2
3、安裝docker【master、node都執(zhí)行】
- 安裝
##前面已經(jīng)配置使用清華源
sudo apt-get install docker.io -y
sudo systemctl enable docker
- 調(diào)整配置
sudo cat > /etc/docker/daemon.json <<EOF
{
"exec-opts": ["native.cgroupdriver=systemd"],
"log-driver": "json-file",
"log-opts": {
"max-size": "100m"
},
"storage-driver": "overlay2"
}
EOF
##生產(chǎn)環(huán)境 修改本地鏡像位置為 數(shù)據(jù)存放磁盤 默認(rèn)目錄會(huì)被撐爆
## "graph":"/app/docker"
- 加載生效
sudo systemctl daemon-reload
sudo systemctl restart docker
sudo systemctl status docker
4、配置K8S源并安裝kubeadm【master、node都執(zhí)行】
- 添加apt-key
curl -s https://mirrors.aliyun.com/kubernetes/apt/doc/apt-key.gpg | sudo apt-key add -
- 添加k8s源
cat << EOF | sudo tee -a /etc/apt/sources.list.d/kubernetes.list
deb https://mirrors.aliyun.com/kubernetes/apt/ kubernetes-xenial main
EOF
- 更新并安裝
sudo apt update && sudo apt-get install kubeadm -y
- 標(biāo)注不自動(dòng)更新
sudo apt-mark hold kubelet kubeadm kubectl
5、初始化集群【master執(zhí)行】
- 手動(dòng)拉取鏡像【加速】
sudo kubeadm config images pull --image-repository=registry.aliyuncs.com/google_containers
- 手動(dòng)打標(biāo)鏡像 【初始化依賴鏡像名稱】
sudo docker tag registry.aliyuncs.com/google_containers/pause:3.1 k8s.gcr.io/pause:3.1
- 初始化
sudo kubeadm init --apiserver-advertise-address=192.168.10.70 \
--image-repository=registry.aliyuncs.com/google_containers \
--pod-network-cidr=10.244.0.0/16 \
--ignore-preflight-errors=swap
注意： apiserver-advertise-address 所指定的IP地址必須為執(zhí)行主機(jī)上的真實(shí)ip地址
- 根據(jù)提示執(zhí)行
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config
- 獲得node節(jié)點(diǎn)join信息
kubeadm join 192.168.10.70:6443 --token aisdzt.u8ogd94t88jgnqak \
--discovery-token-ca-cert-hash sha256:728cd99806ca74e4c71c7267b367add48eb93e253e57b2c6d66890dec717b815
- 命令查看節(jié)點(diǎn)情況【master執(zhí)行】
##查看節(jié)點(diǎn)情況
sudo kubectl get nodes
##輸出
NAME STATUS ROLES AGE VERSION
k8s-master Ready master 17h v1.17.2
##查看服務(wù)情況
sudo kubectl get pods --all-namespaces
##網(wǎng)絡(luò)相關(guān)服務(wù)會(huì)一直顯示處于等待狀態(tài)，是因?yàn)闆](méi)有安裝網(wǎng)絡(luò)組件
- 安裝Flannel網(wǎng)絡(luò)插件
sudo kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml
## 上面的語(yǔ)句執(zhí)行正常，但是網(wǎng)絡(luò)鏡像并沒(méi)拉取下來(lái) 使用
## sudo docker images
## 查看是否存在flannel鏡像，如果沒(méi)有手動(dòng)拉取
sudo docker pull quay.io/coreos/flannel:v0.11.0-amd64
##拉取版本 要與kube-flannel.yml 文件中一致，拉取后會(huì)被初始化
6、添加子節(jié)點(diǎn)【node執(zhí)行】
- 執(zhí)行加入
sudo kubeadm join 192.168.10.70:6443 --token aisdzt.u8ogd94t88jgnqak \
--discovery-token-ca-cert-hash sha256:728cd99806ca74e4c71c7267b367add48eb93e253e57b2c6d66890dec717b815
##注意token是有有效期的，可以通過(guò)
## kubeadm token list
##查看
注意：會(huì)出現(xiàn)添加成功，但是節(jié)點(diǎn)一直顯示 NotReay的情況，這時(shí)需要手動(dòng)拉取網(wǎng)絡(luò)插件鏡像
sudo docker pull quay.io/coreos/flannel:v0.11.0-amd64
sudo docker tag registry.aliyuncs.com/google_containers/pause:3.1 k8s.gcr.io/pause:3.1
7、部署驗(yàn)證
# 部署一個(gè) Nginx Deployment，包含兩個(gè)Pod
# https://kubernetes.io/docs/concepts/workloads/controllers/deployment/
kubectl create deployment nginx --image=nginx:alpine
kubectl scale deployment nginx --replicas=2
# 驗(yàn)證Nginx Pod是否正確運(yùn)行，并且會(huì)分配10.244.開頭的集群IP
kubectl get pods -l app=nginx -o wide
##輸出
NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
nginx-5b6fb6dd96-9trfb 1/1 Running 0 49m 10.244.2.2 k8s-node2 <none> <none>
nginx-5b6fb6dd96-9vl4z 1/1 Running 0 49m 10.244.1.2 k8s-node1 <none> <none>
# 以 NodePort 方式對(duì)外提供服務(wù) https://kubernetes.io/docs/concepts/services-networking/connect-applications-service/
kubectl expose deployment nginx --port=80 --type=NodePort
# 查看集群外可訪問(wèn)的Port
kubectl get services nginx
##輸出
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
nginx NodePort 10.109.200.243 <none> 80:30032/TCP 7m46s
##驗(yàn)證 使用node節(jié)點(diǎn)ip進(jìn)行訪問(wèn)
curl http://192.168.10.80:30032
curl http://192.168.10.90:30032
參考：
https://www.linuxtechi.com/install-configure-kubernetes-ubuntu-18-04-ubuntu-18-10/
https://www.cnblogs.com/RainingNight/p/using-kubeadm-to-create-a-cluster-1-12.html
