wxin/kubernetes
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
kubernetes/kubernetes-集群.md

262 lines
7.5 KiB
Markdown
Raw Normal View History

更新 kubernetes-集群.md
2025-04-22 20:23:40 +08:00
<h2><center>Kubernetes 集群</center></h2>
------
## 一：部署kubernetes 集群
### 1. 前置知识点
目前生产部署`Kubernetes`集群主要有两种方式：
- `kubeadm`
`Kubeadm`是一个`K8s`部署工具，提供`kubeadm init`和`kubeadm join`，用于快速部署`Kubernetes`集群。
官方地址：https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm/
- 二进制包
从`github`下载发行版的二进制包，手动部署每个组件，组成`Kubernetes`集群。
`Kubeadm`降低部署门槛，但屏蔽了很多细节，遇到问题很难排查。如果想更容易可控，推荐使用二进制包部署`Kubernetes`集群，虽然手动部署麻烦点，期间可以学习很多工作原理，也利于后期维护。
![](http://182.92.143.66:40072/directlink/img/kubernetes/images-202504120001.png)
### 2. kubeadm 部署方式介绍
`kubeadm`是官方社区推出的一个用于快速部署`kubernetes`集群的工具，这个工具能通过两条指令完成一个`kubernetes`集群的部署：
- 创建一个`Master`节点`kubeadm init`
- 将`Node`节点加入到当前集群中`$ kubeadm join <Master节点的IP 和端口>`
### 3. 安装要求
在开始之前，部署`Kubernetes`集群机器需要满足以下几个条件：
- 一台或多台机器，操作系统`CentOS7.x-86_x64`
- 硬件配置：`2GB`或更多`RAM`，2 个`CPU`或更多`CPU`，硬盘30GB 或更多
- 集群中所有机器之间网络互通
- 可以访问外网，需要拉取镜像
- 禁止`swap`分区
### 4. 最终目标
- 在所有节点上安装`Docker`和`kubeadm`
- 部署`Kubernetes Master`
- 部署容器网络插件
- 部署`Kubernetes Node`，将节点加入`Kubernetes`集群中
- 部署`Dashboard Web`页面，可视化查看`Kubernetes`资源
### 5. 准备环境
![](http://182.92.143.66:40072/directlink/img/kubernetes/images-202504120002.png)
| 节点 | IP地址 | 组件 |
| :----: | :-------------: | :-------------------------------: |
| master | 192.168.159.130 | docker，kubectl，kubeadm，kubelet |
| node1 | 192.168.159.131 | docker，kubectl，kubeadm，kubelet |
| node2 | 192.168.159.132 | docker，kubectl，kubeadm，kubelet |
### 6. 环境初始化
**主机名解析**
```bash
[root@master ~]# vim /etc/hosts
192.168.159.130 master
192.168.159.131 node1
192.168.159.132 node2
注意：
所有节点
```
**禁用`iptable`和`firewalld`**
```bash
[root@master ~]# systemctl stop firewalld
[root@master ~]# systemctl disable firewalld
[root@master ~]# systemctl stop iptables
[root@master ~]# systemctl disable iptables
注意：
所有节点
```
**禁止`selinux`**
```bash
[root@master ~]# setenforce 0
[root@master ~]# vim /etc/selinux/config
SELINUX=disabled
注意：
所有节点
```
**禁用`swap`分区**
```bash
[root@master ~]# swapoff -a
[root@master ~]# sed -i 's/.*swap.*/#&/' /etc/fstab
注意：
所有节点
```
**加载内核模块**
```bash
[root@master ~]# modprobe br_netfilter
[root@master ~]# vim /etc/sysctl.conf
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
vm.swappiness=0
net.ipv4.ip_forward = 1
注意：
所有节点
```
### 7. 安装`docker`
```bash
[root@master ~]# yum install -y yum-utils
[root@master ~]# yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
[root@master ~]# yum install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin -y
[root@master ~]# systemctl start docker
[root@master ~]# systemctl enable docker
注意：
所有节点
```
### 8. 安装`kubeadm kubelet kubectl`
**配置`yum`仓库**
```bash
[root@master ~]# vim /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
注意：
所有节点
```
**安装**
```bash
[root@master ~]# yum -y install kubeadm-1.23.5 kubelet-1.23.5 kubectl-1.23.5 ipvsadm
注意：
所有节点
```
**配置`kubelet`的`cgroups`**
```bash
[root@master ~]# vim /etc/sysconfig/kubelet
KUBELET_EXTRA_ARGS="--cgroup-driver=cgroupfs --pod-infra-container-image=registry.cn-hangzhou.aliyuncs.com/google_containers/pause-amd64:3.1"
注意：
所有节点
```
### 9. 部署镜像
**下载镜像**
```bash
[root@master ~]# wget http://182.92.143.66:40072/directlink/img/kube_images/coredns-v1.8.6.tar
[root@master ~]# wget http://182.92.143.66:40072/directlink/img/kube_images/etcd-3.5.1-0.tar
[root@master ~]# wget http://182.92.143.66:40072/directlink/img/kube_images/flannel-cni.tar
[root@master ~]# wget http://182.92.143.66:40072/directlink/img/kube_images/flannel-v0.14.0-amd64.tar
[root@master ~]# wget http://182.92.143.66:40072/directlink/img/kube_images/flannel.tar
[root@master ~]# wget http://182.92.143.66:40072/directlink/img/kube_images/kube-apiserver-v1.23.5.tar
[root@master ~]# wget http://182.92.143.66:40072/directlink/img/kube_images/kube-controller-manager-v1.23.5.tar
[root@master ~]# wget http://182.92.143.66:40072/directlink/img/kube_images/kube-proxy-v1.23.5.tar
[root@master ~]# wget http://182.92.143.66:40072/directlink/img/kube_images/kube-scheduler-v1.23.5.tar
[root@master ~]# wget http://182.92.143.66:40072/directlink/img/kube_images/pause-3.6.tar
[root@master ~]# wget http://182.92.143.66:40072/directlink/img/kube_images/kube-flannel-2402.yml
注意：
所有节点
```
**镜像导入**
```bash
[root@master ~]# vim image_load.sh
#!/bin/bash
image_path=`pwd`
for i in `ls "${image_path}"`; do
docker load < $i
done
[root@master ~]# bash image_load.sh
注意：
所有节点
```
### 10. `master`节点初始化
```bash
[root@master ~]# kubeadm init --kubernetes-version=1.23.5 --pod-network-cidr=10.244.0.0/16 --apiserver-advertise-address=192.168.159.130
Your Kubernetes control-plane has initialized successfully!
To start using your cluster, you need to run the following as a regular user:
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config
Alternatively, if you are the root user, you can run:
export KUBECONFIG=/etc/kubernetes/admin.conf
You should now deploy a pod network to the cluster.
Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
https://kubernetes.io/docs/concepts/cluster-administration/addons/
Then you can join any number of worker nodes by running the following on each as root:
kubeadm join 192.168.159.130:6443 --token vxpoqx.jfxg9ae302d2e1j9 \
--discovery-token-ca-cert-hash sha256:3b77859462fbcdc312a158e02c77e60e28d41440801fed3cdee1556029a8547a
[root@master ~]# mkdir -p $HOME/.kube
[root@master ~]# sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
[root@master ~]# sudo chown $(id -u):$(id -g) $HOME/.kube/config
[root@master ~]# export KUBECONFIG=/etc/kubernetes/admin.conf
[root@master ~]# kubectl apply -f kube-flannel-2402.yml
```
### 11. 将`node`加入工作节点
```bash
[root@node1/2/3 ~]# kubeadm join 192.168.159.130:6443 --token vxpoqx.jfxg9ae302d2e1j9 --discovery-token-ca-cert-hash sha256:3b77859462fbcdc312a158e02c77e60e28d41440801fed3cdee1556029a8547a
```
### 12. `master`节点查看集群状态
```bash
[root@master ~]# kubectl get nodes
NAME STATUS ROLES AGE VERSION
master Ready control-plane,master 3m11s v1.23.5
node1 Ready <none> 27s v1.23.5
node2 Ready <none> 43s v1.23.5
```
Reference in New Issue Copy Permalink