kubeadm是官方社區推出的一個用於快速部署kubernetes集羣的工具。node
這個工具能經過兩條指令完成一個kubernetes集羣的部署:linux
在開始以前,部署Kubernetes集羣機器須要知足如下幾個條件:nginx
一臺或多臺機器,操做系統 CentOS7.x-86_x64git
硬件配置:2GB或更多RAM,2個CPU或更多CPU,硬盤30GB或更多github
集羣中全部機器之間網絡互通docker
能夠訪問外網,須要拉取鏡像json
禁止swap分區vim
windows
部署Kubernetes Mastercentos
部署容器網絡插件
部署 Kubernetes Node,將節點加入Kubernetes集羣中
IP | |
---|---|
k8s-master | 192.168.40.10 |
k8s-node1 | 192.168.40.11 |
k8s-node2 |
關閉防火牆: $ systemctl stop firewalld $ systemctl disable firewalld 關閉selinux: $ sed -i 's/enforcing/disabled/' /etc/selinux/config # 永久 $ setenforce 0 # 臨時 關閉swap: $ swapoff -a # 臨時 $ vim /etc/fstab # 永久 設置主機名: $ hostnamectl set-hostname <hostname> 在master添加hosts: $ cat >> /etc/hosts << EOF 192.168.40.10 k8s-master 192.168.40.11 k8s-node1 192.168.40.12 k8s-node2 EOF 將橋接的IPv4流量傳遞到iptables的鏈: $ cat > /etc/sysctl.d/k8s.conf << EOF net.bridge.bridge-nf-call-ip6tables = 1 net.bridge.bridge-nf-call-iptables = 1 EOF $ sysctl --system # 生效 時間同步: $ yum install ntpdate -y $ ntpdate time.windows.com
Kubernetes默認CRI(容器運行時)爲Docker,所以先安裝Docker。
$ wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo -O /etc/yum.repos.d/docker-ce.repo $ yum -y install docker-ce-18.06.1.ce-3.el7 $ systemctl enable docker && systemctl start docker $ docker --version Docker version 18.06.1-ce, build e68fc7a
# cat > /etc/docker/daemon.json << EOF { "registry-mirrors": ["https://b9pmyelo.mirror.aliyuncs.com"] } EOF
$ cat > /etc/yum.repos.d/kubernetes.repo << EOF [kubernetes] name=Kubernetes baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64 enabled=1 gpgcheck=0 repo_gpgcheck=0 gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg EOF
因爲版本更新頻繁,這裏指定版本號部署:
$ yum install -y kubelet-1.17.0 kubeadm-1.17.0 kubectl-1.17.0 $ systemctl enable kubelet
在192.168.40.10(Master)執行。
$ kubeadm init \ --apiserver-advertise-address=192.168.40.10 \ --image-repository registry.aliyuncs.com/google_containers \ --kubernetes-version v1.17.0 \ --service-cidr=10.96.0.0/12 \ --pod-network-cidr=10.244.0.0/16
因爲默認拉取鏡像地址k8s.gcr.io國內沒法訪問,這裏指定阿里雲鏡像倉庫地址。
使用kubectl工具:
mkdir -p $HOME/.kube sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config sudo chown $(id -u):$(id -g) $HOME/.kube/config $ kubectl get nodes
$ kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml
確保可以訪問到quay.io這個registery。
$ kubeadm join 192.168.40.10:6443 --token g0z2fr.0y2eki4v750i4iy9 --discovery-token-ca-cert-hash sha256:7cb7b7dcef1d0811cf5259cfa094ff4a0a54a0be0378fe0fbfc6ea2c99c3daf2
$ kubeadm join 192.168.40.10:6443 --token g0z2fr.0y2eki4v750i4iy9 --discovery-token-ca-cert-hash sha256:7cb7b7dcef1d0811cf5259cfa094ff4a0a54a0be0378fe0fbfc6ea2c99c3daf2
查看節點狀態
[root@k8s-master ~]# kubectl get nodes NAME STATUS ROLES AGE VERSION k8s-master Ready master 4h14m v1.17.0 k8s-node1 Ready <none> 3h46m v1.17.0 k8s-node2 Ready <none> 3h49m v1.17.0
$ kubectl create deployment nginx --image=nginx $ kubectl expose deployment nginx --port=80 --type=NodePort $ kubectl get pod,svc NAME READY STATUS RESTARTS AGE pod/nginx-86c57db685-5srvh 1/1 Running 0 4h16m NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE service/kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 5h6m service/nginx NodePort 10.96.242.65 <none> 80:31026/TCP 4h16m