節點爲centos7.4node
1、配置主機名linux
2、配置hosts文件(master和node相互解析)docker
3、時間同步centos
ntpdate pool.ntp.orgapp
dategoogle
echo '*/10 * * * * /usr/sbin/ntpdate pool.ntp.org' >>/var/spool/cron/rooturl
crontab -lcentos7
4、關閉防火牆和selinuxspa
systemctl stop firewalld3d
systemctl disable firewalld
sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
5、關閉swap
swapoff -a
echo "vm.swappiness=0" >> /etc/sysctl.conf
sysctl -pswapoff -a
6、修改內核參數
yum install -y bridge-utils.x86_64
modprobe bridge
modprobe br_netfilter
echo "net.bridge.bridge-nf-call-iptables=1" >> /etc/sysctl.conf
echo "net.bridge.bridge-nf-call-ip6tables=1" >> /etc/sysctl.conf
sysctl -p
1、設置yum源
wget -O /etc/yum.repos.d/docker-ce.repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
cat <<EOF > /etc/yum.repos.d/kubernetes.repoo
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF
2、安裝
yum -y install docker-ce
如下兩個,注意版本要和master端一致,能夠去master看下
yum -y install kubelet-1.13.4-0.x86_64
yum -y install kubeadm-1.13.4-0.x86_64
systemctl enable kubelet
3、下載相關鏡像
docker pull mirrorgooglecontainers/kube-proxy-amd64:v1.13.3
docker pull mirrorgooglecontainers/pause:3.1
docker tag docker.io/mirrorgooglecontainers/kube-proxy-amd64:v1.13.3 k8s.gcr.io/kube-proxy:v1.13.3
docker tag docker.io/mirrorgooglecontainers/pause:3.1 k8s.gcr.io/pause:3.1
1、master中的節點認證信息24小時會失效,能夠從新生成(master端操做)
從新生成用於節點加入集羣的認證命令
建立token
[root@master ~]# kubeadm token create
建立新的sha
[root@master ~]# openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der sha256 -hex | sed 's/^.* //'
2、加入集羣(node操做)
kubeadm join 172.16.20.102:6443 --token 【token】--discovery-token-ca-cert-hash sha256:【sha值】
[root@master ~]# kubectl drain node03.linux.com --delete-local-data --force --ignore-daemonsets
[root@master ~]# kubectl delete node node03.linux.com