Centos 7.x 线上安装 Kubernetes

Centos 7.x 线上安装 Kubernetes

安装依赖包

yum install -y conntrack ntpdate ntp ipvsadm ipset jq iptables curl systat libseccomp wget vim net-tools git iptables-services

关闭防火墙，为iptables设置规则

systemctl stop firewalld && systemctl disable firewalld && systemctl status firewalldsystemctl start iptables && systemctl enable iptables && iptables -F && service iptables save

关闭SWAP 和 SELINUX

swapoff -a && sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstabsetenforce 0 && sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config

调整内核参数，对于k8s

cat > /etc/sysctl.d/kubernetes.conf << EOFnet.bridge.bridge-nf-call-iptables=1 #开启网桥模式net.bridge.bridge-nf-call-ip6tables=1 #开启网桥模式net.ipv4.ip_forward=1net.ipv4.tcp_tw_recycle=0vm.swappiness=0 #禁止使用 swap 空间, 只有当系统 OOM 时才允许使用它vm.overcommit_memory=1 #不检查物理内存是否够用vm.panic_on_oom=0 #开启OOMfs.inotify.max_user_instances=8192fs.inotify.max_user_watches=1048576fs.file-max=52706963fs.nr_open=52706963net.ipv6.conf.all.disable_ipv6=1 #关闭IPV6协议net.netfilter.nf_conntrack_max=2310720EOFsysctl -p /etc/sysctl.d/kubernetes.conf

调整系统时区

# 设置系统时区为 中国/上海timedatectl set-timezone Asia/Shanghai

关闭系统不需要服务，postfix是邮件服务

systemctl stop postfix && systemctl disable postfix

设置rsyslogd 和 systemd journald

# 创建持久化保存日志目录mkdir -p /var/log/journal# 创建配置文件存放目录mkdir -p /etc/systemd/journald.conf.d# 创建配置文件cat > /etc/systemd/journald.conf.d/99-prophet.conf << EOF[Journal]#持久化保存到磁盘Storage=persistent#压缩历史日志Compress=yesSyncIntervalSec=5mRateLimitInterval=30sRateLimitBurst=1000#最大占用空间10GSystemMaxUse=10G#单日志文件最大200MSystemMaxFileSize=200M#日志保存时间2周MaxRetentionSec=2week#不将日志转发到syslogForwardToSyslog=noEOF# 重启journaldsystemctl restart systemd-journald

kube-proxy开启ipvs的前置条件

modprobe br_netfiltercat > /etc/sysconfig/modules/ipvs.modules << EOF#!/bin/bashmodprobe -- ip_vsmodprobe -- ip_vs_rrmodprobe -- ip_vs_wrrmodprobe -- ip_vs_shmodprobe -- nf_conntrack_ipv4EOFchmod 755 /etc/sysconfig/modules/ipvs.modules && bash /etc/sysconfig/modules/ipvs.modules && lsmod | grep -e ip_vs -e nf_conntrack_ipv4

安装 Docker 软件

# 配置daemoncat > /etc/docker/daemon.json << EOF{ "exec-opts": ["native.cgroupdriver=systemd"], "log-driver": "json-file", "log-opts": { "max-size": "100m" }}EOF# 重启dockersystemctl daemon-reload && systemctl restart docker

安装 Kubeadm （主从配置）

# 配置yum源cat > /etc/yum.repos.d/kubernetes.repo << EOF[kubernetes]name=kubernetesbaseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64enabled=1gpgcheck=0repo_gpgcheck=0gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpgEOF# 安装 kubeadm 初始化工具，kubectl 命令行管理工具，kubeletyum -y install kubeadm-1.15.1 kubectl-1.15.1 kubelet-1.15.1# 设置开机自启systemctl enable kubelet

初始化主节点

注意：1.advertiseAddress需要更换为master服务器的ip地址

# 打印默认的初始化文件，打印到kubeadm-init.yamlkubeadm config print init-defaults > kubeadm-init.yaml# 修改cat > kubeadm-init.yaml << EOFapiVersion: kubeadm.k8s.io/v1beta2bootstrapTokens:- groups: - system:bootstrappers:kubeadm:default-node-token token: abcdef.0123456789abcdef ttl: 24h0m0s usages: - signing - authenticationkind: InitConfigurationlocalAPIEndpoint: advertiseAddress: xx.xx.xx.xx # master节点的IP地址 bindPort: 6443nodeRegistration: criSocket: /var/run/dockershim.sock name: master taints: - effect: NoSchedule key: node-role.kubernetes.io/master---apiServer: timeoutForControlPlane: 4m0sapiVersion: kubeadm.k8s.io/v1beta2certificatesDir: /etc/kubernetes/pkiclusterName: kubernetescontrollerManager: {}dns: type: CoreDNSetcd: local: dataDir: /var/lib/etcdimageRepository: k8s.gcr.iokind: ClusterConfigurationkubernetesVersion: v1.15.1networking: dnsDomain: cluster.local podSubnet: 10.244.0.0/16 serviceSubnet: 10.96.0.0/12scheduler: {}---apiVersion: kubeproxy.config.k8s.io/v1alpha1kind: KubeProxyConfigurationfeatureGates: SupportIPVSProxyMode: truemode: ipvsEOF# 启动kubeadm init --config=kubeadm-init.yaml | tee kubeadm-init.logmkdir -p $HOME/.kubesudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/configsudo chown $(id -u):$(id -g) $HOME/.kube/configmkdir -p /root/install-k8s/coremv /root/kubeadm-init.* /root/install-k8s/core

安装 flannel

mkdir -p /root/install-k8s/plugin/flannelcd /root/install-k8s/plugin/flannelwget https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.ymlkubectl apply -f /root/install-k8s/plugin/flannel/kube-flannel.yml

本文转自：https://blog.csdn.net/weixin_45456679/article/details/123423237