K8s集群安装--最新版 Kubernetes 1.14.1

K8s集群安装--最新版 Kubernetes 1.14.1

前言

网上有很多关于k8s安装的文章，但是我参照一些文章安装时碰到了不少坑。今天终于安装好了，故将一些关键点写下来与大家共享。
我安装是基于ss客户端的，鉴于ss有些敏感，故不做说明。

环境说明

Centos

cat /etc/redhat-release

CentOS Linux release 7.6.1810 (Core)

Docker

ss客户端+privoxy

hostname	ip	环境说明
k8master	192.168.2.38	笔记本电脑 8G i3-5005U
node3	192.168.2.23	exsi下 2G E3-1226 v3

代理设置

~/.bash_profile # 当前用户
/etc/profile # 系统级

在最后加入

export proxy="http://192.168.2.38:8118"
export http_proxy=$proxy
export https_proxy=$proxy
export ftp_proxy=$proxy
export no_proxy="localhost, 127.0.0.1, ::1"
source /etc/profile # 使生效

/etc/yum.conf
在最后加入

# Proxy
proxy=http://192.168.2.38:8118/

也可

echo "proxy=http://192.168.2.38:8118/" >> /etc/yum.conf

/etc/wgetrc
在最后加入

#  Proxy
http_proxy=http://192.168.2.38:8118/
ftp_proxy=http://192.168.2.38:8118/

docker安装

参考文章

yum install -y yum-utils device-mapper-persistent-data lvm2

yum-config-manager \
     --add-repo \
     https://download.docker.com/linux/centos/docker-ce.repo

docker 设置代理

参考文章

mkdir -p /etc/systemd/system/docker.service.d

nano /etc/systemd/system/docker.service.d/http-proxy.conf

# 添加
[Service]
Environment="HTTP_PROXY=http://192.168.2.38:8118/" "HTTPS_PROXY=http://192.168.2.38:8118/"

更新配置

systemctl daemon-reload

重启服务

systemctl restart docker

k8s安装

参照链接1

参照链接2

关闭swap

执行swapoff临时关闭swap。

swapoff -a

重启后会失效，若要永久关闭，可以编辑/etc/fstab文件，将其中swap分区一行注释掉

nano /etc/fstab

#/dev/mapper/centos-swap swap                    swap    defaults        0 0

添加yum仓库

nano /etc/yum.repos.d/kubernetes.repo

[kubernetes]
name=Kubernetes
baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
exclude=kube*

关闭firewalld

systemctl stop firewalld

systemctl disable firewalld

关闭SELinux

setenforce 0

sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config

修改sysctl内核参数

nano /etc/sysctl.d/k8s.conf

net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
vm.swappiness=0

sysctl --system

安装kubeadm, kubelet and kubectl

yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes

systemctl enable --now kubelet

拉取镜像

说明：执行kubeadm需配置docker代理才能访问gcr.io

kubeadm config images pull

安装pod网络插件

yum insatll flanneld

初始化集群master

kubeadm init --pod-network-cidr=10.244.0.0/16

Your Kubernetes control-plane has initialized successfully!
To start using your cluster, you need to run the following as a regular user:
  mkdir -p $HOME/.kube
  sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  sudo chown $(id -u):$(id -g) $HOME/.kube/config
You should now deploy a pod network to the cluster.
Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
  https://kubernetes.io/docs/concepts/cluster-administration/addons/
Then you can join any number of worker nodes by running the following on each as root:
kubeadm join 192.168.2.38:6443 --token vxoj3n.5tiw4y9c4chppagz \
    --discovery-token-ca-cert-hash sha256:f844a1934f1ed2399468f7037bb8605c112eab89bcdf5a4dea9cbd89e6906261

记录并保存屏幕文字，后续worker节点将用到。

执行以下命令配置kubectl，作为普通用户管理集群并在集群上工作

mkdir -p $HOME/.kube
cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
chown $(id -u):$(id -g) $HOME/.kube/config

获取pods列表

kubectl get pods --all-namespaces

查看集群的健康状态

kubectl get cs

worker节点加入

操作同master节点，直到初始化集群master这一步（worker节点不用初始化）

kubeadm join 192.168.2.38:6443 --token vxoj3n.5tiw4y9c4chppagz \
    --discovery-token-ca-cert-hash sha256:f844a1934f1ed2399468f7037bb8605c112eab89bcdf5a4dea9cbd89e6906261

然后等待几分钟

部署dashboard

注意项
获取登录dashboard的token

kubectl -n kube-system describe $(kubectl -n kube-system get secret -n kube-system -o name |grep namespace)|grep token

kubernetes nodes notready的处理

systemctl restart docker