K8s环境搭建

淡淡的烟草味﹌ 2022-01-16 12:21 389阅读 0赞

**K8s环境搭建**

实验环境：三台centos7.5

172.26.0.10 master

172.26.0.12 node1

172.26.0.14 node2

一、Kubernetes搭建

1.在各个节点上面安装k8s组件

配置master为etcd和master节点：

\[root@master~\]\# yum install -y kubernetes etcd flannel ntp

\[root@node1~\]\# yum install -y kubernetes flannel ntp

\[root@node2~\]\# yum install -y kubernetes flannel ntp

关闭防火墙：

\[root@master~\]\#systemctl stop firewalld && systemctl disable firewalld &&

systemctl status firewalld

\[root@node1~\]\# systemctl stop firewalld && systemctl disable firewalld &&

systemctl status firewalld

\[root@node2~\]\# systemctl stop firewalld && systemctl disable firewalld &&

systemctl status firewalld

配置每个节点的主机名和hosts文件

vi  /etc/hosts

172.26.0.10 master

172.26.0.12 node1

172.26.0.14 node2

2.配置etcd

\[root@master~\]\#vim /etc/etcd/etcd.conf \#修改原文件，只需要以下红色标记的内容

ETCD\_DATA\_DIR="/var/lib/etcd/default.etcd"

ETCD\_LISTEN\_CLIENT\_URLS="http://localhost:2379,http://172.26.0.10:2379"

ETCD\_NAME="etcd"

ETCD\_ADVERTISE\_CLIENT\_URLS="http://172.26.0.10:2379"

启动服务

\[root@master~\]\#systemctl start etcd

\[root@master~\]\#systemctl status etcd

\[root@master~\]\#systemctl enable etcd

etcd 通讯使用 2379 端口

查看：

\[root@master~\]\# netstat -antup | grep 2379

tcp 0 0 127.0.0.1:2379 0.0.0.0:\* LISTEN 15901/etcd

tcp 0 0 172.26.0.10:2379 0.0.0.0:\* LISTEN 15901/etcd

检查 etcd 集群成员列表，这里只有一台

\[root@master~\]\# etcdctl member list

8e9e05c52164694d: name=etcd peerURLs=http://localhost:2380 clientURLs=http://172.26.0.10:2379 isLeader=true

3. 配置master服务器

a. 配置kubemetes配置文件

\[root@master~\]\# vim /etc/kubernetes/conf

KUBE\_LOGTOSTDERR="--logtostderr=true"

KUBE\_LOG\_LEVEL="--v=0"

KUBE\_ALLOW\_PRIV="--allow-privileged=false"

KUBE\_MASTER="--master=http://172.26.0.10:8080"

b. 配置apiserver配置文件

\[root@master~\]\# vim /etc/kubernetes/apiserver

KUBE\_API\_ADDRESS="--insecure-bind-address=0.0.0.0"

KUBE\_ETCD\_SERVERS="--etcd-servers=http://172.26.0.10:2379"

KUBE\_SERVICE\_ADDRESSES="--service-cluster-ip-range=10.254.0.0/16"

KUBE\_ADMISSION\_CONTROL="--admission-control=AlwaysAdmit"

KUBE\_API\_ARGS=""

c. 配置 kube-scheduler 配置文件

\[root@master~\]\# vim /etc/kubernetes//scheduler

KUBE\_SCHEDULER\_ARGS="0.0.0.0"

4. 配置 etcd，指定容器云中 docker 的 IP 网段

\[root@master~\]\# etcdctl mkdir /k8s/network

\[root@master~\]\# etcdctl get /k8s/network/config

\[root@master~\]\# vim /etc/sysconfig/flanneld

FLANNEL\_ETCD\_ENDPOINTS="http://172.26.0.10:2379"

FLANNEL\_ETCD\_PREFIX="/k8s/network"

FLANNEL\_OPTIONS="--iface=ens192" \#指定通信的物理网卡

\[root@master~\]\# systemctl restart flanneld

\[root@master~\]\# cat /run/flannel/subnet.env

FLANNEL\_NETWORK=10.255.0.0/16

FLANNEL\_SUBNET=10.255.62.1/24

FLANNEL\_MTU=1472

FLANNEL\_IPMASQ=false

\[root@master~\]\# cat /run/flannel/docker

DOCKER\_OPT\_BIP="--bip=10.255.62.1/24"

DOCKER\_OPT\_IPMASQ="--ip-masq=true"

DOCKER\_OPT\_MTU="--mtu=1472"

DOCKER\_NETWORK\_OPTIONS=" --bip=10.255.62.1/24 --ip-masq=true --mtu=1472"

5. 启动master上4个服务

\[root@master ~\]\# systemctl restart kube-apiserver kube-controller-manager

kube-scheduler flanneld

\[root@master ~\]\# systemctl status kube-apiserver kube-controller-manager

kube-scheduler flanneld

\[root@master ~\]\# systemctl enable kube-apiserver kube-controller-manager

kube-scheduler flanneld

6. 配置minion节点服务器

注：minion各节点配置相同，这边已node1为例

a. 配置flanneld服务

\[root@node1~\]\# vim /etc/sysconfig/flanneld

FLANNEL\_ETCD\_ENDPOINTS="http://172.26.0.10:2379"

FLANNEL\_ETCD\_PREFIX="/k8s/network"

FLANNEL\_OPTIONS="--iface=ens192" \#指定通信的物理网卡

\[root@node1 ~\]\# vim  /etc/kubernetes/config

KUBE\_LOGTOSTDERR="--logtostderr=true"

KUBE\_LOG\_LEVEL="--v=0"

KUBE\_ALLOW\_PRIV="--allow-privileged=false"

KUBE\_MASTER="--master=http://172.26.0.10:8080"

\[root@node1 ~\]\# vim /etc/kubernetes/kubelet

KUBELET\_ADDRESS="--address=0.0.0.0"

KUBELET\_HOSTNAME="--hostname-override=node1"

KUBELET\_API\_SERVER="--api-servers=http://172.26.0.10:8080"

KUBELET\_POD\_INFRA\_CONTAINER="--pod-infra-container-image=registry.access.redhat.com/rhel7/pod-infrastructure:latest"

KUBELET\_ARGS=""

b. 启动node1服务

\[root@node1 ~\]\# systemctl restart flanneld kube-proxy kubelet docker

\[root@node1 ~\]\# systemctl enable flanneld kube-proxy kubelet docker

\[root@node1 ~\]\# systemctl status flanneld kube-proxy kubelet dock

注：node2按上面步骤设置一下

查看服务是否安装成功

\[root@master ~\]\# kubectl get nodes

NAME      STATUS    AGE

node1     Ready     2y

node2     Ready     2y

二、Kubernetes的web管理界面搭建

1. 创建dashboard-deployment.yaml配置文件

\[root@master~\]\# vim /etc/kubernetes/dashboard-deployment.yaml

apiVersion: extensions/v1beta1

kind: Deployment

metadata:

\# Keep the name in sync with image version and

\# gce/coreos/kube-manifests/addons/dashboard counterparts

name: kubernetes-dashboard-latest

namespace: kube-system

spec:

replicas: 1

template:

metadata:

labels:

k8s-app: kubernetes-dashboard

version: latest

kubernetes.io/cluster-service: "true"

spec:

containers:

- name: kubernetes-dashboard

image: docker.io/bestwu/kubernetes-dashboard-amd64:v1.6.3

imagePullPolicy: IfNotPresent

resources:

\# keep request = limit to keep this container in guaranteed class

limits:

cpu: 100m

memory: 50Mi

requests:

cpu: 100m

memory: 50Mi

ports:

- containerPort: 9090

args:

\- --apiserver-host=http://172.26.0.10:8080

livenessProbe:

httpGet:

path: /

port: 9090

initialDelaySeconds: 30

timeoutSeconds: 30

2.创建编辑 dashboard-service.yaml 文件：

\[root@master ~\]\# vim /etc/kubernetes/dashboard-service.yaml

apiVersion: v1

kind: Service

metadata:

name: kubernetes-dashboard

namespace: kube-system

labels:

k8s-app: kubernetes-dashboard

kubernetes.io/cluster-service: "true"

spec:

selector:

k8s-app: kubernetes-dashboard

ports:

- port: 80

targetPort: 9090

2. node1和node2需要提前拉取两个镜像

\[root@node1 ~\]\#docker search kubernetes-dashboard-amd

\[root@node1 ~\]\#docker pull docker.io/bestwu/kubernetes-dashboard-amd64

\[root@node1 ~\]\#docker search pod-infrastructure

\[root@node1 ~\]\#docker pull docker.io/xplenty/rhel7-pod-infrastructure

3. 启劢 dashboard 的 deployment 和 service

\[root@master ~\]\#kubectl create -f /etc/kubernetes/dashboard-deployment.yaml

\[root@master ~\]\#kubectl create -f /etc/kubernetes/dashboard-service.yaml

\[root@master ~\]\#kubectl get deployment --all-namespac

\[root@master ~\]\# kubectl get svc --all-namespaces

注：安装过程中遇到的错误

kubelet does not have ClusterDNS IP configured and cannot create Pod using "ClusterFirst" policy. Falling back to DNSDefault policy.

![spacer.gif][]

以上软连接目标文件不存在

解决方式：

wget [http://mirror.centos.org/centos/7/os/x86\_64/Packages/python-rhsm-certificates-1.19.10-1.el7\_4.x86\_64.rpm][http_mirror.centos.org_centos_7_os_x86_64_Packages_python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm]

rpm2cpio python-rhsm-certificates-1.19.10-1.el7\_4.x86\_64.rpm | cpio -iv --to-stdout ./etc/rhsm/ca/redhat-uep.pem | tee /etc/rhsm/ca/redhat-uep.pem

安装完成

![image.png][]

![spacer.gif][]

转载于:https://blog.51cto.com/5535123/2354451

[spacer.gif]: /images/20220114/d401b92aab2e469d99d35c7cf1bd4400.png
[http_mirror.centos.org_centos_7_os_x86_64_Packages_python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm]: http://mirror.centos.org/centos/7/os/x86_64/Packages/python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm
[image.png]: https://s1.51cto.com/images/20190225/1551075382255491.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=