k3s部署

你的名字 2023-06-23 03:55 4阅读 0赞

#  欢迎关注我的公众号： #

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAaHhwamF2YTE_size_8_color_FFFFFF_t_70_g_se_x_16][]

目前刚开始写一个月，一共写了18篇原创文章，文章目录如下：

[istio多集群探秘，部署了50次多集群后我得出的结论][istio_50]

[istio多集群链路追踪，附实操视频][istio]

[istio防故障利器，你知道几个,istio新手不要读，太难！][istio_istio]

[istio业务权限控制，原来可以这么玩][istio 1]

[istio实现非侵入压缩，微服务之间如何实现压缩][istio 2]

[不懂envoyfilter也敢说精通istio系列-http-rbac-不要只会用AuthorizationPolicy配置权限][envoyfilter_istio_-http-rbac-_AuthorizationPolicy]

[不懂envoyfilter也敢说精通istio系列-02-http-corsFilter-不要只会vs][envoyfilter_istio_-02-http-corsFilter-_vs]

[不懂envoyfilter也敢说精通istio系列-03-http-csrf filter-再也不用再代码里写csrf逻辑了][envoyfilter_istio_-03-http-csrf filter-_csrf]

[不懂envoyfilter也敢说精通istio系列http-jwt\_authn-不要只会RequestAuthorization][envoyfilter_istio_http-jwt_authn-_RequestAuthorization]

[不懂envoyfilter也敢说精通istio系列-05-fault-filter-故障注入不止是vs][envoyfilter_istio_-05-fault-filter-_vs]

[不懂envoyfilter也敢说精通istio系列-06-http-match-配置路由不只是vs][envoyfilter_istio_-06-http-match-_vs]

[不懂envoyfilter也敢说精通istio系列-07-负载均衡配置不止是dr][envoyfilter_istio_-07-_dr]

[不懂envoyfilter也敢说精通istio系列-08-连接池和断路器][envoyfilter_istio_-08-]

[不懂envoyfilter也敢说精通istio系列-09-http-route filter][envoyfilter_istio_-09-http-route filter]

[不懂envoyfilter也敢说精通istio系列-network filter-redis proxy][envoyfilter_istio_-network filter-redis proxy]

[不懂envoyfilter也敢说精通istio系列-network filter-HttpConnectionManager][envoyfilter_istio_-network filter-HttpConnectionManager]

[不懂envoyfilter也敢说精通istio系列-ratelimit-istio ratelimit完全手册][envoyfilter_istio_-ratelimit-istio ratelimit]

1准备机器

hostnamectl set-hostname master

hostnamectl set-hostname node01

hostnamectl set-hostname node02

禁用防火墙

systemctl stop firewalld && systemctl disable firewalld

关闭selinux

setenforce 0

vi /etc/selinux/config

关闭swap

swapoff -a

vi /etc/fstab

2安装docker

wget [http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo][http_mirrors.aliyun.com_docker-ce_linux_centos_docker-ce.repo]

mv docker-ce.repo /etc/yum.repo.d/

yum install docker-ce

设置镜像加速

创建 /etc/docker/daemon.json 文件，并添加如下内容：

"registry-mirrors": \["[https://jzbtfwo9.mirror.aliyuncs.com][https_jzbtfwo9.mirror.aliyuncs.com]"\]

启动docker服务

systemctl start docker && systemctl enable docker

3下载k3s

[https://github.com/rancher/k3s/releases][https_github.com_rancher_k3s_releases]

chmod +x k3s && mv k3s /usr/local/bin/k3s

4下载安装脚本

[https://get.k3s.io][https_get.k3s.io]

chmod +x install.sh

5运行安装脚本

./install.sh

6修改service文件

vim /etc/systemd/system/multi-user.target.wants/k3s.service

/usr/local/bin/k3s server --docker --no-deploy traefik

systemctl daemon-reload

systemctl restart k3s

7下载基础镜像

docker pull registry.cn-beijing.aliyuncs.com/ilemonrain/pause-amd64:3.1

docker tag registry.cn-beijing.aliyuncs.com/ilemonrain/pause-amd64:3.1 k8s.gcr.io/pause:3.1

8验证master节点安装

sudo k3s kubectl get node

9部署node节点

下载k3s

K3S\_TOKEN在服务器的/var/lib/rancher/k3s/server/node-token

K3S\_URL=https://192.168.198.155:6443 K3S\_TOKEN=K104137672b9a646c3a6b28492c1aa931961465819d3ecb74b2049ebea2953083e6::server:85a5e20adb353a193ad9954639eb8b5e ./install.sh

下载基础镜像：

docker pull registry.cn-beijing.aliyuncs.com/ilemonrain/pause-amd64:3.1

docker tag registry.cn-beijing.aliyuncs.com/ilemonrain/pause-amd64:3.1 k8s.gcr.io/pause:3.1

修改service文件

vi /etc/systemd/system/k3s-agent.service

ExecStart=/usr/local/bin/k3s \\ agent --docker

systemctl daemon-reload

systemctl restart k3s-agent

10验证集群

k3s kubectl get node

k3s kubectl get pod --all-namespaces -o wide

11创建应用

k3s kubectl run nginx --image=nginx

[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAaHhwamF2YTE_size_8_color_FFFFFF_t_70_g_se_x_16]: https://img-blog.csdnimg.cn/20211007094240106.jpg?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBAaHhwamF2YTE=,size_8,color_FFFFFF,t_70,g_se,x_16
[istio_50]: https://mp.weixin.qq.com/s/_OPMjmWCDSTlmbAxytg33A
[istio]: https://mp.weixin.qq.com/s/kjvtno_UzJAGr1joxm3tvw
[istio_istio]: https://mp.weixin.qq.com/s/e2-p_NY31Mc5y07S4Bb1JQ
[istio 1]: https://mp.weixin.qq.com/s/iTV0SCQLhSOTYncp3PxoHQ
[istio 2]: https://mp.weixin.qq.com/s/eINlrT242RlAwfuZu1_PcA
[envoyfilter_istio_-http-rbac-_AuthorizationPolicy]: https://mp.weixin.qq.com/s/Q-yTGBNqkjOov49LTXPrPA
[envoyfilter_istio_-02-http-corsFilter-_vs]: https://mp.weixin.qq.com/s/bFMdrT7OKSqoWv8pDXOIqQ
[envoyfilter_istio_-03-http-csrf filter-_csrf]: https://mp.weixin.qq.com/s/dlG9phV-kMMxs4UPzuRNYg
[envoyfilter_istio_http-jwt_authn-_RequestAuthorization]: https://mp.weixin.qq.com/s/IfrJ-FdLYsdhPkDrcO_YXA
[envoyfilter_istio_-05-fault-filter-_vs]: https://mp.weixin.qq.com/s/a4gDXqD8uswgglMwkUph2Q
[envoyfilter_istio_-06-http-match-_vs]: https://mp.weixin.qq.com/s/TpS3DHdcaJiPivIS_jsIGw
[envoyfilter_istio_-07-_dr]: https://mp.weixin.qq.com/s/k-zJm7n7OOKg6MotQJYPAA
[envoyfilter_istio_-08-]: https://mp.weixin.qq.com/s/n_bJ3saNeTtXRprIymhwzg
[envoyfilter_istio_-09-http-route filter]: https://mp.weixin.qq.com/s/JAeZr0BMVQxIrB3S_7Ru0A
[envoyfilter_istio_-network filter-redis proxy]: https://mp.weixin.qq.com/s/B9IPTI8F3q42nVkqbQRlPw
[envoyfilter_istio_-network filter-HttpConnectionManager]: https://mp.weixin.qq.com/s/W3OPQWkCVvuHGS49cTNhlg
[envoyfilter_istio_-ratelimit-istio ratelimit]: https://mp.weixin.qq.com/s/KgiDsELNol27mgZvDbFsqw
[http_mirrors.aliyun.com_docker-ce_linux_centos_docker-ce.repo]: http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
[https_jzbtfwo9.mirror.aliyuncs.com]: https://jzbtfwo9.mirror.aliyuncs.com
[https_github.com_rancher_k3s_releases]: https://github.com/rancher/k3s/releases
[https_get.k3s.io]: https://get.k3s.io