kubernetes最新版安装单机版v1.20.5

网友投稿 259 2022-10-08

1、部署环境主机

k8s-master 192.168.200.137

角色master IP

cat >> /etc/hosts << EOF

192.168.200.135 k8s-master

EOF

2、系统初始化

关闭防火墙：

systemctl stop firewalld

systemctl disable firewalld

关闭selinux：

sed -i 's/enforcing/disabled/' /etc/selinux/config # 永久

setenforce 0 # 临时

关闭swap：

swapoff -a # 临时

sed -i 's/.*swap.*/#&/' /etc/fstab # 永久

主机名：

hostnamectl set-hostname k8s-master

将桥接的IPv4 流量传递到iptables 的链：

cat > /etc/sysctl.d/k8s.conf << EOF

net.bridge.bridge-nf-call-ip6tables = 1

net.bridge.bridge-nf-call-iptables = 1

EOF

sysctl --system # 生效

时间同步：

yum install ntpdate -y

ntpdate time.windows.com

3安装Docker/kubeadm/kubelet

Kubernetes 默认CRI（容器运行时）为Docker，因此先安装Docker。

（1）安装Docker

wget -O /etc/yum.repos.d/docker-ce.repo

yum -y install docker-ce-18.06.1.ce-3.el7 #安装docker最新版后面安装kubernetes的v1.20.5

systemctl enable docker && systemctl start docker && systemctl status docker

docker --version

（2）添加阿里云YUM 软件源

设置仓库地址

cat > /etc/docker/daemon.json << EOF

{

"registry-mirrors": ["["native.cgroupdriver=systemd"],

"log-driver": "json-file",

"log-opts": {

"max-size": "100m"

"storage-driver": "overlay2"

}

EOF

systemctl restart docker

添加yum 源

cat > /etc/yum.repos.d/kubernetes.repo << EOF

[kubernetes]

name=Kubernetes

baseurl=和kubectl

yum -y install kubelet-1.20.5-0 kubeadm-1.20.5-0 kubectl-1.20.5-0

systemctl enable kubelet

4部署Kubernetes Master

（1）在192.168.200.137（Master）执行

------------------------------------------------------------------------

kubeadm init --apiserver-advertise-address=192.168.200.137 --image-repository registry.aliyuncs.com/google_containers --kubernetes-version v1.20.5 --service-cidr=10.96.0.0/12 --pod-network-cidr=10.244.0.0/16 --ignore-preflight-errors=all

————————————————————————————————————

由于默认拉取镜像地址k8s.gcr.io 国内无法访问，这里指定阿里云镜像仓库地址。

（2）使用kubectl 工具：

mkdir -p $HOME/.kube

sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config

sudo chown $(id -u):$(id -g) $HOME/.kube/config

[root@k8s-master ~]# kubectl get nodes

NAME STATUS ROLES AGE VERSION

k8s-master NotReady control-plane,master 61s v1.20.5

5安装Pod 网络插件（CNI）

wget init的 --pod-network-cidr指定的一样。--pod-network-cidr=10.244.0.0/16

flannel不支持网络策略

wget kube-flannel.yml

==========================================================复制下面中的

---

apiVersion: policy/v1beta1

kind: PodSecurityPolicy

metadata:

annotations:

seccomp.security.alpha.kubernetes.io/allowedProfileNames: docker/default

seccomp.security.alpha.kubernetes.io/defaultProfileName: docker/default

apparmor.security.beta.kubernetes.io/allowedProfileNames: runtime/default

apparmor.security.beta.kubernetes.io/defaultProfileName: runtime/default

spec:

privileged: false

volumes:

- configMap

- secret

- emptyDir

- hostPath

allowedHostPaths:

- pathPrefix: "/etc/cni/net.d"

- pathPrefix: "/etc/kube-flannel"

- pathPrefix: "/run/flannel"

readOnlyRootFilesystem: false

# Users and groups

runAsUser:

rule: RunAsAny

supplementalGroups:

rule: RunAsAny

fsGroup:

rule: RunAsAny

# Privilege Escalation

allowPrivilegeEscalation: false

defaultAllowPrivilegeEscalation: false

# Capabilities

allowedCapabilities: ['NET_ADMIN', 'NET_RAW']

defaultAddCapabilities: []

requiredDropCapabilities: []

# Host namespaces

hostPID: false

hostIPC: false

hostNetwork: true

hostPorts:

- min: 0

max: 65535

# SELinux

seLinux:

# SELinux is unused in CaaSP

rule: 'RunAsAny'

---

kind: ClusterRole

apiVersion: rbac.authorization.k8s.io/v1

metadata:

rules:

- apiGroups: ['extensions']

resources: ['podsecuritypolicies']

verbs: ['use']

resourceNames: ['psp.flannel.unprivileged']

- apiGroups:

- ""

resources:

- pods

verbs:

- get

- apiGroups:

- ""

resources:

- nodes

verbs:

- list

- watch

- apiGroups:

- ""

resources:

- nodes/status

verbs:

- patch

---

kind: ClusterRoleBinding

apiVersion: rbac.authorization.k8s.io/v1

metadata:

roleRef:

apiGroup: rbac.authorization.k8s.io

kind: ClusterRole

subjects:

- kind: ServiceAccount

namespace: kube-system

---

apiVersion: v1

kind: ServiceAccount

metadata:

namespace: kube-system

---

kind: ConfigMap

apiVersion: v1

metadata:

namespace: kube-system

labels:

tier: node

app: flannel

data:

cni-conf.json: |

{

"name": "cbr0",

"cniVersion": "0.3.1",

"plugins": [

{

"type": "flannel",

"delegate": {

"hairpinMode": true,

"isDefaultGateway": true

}

{

"type": "portmap",

"capabilities": {

"portMappings": true

}

]

}

net-conf.json: |

{

"Network": "10.244.0.0/16",

"Backend": {

"Type": "vxlan"

}

---

apiVersion: apps/v1

kind: DaemonSet

metadata:

namespace: kube-system

labels:

tier: node

app: flannel

spec:

selector:

matchLabels:

app: flannel

template:

metadata:

labels:

tier: node

app: flannel

spec:

affinity:

nodeAffinity:

requiredDuringSchedulingIgnoredDuringExecution:

nodeSelectorTerms:

- matchExpressions:

- key: kubernetes.io/os

operator: In

values:

- linux

hostNetwork: true

priorityClassName: system-node-critical

tolerations:

- operator: Exists

effect: NoSchedule

serviceAccountName: flannel

initContainers:

- name: install-cni

image: quay.io/coreos/flannel:v0.13.1-rc2

command:

- cp

args:

- -f

- /etc/kube-flannel/cni-conf.json

- /etc/cni/net.d/10-flannel.conflist

volumeMounts:

- name: cni

mountPath: /etc/cni/net.d

- name: flannel-cfg

mountPath: /etc/kube-flannel/

containers:

- name: kube-flannel

image: quay.io/coreos/flannel:v0.13.1-rc2

command:

- /opt/bin/flanneld

args:

- --ip-masq

- --kube-subnet-mgr

resources:

requests:

cpu: "100m"

memory: "50Mi"

limits:

cpu: "100m"

memory: "50Mi"

securityContext:

privileged: false

capabilities:

add: ["NET_ADMIN", "NET_RAW"]

env:

- name: POD_NAME

valueFrom:

fieldRef:

fieldPath: metadata.name

- name: POD_NAMESPACE

valueFrom:

fieldRef:

fieldPath: metadata.namespace

volumeMounts:

- name: run

mountPath: /run/flannel

- name: flannel-cfg

mountPath: /etc/kube-flannel/

volumes:

- name: run

hostPath:

path: /run/flannel

- name: cni

hostPath:

path: /etc/cni/net.d

- name: flannel-cfg

configMap:

=================================================

：shif set paste

[root@k8s-master ~]# kubectl apply -f kube-flannel.yml

[root@k8s-master ~]# kubectl get nodes #显示Ready就是对的

NAME STATUS ROLES AGE VERSION

k8s-master Ready control-plane,master 7m48s v1.20.5

[root@k8s-master ~]# kubectl get pods -n kube-system #全部显示Running就是对的

NAME READY STATUS RESTARTS AGE

coredns-7f89b7bc75-p2r9t 1/1 Running 0 8m13s

coredns-7f89b7bc75-x684t 1/1 Running 0 8m13s

etcd-k8s-master 1/1 Running 0 8m28s

kube-apiserver-k8s-master 1/1 Running 0 8m28s

kube-controller-manager-k8s-master 1/1 Running 0 8m28s

kube-flannel-ds-q46lw 1/1 Running 0 5m8s

kube-proxy-fkr5x 1/1 Running 0 8m13s

kube-scheduler-k8s-master 1/1 Running 0 8m28s

确保能够访问到quay.io 这个registery。如果Pod 镜像下载失败，可以改这个镜像地址

6.单集版的k8s安装后, 无法部署服务，因为默认master不能部署pod,有污点, 需要去掉污点或者新增一个node，我这里是去除污点

##查看污点策略，显示三个master节点都是NoSchedule

[root@k8s-master ~]# kubectl get node -o yaml | grep taint -A 5

f:taints: {}

manager: kube-controller-manager

operation: Update

time: "2021-05-09T00:29:04Z"

- apiVersion: v1

fieldsType: FieldsV1

taints:

- effect: NoSchedule

key: node-role.kubernetes.io/master

status:

addresses:

- address: 192.168.200.137

#去除污点，允许master节点部署pod

[root@instance-rxkizktp ~]# kubectl taint nodes --all node-role.kubernetes.io/master- #执行这句就行，就是取消污点

node/instance-rxkizktp untainted

#再次查看，无显示，说明污点去除成功

[root@instance-rxkizktp ~]# kubectl get no -o yaml | grep taint -A 5 #什么都没有查询到

7安装补全命令的包

rpm -aq |grep completion

yum -y install bash-completion #安装补全命令的包

kubectl completion bash

source /usr/share/bash-completion/bash_completion

kubectl completion bash >/etc/profile.d/kubectl.sh

source /etc/profile.d/kubectl.sh

[root@k8s-master ~]# vim /root/.bashrc

在最后添加source /etc/profile.d/kubectl.sh

8测试kubernetes 集群

在Kubernetes集群中部署一个Nginx：

kubectl create deployment nginx --image=nginx

kubectl expose deployment nginx --port=80 --type=NodePort

[root@k8s-master ~]# kubectl get pod,svc,deployment

NAME READY STATUS RESTARTS AGE

pod/nginx-6799fc88d8-vfqgz 1/1 Running 0 2m

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE

service/kubernetes ClusterIP 10.96.0.1 443/TCP 8m17s

service/nginx NodePort 10.98.118.162 80:30864/TCP 112s

NAME READY UP-TO-DATE AVAILABLE AGE

deployment.apps/nginx 1/1 1 1 2m

kubectl scale deployment nginx --replicas=6 #pod扩到6个数量

访问地址：create deployment tomcat --image=tomcat

kubectl expose deployment tomcat --port=8080 --type=NodePort

[root@k8s-master ~]# kubectl get pod,svc -o wide

NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES

pod/nginx-6799fc88d8-fzfjg 1/1 Running 0 7m53s 10.244.0.4 k8s-master

pod/tomcat-7d987c7694-cgvml 1/1 Running 0 3m43s 10.244.0.5 k8s-master

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE SELECTOR

service/kubernetes ClusterIP 10.96.0.1 443/TCP 21m

service/nginx NodePort 10.107.170.87 80:31073/TCP 6m49s app=nginx

service/tomcat NodePort 10.108.83.43 8080:32557/TCP 8s app=tomcat

[root@k8s-master ~]#

访问地址：http://192.168.200.137:32557/

标签：工具

linux cpu占用率如何看

259 2022-10-08

宝塔数据库如何清理缓存

259 2022-10-08

oracle怎么创建存储过程

259 2022-10-08

发表评论

暂时没有评论，来抢沙发吧~

kubernetes最新版安装单机版v1.20.5

linux cpu占用率如何看

宝塔数据库如何清理缓存

oracle怎么创建存储过程

推荐文章

api接口有哪几种分类及功能

什么是API接口?API接口简单介绍

短信API接口概述，短信API接口的优势

7款快递物流的物流查询API工具，物流快递查询API接口怎么对接？

企业四要素: 了解企业经营成功的关键

什么是语音验证码?,语音验证码平台有哪些

全国工商查询系统怎么查企业名录

哪些平台提供实名认证的接口？

PHP如何调用API接口?

如何使用百度天气预报API接口?

最近发表

热评文章

数据接口api（数据接口API开发平台）

数据开放接口api（数据服务api开发）

Python爬虫教程：爬取酷狗音乐（python爬取

hbuilder怎么更改字体大小和颜色

直播平台api接口 - 构建卓越的直播平台

实时股票数据api接口（股票实时行情api接口）