大家好,今天小编来为大家解答uutxt小说下载网这个问题,如何使用 kubeadm 安装 Kubernetes?很多人还不知道,现在让我们一起来看看吧!
本文讲解如何使用kubeadm安装kubernetes1.15.2。
作者|阿文
责编|郭芮
kubeadm能帮助您建立一个小型的符合最佳实践的Kubernetes集群。它可以运行在不同类型的机器上,例如笔记本、服务器和树莓派等。对于kubernetes不熟悉的新用户可以使用kubeadm快速的开始试用kubernetes。
准备三台机
192.168.10.89master
192.168.10.7node1
192.168.10.8node2
他们的配置是8核8G。
安装Docker
1.安装docker
yum-yinstalldocker
sudotee/etc/docker/daemon.json<<-'EOF'
{
"registry-mirrors":["https://5pkmy13c.mirror.aliyuncs.com"]
}
EOF
sudosystemctldaemon-reload
sudosystemctlrestartdocker
安装kubeadm
1.添加kubernetes源
cat<<EOF>/etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF
2.执行如下命令安装kubeletkubeadmkubectl
yuminstall-ykubeletkubeadmkubectl--disableexcludes=kubernetes
systemctlenablekubelet&&systemctlstartkubelet
3.执行查看kubeadm的images
kubeadmconfigimageslist
可以看到如下信息:
W081509:36:13.25161144413version.go:98]couldnotfetchaKubernetesversionfromtheinternet:unabletogetURL"https://dl.k8s.io/release/stable-1.txt":Gethttps://dl.k8s.io/release/stable-1.txt:net/http:requestcanceledwhilewaitingforconnection(Client.Timeoutexceededwhileawaitingheaders)
W081509:36:13.25173044413version.go:99]fallingbacktothelocalclientversion:v1.15.2
k8s.gcr.io/kube-apiserver:v1.15.2
k8s.gcr.io/kube-controller-manager:v1.15.2
k8s.gcr.io/kube-scheduler:v1.15.2
k8s.gcr.io/kube-proxy:v1.15.2
k8s.gcr.io/pause:3.1
k8s.gcr.io/etcd:3.3.10
k8s.gcr.io/coredns:1.3.1
4.由于k8s.gcr.io被墙,所以,我们可以使用阿里云的源来安装,将如下信息保存为k8s_images_install.sh后运行脚本下载镜像。
images=(
kube-apiserver:v1.15.2
kube-controller-manager:v1.15.2
kube-scheduler:v1.15.2
kube-proxy:v1.15.2
pause:3.1
etcd:3.3.10
coredns:1.3.1
)
forimageNamein${images[@]};do
dockerpullregistry.cn-hangzhou.aliyuncs.com/google_containers/$imageName
dockertagregistry.cn-hangzhou.aliyuncs.com/google_containers/$imageNamek8s.gcr.io/$imageName
dockerrmiregistry.cn-hangzhou.aliyuncs.com/google_containers/$imageName
done
5.然后执行如下命令安装kubeadm。
kubeadminit--kubernetes-version=v1.15.2--pod-network-cidr=10.244.0.0/16--service-cidr=10.96.0.0/12
安装完毕会提示:
YourKubernetescontrol-planehasinitializedsuccessfully!
Tostartusingyourcluster,youneedtorunthefollowingasaregularuser:
mkdir-p$HOME/.kube
sudocp-i/etc/kubernetes/admin.conf$HOME/.kube/config
sudochown$(id-u):$(id-g)$HOME/.kube/config
Youshouldnowdeployapodnetworktothecluster.
Run"kubectlapply-f[podnetwork].yaml"withoneoftheoptionslistedat:
https://kubernetes.io/docs/concepts/cluster-administration/addons/
Thenyoucanjoinanynumberofworkernodesbyrunningthefollowingoneachasroot:
kubeadmjoin192.168.10.89:6443--tokenlinp38.sdzgoaw3jvrnr5yq\
--discovery-token-ca-cert-hashsha256:c8c4d08806ec22851c0eaa4e41962576b19d372e92f638a88e89f166e2a2c4af
注意这里的——
kubeadmjoin192.168.10.89:6443--tokenlinp38.sdzgoaw3jvrnr5yq\
--discovery-token-ca-cert-hashsha256:c8c4d08806ec22851c0eaa4e41962576b19d372e92f638a88e89f166e2a2c4af
信息我们保存下来,稍后会在node节点使用到,我们根据提示执行:
mkdir-p$HOME/.kube
sudocp-i/etc/kubernetes/admin.conf$HOME/.kube/config
sudochown$(id-u):$(id-g)$HOME/.kube/config
Kubernetes集群默认需要加密方式访问。所以,这几条命令,就是将刚刚部署生成的Kubernetes集群的安全配置文件,保存到当前用户的.kube目录下,kubectl默认会使用这个目录下的授权信息访问Kubernetes集群。
然后添加网络插件,否则CoreDNS、kube-controller-manager等依赖于网络的Pod都处于Pending状态,会调度失败。如下所示:
#kubectlgetpods--all-namespaces
NAMESPACENAMEREADYSTATUSRESTARTSAGE
kube-systemcoredns-5c98db65d4-5jntb0/1Pending02m15s
kube-systemcoredns-5c98db65d4-db2xj0/1Pending02m15s
kube-systemetcd-k8s-1.localdomain1/1Running081s
kube-systemkube-apiserver-k8s-1.localdomain1/1Running099s
kube-systemkube-controller-manager-k8s-1.localdomain1/1Running086s
kube-systemkube-flannel-ds-amd64-pc4kp1/1Running032s
kube-systemkube-proxy-6qwv61/1Running02m15s
kube-systemkube-scheduler-k8s-1.localdomain1/1Running077s
我们安装flannel插件:
kubectlapply-fhttps://raw.githubusercontent.com/coreos/flannel/bc79dd1505b0c8681ece4de4c0d86c5cd2643275/Documentation/kube-flannel.yml
然后我们查看pod状态,发现STATUS都未Running。
#kubectlgetpods--all-namespaces
NAMESPACENAMEREADYSTATUSRESTARTSAGE
kube-systemcoredns-5c98db65d4-5jntb1/1Running026m
kube-systemcoredns-5c98db65d4-db2xj1/1Running026m
kube-systemetcd-k8s-1.localdomain1/1Running025m
kube-systemkube-apiserver-k8s-1.localdomain1/1Running025m
kube-systemkube-controller-manager-k8s-1.localdomain1/1Running025m
kube-systemkube-flannel-ds-amd64-9tscr1/1Running016m
kube-systemkube-flannel-ds-amd64-pc4kp1/1Running024m
kube-systemkube-flannel-ds-amd64-tts291/1Running017m
kube-systemkube-proxy-64f8t1/1Running016m
kube-systemkube-proxy-6qwv61/1Running026m
kube-systemkube-proxy-js7bb1/1Running017m
kube-systemkube-scheduler-k8s-1.localdomain1/1Running025m
Node节点配置
接下来我们分别配置2台node节点,以下配置分别在2台node上执行。
1.添加kubernetes源
cat<<EOF>/etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF
2.执行
yuminstall-ykubeletkubeadmkubectl--disableexcludes=kubernetes
systemctlenablekubelet&&systemctlstartkubelet
3.安装node节点所需的组件,由于node节点不需要api-server和controller-manager、scheduler、etcd,我们只需要安装kube-proxy、pause、coredns即可。
images=(
kube-proxy:v1.15.2
pause:3.1
coredns:1.3.1
)
forimageNamein${images[@]};do
dockerpullregistry.cn-hangzhou.aliyuncs.com/google_containers/$imageName
dockertagregistry.cn-hangzhou.aliyuncs.com/google_containers/$imageNamek8s.gcr.io/$imageName
dockerrmiregistry.cn-hangzhou.aliyuncs.com/google_containers/$imageName
done
然后执行master节点我们执行kubeadminit后得到join信息将node节点加入到集群:
kubeadmjoin10.168.0.2:6443--token00bwbx.uvnaa2ewjflwu1ry--discovery-token-ca-cert-hashsha256:00eb62a2a6020f94132e3fe1ab721349bbcd3e9b94da9654cfe15f2985ebd711
然后在master执行如下命令查看nodes信息:
#kubectlgetnodes
NAMESTATUSROLESAGEVERSION
k8s-1.localdomainReadymaster10mv1.15.2
k8s-2.localdomainReady<none>89sv1.15.2
k8s-3.localdomainReady<none>67sv1.15.2
问题排障
1.node节点执行kubectlgetnodes提示:
Theconnectiontotheserverlocalhost:8080wasrefused-didyouspecifytherighthostorport?
kubectl命令是通过kube-apiserver接口进行集群管理。该命令可以在Master节点上运行是因为kube-apiserver处于工作状态,而在Node节点上只有kube-proxy和kubelet处于工作状态,kubectl命令其实不是为Node节点的主机准备的,而是应该运行在一个Client主机上:如K8s-Master节点的非root用户。当我们kubeadminitsuccess后,系统会提示我们将admin.conf文件保存到Client主机上:
#cat.kube/config
apiVersion:v1
clusters:
-cluster:
certificate-authority-data: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
server:https://192.168.10.89:6443
name:kubernetes
……
当Client使用该config文件启动kubelet后,他将访问Master节点的6443端口获得数据(Master6443端口是处于LISTEN状态的),而非localhost:8080端口(因为Node节点无法找到该config文件)。
我们也可以把Client客户端放在其他主机中,甚至Node节点。只要将该config文件按照系统提示方式添加到Client客户端中即可。我们使用scp命令将文件发送至目标主机:
scp-r.kube/node1:/root
scp-r.kube/node2:/root
即可。
【End】
END,本文到此结束,如果可以帮助到大家,还望关注本站哦!