K8S安装部署指南

hostname set-hostname Name

ip masterip worker1ip worker2....

systemctl stop firewalldsystemctl disable firewalldfirewall-cmd --state //测试防火墙状态

set -ri 's/SELINUX=enforing/SELINUX=disabled/' /etc/selinux/configrebootgetenforce //验证是否关闭

yum install ntpdate //centos7或rhel7支持crontab -l0 */1 * * * ntpdate time1.aliyun.comyum install chrony //centos8或rhel8及更高版本支持vim /etc/chrony.confserver time1.aliyun.com minpoll 4 maxpoll 10 iburst// minpoll 4=2^4(s) , maxpoll 10=2^10(s) iburst=启动或重连时连续4次同步

//使用kubeadm必须关闭swap分区vim /etc/fstab# /dev/mapper/centos-swap swap //注释此行关闭swap分区

// 加载内核modprobe overlaymodprobe br_netfilter// 开机启动cat > /etc/modules-load/k8s.conf <<EOFoverlaybr_netfilterEOF// 写入内核参数cat > /etc/systcl.d/k8s.conf <<EOFnet.bridge.bridge-nf-call-ip6tables=1net.bridge.bridge-nf-call-iptables=1net.ipv4.ip_forward=1vm.swappiness=0EOF//应用并验证sysctl -p /etc/sysctl.d/k8s.confsysctl --systemlsmod | grep br_netfiltersysctl net.bridge.bridge-nf-call-iptablessysctl net.ipv4.ip_forward

yum install ipset ipvsadmcat > /etc/sysconfig/modules/ipvs.modules <<EOF#!/bin/bashmodprobe --ip_vsmodprobe --ip_vs_rrmodprobe --ip_vs_wrrmodprobe --ip_vs_shmodprobe --nf_conntrack_ipv4EOFchmod 755 /etc/sysconfig/modules/ipvs.modulesbash /etc/sysconfig/modules/ipvs.moduleslsmod | grep -e ip_vs -e nf_conntrack_ipv4

//获取源wget -o /etc/yum.repo.d/docker-ce.repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repoyum install -y docker-ce docker-ce-cli containerd.iosystemctl start docker && systemctl enable docker

mkdir /etc/dockercat > /etc/docker/daemon.json <<EOF{  "exec-opts": ["native.cgroupdriver=systemd"],  "log-driver": "json-file",  "log-opts": {"max-size": "100m", "max-file": "3"},  "registry-mirrors": ["https://registry.cn-hangzhou.aliyuncs.com"]}EOFsystemctl daemon-reload && systemctl restart dockerdocker info | grep -i cgroup

//安装yum源vim /etc/yum.reps.d/k8s.repo[kubernetes]name=kubernetesenabled=1baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/gpgcheck=1gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpgyum install kubeadm kubelet kubectl

vim /etc/sysconfig/kubeletKUBELET_EXTRA_ARGS="--cgroup-driver=systemd"// 开机启动systemctl enable kubelet

//查看镜像列表kubeadm config images list

// 导出镜像清单kubeadm config images list >> image.list// 编写脚本批量下载镜像cat image.pull.sh#!/bin/bashimagelist='...镜像清单，一行一条...'for img in $imagelistdo  docker pull $imgdonechmod 775 image.pull.shsh image.pull.sh

//MasterNode导出镜像docker save -o kube-proxy.tar k8s.gcr.io/kube-proxy:versiondocker save -o pause.tar k8s.gcr.io/pause:versionscp kube-proxy.tar pause.tar workerNode：/目标路径//WorkerNode导入镜像docker load - i *.tar 

//只在MasterNode进行kubeadm init     --kubernetes-version=v1.36.2     --image-repository registry.aliyuncs.com/google_containers    --apiserver-advertise-address=<master内网IP>    --pod-network-cidr=<pod网段>    --cri-socket /run/containerd/containerd.sock

//完成后mkdir -p $HOME/.kubecp -i /etc/kubernetes/admin.conf $HOME/.kube/configchown $(id -u):$(id -g) $HOME/.kube/config //这一句可以不做

kubectl apply -f https://raw.githubusercontent.com/projectcalico/calico/v3.28/manifests/calico.yaml

//这个命令在kubeadmin init完成时会输出一遍，以后增加workerNode执行下面命令可重新输出kubeadm token create --print-join-command

kubeadm join <masterIP>:<port> --token .... --discovery-token-ca-cart-hash sha256:...