zoukankan      html  css  js  c++  java
  • kubeadm 部署kubernetes1.11.1,dashboard1.10.0

    ---恢复内容开始---

    实验环境准备2台虚拟机:

      master节点:172.17.1.36

      node节点:172.17.1.40

    首先安装master节点:

    master 的虚拟机是全新的机器,在安装kubernetes之前的做下准备工作

    关闭防火墙

    systemctl stop firewalld

    systemctl disable firewalld

    hostname master   ,并且修改/etc/hostname

    关闭selinux

    setenforce 0  永久关闭修改配置文件/etc/selinux/config       修改成SELINUX=disabled

    准备docker  和kubernetes的repo文件

    cd /etc/yum.repos.d/

    vi  docker-ce.repo 

    [docker-ce-stable]
    name=Docker CE Stable - $basearch
    baseurl=https://mirrors.aliyun.com/docker-ce/linux/centos/7/$basearch/stable
    enabled=1
    gpgcheck=1
    gpgkey=https://mirrors.aliyun.com/docker-ce/linux/centos/gpg
    
    [docker-ce-stable-debuginfo]
    name=Docker CE Stable - Debuginfo $basearch
    baseurl=https://mirrors.aliyun.com/docker-ce/linux/centos/7/debug-$basearch/stable
    enabled=0
    gpgcheck=1
    gpgkey=https://mirrors.aliyun.com/docker-ce/linux/centos/gpg
    
    [docker-ce-stable-source]
    name=Docker CE Stable - Sources
    baseurl=https://mirrors.aliyun.com/docker-ce/linux/centos/7/source/stable
    enabled=0
    gpgcheck=1
    gpgkey=https://mirrors.aliyun.com/docker-ce/linux/centos/gpg
    
    [docker-ce-edge]
    name=Docker CE Edge - $basearch
    baseurl=https://mirrors.aliyun.com/docker-ce/linux/centos/7/$basearch/edge
    enabled=0
    gpgcheck=1
    gpgkey=https://mirrors.aliyun.com/docker-ce/linux/centos/gpg
    
    [docker-ce-edge-debuginfo]
    name=Docker CE Edge - Debuginfo $basearch
    baseurl=https://mirrors.aliyun.com/docker-ce/linux/centos/7/debug-$basearch/edge
    enabled=0
    gpgcheck=1
    gpgkey=https://mirrors.aliyun.com/docker-ce/linux/centos/gpg
    
    [docker-ce-edge-source]
    name=Docker CE Edge - Sources
    baseurl=https://mirrors.aliyun.com/docker-ce/linux/centos/7/source/edge
    enabled=0
    gpgcheck=1
    gpgkey=https://mirrors.aliyun.com/docker-ce/linux/centos/gpg
    
    [docker-ce-test]
    name=Docker CE Test - $basearch
    baseurl=https://mirrors.aliyun.com/docker-ce/linux/centos/7/$basearch/test
    enabled=0
    gpgcheck=1
    gpgkey=https://mirrors.aliyun.com/docker-ce/linux/centos/gpg
    
    [docker-ce-test-debuginfo]
    name=Docker CE Test - Debuginfo $basearch
    baseurl=https://mirrors.aliyun.com/docker-ce/linux/centos/7/debug-$basearch/test
    enabled=0
    gpgcheck=1
    gpgkey=https://mirrors.aliyun.com/docker-ce/linux/centos/gpg
    
    [docker-ce-test-source]
    name=Docker CE Test - Sources
    baseurl=https://mirrors.aliyun.com/docker-ce/linux/centos/7/source/test
    enabled=0
    gpgcheck=1
    gpgkey=https://mirrors.aliyun.com/docker-ce/linux/centos/gpg
    
    [docker-ce-nightly]
    name=Docker CE Nightly - $basearch
    baseurl=https://mirrors.aliyun.com/docker-ce/linux/centos/7/$basearch/nightly
    enabled=0
    gpgcheck=1
    gpgkey=https://mirrors.aliyun.com/docker-ce/linux/centos/gpg
    
    [docker-ce-nightly-debuginfo]
    name=Docker CE Nightly - Debuginfo $basearch
    baseurl=https://mirrors.aliyun.com/docker-ce/linux/centos/7/debug-$basearch/nightly
    enabled=0
    gpgcheck=1
    gpgkey=https://mirrors.aliyun.com/docker-ce/linux/centos/gpg
    
    [docker-ce-nightly-source]
    name=Docker CE Nightly - Sources
    baseurl=https://mirrors.aliyun.com/docker-ce/linux/centos/7/source/nightly
    enabled=0
    gpgcheck=1
    gpgkey=https://mirrors.aliyun.com/docker-ce/linux/centos/gpg

    vi  kubernetes.repo

    [kubernetes]
    name=Kubernetes Repo
    baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/
    gpgcheck=1   #不想验证这里改成0
    gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
    enableld=1

    rpm --import rpm-package-key.gpg   导入下gpgkey

    yum install docker-ce kubeadm-1.11.1 kubectl-1.11.1 kubelet-1.11.1   我安装是的1.11.1的版本

    启动docker,并设置开机启动

    systemctl start docker

    systemctl enable docker

    确保桥接的状态是打开的,返回是1说明是正常的

    systemctl enable kubelet  开机启动kubelet   ,不要启动,因为配置没有初始化完成

    vim /etc/sysconfig/kubelet 忽略swap on 开启集群不能初始化得错误
    KUBELET_EXTRA_ARGS="--fail-swap-on=false"

    kubeadm init --kubernetes-version=v1.11.1 --pod-network-cidr=10.244.0.0/16 --service-cidr=10.96.0.0/12 --ignore-preflight-errors=Swap  初始化集群

     注意:初始化的时候需要以下的docker 镜像,由于某些不可描述的原因,下载不了,我这里是准备好的镜像文件导入的

    [k8s.gcr.io/kube-apiserver-amd64:v1.11.1]
    [k8s.gcr.io/kube-controller-manager-amd64:v1.11.1]
    [k8s.gcr.io/kube-scheduler-amd64:v1.11.1]
    [k8s.gcr.io/kube-proxy-amd64:v1.11.1]
    [k8s.gcr.io/pause:3.1
    [k8s.gcr.io/etcd-amd64:3.2.18]
    [k8s.gcr.io/coredns:1.1.3]

    出现这个界面是说明初始化完成!

    kubeadm join 172.17.1.36:6443 --token 0kyf48.b4aevmeo1wdylowk --discovery-token-ca-cert-hash sha256:587072eb329d8af7bb52241ab52f6b27d8496dfc99ac1371686b05dcadc3e029   这个是node节点加入集群的命令,最好保存下

    根据提示做这2不操作

    [root@master yum.repos.d]# mkdir -p $HOME/.kube
    [root@master yum.repos.d]# cp -i /etc/kubernetes/admin.conf $HOME/.kube/config

    最后安装flannel 网络插件

     kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml

    这里下载flannel的镜像   quay.io/coreos/flannel:v0.10.0-amd64

    验证下集群的状态

    这样集群的master节点安装完成!

    安装node节点

    和master节点一样,需要docker-ce.repo,kubernetes.repo,还有关闭防火墙,关闭selinux,操作和master一样

    yum install docker-ce kubeadm-1.11.1 kubelet-1.11.1

    vim /etc/sysconfig/kubelet 忽略swap on 开启集群不能初始化得错误
    KUBELET_EXTRA_ARGS="--fail-swap-on=false"

    加入集群:

    kubeadm join 172.17.1.36:6443 --token 0kyf48.b4aevmeo1wdylowk --discovery-token-ca-cert-hash sha256:587072eb329d8af7bb52241ab52f6b27d8496dfc99ac1371686b05dcadc3e029 --ignore-preflight-errors=Swap

    node 上要有以下镜像:

    [k8s.gcr.io/kube-proxy-amd64:v1.11.1]
    [k8s.gcr.io/pause:3.1

    quay.io/coreos/flannel:v0.10.0-amd64

     在master节点下查看下状态

    完工,kubernetes 部署完成!

    部署dashboard

    提前把k8s.gcr.io/kubernetes-dashboard-amd64:v1.10.0 导入到node节点,当让有梯子的人就不用了

    kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/master/src/deploy/recommended/kubernetes-dashboard.yaml  应用dashboard的部署文件

    已经部署好了,

    创建serviceaccount 用于登陆dashboard

    kubectl create serviceaccount dashboard-admin -n kube-system

    创建clusterrolebinding

    kubectl create clusterrolebinding cluster-dashboard-admin --clusterrole=cluster-admin --serviceaccount=kube-system:dashboard-admin

    查找刚刚生成的secret

     

     这里我登陆dashboard用的是secret的token

    把刚刚dashboard船舰的service 的类型改成NodePort  ,可以在部署dashboard的时候修改下yaml文件

    kubectl patch svc kubernetes-dashboard -p '{"spec":{"type":"NodePort"}}' -n kube-system

     登陆dashboard

     选择令牌

    输入刚刚secret的token

    dashboard部署完成!

  • 相关阅读:
    TCP 协议三次握手过程解析带实例
    一些关于反汇编与逆向方面的博文分享
    关于mwArray和一般数组的区别
    vc6.0 使用Ado 连接MS-SqlServer2000 连接字符串
    VC6使用技巧
    Oracle性能诊断艺术-读书笔记(执行计划中显示 Starts, E-Rows, REM A-Rows and A-Time)等)
    Oracle性能诊断艺术-读书笔记
    linux 检查补丁包是否安装 名称 版本 release号
    我叫他小北
    Oracle linux安装Oracle 11G
  • 原文地址:https://www.cnblogs.com/dingbin/p/9801013.html
Copyright © 2011-2022 走看看