参考:https://github.com/fanux/sealos
1、准备工作
- ssh可以访问各安装节点
- 各节点主机名规划
- 各节点时间同步
- 确保 /etc/resolv.conf 中的DNS地址可用
- 规划podcidr、svccidr
2、内核升级
# 上传rpm包
kernel-ml-4.19.12-1.el7.elrepo.x86_64.rpm
kernel-ml-devel-4.19.12-1.el7.elrepo.x86_64.rpm
# 安装
yum localinstall -y kernel-ml*
# 配置grub
grub2-set-default 0 && grub2-mkconfig -o /etc/grub2.cfg
grubby --args="user_namespace.enable=1" --update-kernel="$(grubby --default-kernel)"
# 验证
grubby --default-kernel
# 重启
init 6
3、sealos安装
# sealos工具上传
chmod +x sealos && mv sealos /usr/bin
# sealos安装
sealos init --passwd 'unicloud' \
--master 10.253.17.22 --master 10.253.17.23 --master 10.253.17.24 \
--node 10.253.17.25 \
--podcidr 172.16.0.0/16 \
--svccidr 192.168.0.0/16 \
--pkg-url /root/kube1.19.11.tar.gz \
--version v1.19.11
4、验证
# 验证集群
[root@k8s-master01 ~]# kubectl get no
NAME STATUS ROLES AGE VERSION
k8s-master01 Ready master 25m v1.19.11
k8s-master02 Ready master 24m v1.19.11
k8s-master03 Ready master 24m v1.19.11
k8s-node01 Ready <none> 23m v1.19.11
[root@k8s-master01 ~]# kubectl get po -A
NAMESPACE NAME READY STATUS RESTARTS AGE
kube-system calico-kube-controllers-69b47f4dfb-lfppd 1/1 Running 0 25m
kube-system calico-node-78c7g 1/1 Running 0 25m
kube-system calico-node-bmwlf 1/1 Running 0 25m
kube-system calico-node-cdltq 1/1 Running 0 25m
kube-system calico-node-hgvfk 1/1 Running 0 24m
kube-system coredns-f9fd979d6-d9rs6 1/1 Running 0 25m
kube-system coredns-f9fd979d6-lq8r2 1/1 Running 0 25m
kube-system etcd-k8s-master01 1/1 Running 0 25m
kube-system etcd-k8s-master02 1/1 Running 0 24m
kube-system etcd-k8s-master03 1/1 Running 0 25m
kube-system kube-apiserver-k8s-master01 1/1 Running 0 25m
kube-system kube-apiserver-k8s-master02 1/1 Running 0 25m
kube-system kube-apiserver-k8s-master03 1/1 Running 0 25m
kube-system kube-controller-manager-k8s-master01 1/1 Running 1 25m
kube-system kube-controller-manager-k8s-master02 1/1 Running 0 25m
kube-system kube-controller-manager-k8s-master03 1/1 Running 0 25m
kube-system kube-proxy-h6stt 1/1 Running 0 25m
kube-system kube-proxy-kr6t8 1/1 Running 0 24m
kube-system kube-proxy-qkxpt 1/1 Running 0 25m
kube-system kube-proxy-v8rbz 1/1 Running 0 25m
kube-system kube-scheduler-k8s-master01 1/1 Running 1 25m
kube-system kube-scheduler-k8s-master02 1/1 Running 0 25m
kube-system kube-scheduler-k8s-master03 1/1 Running 0 25m
kube-system kube-sealyun-lvscare-k8s-node01 1/1 Running 0 22m
# 查看证书
[root@k8s-master01 ~]# cd /etc/kubernetes/pki && openssl x509 -in apiserver.crt -text -noout | grep -i not
Not Before: Oct 5 14:58:08 2021 GMT
Not After : Sep 11 14:58:09 2121 GMT