國內環境安裝k8s

環境准備

1. 配置/etc/hosts文件，將所有機器配置成通過主機名可以訪問。

2. 如果環境中有代理，請一定要在環境變量中將no_proxy配置正確。

3.  master還需要執行下面的命令

#創建/etc/sysctl.d/k8s.conf文件，添加如下內容：
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward = 1
#執行命令使修改生效。
modprobe br_netfilter
sysctl -p /etc/sysctl.d/k8s.conf

 

安裝 kubeadm, kubelet, kubectl

ubuntu

apt-get update && apt-get install -y apt-transport-https
curl https://mirrors.aliyun.com/kubernetes/apt/doc/apt-key.gpg | apt-key add - 
cat <<EOF >/etc/apt/sources.list.d/kubernetes.list
deb https://mirrors.aliyun.com/kubernetes/apt/ kubernetes-xenial main
EOF  
apt-get update
apt-get install -y kubelet kubeadm kubectl

centos

cat <<EOF > /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF
# 安裝
yum install -y kubelet kubeadm kubectl

Master機器下載apiserver, schedule, etcd, controller-manager, coredns鏡像

#!/bin/bash
#獲取所需的鏡像
k8s_images=`kubeadm config images list`

#更改鏡像下載位置

images_cn=`echo $k8s_images | sed -e "s/k8s.gcr.io/docker.io\/mirrorgooglecontainers/g"`

#docker pull下載鏡像, 並重新將docker.io/mirrorgooglecontainers改變成k8s.grc.io

for image in images_cn
do
  docker pull $image
  docker tag $image `echo $image | sed -e "s/docker.io\/mirrorgooglecontainers/k8s.gcr.io/"`
done

所有node，master關閉swap，selinux

swapoff -a

修改/etc/fstab文件，注銷掉swap相關的行

kubeadm init進行初始化master組件

kubeadm init --pod-network-cidr=10.244.0.0/16

 Master應用flannel overlay network

kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml

 普通用戶使用kubectl

mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config

node節點加入master集群

加入前的准備

1. 將前面在master上下載的pause，flannel，kube-proxy的鏡像都用load到node機器上的docker daemon里。

kubeadm init初始化成功后會打印出node 加入master的命令，如下：

kubeadm join 10.239.44.68:6443 --token 8jxvj4.5lop20zjbu48h6kl  \
   --discovery-token-ca-cert-hash sha256:1ca8f0a098601b94d7c2a9b4a3758ff0880a0213db813336dec0e9272ed55a78

注意：kubeadm init生成的token有效期只有1天，如果你的node節點在使用kubeadm join時出現如下錯誤

[preflight] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -oyaml'
error execution phase preflight: unable to fetch the kubeadm-config ConfigMap: failed to get config map: Unauthorized

請到master上檢查你所使用的token是否有效，kubeadm token list

49y4v3.jxq5w76jj5hh028u   <invalid>   2019-04-13T15:00:47-04:00   authentication,signing   The default bootstrap token generated by 'kubeadm init'.   system:bootstrappers:kubeadm:default-node-token
8jxvj4.5lop20zjbu48h6kl   23h         2019-04-25T10:21:41-04:00   authentication,signing   <none>                                                     system:bootstrappers:kubeadm:default-node-token

 生成不過期的token

kubeadm token create --ttl 0 --print-join-command

join成功后node節點執行docker ps可以看到

[root@webrtc-skylake-msdk zhenqi]# docker ps 
CONTAINER ID        IMAGE                  COMMAND                  CREATED             STATUS              PORTS               NAMES
b29e46c58033        ff281650a721           "/opt/bin/flanneld -…"   10 minutes ago      Up 10 minutes                           k8s_kube-flannel_kube-flannel-ds-amd64-j6dwl_kube-system_f7597ab9-66a4-11e9-ac72-d45ddf09a4df_0
07e0d45931cb        20a2d7035165           "/usr/local/bin/kube…"   18 minutes ago      Up 18 minutes                           k8s_kube-proxy_kube-proxy-jsqqv_kube-system_f759af51-66a4-11e9-ac72-d45ddf09a4df_0
48c858ea21ee        k8s.gcr.io/pause:3.1   "/pause"                 18 minutes ago      Up 18 minutes                           k8s_POD_kube-proxy-jsqqv_kube-system_f759af51-66a4-11e9-ac72-d45ddf09a4df_0
d4b2ce6ecaa2        k8s.gcr.io/pause:3.1   "/pause"                 18 minutes ago      Up 18 minutes                           k8s_POD_kube-flannel-ds-amd64-j6dwl_kube-system_f7597ab9-66a4-11e9-ac72-d45ddf09a4df_0

master上執行kubectl get node 

[webrtc@webrtc53 images]$ kubectl get node
NAME                  STATUS   ROLES    AGE   VERSION
webrtc-skylake-msdk   Ready    <none>   42m   v1.14.1
webrtc53              Ready    master   11d   v1.14.1

 

kubeadm 常用的命令

 help        Help about any command 
  init        Run this command in order to set up the Kubernetes control plane. # master上執行，初始化所有的master組件
  join        Run this on any machine you wish to join an existing cluster # node上執行，加入master
  reset       Run this to revert any changes made to this host by 'kubeadm init' or 'kubeadm join'. # 清理 init，join的環境
  token       Manage bootstrap tokens. # token的增刪查
  upgrade     Upgrade your cluster smoothly to a newer version with this command. # 更新集群
  version     Print the version of kubeadm

如何debug 安裝過程中的問題？

1. 查看系統log，一般都能解決了。

2. 注意網絡問題，特別是有代理的情況下。

3. images的下載。