k8s無腦系列（一）-最小集群搭建
修改記錄
- Master運行服務中，增加kube-proxy服務
-
Virtual Box
-
CentOS 7
-
yum install docker kubernetes flannel
-
虛擬機網絡設置
- 新建虛擬網絡A（在主機網絡管理菜單），定義網段192.168.56.1/24，打開DHCP
- 所有主機創建兩塊網卡，外網NAT，內網選擇虛擬網絡vbox1
- 3台虛擬機設置
| 主機名 | IP | 配置 |
|---|---|---|
| Master | 192.168.56.4 | 1CPU，1G |
| node1 | 192.168.56.5 | 1CPU，1G |
| node2 | 192.168.56.6 | 1CPU，1G |
-
三台主機互通
-
master ssh passwdless 訪問其它兩台主機
-
打開內核轉發
添加net.ipv4.ip_forward 到/etc/sysctl.conf
-
修改Docker配置
修改/usr/lib/systemd/system/docker.service
service段增加 ExecStartPost=/sbin/iptables -I FORWARD -s 0.0.0.0/0 -j ACCEPT
修改/etc/sysconfig/docker
OPTIONS="–insecure-registry gcr.io --selinux-enabled=false"
-
禁用防火牆
systemctl stop firewalld
systemctl disable firewalld -
關閉SElinux
修改/etc/selinux/config
修改SELINUX=disabled -
修改Docker配置，增加鏡像
{ "registry-mirrors":["http://hub-mirror.c.163.com"] } -
設置時區與時間同步
yum -y install ntp timedatectl set-timezone Asia/Shanghai - 設置
Master 部分增加了kube-proxy，第一版忘記加了
| 主機名 | 運行的服務 |
|---|---|
| Master | docker etcd kube-apiserver flanneld kube-proxy kube-controller-manager kube-scheduler |
| node1 | docker flanneld kubelet kube-proxy |
| node2 | docker flanneld kubelet kube-proxy |
-
設置etcd參數並啟動
vim /etc/etcd/config ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:2379" # 要注意這個參數的IP，這里因為是連接服務，不是監聽，所以必須用IP，不能用0.0.0.0 ETCD_ADVERTISE_CLIENT_URLS="http://192.168.56.4:2379" service etcd restart其實ETCD_LISTEN_CLIENT_URLS怎么設置都無所謂，只要正常監聽就可以。放到這里，可以設置為http://192.168.56.4:2379
-
設置flannel
vim /etc/sysconfig/flanneld FLANNEL_ETCD_ENDPOINTS="http://192.168.56.4:2379" FLANNEL_ETCD_PREFIX="/coreos.com/network"稍后補充為什么這么設置
-
手動向etcd，設置flannel網段信息
etcdctl set /coreos.com/network/config '{ "Network": "10.254.0.0/16" }'這里采用kubenetes默認值
-
修改kube-apiserver配置文件
vim /etc/kubernetes/apiserver KUBE_ETCD_SERVERS="--etcd-servers=http://192.168.56.4:2379"稍后測試，是否設置為127.0.0.1會影響node1,2的etcd獲取。如果僅僅是影響api-server並且etcd與
api-server在同一台服務器，那么127應該也是可以的。 -
修改controller-manager
vim /etc/kubernetes/controller-manager KUBE_CONTROLLER_MANAGER_ARGS="--node-monitor-grace-period=10s --pod-eviction-timeout=10s" -
編輯kubenetes配置
vim /etc/kubenetes/config KUBE_MASTER="--master=http://192.168.56.4:8080" -
設置服務並啟動
systemctl enable docker flanneld kube-apiserver kube-controller-manager kube-scheduler systemctl start docker flanneld kube-apiserver kube-controller-manager kube-scheduler
-
修改kubenetes配置
vim /etc/kubernetes/config KUBE_MASTER="--master=http://192.168.56.4:8080" -
修改kubelets配置
vim /etc/kubernetes/kubelet KUBELET_ADDRESS="--address=0.0.0.0" KUBELET_HOSTNAME="--hostname-override=192.168.56.5" KUBELET_API_SERVER="--api-servers=http://192.168.56.4:8080" -
修改flanneld
vim /etc/sysconfig/flanneld FLANNEL_ETCD_ENDPOINTS="http://192.168.56.4:2379" FLANNEL_ETCD_PREFIX="/coreos.com/network" -
設置服務並啟動
systemctl enable docker flanneld kubelet kube-proxy systemctl start docker flanneld kubelet kube-proxy
- 驗證節點
$kubectl get nodes -o wide NAME STATUS AGE EXTERNAL-IP 192.168.56.5 Ready 1h <none> 192.168.56.6 Ready 1h <none> - 創建RC文件mysql-rc.yaml
apiVersion: v1 kind: ReplicationController metadata: name: mysql-rc spec: replicas: 1 selector: app: mysql-pod template: metadata: labels: app: mysql-pod spec: containers: - name: mysql image: mysql:5.6 ports: - containerPort: 3306 env: - name: MYSQL_ROOT_PASSWORD value: "123" - 創建Service文件mysql-svc.yaml
apiVersion: v1 kind: Service metadata: name: mysql-svc labels: name: mysql-svc spec: type: NodePort ports: - port: 3306 protocol: TCP targetPort: 3306 name: http nodePort: 30006 selector: app: mysql-pod - 運行
kubectl create -f mysql-rc.yaml
kubectl create -f mysql-svc.yaml
- 結果檢查
$kubectl get pods -o wide NAME READY STATUS RESTARTS AGE IP NODE mysql-rc-82g2m 1/1 Running 0 1h 172.17.0.2 192.168.56.5 $kubectl get svc -o wide NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE SELECTOR kubernetes 10.254.0.1 <none> 443/TCP 2d <none> mysql-svc 10.254.255.244 <nodes> 3306:30006/TCP 1h app=mysql-pod $kubectl get endpoints NAME ENDPOINTS AGE kubernetes 192.168.1.114:6443 2d mysql-svc 172.17.0.2:3306 1h 全部關聯上，創建沒問題
$ mysql -uroot -p123 -P30006 -h 192.168.56.5
mysql> mysql連接成功