ubuntu18+k8s單機版+kuboard+harbor安裝筆記

准備環境

所有操作切換到 root

sudo -s

禁用 ipv6

  sed -i 's/^GRUB_CMDLINE_LINUX=.*/GRUB_CMDLINE_LINUX="ipv6.disable=1"/' /etc/default/grub
  update-grub

重啟 reboot
執行 ifconfig 檢查是否包含 inet6 ，如果沒有則沒有啟用 ipv6

/etc/hosts

127.0.0.1 harbor1

關閉 swap

  swapoff -akubeadm token create --ttl 0

  sed -i "s/\(^[^#].* swap .*$\)/#\1/" /etc/fstab   

修改 /etc/fstab 並不能禁用 swap , 每次重啟，還要運行 swapoff -a ，然后手動重啟服務: systemctl restart kubelet。想要重啟禁用swap: 打開工具，磁盤，找到Swap分區，編輯掛載選項，取消選中 用戶啟動掛載，保存，重啟即可。

執行 free -h 查看內存是否使用交換空間。

安裝 docker , docker-compose

  curl -fsSL http://dev8.cn:8000/static/ops/ubuntu-docker.sh | bash

添加k8s源

cat <<EOF >/etc/apt/sources.list.d/docker-k8s.list
deb https://mirrors.aliyun.com/kubernetes/apt/ kubernetes-xenial main
EOF

docker 源,設置 cgroup

cat <<EOF > /etc/docker/daemon.json
{
"exec-opts": ["native.cgroupdriver=systemd"],
"insecure-registries": [
    "localhost:808"
  ],
"registry-mirrors":[
    "https://hub-mirror.c.163.com",
    "https://registry.aliyuncs.com",
    "http://7e61f7f9.m.daocloud.io",
    "https://docker.mirrors.ustc.edu.cn",
    "https://registry.docker-cn.com",
    "https://reg-mirror.qiniu.com"
],
"graph":"/var/lib/docker"
}
EOF

modprobe br_netfilter
lsmod | grep br_netfilter

安裝

定義變量

版本參考 https://hub.docker.com/r/mirrorgooglecontainers/kube-apiserver/tags

export version=1.13.10

curl https://mirrors.aliyun.com/kubernetes/apt/doc/apt-key.gpg | apt-key add -
apt-get update && apt-get install -y apt-transport-https
apt-get install -y kubeadm=$version* kubectl=$version* kubelet=$version*
systemctl start kubelet
systemctl enable kubelet

拉鏡像

docker pull mirrorgooglecontainers/kube-apiserver:v$version
docker pull mirrorgooglecontainers/kube-controller-manager:v$version
docker pull mirrorgooglecontainers/kube-scheduler:v$version
docker pull mirrorgooglecontainers/kube-proxy:v$version
docker pull mirrorgooglecontainers/pause:3.1
docker pull mirrorgooglecontainers/etcd:3.2.24
docker pull coredns/coredns:1.2.6

docker tag mirrorgooglecontainers/kube-apiserver:v$version k8s.gcr.io/kube-apiserver:v$version
docker tag mirrorgooglecontainers/kube-controller-manager:v$version k8s.gcr.io/kube-controller-manager:v$version
docker tag mirrorgooglecontainers/kube-scheduler:v$version k8s.gcr.io/kube-scheduler:v$version
docker tag mirrorgooglecontainers/kube-proxy:v$version k8s.gcr.io/kube-proxy:v$version
docker tag mirrorgooglecontainers/pause:3.1 k8s.gcr.io/pause:3.1
docker tag mirrorgooglecontainers/etcd:3.2.24 k8s.gcr.io/etcd:3.2.24
docker tag coredns/coredns:1.2.6 k8s.gcr.io/coredns:1.2.6

啟動

kubeadm init --kubernetes-version=v$version --service-cidr=10.1.0.0/16 --pod-network-cidr=10.244.0.0/16

mkdir -p $HOME/.kube
cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
chown $(id -u):$(id -g) $HOME/.kube/config

初始化

kubectl apply -f https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')
kubectl taint nodes --all node-role.kubernetes.io/master-

kuboard

  kubectl apply -f https://kuboard.cn/install-script/kuboard.yaml

harbor

wget https://github.com/goharbor/harbor/releases/download/v1.10.4/harbor-online-installer-v1.10.4.tgz  -P /opt/docker -N
tar zxvf /opt/docker/harbor-online-installer-v1.10.4.tgz -C /opt/docker
wget $host/ops/harbor.yml -O /opt/docker/harbor/harbor.yml      #配置文件里配置的密碼沒起作用
/opt/docker/harbor/install.sh

使用

獲取 kuboard token

  kubectl -n kube-system get secret $(kubectl -n kube-system get secret | grep kuboard-user | awk '{print $1}') -o go-template='{{.data.token}}' | base64 -d

登錄kuboard

http://localhost:32567/login

登錄 harbor

http://localhost:808

  admin
  Harbor12345

1. docker login -u admin -p Harbor12345 harbor1:808
2. docker tag 本地鏡像：版本   harborIP:harborPort/harbor項目/名稱:版本    (格式是必須這樣的。)
3. docker push harborIP:harborPort/harbor項目/名稱:版本
4. docker pull harborIP:harborPort/harbor項目/名稱:版本

完成。

卸載k8s

  kubeadm reset -f
  rm -rf ~/.kube/
  rm -rf /etc/kubernetes/

k8s查看token,discovery-token-ca-cert-hash

https://blog.csdn.net/weixin_43968936/article/details/103688562

openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'
kubeadm token list
如果沒有，生成一條：
kubeadm token create --ttl 0

kubeadm join 192.168.29.137:6443 --token 5w6qwh.8n0ektfrjdct3ib4 --discovery-token-ca-cert-hash sha256:af9e070ea723dd2281c2ae2414c932832a012d40bc55dc9c747bb00e68602388