K8s環(huán)境搭建

實驗環(huán)境：三臺centos7.5

172.26.0.10 master

172.26.0.12 node1

172.26.0.14 node2

一、Kubernetes搭建

1.在各個節(jié)點上面安裝k8s組件

配置master為etcd和master節(jié)點：

[root@master~]# yum install -y kubernetes etcd flannel ntp

[root@node1~]# yum install -y kubernetes flannel ntp

[root@node2~]# yum install -y kubernetes flannel ntp

關(guān)閉防火墻：

[root@master~]#systemctl stop firewalld && systemctl disable firewalld &&

systemctl status firewalld

[root@node1~]# systemctl stop firewalld && systemctl disable firewalld &&

systemctl status firewalld

[root@node2~]# systemctl stop firewalld && systemctl disable firewalld &&

systemctl status firewalld

配置每個節(jié)點的主機名和hosts文件

vi /etc/hosts

172.26.0.10 master

172.26.0.12 node1

172.26.0.14 node2

2.配置etcd

[root@master~]#vim /etc/etcd/etcd.conf #修改原文件，只需要以下紅色標(biāo)記的內(nèi)容

ETCD_DATA_DIR="/var/lib/etcd/default.etcd"

ETCD_LISTEN_CLIENT_URLS="http://localhost:2379,http://172.26.0.10:2379"

ETCD_NAME="etcd"

ETCD_ADVERTISE_CLIENT_URLS="http://172.26.0.10:2379"

啟動服務(wù)

[root@master~]#systemctl start etcd

[root@master~]#systemctl status etcd

[root@master~]#systemctl enable etcd

etcd 通訊使用 2379 端口

查看：

[root@master~]# netstat -antup | grep 2379

tcp 0 0 127.0.0.1:2379 0.0.0.0:* LISTEN 15901/etcd

tcp 0 0 172.26.0.10:2379 0.0.0.0:* LISTEN 15901/etcd

檢查 etcd 集群成員列表，這里只有一臺

[root@master~]# etcdctl member list

8e9e05c52164694d: name=etcd peerURLs=http://localhost:2380 clientURLs=http://172.26.0.10:2379 isLeader=true

3.配置master服務(wù)器

a.配置kubemetes配置文件

[root@master~]# vim /etc/kubernetes/conf

KUBE_LOGTOSTDERR="–logtostderr=true"

KUBE_LOG_LEVEL="–v=0"

KUBE_ALLOW_PRIV="–allow-privileged=false"

KUBE_MASTER="–master=http://172.26.0.10:8080"

b.配置apiserver配置文件

[root@master~]# vim /etc/kubernetes/apiserver

KUBE_API_ADDRESS="–insecure-bind-address=0.0.0.0"

KUBE_ETCD_SERVERS="–etcd-servers=http://172.26.0.10:2379"

KUBE_SERVICE_ADDRESSES="–service-cluster-ip-range=10.254.0.0/16"

KUBE_ADMISSION_CONTROL="–admission-control=AlwaysAdmit"

KUBE_API_ARGS=""

c.配置 kube-scheduler 配置文件

[root@master~]# vim /etc/kubernetes//scheduler

KUBE_SCHEDULER_ARGS="0.0.0.0"

4.配置 etcd，指定容器云中 docker 的 IP 網(wǎng)段

[root@master~]# etcdctl mkdir /k8s/network

[root@master~]# etcdctl get /k8s/network/config

[root@master~]# vim /etc/sysconfig/flanneld

FLANNEL_ETCD_ENDPOINTS="http://172.26.0.10:2379"

FLANNEL_ETCD_PREFIX="/k8s/network"

FLANNEL_OPTIONS="–iface=ens192" #指定通信的物理網(wǎng)卡

[root@master~]# systemctl restart flanneld

[root@master~]# cat /run/flannel/subnet.env

FLANNEL_NETWORK=10.255.0.0/16

FLANNEL_SUBNET=10.255.62.1/24

FLANNEL_MTU=1472

FLANNEL_IPMASQ=false

[root@master~]# cat /run/flannel/docker

DOCKER_OPT_BIP="–bip=10.255.62.1/24"

DOCKER_OPT_IPMASQ="–ip-masq=true"

DOCKER_OPT_MTU="–mtu=1472"

DOCKER_NETWORK_OPTIONS=" –bip=10.255.62.1/24 –ip-masq=true –mtu=1472"

5.啟動master上4個服務(wù)

[root@master~]# systemctl restart kube-apiserver kube-controller-manager

kube-scheduler flanneld

[root@master~]# systemctl status kube-apiserver kube-controller-manager

kube-scheduler flanneld

[root@master~]# systemctl enable kube-apiserver kube-controller-manager

kube-scheduler flanneld

 

6.配置minion節(jié)點服務(wù)器

注：minion各節(jié)點配置相同，這邊已node1為例

a.配置flanneld服務(wù)

[root@node1~]# vim /etc/sysconfig/flanneld

FLANNEL_ETCD_ENDPOINTS="http://172.26.0.10:2379"

FLANNEL_ETCD_PREFIX="/k8s/network"

FLANNEL_OPTIONS="–iface=ens192" #指定通信的物理網(wǎng)卡

[root@node1 ~]# vim /etc/kubernetes/config

KUBE_LOGTOSTDERR="–logtostderr=true"

KUBE_LOG_LEVEL="–v=0"

KUBE_ALLOW_PRIV="–allow-privileged=false"

KUBE_MASTER="–master=http://172.26.0.10:8080"

[root@node1 ~]# vim /etc/kubernetes/kubelet

KUBELET_ADDRESS="–address=0.0.0.0"

KUBELET_HOSTNAME="–hostname-override=node1"

KUBELET_API_SERVER="–api-servers=http://172.26.0.10:8080"

KUBELET_POD_INFRA_CONTAINER="–pod-infra-container-image=registry.access.redhat.com/rhel7/pod-infrastructure:latest"

KUBELET_ARGS=""

b.啟動node1服務(wù)

[root@node1 ~]# systemctl restart flanneld kube-proxy kubelet docker

[root@node1 ~]# systemctl enable flanneld kube-proxy kubelet docker

[root@node1 ~]# systemctl status flanneld kube-proxy kubelet dock

注：node2按上面步驟設(shè)置一下

查看服務(wù)是否安裝成功

[root@master ~]# kubectl get nodes

NAME STATUS AGE

node1 Ready 2y

node2 Ready 2y

二、Kubernetes的web管理界面搭建

1.創(chuàng)建dashboard-deployment.yaml配置文件

[root@master~]# vim /etc/kubernetes/dashboard-deployment.yaml

apiVersion: extensions/v1beta1

kind: Deployment

metadata:

# Keep the name in sync with image version and

# gce/coreos/kube-manifests/addons/dashboard counterparts

name: kubernetes-dashboard-latest

namespace: kube-system

spec:

replicas: 1

template:

metadata:

labels:

k8s-app: kubernetes-dashboard

version: latest

kubernetes.io/cluster-service: "true"

spec:

containers:

– name: kubernetes-dashboard

image: docker.io/bestwu/kubernetes-dashboard-amd64:v1.6.3

imagePullPolicy: IfNotPresent

resources:

# keep request = limit to keep this container in guaranteed class

limits:

cpu: 100m

memory: 50Mi

requests:

cpu: 100m

memory: 50Mi

ports:

– containerPort: 9090

args:

– –apiserver-host=http://172.26.0.10:8080

livenessProbe:

httpGet:

path: /

port: 9090

initialDelaySeconds: 30

timeoutSeconds: 30

2.創(chuàng)建編輯 dashboard-service.yaml 文件：

[root@master ~]# vim /etc/kubernetes/dashboard-service.yaml

apiVersion: v1

kind: Service

metadata:

name: kubernetes-dashboard

namespace: kube-system

labels:

k8s-app: kubernetes-dashboard

kubernetes.io/cluster-service: "true"

spec:

selector:

k8s-app: kubernetes-dashboard

ports:

– port: 80

targetPort: 9090

2.node1和node2需要提前拉取兩個鏡像

[root@node1 ~]#docker search kubernetes-dashboard-amd

[root@node1 ~]#docker pull docker.io/bestwu/kubernetes-dashboard-amd64

[root@node1 ~]#docker search pod-infrastructure

[root@node1 ~]#docker pull docker.io/xplenty/rhel7-pod-infrastructure

3.啟勱 dashboard 的 deployment 和 service

[root@master ~]#kubectl create -f /etc/kubernetes/dashboard-deployment.yaml

[root@master ~]#kubectl create -f /etc/kubernetes/dashboard-service.yaml

[root@master ~]#kubectl get deployment –all-namespac

[root@master ~]#kubectl get svc –all-namespaces

注：安裝過程中遇到的錯誤

kubelet doesnot have ClusterDNS IP configuredand cannotcreate Pod using"ClusterFirst" policy. Falling backto DNSDefault policy.

以上軟連接目標(biāo)文件不存在

解決方式：

安裝完成