前言
最近看了下k8s的yum安装的模式，记下笔记方便以后查阅。
环境
| 主机名 | IP | 角色 |
|---|---|---|
| k8s-master | 192.168.56.121 | master、node |
| k8s-node1 | 192.168.56.121 | node |
初始化centos
systemctl stop firewalld
systemctl disable firewalld
setenforce 0
gettenforce
getenforce
vi /etc/selinux/config
systemctl restart sshd
systemctl stop NetworkManager.service
systemctl disable NetworkManager.service
yum install -y net-tools vim lrzsz wget tree screen lsof tcpdump
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
yum makecache
systemctl stop postfix
systemctl disable postfix
安装etcd服务
yum install etcd -y
vim /etc/etcd/etcd.conf
6行：ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:2379"
21行：ETCD_ADVERTISE_CLIENT_URLS="http://192.168.56.121:2379"
systemctl start etcd.service
systemctl enable etcd.service
- 测试
etcdctl set testdir/testkey0 0
etcdctl get testdir/testkey0
etcdctl -C http://192.168.56.121:2379 cluster-health
安装k8s master节点
yum install kubernetes-master.x86_64 -y
vim /etc/kubernetes/apiserver
8行: KUBE_API_ADDRESS="--insecure-bind-address=0.0.0.0"
11行：KUBE_API_PORT="--port=8080"
17行：KUBE_ETCD_SERVERS="--etcd-servers=http://192.168.56.121:2379"
23行：KUBE_ADMISSION_CONTROL="--admission-control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ResourceQuota"
vim /etc/kubernetes/config
22行：KUBE_MASTER="--master=http://192.168.56.121:8080“
systemctl start kube-apiserver.service
systemctl start kube-controller-manager.service
systemctl start kube-scheduler.service
安装k8s node节点
yum install kubernetes-node.x86_64 -y
vim /etc/kubernetes/config
22行：KUBE_MASTER="--master=http://192.168.56.121:8080"
vim /etc/kubernetes/kubelet
5行：KUBELET_ADDRESS="--address=0.0.0.0"
8行：KUBELET_PORT="--port=10250"
11行：KUBELET_HOSTNAME="--hostname-override=192.168.56.122"
14行：KUBELET_API_SERVER="--api-servers=http://192.168.56.121:8080"
systemctl start kubelet.service
systemctl start kube-proxy.service
所有node节点配置flannel网络插件
yum install flannel -y
sed -i 's#http://127.0.0.1:2379#http://10.0.0.11:2379#g' /etc/sysconfig/flanneld
etcdctl mk /atomic.io/network/config '{ "Network": "172.16.0.0/16" }'
master节点：
service docker restart
systemctl restart kube-apiserver.service
systemctl restart kube-controller-manager.service
systemctl restart kube-scheduler.service
node节点：
systemctl start flanneld.service
service docker restart
systemctl restart kubelet.service
systemctl restart kube-proxy.service
测试跨宿主机容器之间的互通性
所有节点执行docker run -it busybox
所有节点ifconfig
节点之间互ping
容器间ping不通解决办法：
vim /usr/lib/systemd/system/docker.service
ExecStartPost=/usr/sbin/iptables -P FORWARD ACCEPT