部署-kubelet
node1:10.167.130.206
node2:10.167.130.210
两个节点都要做,kubelet是node的组件.
创建配置文件
vim /opt/kubernetes/cfg/kubelet
KUBELET_OPTS="--logtostderr=true \
--v=4 \
--hostname-override=10.167.130.206 \
--kubeconfig=/opt/kubernetes/cfg/kubelet.kubeconfig \
--bootstrap-kubeconfig=/opt/kubernetes/cfg/bootstrap.kubeconfig \
--config=/opt/kubernetes/cfg/kubelet.config \
--cert-dir=/opt/kubernetes/ssl \
--pod-infra-container-image=registry.cn-hangzhou.aliyuncs.com/google-containers/pause-amd64:3.0"
* --hostname-override 在集群中显示的主机名
* --kubeconfig 指定kubeconfig文件位置，会自动生成
* --bootstrap-kubeconfig 指定刚才生成的bootstrap.kubeconfig文件
* --cert-dir 颁发证书存放位置
* --pod-infra-container-image 管理Pod网络的镜像
vim /opt/kubernetes/cfg/kubelet.config
kind: KubeletConfiguration
apiVersion: kubelet.config.k8s.io/v1beta1
address: 10.167.130.206 #写本机IP服务启动后会启动本机IP的10250 10255端口来侦听api server的指令
port: 10250
readOnlyPort: 10255
cgroupDriver: cgroupfs
clusterDNS: ["10.0.0.2"]
clusterDomain: cluster.local.
failSwapOn: false
authentication:
anonymous:
enabled: true
vim /usr/lib/systemd/system/kubelet.service
[Unit]
Description=Kubernetes Kubelet
After=docker.service
Requires=docker.service
[Service]
EnvironmentFile=/opt/kubernetes/cfg/kubelet
ExecStart=/opt/kubernetes/bin/kubelet $KUBELET_OPTS
Restart=on-failure
KillMode=process
[Install]
WantedBy=multi-user.target
systemctl daemon-reload
systemctl enable kubelet
systemctl restart kubelet
查看客户端连接api的证书申请
$ kubectl get csr
NAME AGE REQUESTOR CONDITION
csr-2b308 4m kubelet-bootstrap Pending
批准并生成证书给客户端
kubectl certificate approve csr-2b308
批准后会显示Approved(批准)和Issued(颁发)
此处我遇到一个问题只有批准状态没有颁发状态
这里做一点说明,批准是由api server来做的,至于证书的生成和颁发是由kube-controller-manager来做
所以针对这个错误情况应该查看kube-controller-manager的日志来排除错误 journalctl -u kube-controller-manager
kubectl get node
NAME STATUS ROLES AGE VERSION
10.167.130.206 Ready <none> 3d3h v1.13.1
安装参考文档
基础部署参考
解释较为详细的安装文档