安装
K8S
Ubuntu 18.04安装
准备
一台master,两个node
镜像仓库(harbor或公有仓库)
关闭swap分区
sudo sed -ri 's/.*swap.*/#&/' /etc/fstab && sudo swapoff -a
安装kubeadm
sudo apt-get update && sudo apt-get install -y apt-transport-https
curl https://mirrors.aliyun.com/kubernetes/apt/doc/apt-key.gpg | sudo apt-key add -
sudo bash -c 'cat <<EOF >/etc/apt/sources.list.d/kubernetes.list
deb https://mirrors.aliyun.com/kubernetes/apt/ kubernetes-xenial main
EOF'
sudo apt-get update && sudo apt-get install -y kubelet kubeadm kubectl
容器Runtime
使用Docker
sudo apt install -y docker docker.io && sudo systemctl enable docker
# 改为systemd
sudo bash -c ' cat > /etc/docker/daemon.json <<EOF
{
"exec-opts": ["native.cgroupdriver=systemd"],
"log-driver": "json-file",
"log-opts": {
"max-size": "100m"
}
}
EOF'
sudo systemctl restart docker
使用Contained
相比docker更纯粹,更专注于容器runtime
https://kubernetes.io/docs/setup/production-environment/container-runtimes/
```
prepare
sudo bash -c 'cat > /etc/modules-load.d/containerd.conf <<EOF
br_netfilter
EOF'
sudo bash -c 'cat > /etc/sysctl.d/99-kubernetes-cri.conf <<EOF
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward = 1
net.bridge.bridge-nf-call-ip6tables = 1
EOF'
sudo sysctl --system
sudo apt-get update && sudo apt-get install -y containerd
Configure containerd
sudo mkdir -p /etc/containerd sudo bash -c 'containerd config default > /etc/containerd/config.toml' sudo sed -i 's/systemd_cgroup = false/systemd_cgroup = true/' /etc/containerd/config.toml
Restart containerd
sudo systemctl restart containerd
容器信息查看方法: `sudo crictl -r unix:///run/containerd/containerd.sock pods`
### 集群初始化
参数`control-plane-endpoint`为apiserver的外部负载均衡入口,创建高可用集群时需要
需要预先准备好,无准备可去掉此参数
`upload-certs`可一键作为master加入集群中,低版本参数可能时`--experimental-upload-certs`
使用`upload-certs`时,需妥善保存`kubeadm init`完成后生成的作为master加入的join命令,其可访问集群内部数据
使用`kubeadm init phase upload-certs --upload-certs`可刷新join命令
sudo kubeadm init --apiserver-advertise-address=192.168.76.139 --control-plane-endpoint=192.168.76.139:6443 --upload-certs --image-repository registry.aliyuncs.com/google_containers --pod-network-cidr=10.244.0.0/16
#### 配置kubectl
mkdir -p $HOME/.kube sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config sudo chown $(id -u):$(id -g) $HOME/.kube/config
#### 初始化flannel
`kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml`
#### 加入集群
在master节点运行 `kubeadm token create --print-join-command`
在node节点运行上面的输出来作为node节点
作为master加入时,依赖上方介绍的`upload-certs`和`control-plane-endpoint`参数
3主2从集群: `kubectl get nodes -o wide`
>NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME
>main Ready master 23m v1.18.3 192.168.76.139 <none> Ubuntu 18.04.4 LTS 4.15.0-106-generic docker://19.3.6
>main2 Ready master 7m9s v1.18.3 192.168.76.136 <none> Ubuntu 18.04.4 LTS 4.15.0-106-generic docker://19.3.6
>main3 Ready master 17m v1.18.3 192.168.76.140 <none> Ubuntu 18.04.4 LTS 4.15.0-106-generic docker://19.3.6
>vm2 Ready <none> 43s v1.18.3 192.168.76.137 <none> Ubuntu 18.04.4 LTS 4.15.0-106-generic docker://19.3.6
>vm3 Ready <none> 7m55s v1.18.3 192.168.76.138 <none> Ubuntu 18.04.4 LTS 4.15.0-91-generic docker://19.3.6
### 创建Pod
echo 'apiVersion: apps/v1 kind: Deployment metadata: name: nginx-deployment labels: app: nginx spec: replicas: 2 selector: matchLabels: app: nginx template: metadata: labels: app: nginx spec: containers:
name: nginx
image: nginx
ports:
containerPort: 80
' | kubectl apply -f -
```
kubectl get pods
输出如下:
NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES nginx-deployment-d46f5678b-4xk6v 1/1 Running 0 63s 10.244.2.4 vm3 nginx-deployment-d46f5678b-t54mx 1/1 Running 0 63s 10.244.1.5 vm2 删除任意一个pod,k8s都会再创建一个,保持数量为2
kubectl get deployment
输出如下:
NAME READY UP-TO-DATE AVAILABLE AGE CONTAINERS IMAGES SELECTOR nginx-deployment 2/2 2 2 92s nginx nginx app=nginx
扩容: kubectl scale --replicas=3 deployment nginx-deployment
创建Service
echo 'apiVersion: v1
kind: Service
metadata:
name: nginx-svc
spec:
ports:
- port: 8880
targetPort: 80
protocol: TCP
selector:
app: nginx' | kubectl apply -f -
查看结果 kubectl get svc -o wide
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE SELECTOR kubernetes ClusterIP 10.96.0.1 443/TCP 22h nginx-svc ClusterIP 10.99.243.241 8880/TCP 54s app=nginx
转为NodePort模式:
echo 'apiVersion: v1
kind: Service
metadata:
name: nginx-svc
spec:
type: NodePort
ports:
- port: 8880
targetPort: 80
protocol: TCP
selector:
app: nginx' | kubectl apply -f -
查看结果 kubectl get svc -o wide
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE SELECTOR kubernetes ClusterIP 10.96.0.1 443/TCP 22h nginx-svc NodePort 10.99.243.241 8880:30548/TCP 10m app=nginx NodePort模式使所有节点都暴露了一个端口,可使用节点ip加暴露的端口来访问服务
使用Ingress来暴露服务
Last updated
Was this helpful?