本文共 4511 字，大约阅读时间需要 15 分钟。

K8S部署文档# 关闭防火墙systemctl stop firewalldsystemctl disable firewalld# 关闭selinux# 永久sed -i 's/enforcing/disabled/' /etc/selinux/config  # 临时setenforce 0  # 关闭swap# 临时swapoff -a # 永久 sed -ri 's/.*swap.*/#&/' /etc/fstab    # 根据规划设置主机名hostnamectl set-hostname masterhostnamectl set-hostname work1hostnamectl set-hostname work2#添加hostscat >/etc/hosts<
   
     /etc/sysctl.d/k8s.conf << EOFnet.bridge.bridge-nf-call-ip6tables = 1net.bridge.bridge-nf-call-iptables = 1EOF# 生效sysctl --system  # 时间同步yum install ntpdate -yntpdate time.windows.com#安装docker-ce#下载安装dockerwget https://download.docker.com/linux/static/stable/x86_64/docker-19.03.6.tgztar -zvxf docker-19.03.6.tgzcp docker/* /usr/bin/rm -rf docker*#配置成systemclt方式管理cat >/etc/systemd/system/docker.service<
    
      /etc/docker/daemon.json << EOF{  "registry-mirrors": ["https://b9pmyelo.mirror.aliyuncs.com"]}EOF#设置权限chmod +x /etc/systemd/system/docker.servicesystemctl daemon-reloadsystemctl enable dockersystemctl start dockersystemctl restart dockerdocker info#添加阿里云YUM软件源cat > /etc/yum.repos.d/kubernetes.repo << EOF[kubernetes]name=Kubernetesbaseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64enabled=1gpgcheck=0repo_gpgcheck=0gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpgEOF#安装kubeadm，kubelet和kubectlyum install -y kubelet-1.20.0 kubeadm-1.20.0 kubectl-1.20.0systemctl enable kubelet#初始化masterkubeadm init \  --apiserver-advertise-address=10.0.0.6 \  --image-repository registry.aliyuncs.com/google_containers \  --kubernetes-version v1.20.0 \  --service-cidr=10.96.0.0/12 \  --pod-network-cidr=10.244.0.0/16 \  --ignore-preflight-errors=allmkdir -p $HOME/.kubesudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/configsudo chown $(id -u):$(id -g) $HOME/.kube/configkubectl get nodes#work节点join集群kubeadm join 10.0.0.6:6443 --token e41ctj.g52jlzyx8o62bvoo \    --discovery-token-ca-cert-hash sha256:84198a854b62d583cdd9a17bd16652a201cf22356865fffa47b45eb35fee3985#部署calico网络wget https://www-1259165587.cos.ap-nanjing.myqcloud.com/K8S/calico.yamlkubectl apply -f calico.yamlkubectl get pods -n kube-system#master节点scp文件到work节点scp /etc/kubernetes/admin.conf work1：/etc/kubernetes/scp /etc/kubernetes/admin.conf work2：/etc/kubernetes/echo "export KUBECONFIG=/etc/kubernetes/admin.conf" >> ~/.bash_profilesource ~/.bash_profile#work节点测试kubectl get pods --all-namespaces#等Calico Pod都Running，节点也会准备就绪#删除yml文件创建的pod:kubectl delete -f calico.yamlvim /etc/kubernetes/manifests/kube-controller-manager.yaml vim /etc/kubernetes/manifests/kube-scheduler.yaml #分别注释- --port=0参数systemctl restart kubeletkubectl get cs#创建一个pod验证集群情况kubectl create deployment nginx --image=nginxkubectl expose deployment nginx --port=80 --type=NodePortkubectl get pod,svc#创建UI面板界面wget https://www-1259165587.cos.ap-nanjing.myqcloud.com/K8S/kubernetes-dashboard.yamlkubectl apply -f kubernetes-dashboard.yamlkubectl get pods -n kubernetes-dashboard# 创建用户kubectl create serviceaccount dashboard-admin -n kube-system# 用户授权kubectl create clusterrolebinding dashboard-admin --clusterrole=cluster-admin --serviceaccount=kube-system:dashboard-admin# 获取用户Tokenkubectl describe secrets -n kube-system $(kubectl -n kube-system get secret | awk '/dashboard-admin/{print $1}')#出了问题看这个# 查看日志kubectl logs 
     
       -n kube-system# 查看事件  kubectl describe pod 
      
        -n kube-system #更换容器引擎为containerdyum install -y yum-utils device-mapper-persistent-data lvm2yum-config-manager \    --add-repo \    https://download.docker.com/linux/centos/docker-ce.repoyum install -y containerd.iomkdir -p /etc/containerdcontainerd config default | sudo tee /etc/containerd/config.tomlsystemctl restart containerd#修改配置vi /etc/containerd/config.toml   [plugins."io.containerd.grpc.v1.cri"]      sandbox_image = "registry.aliyuncs.com/google_containers/pause:3.2"  57行          ...         [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options]             SystemdCgroup = true    97行             ...        [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]          endpoint = ["https://b9pmyelo.mirror.aliyuncs.com"] 106行          systemctl restart containerd#配置kubelet使用containerdvi /etc/sysconfig/kubelet KUBELET_EXTRA_ARGS=--container-runtime=remote --container-runtime-endpoint=unix:///run/containerd/containerd.sock --cgroup-driver=systemdsystemctl restart kubelet#验证kubectl get node -o widek8s-node1  xxx  containerd://1.4.4#crictl工具检查和调试容器cat >/etc/crictl.yaml<
      
     
    
   

转载地址：https://liushiya.blog.csdn.net/article/details/117731695 如侵犯您的版权，请留言回复原文章的地址，我们会给您删除此文章，给您带来不便请您谅解！