Kubernetes：4.使用 Kubeadm 部署3 Mast

作者: 小六的昵称已被使用 | 来源:发表于2019-08-12 15:20 被阅读0次

Kubernetes：4.使用 Kubeadm 部署3 Mast
Kubernetes探索学习系列001----kubeadm快速
Kubernetes：2.使用 Kubeadm 部署单 Mast
01 Kubeadm installation
kubernetes1.14使用kubeadm部署高可用mast
kubernetes最新实战生产：02-Kubernetes部署
kubeadm部署kubernetes集群
kubernetes高可用用kubeadm方式部署实战
kubernetes fluentd-elasticsearch
kubeadm renew更新证书后，master依旧过期

环境

[09:42:02 root@ceshi-01 ~ $]cat /etc/centos-release
CentOS Linux release 7.6.1810 (Core)

[09:41:17 root@ceshi-01 ~ $]kubectl version
Client Version: version.Info{Major:"1", Minor:"15", GitVersion:"v1.15.2", GitCommit:"f6278300bebbb750328ac16ee6dd3aa7d3549568", GitTreeState:"clean", BuildDate:"2019-08-05T09:23:26Z", GoVersion:"go1.12.5", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"15", GitVersion:"v1.15.2", GitCommit:"f6278300bebbb750328ac16ee6dd3aa7d3549568", GitTreeState:"clean", BuildDate:"2019-08-05T09:15:22Z", GoVersion:"go1.12.5", Compiler:"gc", Platform:"linux/amd64"}

第零步：准备工作

需要先执行：【Kubernetes：3.安装 Keepalived + Haproxy】

第一步：Installing kubeadm, kubelet and kubectl（by all）

您将在所有节点上安装以下软件包：
    kubeadm     引导集群的命令
    kubelet     在集群中所有计算机上运行的组件，并执行诸如启动 pod 和容器之类的操作
    kubectl     用于与集群通讯的命令行

## 官方源
cat <<EOF > /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
EOF

## 阿里源
cat <<EOF > /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF

## 安装并启动
## kubelet 将每隔几秒重启一次，因为他在等待 kubeadm 告诉他应该怎么做
yum install -y kubelet kubeadm kubectl
systemctl enable kubelet && systemctl start kubelet
systemctl status kubelet

第二步：初始化第一个节点

1.修改初始化配置文件

## 打印出默认配置，然后根据自己情况修改
kubeadm config print init-defaults > kubeadm-init.yaml

    advertiseAddress    修改为本机内网 IP
    controlPlaneEndpoint    修改为 VIP:端口（顶格写）
    imageRepository         修改为阿里国内源：registry.aliyuncs.com/google_containers
                            默认的 Google 地址无法访问会导致初始化失败
    kubernetesVersion       修改为 kubectl version 命令输出的 GitVersion
    podSubnet               跟 serviceSubnet 平级添加并指定为：：10.244.0.0/16（Flannel默认网络）

## 示例配置
apiVersion: kubeadm.k8s.io/v1beta2
bootstrapTokens:
- groups:
  - system:bootstrappers:kubeadm:default-node-token
  token: abcdef.0123456789abcdef
  ttl: 24h0m0s
  usages:
  - signing
  - authentication
kind: InitConfiguration
localAPIEndpoint:
  advertiseAddress: 192.168.30.111
  bindPort: 6443
nodeRegistration:
  criSocket: /var/run/dockershim.sock
  name: ceshi-01
  taints:
  - effect: NoSchedule
    key: node-role.kubernetes.io/master
---
controlPlaneEndpoint: 192.168.30.110
apiServer:
  timeoutForControlPlane: 4m0s
apiVersion: kubeadm.k8s.io/v1beta2
certificatesDir: /etc/kubernetes/pki
clusterName: kubernetes
controllerManager: {}
dns:
  type: CoreDNS
etcd:
  local:
    dataDir: /var/lib/etcd
imageRepository: registry.aliyuncs.com/google_containers
kind: ClusterConfiguration
kubernetesVersion: v1.15.2
networking:
  dnsDomain: cluster.local
  serviceSubnet: 10.96.0.0/12
  podSubnet: 10.244.0.0/16
scheduler: {}

2.初始化集群

kubeadm init --config kubeadm-init.yaml --upload-certs

    ## 初始化成功后将得到以下提示
    ## 1.初始化成功
    ## 2.输入以下命令
    ## 3.应该是集群添加 Pod 网络
    ## 3.可以使用以下命令添加任意数量的控制节点
    ## 4.上传的证书会在2小时后删除，可以使用以下命令重新上传这证书
          kubeadm init phase upload-certs --upload-certs
    ## 5.可以使用以下命令添加任意节点的 Worker 节点

    Your Kubernetes control-plane has initialized successfully!

    To start using your cluster, you need to run the following as a regular user:

      mkdir -p $HOME/.kube
      sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
      sudo chown $(id -u):$(id -g) $HOME/.kube/config

    You should now deploy a pod network to the cluster.
    Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
      https://kubernetes.io/docs/concepts/cluster-administration/addons/

    You can now join any number of the control-plane node running the following command on each as root:

      kubeadm join 192.168.30.120:8443 --token abcdef.0123456789abcdef \
        --discovery-token-ca-cert-hash sha256:b5b60a596f4e9c61595913af668edc507a19c93d2b22802f65cf8cbe752666c0 \
        --control-plane --certificate-key 616956178da7e5822b59ccb577e2d5b461ffc96f19806eca6bf65495201348e6
    
    Please note that the certificate-key gives access to cluster sensitive data, keep it secret!
    As a safeguard, uploaded-certs will be deleted in two hours; If necessary, you can use 
    "kubeadm init phase upload-certs --upload-certs" to reload certs afterward.
    
    Then you can join any number of worker nodes by running the following on each as root:
    
    kubeadm join 192.168.30.120:8443 --token abcdef.0123456789abcdef \
        --discovery-token-ca-cert-hash sha256:b5b60a596f4e9c61595913af668edc507a19c93d2b22802f65cf8cbe752666c0

3.执行以下命令

mkdir -p $HOME/.kube
cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
chown $(id -u):$(id -g) $HOME/.kube/config

4.在集群中部署pod网络

## 这里只是为了快速开始，所以部署了「Weave Net」网络（后面可以更换为其他网络）
## 更多详情请参阅：https://kubernetes.io/docs/concepts/cluster-administration/addons/#networking-and-network-policy
## kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"

## 部署 Flannel 网络
## 如果要部署 Flannel 网络，需要在初始化集群的时候添加以下参数：--pod-network-cidr=10.244.0.0/16
## 参考：https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/
kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/62e44c867a2846fefb68bd5f178daf4da3095ccb/Documentation/kube-flannel.yml

## 使用 describe 查看指定容器的更多信息
kubectl describe  -n kube-system pod kube-flannel-ds-amd64-sch5b

## 使用以下命令查看状态
kubectl get nodes
kubectl get pods --all-namespaces -o wide
kubectl get pods -n kube-system -o wide

    ## nodes 状态要处于 Ready
    ## pod 要处于 running 状态
    [root@k8s-02 ~]# kubectl get nodes
    NAME     STATUS   ROLES    AGE   VERSION
    k8s-02   Ready    master   32m   v1.15.2
    [root@k8s-02 ~]# kubectl get pods --all-namespaces
    NAMESPACE     NAME                             READY   STATUS    RESTARTS   AGE
    kube-system   coredns-bccdc95cf-2hh76          1/1     Running   0          32m
    kube-system   coredns-bccdc95cf-n68wk          1/1     Running   0          32m
    kube-system   etcd-k8s-02                      1/1     Running   0          31m
    kube-system   kube-apiserver-k8s-02            1/1     Running   0          31m
    kube-system   kube-controller-manager-k8s-02   1/1     Running   0          31m
    kube-system   kube-proxy-kqjpj                 1/1     Running   0          32m
    kube-system   kube-scheduler-k8s-02            1/1     Running   0          31m
    kube-system   weave-net-sxllx                  2/2     Running   0          10m

第三步：加入 Master 和 Worker 节点

## 使用第一个节点生成的 join 语句加入集群既是 Master 节点
  kubeadm join 192.168.30.120:8443 --token abcdef.0123456789abcdef \
    --discovery-token-ca-cert-hash sha256:b5b60a596f4e9c61595913af668edc507a19c93d2b22802f65cf8cbe752666c0 \
    --control-plane --certificate-key 616956178da7e5822b59ccb577e2d5b461ffc96f19806eca6bf65495201348e6

## 使用第一个节点生成的 join 语句加入集群既是 Worker 节点
kubeadm join 192.168.30.120:8443 --token abcdef.0123456789abcdef \
    --discovery-token-ca-cert-hash sha256:b5b60a596f4e9c61595913af668edc507a19c93d2b22802f65cf8cbe752666c0

Kubernetes：4.使用 Kubeadm 部署3 Mast
环境第零步：准备工作第一步：Installing kubeadm, kubelet and kubectl（b...
Kubernetes探索学习系列001----kubeadm快速
Centos7.6使用kubeadm快速部署kubernetes集群首先笔者为什么要使用kubeadm来部署ku...
Kubernetes：2.使用 Kubeadm 部署单 Mast
环境第一步：Installing kubeadm, kubelet and kubectl 第二步：初始化集群（...
01 Kubeadm installation
使用Kubeadm 本机部署Kubernetes K8s的部署方式有很多，kubeadm是网上看到比较推荐的一种部...
kubernetes1.14使用kubeadm部署高可用mast
1.下载ks8的yum源主节点安装：yum install -y kubelet kubeadm kubectl...
kubernetes最新实战生产：02-Kubernetes部署
Kubernetes部署 kubernetes集群部署介绍 - kubeadm 截止到2020.04.08我们的生...
kubeadm部署kubernetes集群
使用kubeadm部署kubernetes集群 kubeadm是k8s官方推出的一个快速部署集群的工具，通过两条命...
kubernetes高可用用kubeadm方式部署实战
简介使用kubeadm方式部署kubernetes HA 架构信息系统版本：CentOS 7内核：3.10....
kubernetes fluentd-elasticsearch
部署现在位置https://github.com/kubernetes/kubernetes/tree/mast...
kubeadm renew更新证书后，master依旧过期
背景 kubernetes: 1.16.3 master: 3台采用kubeadm部署，在证书还有30天以上时，...