kubeadm安装k8s

相对于二进制要生成各种证书来说, kubeadm就简单的多了
Centos 7

1
2
3
4
# 配置docker的yum 源
$ sudo yum install -y yum-utils device-mapper-persistent-data lvm2
$ sudo yum-config-manager --add-repo \
http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
# 安装 docker运行时
$ sudo yum install -y docker-ce-19.03.15-3.el7 docker-ce-cli-19.03.15-3.el7 containerd.io
$ sudo sed -i "s#^ExecStart=/usr/bin/dockerd.*#ExecStart=/usr/bin/dockerd \
-H fd:// --containerd=/run/containerd/containerd.sock \
--exec-opt native.cgroupdriver=systemd#g" /usr/lib/systemd/system/docker.service
$ sudo systemctl enable docker && systemctl start docker

# 开启ip_forward内核转发
$ sudo cat /etc/sysctl.conf
$ sudo echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf
$ sudo echo "net.bridge.bridge-nf-call-ip6tables = 1" >> /etc/sysctl.conf
$ sudo echo "net.bridge.bridge-nf-call-iptables = 1" >> /etc/sysctl.conf
$ sudo sysctl -p

# 配置kubernetes yum 源
$ sudo cat <<EOF > /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF

# 安装kubeadm 等软件
$ sudo yum install -y kubelet-1.22.15 kubeadm-1.22.15 kubectl-1.22.15
$ sudo systemctl enable kubelet && systemctl start kubelet


# 初始化 master节点, 会输出添加node的脚本
$ sudo kubeadm init --pod-network-cidr 10.244.0.0/16 \
--kubernetes-version 1.22.15 \
--image-repository=registry.aliyuncs.com/google_containers

# https://github.com/flannel-io/flannel?tab=readme-ov-file#deploying-flannel-manually
# 安装flannel网络插件
$ sudo kubectl apply -f https://github.com/flannel-io/flannel/releases/latest/download/kube-flannel.yml