一。关闭防火墙和SELinux
1.1systemctl stop firewalld
1.2setenfoce 0
二。配置内核转发以及网桥过滤
2.1vi /etc/sysctl.d/k8s.conf
2.2sysctl -p /etc/sysctl.d/k8s.conf :让文件生效
2.3modprobe br_netfilter:加载模块
三。启动ipvs:
3.1vi /etc/sysconfig/modules/ipvs.modules
3.2chmod +x /etc/sysconfig/modules/ipvs.modules
3.3bash /etc/sysconfig/modules/ipvs.modules
四。关闭swap分区
临时关闭:swapoff -a
永久关闭:sed -i 's/.*swap.*/#&/' /etc/fstab
五。安装docker
5.1cd /etc/yum.repos.d/
5.2wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
注释:openEuler 系统在跟换源后需要将/etc/yum.repos.d/kubernetes.repo 中的$release 跟换成 8
5.3yum makecache
5.4yum install docker-ce
5.5vi /etc/docker/daemon.json
5.6systemctl restart docker
六。配置cri-dockerd
6.1wget -c http://github.com/Mirantis/cri-dockerd/releases/doenload/v0.3.4/cri-dockerd-0.3.14-3.fc36.x86_64.rpm
6.2 yum install cri-dockerd-0.3.14-3.fc36.x86_64.rpm
6.3vi /usr/lib/systemd/system/cri-docker.service
6.4systemctl start cri-docker.socket cri-docker.service
6.5systemctl daemon-reload && systemctl enable cri-docker.socket && systemctl status cri-docker.socket cri-docker docker
七。master配置K8s
7.1vi /etc/yum.repo.d/kubernets.repo
7.2yum install kubeadm-1.30.2 kubelet-1.30.2 kubectl-1.30.2 -y
如果没有此版本:yum list kubeadm --showduplicates | sort -r 进行选择合适版本
7.3kubeadm config print init-defaults > kubeadm-init.yaml:设置初始化文件
7.4vi /var/lib/kubelet/kubeadm-init.yaml
7.5systemctl restart containerd
7.6systemctl restart kubelet
7.7kubeadm init --config=kubeadm-init.yaml --upload-certs --v=6
7.8mkdir -p $HOME/.kube
7.9sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
7.10sudo chown $(id -u):$(id -g) $HOME/.kube/config
进行检测:
八。其他节点加入master:
8.1kubeadm join 192.168.142.133:6443 --token abcdef.0123456789abcdef --discovery-token-ca-cert-hash sha256:2401632cc943e003df8a840986f340e68b3be20acaf1fdda658049d160c580f3 --cri-socket unix:///var/run/cri-dockerd.sock
最后验证:
九。master加入网络插件:
9.1curl -O https://docs.projectcalico.org/archive/v3.27/manifests/calico.yaml
9.2vi /root/calico.yaml
9.3kubectl create -f https://raw.githubusercontent.com/projectcalico/calico/v3.25.1/manifests/calico.yaml
注释:查看是否出现文件calico.yaml
9.4kubectl create -f calico.yaml