k8s是什么意思?kubeadm部署k8s集群(k8s部署)|PetaExpres

k8s是什么意思?
kubernetes简称k8s,是一个开源的,用于管理云平台中多个主机上的容器化的应用,kubernetes的目标是让部署容器化的应用简单并且高效(powerful),kubernetes提供了应用部署,规划,更新,维护的一种机制。
在kubernetes中,我们可以创建多个容器,每个容器里面运行一个应用实例,然后通过内置的负载均衡策略,实现对这一组应用实例的管理、发现、访问,而这些细节都不需要运维人员去进行复杂的手工配置和处理。
kubernetes(k8s)特点:
可移植: 支持公有云,私有云,混合云,多重云(multi-cloud)
可扩展: 模块化,插件化,可挂载,可组合
自动化: 自动部署,自动重启,自动复制,自动伸缩/扩展
kubeadm部署k8s集群(k8s部署):
kubernetes(k8s)三种部署方式
minikube
minikube是一种可以在本地快速运行单点kubernetes的工具,仅用于尝试kubernetes或日常开发的用户。
kubeadm
kubeadm也是提供kubeadm的工具 init和kubeadm join,用于快速部署kubernetes集群。
二进制包推荐,从官方下载发行版的二进制包,手动部署每个组件,形成kubernetes集群。
安装kubeadm环境准备
以下操作,在三台节点都执行
2.2.1 环境需求
环境:centos 7.4 +
硬件需求:cpu>=2c ,内存>=2g
环境角色
ip角色安装软件
10.0.0.100 k8s-master kube-apiserver kube-schduler kube-controller-manager docker flannel kubelet
10.0.0.101 k8s-node01 kubelet kube-proxy docker flannel
10.0.0.102 k8s-node02 kubelet kube-proxy docker flannel
1、关闭防火墙及selinux
systemctl stop firewalld && systemctl disable firewalld
sed -i 's/^selinux=.*/selinux=disabled/' /etc/selinux/config && setenforce 0
2、关闭 swap 分区
swapoff -a # 临时
sed -i '/ swap / s/^(.*)$/#1/g' /etc/fstab #永久
3、分别在10.0.0.100、10.0.0.101、10.0.0.102上设置主机名及配置hosts
hostnamectl set-hostname k8s-master
hostnamectl set-hostname k8s-node01
hostnamectl set-hostname k8s-node02
4、在所有主机上上添加如下命令
cat >> /etc/hosts < /etc/sysctl.d/k8s.conf yum -y install docker-ce-18.06.1.ce-3.el7
systemctl enable docker && systemctl start docker
docker --version
docker version 18.06.1-ce, build e68fc7a
2.2.5 添加kubernetes yum软件源
cat > /etc/yum.repos.d/kubernetes.repo ce07a7f5b259961884c55e3ff8784b1eda6f8b5931e6fa2ab0b30b6a4234c09a
节点加入集群
[root@k8s-node01 ~]# kubeadm join --token aa78f6.8b4cafc8ed26c34f --discovery-token-ca-cert-hash sha256:0fd95a9bc67a7bf0ef42da968a0d55d92e52898ec37c971bd77ee501d845b538 10.0.0.100:6443 --skip-preflight-chec
2.4 加入kubernetes node在两个node 节点执行
使用kubeadm join 注册node节点到matser
kubeadm join 的内容,在上面kubeadm init 已经生成好了
[root@k8s-node01 ~]# kubeadm join 10.0.0.100:6443 --token fylid0.3udi31k2aw9zvjtc
--discovery-token-ca-cert-hash sha256:3fbb4b58eccff32668473b99cc3b0c64964f1363c93d7c6a8f502d43d34718d3输出内容则为成功:
[preflight] running pre-flight checks
[warning isdockersystemdcheck]: detected cgroupfs as the docker cgroup driver. the recommended driver is systemd. please follow the guide at https://kubernetes.io/docs/setup/cri/[preflight] reading configuration from the cluster...
[preflight] fyi: you can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -oyaml'
[kubelet-start] downloading configuration for the kubelet from the kubelet-config-1.15 configmap in the kube-system namespace
[kubelet-start] writing kubelet configuration to file /var/lib/kubelet/config.yaml
[kubelet-start] writing kubelet environment file with flags to file /var/lib/kubelet/kubeadm-flags.env
[kubelet-start] activating the kubelet service
[kubelet-start] waiting for the kubelet to perform the tls bootstrap...
this node has joined the cluster:
certificate signing request was sent to apiserver and a response was received.the kubelet was informed of the new secure connection details.run 'kubectl get nodes' on the control-plane to see this node join the cluster.
2.5 安装网络插件只需要在master 节点执行
[root@k8s-master ~]# wget https://raw.githubusercontent.com/coreos/flannel/master/documentation/kube-flannel.yml
修改镜像地址:(有可能默认不能拉取,确保能够访问到quay.io这个registery,否则修改如下内容)
[root@k8s-master ~]# vim kube-flannel.yml
进入编辑,把106行,120行的内容,替换如下image,替换之后查看如下为正确
[root@k8s-master ~]# cat -n kube-flannel.yml|grep lizhenliang/flannel:v0.11.0-amd64
172 image: lizhenliang/flannel:v0.11.0-amd64
186 image: lizhenliang/flannel:v0.11.0-amd64
[root@k8s-master ~]# kubectl apply -f kube-flannel.yml
[root@k8s-master ~]# kubectl get pods -n kube-system
name ready status restarts age
coredns-bccdc95cf-b9pz7 1/1 running 0 10m
coredns-bccdc95cf-dfb58 1/1 running 0 10m
etcd-k8s-master 1/1 running 0 9m47s
kube-apiserver-k8s-master 1/1 running 0 9m49s
kube-controller-manager-k8s-master 1/1 running 0 9m46s
kube-flannel-ds-amd64-5lqjb 1/1 running 0 2m6s
kube-flannel-ds-amd64-jvvpx 0/1 init:0/1 0 2m6s
kube-proxy-hjwzg 1/1 running 0 10m
kube-proxy-rxm2g 1/1 running 0 6m51s
kube-scheduler-k8s-master 1/1 running 0 9m41s
2.6 查看集群node状态查看集群的node状态,安装完网络工具之后,只有显示如下状态,所有节点全部都ready好了之后才能继续后面的操作
[root@k8s-master ~]# kubectl get nodes
name status roles age version
k8s-master ready master 37m v1.15.0
k8s-node01 ready 5m22s v1.15.0
k8s-node02 ready 5m18s v1.15.0
[root@k8s-node01 ~]# kubectl get pod -n kube-system
name ready status restarts age
coredns-bccdc95cf-6pdgv 1/1 running 0 80m
coredns-bccdc95cf-f845x 1/1 running 0 80m
etcd-k8s-master 1/1 running 0 80m
kube-apiserver-k8s-master 1/1 running 0 79m
kube-controller-manager-k8s-master 1/1 running 0 80m
kube-flannel-ds-amd64-chpz8 1/1 running 0 70m
kube-flannel-ds-amd64-jx56v 1/1 running 0 70m
kube-flannel-ds-amd64-tsgvv 1/1 running 0 70m
kube-proxy-d5b7l 1/1 running 0 80m
kube-proxy-f7v46 1/1 running 0 75m
kube-proxy-wqhsj 1/1 running 0 78m
kube-scheduler-k8s-master 1/1 running 0 80m
kubernetes-dashboard-8499f49758-6f6ct 1/1 running 0 42m
只有全部都为1/1则可以成功执行后续步骤,如果flannel需检查网络情况,重新进行如下操作
kubectl delete -f kube-flannel.yml
然后重新wget,然后修改镜像地址,然后
kubectl apply -f kube-flannel.yml
2.7 创建一个nignx在kubernetes集群中创建一个pod,然后暴露端口,验证是否正常访问:
[root@k8s-master ~]# kubectl create deployment nginx --image=nginx
deployment.apps/nginx created
[root@k8s-master ~]# kubectl expose deployment nginx --port=80 --type=nodeport
service/nginx exposed
[root@k8s-master ~]# kubectl get pods,svc
name ready status restarts age
pod/nginx-554b9c67f9-wf5lm 1/1 running 0 24s
name type cluster-ip external-ip port(s) age
service/kubernetes clusterip 10.1.0.1 443/tcp 39m
service/nginx nodeport 10.1.224.251 80:32039/tcp 9s
访问地址:http://nodeip:port ,此例就是:http://10.0.0.101:32039
2.8 部署 dashboard[root@k8s-master ~]# wget https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/recommended/kubernetes-dashboard.yaml
[root@k8s-master ~]# vim kubernetes-dashboard.yaml
修改内容:
109 spec:
110 containers:
111 - name: kubernetes-dashboard
112 image: lizhenliang/kubernetes-dashboard-amd64:v1.10.1 # 修改此行
......
157 spec:
158 type: nodeport # 增加此行
159 ports:
160 - port: 443
161 targetport: 8443
162 nodeport: 30001 # 增加此行
163 selector:
164 k8s-app: kubernetes-dashboard
[root@k8s-master ~]# kubectl apply -f kubernetes-dashboard.yaml
[root@k8s-master ~]# kubectl get pod -n kube-system
[root@k8s-master ~]# kubectl get pods,svc -n kube-system
在火狐浏览器访问(google受信任问题不能访问)地址: https://10.0.0.101:30001
创建service account并绑定默认cluster-admin管理员集群角色:
[root@k8s-master ~]# kubectl create serviceaccount dashboard-admin -n kube-system
[root@k8s-master ~]# kubectl create clusterrolebinding dashboard-admin --clusterrole=cluster-admin
[root@k8s-master ~]# kubectl describe secrets -n kube-system $(kubectl -n kube-system get secret | awk '/dashboard-admin/{print $1}')
2.9 解决其他浏览器不能访问的问题[root@k8s-master ~]# cd /etc/kubernetes/pki/
[root@k8s-master pki]# mkdir ui
[root@k8s-master pki]# cp apiserver.crt ui/
[root@k8s-master pki]# cp apiserver.key ui/
[root@k8s-master pki]# cd ui/
[root@k8s-master ui]# mv apiserver.crt dashboard.pem
[root@k8s-master ui]# mv apiserver.key dashboard-key.pem
[root@k8s-master ui]# kubectl delete secret kubernetes-dashboard-certs -n kube-system
[root@k8s-master ui]# kubectl create secret generic kubernetes-dashboard-certs --from-file=./ -n kube-system
[root@k8s-master]# vim kubernetes-dashboard.yaml
#回到这个yaml的路径下修改
修改dashboard-controller.yaml 文件,在args下面增加证书两行
- --tls-key-file=dashboard-key.pem - --tls-cert-file=dashboard.pem[root@k8s-master ~]kubectl apply -f kubernetes-dashboard.yaml
[root@k8s-master ~]# kubectl create serviceaccount dashboard-admin -n kube-system
serviceaccount/dashboard-admin created
[root@k8s-master ~]# kubectl create clusterrolebinding dashboard-admin --clusterrole=cluster-admin
--serviceaccount=kube-system:dashboard-admin
[root@k8s-master ~]# kubectl describe secrets -n kube-system $(kubectl -n kube-system get secret | awk '/dashboard-admin/{print $1}')
petaexpress:https://www.petaexpress.com/products/d4a363ee47f6fe2d.html
petaexpres推出云服务器免费试用,有需要的可进行参与:https://www.petaexpress.com/free


华为三款新旗舰:华为p10、华为P10plus、荣耀v9综合评测大PK,你看好谁?
Maker多抵押Dai将彻底改写DeFi市场的竞争格局
AR在制造领域应用持续成长
智能交互在呼叫中心行业如何落地
豪威发布全新500万和400万像素图像传感器
k8s是什么意思?kubeadm部署k8s集群(k8s部署)|PetaExpres
意在欧洲市场?OPPO完成迄今最大规模专利收购
成飞民机公司已成为了波音787方向舵的全球唯一供应商
为“担当赶超、婺城图强”提供坚强的网络安全保障和有力的信息化支撑
论自恢复保险丝在LED显示屏的保护作用
角度传感器的工作原理 角度传感器原理及应用
海信85U9E评测:基于Android 9.0深度优化的电视系统
5G时代光器件是降低5G成本的重要路径
荣耀手表GS Pro联合Discovery推出的秘境星空版本,长达25天强劲续航
华为p50pocket折叠手机好不好
碳化硅功率器件的可靠性应用
英特尔决心布局FPGA,助力其成长发展
英国大型银行首次与加密货币交易所Coinbase达成了合作
七家移动转售企业首批入围,物联网转售将开启怎样的新时代?
安防监控补光灯板的辐照度一般是多少?