下圖是一個基本的Kubernetes 安裝部署圖侨艾。
由于資源限制,我只選了兩個虛擬機(jī)來嘗試拓挥。
Master: 192.168.59.131
Minion: 192.168.59.130
- 準(zhǔn)備工作:
[root@localhost ~]# systemctl stop firewalld
[root@localhost ~]# systemctl disable firewalld
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
Removed symlink /etc/systemd/system/basic.target.wants/firewalld.service.
[root@localhost ~]# yum -y install ntp
Loaded plugins: fastestmirror, langpacks
base | 3.6 kB 00:00:00
extras | 3.4 kB 00:00:00
updates | 3.4 kB 00:00:00
Loading mirror speeds from cached hostfile
- base: mirrors.163.com
- extras: mirrors.163.com
- updates: mirrors.nwsuaf.edu.cn
Package ntp-4.2.6p5-25.el7.centos.2.x86_64 already installed and latest version
Nothing to do
[root@localhost ~]# systemctl start ntpd
[root@localhost ~]# systemctl enable ntpd
Created symlink from /etc/systemd/system/multi-user.target.wants/ntpd.service to /usr/lib/systemd/system/ntpd.service.
yum update -y
- 安裝Master:
etcd Kubernetes
yum -y install etcd kubernetes flannel
配置etcd
[root@localhost ~]# egrep -v "#|$" /etc/etcd/etcd.conf
ETCD_NAME=default
ETCD_DATA_DIR="/var/lib/etcd/default.etcd"
ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:2379"
ETCD_ADVERTISE_CLIENT_URLS="http://0.0.0.0:2379"
配置k8s api
[root@localhost ~]# egrep -v "#|$" /etc/kubernetes/apiserver
KUBE_API_ADDRESS="--insecure-bind-address=0.0.0.0"
KUBE_ETCD_SERVERS="--etcd-servers=http://127.0.0.1:2379"
KUBE_SERVICE_ADDRESSES="--service-cluster-ip-range=10.254.0.0/16"
KUBE_ADMISSION_CONTROL="--admission-control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota"
KUBE_API_ARGS=""
配置flannel網(wǎng)絡(luò)
[root@localhost ~]# egrep -v "#|$" /etc/sysconfig/flanneld
FLANNEL_ETCD_ENDPOINTS="http://localhost:2379"
FLANNEL_ETCD_PREFIX="/coreos.com/network"
啟動etcd k8s服務(wù)
for SERVICES in etcd kube-apiserver kube-controller-manager kube-scheduler flanneld; do
systemctl restart $SERVICES
systemctl enable $SERVICES
systemctl status $SERVICES
done
定義flannel network
[root@localhost ~]# etcdctl mk /coreos.com/network/config '{"Network":"172.17.0.0/16"}'
- 安裝配置Kubernetes Minions (Nodes節(jié)點都執(zhí)行一遍)
yum -y install flannel kubernetes
配置/etc/sysconfig/flanneld
[root@localhost pods]# egrep -v "#|$" /etc/sysconfig/flanneld
FLANNEL_ETCD_ENDPOINTS="http://192.168.59.131:2379"
FLANNEL_ETCD_PREFIX="/coreos.com/network"
配置k8s /etc/kubernetes/config
[root@localhost pods]# egrep -v "#|$" /etc/kubernetes/config
KUBE_LOGTOSTDERR="--logtostderr=true"
KUBE_LOG_LEVEL="--v=0"
KUBE_ALLOW_PRIV="--allow-privileged=false"
KUBE_MASTER="--master=http://192.168.59.131:8080"
配置kubelet服務(wù) /etc/kubernetes/kubelet
[root@localhost pods]# egrep -v "#|$" /etc/kubernetes/kubelet
KUBELET_ADDRESS="--address=0.0.0.0"
KUBELET_HOSTNAME="--hostname-override=192.168.59.130"
KUBELET_API_SERVER="--api-servers=http://192.168.59.131:8080"
KUBELET_POD_INFRA_CONTAINER="--pod-infra-container-image=registry.access.redhat.com/rhel7/pod-infrastructure:latest"
KUBELET_ARGS=""
啟動服務(wù)
for SERVICES in kube-proxy kubelet docker flanneld; do
systemctl restart $SERVICES
systemctl enable $SERVICES
systemctl status $SERVICES
done
- 完成后檢查
查看每個k8s node上的iflannel ip
[root@localhost pods]# ip a |grep flannel|grep inet
inet 172.17.9.0/16 scope global flannel0
[root@localhost pods]# ip a |grep flannel|grep inet
inet 172.17.58.0/16 scope global flannel0
查詢相關(guān)節(jié)點
[root@localhost pods]# kubectl get nodes
NAME STATUS AGE
192.168.59.130 Ready 21h
[root@localhost pods]# kubectl get nodes -s http://192.168.59.131:8080
NAME STATUS AGE
192.168.59.130 Ready 22h
- 創(chuàng)建pod測試
創(chuàng)建配置文件:
[root@localhost pods]# cat nginx.yaml
apiVersion: v1
kind: Service
metadata:
name: my-nginx-svc
labels:
app: nginx
spec:
type: LoadBalancer
ports:
- port: 80
selector:
app: nginx
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: my-nginx
spec:
replicas: 3
template:
metadata:
labels:
app: nginx
spec:
containers:
- name: nginx
image: nginx:1.7.9
ports:
- containerPort: 80
kubectl create -f nginx.yaml -s http://192.168.59.131:8080
[root@localhost pods]# kubectl get pods -l app=nginx -s http://192.168.59.131:8080
NAME READY STATUS RESTARTS AGE
my-nginx-4087004473-mv2bl 1/1 Running 0 21h
my-nginx-4087004473-n5sz9 1/1 Running 0 21h
my-nginx-4087004473-zxj7g 1/1 Running 0 21h
[root@localhost pods]# kubectl get services -s http://192.168.59.131:8080
NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes 10.254.0.1 <none> 443/TCP 6d
my-nginx-svc 10.254.222.14 <pending> 80:32660/TCP 21h
[root@localhost pods]# kubectl describe services -s http://192.168.59.131:8080
Name: kubernetes
Namespace: default
Labels: component=apiserver
provider=kubernetes
Selector: <none>
Type: ClusterIP
IP: 10.254.0.1
Port: https 443/TCP
Endpoints: 192.168.59.131:6443
Session Affinity: ClientIP
No events.
Name: my-nginx-svc
Namespace: default
Labels: app=nginx
Selector: app=nginx
Type: LoadBalancer
IP: 10.254.222.14
Port: <unset> 80/TCP
NodePort: <unset> 32660/TCP
Endpoints: 172.17.58.11:80,172.17.58.8:80,172.17.58.9:80
Session Affinity: None
No events.