kubenetes安装

master节点主要由四个模块组成：

• APIServer   提供了资源操做的惟一入口，任何对资源进行增删改查的操做都要交给APIServer处理后再提交给etcd。kubectl就是对api server的调用。
• scheduler  负责资源的调度，按照预约的调度策略将Pod调度到相应的机器上；
• controller manager    负责维护集群的状态，好比故障检测、自动扩展、滚动更新等；
• etcd   是一个高可用的kv存储系统，Kubernetes使用它来存储各个资源的状态，从而实现了Restful的API。

node节点主要由三个模块组成：

• Container runtime  容器运行环境，经常使用docker容器
• kubelet  负责维护容器的生命周期，管理pods和pods上面的容器
• kube-proxy 负责为Service提供cluster内部的服务发现和负载均衡

master&slave: docker,kubectl,

master : kubeadm init

slave: kubeadm join

 

 master节点

初始化master节点

# kubeadm init  --kubernetes-version=v1.14.3 --pod-network-cidr=10.244.0.0/16 --service-cidr=10.96.0.0/12 --ignore-preflight-errors=swap
[init] using Kubernetes version: v1.14.3
[preflight] running pre-flight checks
    [WARNING KubernetesVersion]: kubernetes version is greater than kubeadm version. Please consider to upgrade kubeadm. kubernetes version: beadm version: 1.11.x

[addons] Applied essential addon: CoreDNS
[addons] Applied essential addon: kube-proxy

Your Kubernetes master has initialized successfully!

To start using your cluster, you need to run the following as a regular user:

  mkdir -p $HOME/.kube
  sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  sudo chown $(id -u):$(id -g) $HOME/.kube/config

You should now deploy a pod network to the cluster.
Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
  https://kubernetes.io/docs/concepts/cluster-administration/addons/

You can now join any number of machines by running the following on each node
as root:

  kubeadm join 172.17.8.128:6443 --token 825yrh.qe2kpku40dwcwusb --discovery-token-ca-cert-hash sha256:02b158edd568a75523cb12a1561b65937bcf146319484fd86f88e9

执行：
mkdir -p $HOME/.kube sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config

# kubectl get cs

# kubectl get nodes
NAME STATUS ROLES AGE VERSION
master01 NotReady master 164m v1.11.2     #nodes处于NotReady状态，由于缺乏网络组件

 

部署网络组件 flannel

# kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml
podsecuritypolicy.policy/psp.flannel.unprivileged created
clusterrole.rbac.authorization.k8s.io/flannel created
clusterrolebinding.rbac.authorization.k8s.io/flannel created
serviceaccount/flannel created
configmap/kube-flannel-cfg created
daemonset.apps/kube-flannel-ds-amd64 created
daemonset.apps/kube-flannel-ds-arm64 created
daemonset.apps/kube-flannel-ds-arm created
daemonset.apps/kube-flannel-ds-ppc64le created
daemonset.apps/kube-flannel-ds-s390x created

 等待一下子

docker image ls    看到flannel镜像下载下来 

 kubectl get pods  -n kube-system  查看pods运行在，

才说明flannel安装成功

# kubectl get pods -n kube-system
NAME                               READY   STATUS    RESTARTS   AGE
coredns-8686dcc4fd-qg5jz           1/1     Running   0          4m33s
coredns-8686dcc4fd-vx64c           1/1     Running   0          4m33s
etcd-master01                      1/1     Running   0          3m46s
kube-apiserver-master01            1/1     Running   0          3m42s
kube-controller-manager-master01   1/1     Running   0          3m33s
kube-flannel-ds-amd64-5sbrx        1/1     Running   1          2m49s
kube-flannel-ds-amd64-wlr5x        1/1     Running   0          3m34s
kube-proxy-d2pzd                   1/1     Running   0          2m49s
kube-proxy-gpwkg                   1/1     Running   0          4m33s
kube-scheduler-master01            1/1     Running   0          3m49s  

再查看  kubectl get nodes  会看到已经ready

# kubectl get nodes
NAME            STATUS   ROLES    AGE     VERSION
master01        Ready    master   5m52s   v1.14.3

 

 

node节点

安装组件

# yum install kubelet-1.14.3  kubeadm-1.14.3  kubectl-1.14.3 

加入集群

# kubeadm join 172.17.8.128:6443 --token j1u40p.5is2liahibv1gwgk --discovery-token-ca-cert-hash sha256:51579863a2ff093f730c0552c13c44ea87e270064a7fc9ba5bac069ca47cf2cb [preflight] Running pre-flight checks
[preflight] Reading configuration from the cluster...
[preflight] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -oyaml'
[kubelet-start] Downloading configuration for the kubelet from the "kubelet-config-1.14" ConfigMap in the kube-system namespace
[kubelet-start] Writing kubelet configuration to file "/var/lib/kubelet/config.yaml"
[kubelet-start] Writing kubelet environment file with flags to file "/var/lib/kubelet/kubeadm-flags.env"
[kubelet-start] Activating the kubelet service
[kubelet-start] Waiting for the kubelet to perform the TLS Bootstrap...

This node has joined the cluster:
* Certificate signing request was sent to apiserver and a response was received.
* The Kubelet was informed of the new secure connection details.

Run 'kubectl get nodes' on the control-plane to see this node join the cluster.

node加入集群后 在master上面查看

[master01 ]# kubectl get nodes
NAME                                      STATUS   ROLES    AGE     VERSION
master01 Ready    master   10m     v1.14.3node01   Ready    <none>   8m18s   v1.14.3

 

 

 

报错1：

启动docker时报错：Error starting daemon: Error initializing network controller: list bridge addresses failed: no available network

  解决：须要手动添加下docker0网桥：

brctl addbr docker0
ip addr add 172.17.0.1/16 dev docker0
ip link set dev docker0 up
systemctl restart docker

 

报错2：初始化kubeadm时

[preflight] Some fatal errors occurred:
[ERROR ImagePull]: failed to pull image [k8s.gcr.io/kube-apiserver-amd64:v1.14.3]: exit status 1
[ERROR ImagePull]: failed to pull image [k8s.gcr.io/kube-controller-manager-amd64:v1.14.3]: exit status 1
[ERROR ImagePull]: failed to pull image [k8s.gcr.io/kube-scheduler-amd64:v1.14.3]: exit status 1
[ERROR ImagePull]: failed to pull image [k8s.gcr.io/kube-proxy-amd64:v1.14.3]: exit status 1
[ERROR ImagePull]: failed to pull image [k8s.gcr.io/pause:3.1]: exit status 1
[ERROR ImagePull]: failed to pull image [k8s.gcr.io/etcd-amd64:3.2.18]: exit status 1
[ERROR ImagePull]: failed to pull image [k8s.gcr.io/coredns:1.1.3]: exit status 1
[preflight] If you know what you are doing, you can make a check non-fatal with `--ignore-preflight-errors=...`

解决方法：
经过别的镜像仓库，先将镜像下载下来而后再修改为k8s.gcr.io对应的tag
docker pull mirrorgooglecontainers/kube-apiserver-amd64:v1.14.3
docker pull mirrorgooglecontainers/kube-controller-manager-amd64:v1.14.3
docker pull mirrorgooglecontainers/kube-scheduler-amd64:v1.14.3
docker pull mirrorgooglecontainers/kube-proxy-amd64:v1.14.3
docker pull mirrorgooglecontainers/pause:3.1
docker pull mirrorgooglecontainers/etcd-amd64:3.2.18
docker pull coredns/coredns:1.3.1

修改tag：
docker tag mirrorgooglecontainers/kube-apiserver-amd64:v1.14.3 k8s.gcr.io/kube-apiserver-amd64:v1.14.3
docker tag mirrorgooglecontainers/kube-controller-manager-amd64:v1.14.3 k8s.gcr.io/kube-controller-manager-amd64:v1.14.3
docker tag mirrorgooglecontainers/kube-scheduler-amd64:v1.14.3 k8s.gcr.io/kube-scheduler-amd64:v1.14.3
docker tag mirrorgooglecontainers/etcd-amd64:3.2.18 k8s.gcr.io/etcd-amd64:3.2.18
docker tag mirrorgooglecontainers/kube-proxy-amd64:v1.14.3 k8s.gcr.io/kube-proxy-amd64:v1.14.3
docker tag coredns/coredns:1.3.1 k8s.gcr.io/coredns:1.1.3
docker tag mirrorgooglecontainers/pause:3.1 k8s.gcr.io/pause:3.1

 

 

报错3： node 执行 kubeadm join  加入集群时报错： 

        报错1：configmaps "kubelet-config-1.11" is forbidden: User "system:bootstrap:wdchig" cannot get resource "configmaps" in API group "" in the namespacetem"

       缘由：版本问题，当前版本为1.11.2 。须要升级kubelet和kubeadm。按照上面的安装步骤来，安装的时候指定版本便可。

 

　　报错2：couldn't validate the identity of the API Server: expected a 32 byte SHA-256 hash, found 29 bytes

　　缘由：kubeadm init生成的token有效期只有1天

　　解决方法：

　　在master节点检查token是否有效

　　master #    kubeadm token list  查看

　　master# kubeadm token create --print-join-command 生成新的token和命令。而后在node从新执行

 

 报错4：  从新执行初始化的时候报错：     error marking master: timed out waiting for the condition

解决：

# kubeadm reset -f && rm -rf /etc/kubernetes/

 清理集群数据 而后再 kubeadm init --kubernetes-version=v1.14.3 --pod-network-cidr=10.244.0.0/16 --service-cidr=10.96.0.0/12 --ignore-preflight-errors=Swap