秦悦明的运维笔记

kubernetes 安装与组件图

初略的概念

master节点
kube-apiserver restful设计的一个api server
kube-scheduler 调度器,基本上不加参数
etcd k,v store
kube-controller-manager

node节点
kube-proxy 代理
kubelet node agent
docker 这个不用说了,容器

下面附kubernetes安装过程。centos7

1.repo源

1
2
3
4
[virt7-docker-common-release]
name=virt7-docker-common-release
baseurl=http://cbs.centos.org/repos/virt7-docker-common-release/x86_64/os/
gpgcheck=0

2.在所有节点安装kubernetes和etcd

1
yum -y install --enablerepo=virt7-docker-common-release kubernetes etcd

3.写hosts文件

1
2
3
vim /etc/hosts
192.168.121.9 centos-master
192.168.121.65 centos-minion

4.配置/etc/kubernetes/config

1
2
3
4
5
6
7
8
9
10
11
12
KUBE_ETCD_SERVERS="--etcd-servers=http://centos-master:2379"
KUBE_LOGTOSTDERR="--logtostderr=true"
# journal message level, 0 is debug
KUBE_LOG_LEVEL="--v=0"
# Should this cluster be allowed to run privileged docker containers
KUBE_ALLOW_PRIV="--allow-privileged=false"
# How the controller-manager, scheduler, and proxy find the apiserver
KUBE_MASTER="--master=http://centos-master:8080"

5.关闭防火墙

1
2
systemctl disable iptables-services firewalld
systemctl stop iptables-services firewalld

6.配置etcd

/etc/etcd/etcd.conf

1
2
3
4
5
6
7
# [member]
ETCD_NAME=default
ETCD_DATA_DIR="/var/lib/etcd/default.etcd"
ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:2379"
#[cluster]
ETCD_ADVERTISE_CLIENT_URLS="http://0.0.0.0:2379"

7.配置apiserver

/etc/kubernetes/apiserver

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
KUBE_API_ADDRESS="--insecure-bind-address=0.0.0.0"
# KUBE_API_ADDRESS="--insecure-bind-address=127.0.0.1"
# The port on the local server to listen on.
KUBE_API_PORT="--port=8080"
# Port minions listen on
KUBELET_PORT="--kubelet-port=10250"
# Comma separated list of nodes in the etcd cluster
KUBE_ETCD_SERVERS="--etcd-servers=http://127.0.0.1:2379"
# Address range to use for services
KUBE_SERVICE_ADDRESSES="--service-cluster-ip-range=10.0.0.0/16"
# default admission control policies
KUBE_ADMISSION_CONTROL="--admission-control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ResourceQuota"
# KUBE_ADMISSION_CONTROL="--admission-control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota"
# Add your own!
KUBE_API_ARGS=""

8.起服务(master)

1
2
3
4
5
for SERVICES in etcd kube-apiserver kube-controller-manager kube-scheduler; do
systemctl restart $SERVICES
systemctl enable $SERVICES
systemctl status $SERVICES
done

9.在minion上配置kubelet

/etc/kubernetes/kubelet

1
2
3
4
5
6
7
8
9
10
11
12
13
14
# The address for the info server to serve on
KUBELET_ADDRESS="--address=0.0.0.0"
# The port for the info server to serve on
KUBELET_PORT="--port=10250"
# You may leave this blank to use the actual hostname
KUBELET_HOSTNAME="--hostname-override=centos-minion"
# Location of the api-server
KUBELET_API_SERVER="--api-servers=http://centos-master:8080"
# Add your own!
KUBELET_ARGS=""

10.在minion节点上起服务

1
2
3
4
5
for SERVICES in kube-proxy kubelet docker; do
systemctl restart $SERVICES
systemctl enable $SERVICES
systemctl status $SERVICES
done

11.查看node状态

1
2
3
$ kubectl get nodes
NAME LABELS STATUS
centos-minion <none> Ready