k8s kubeadm部署实践

systemctl stop firewalld
systemctl disable firewalld

ssh-keygen -t rsa
ssh-copy-id node01

setenforce 0
/etc/sysconfig/selinux 中改SELINUX=disabled

swapoff -a
/etc/fstab 中注释swap行

sysctl -a |grep bridge 过滤bridge不存在就用下面命令加载 br_netfilter
modprobe br_netfilter

/etc/sysctl.d/k8s.conf 中添加两行
net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-ip6tables = 1

在 /etc/sysctl.conf 中添加
net.ipv4.ip_forward = 1

执行
sysctl -p

wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo -O /etc/yum.repos.d/docker-ce.repo
yum -y install docker-ce
systemctl enable docker
systemctl start docker
docker --version

/etc/yum.repos.d/kubernetes.repo

[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg

yum -y install kubelet kubectl kubeadm

systemctl enable kubelet

kubeadm init --pod-network-cidr=10.244.0.0/16 
--image-repository registry.aliyuncs.com/google_containers

#--pod-network-cidr 是之后网络分配给pod的地址段，需要提前规划，避免网段冲突。10.244.0.0/16为flannel默认网段

[root@master ~]# more /etc/docker/daemon.json 
{
  "exec-opts": ["native.cgroupdriver=systemd"]
}

kubeadm token create

kubeadm token list

yum -y install bash-completion
source /usr/share/bash-completion/bash_completion

source <(kubectl completion bash)
echo "source <(kubectl completion bash)" >> ~/.bashrc

tar -xf kubens_v0.9.4_linux_x86_64.tar.gz
ln -s /opt/kubens/kubens /usr/local/bin/kubens

curl https://docs.projectcalico.org/manifests/calico.yaml -O

kubectl apply -f calico.yaml