GitHubgithub.com/kubernetes/kubernetes

Kubernetes简称为K8s是用于自动部署、扩缩和管理容器化应用程序的开源系统起源于Google

Kubernetes集群组件逻辑图

k8s集群属于Master-Slave主从架构Master节点负责集群管理和资源调度用于运行控制平面组件(Control

Plane

Components)Slave节点就是工作负载节点一般称为Node节点也叫Worker节点主要负责运行Pod一个Pod里可以同时运行多个容器而容器一般封装的就是基于Dokcer打包的应用Pod英文叫豌豆荚每个容器就像是一颗豌豆简单来说Pod就是一组容器。

安装部署

Github下载稳定版的二进制包手动部署每个组件组成k8s集群。

kubeadm工具

使用Kubeadm工具可以快速搭建一个k8s集群主要包括初始化控制平面节点和加入Worker节点提供的主要功能如下

kubeadm

CentOS每台节点至少2GMaster节点至少2C集群节点网络互通

环境配置

kubelet要求必须禁用交换分区所以kubeadm初始化时回检测swap是否关闭如果没有关闭会报错如果不想关闭安装时kubelet命令需要添加--fail-swap-onfalse关闭Swap分区必须在所有节点上执行如下命令:

临时关闭重启恢复

s/SELINUXenforcing/SELINUXdisabled/

关闭防火墙

/etc/yum.repos.d/kubernetes.repo

[kubernetes]

baseurlhttps://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/

enabled1

/etc/docker/certs.d/reg.mqw.org/

[roothub

root172.25.254.100:/etc/docker/certs.d/reg.mqw.org/ca.crt

root172.25.254.100s

/etc/modules-load.d/docker_mod.conf

[rootk8s_master

net.bridge.bridge-nf-call-iptables

net.bridge.bridge-nf-call-ip6tables

net.ipv4.ip_forward

kubeadm用来初始化k8s集群的指令。

kubelet在集群的每个节点上用来启动

Pod

和容器等。

kubectl用来与k8s集群通信的命令行工具查看、创建、更新和删除各种资源

所有节点都安装

/lib/systemd/system/cri-docker.service

[rootk8s-master

registry.aliyuncs.com/google_containers

--kubernetes-version

--cri-socketunix:///var/run/cri-dockerd.sock

上传镜像到harbor仓库

registry.aliyuncs.com/google_containers/kube-apiserver:v1.30.0

reg.mqw.org/k8s/kube-apiserver:v1.30.0

[rootk8s-master

reg.mqw.org/k8s/kube-apiserver:v1.30.0

[rootk8s-master

registry.aliyuncs.com/google_containers/kube-controller-manager:v1.30.0

reg.mqw.org/k8s/kube-controller-manager:v1.30.0

[rootk8s-master

reg.mqw.org/k8s/kube-controller-manager:v1.30.0

[rootk8s-master

registry.aliyuncs.com/google_containers/kube-scheduler:v1.30.0

reg.mqw.org/k8s/kube-scheduler:v1.30.0

[rootk8s-master

reg.mqw.org/k8s/kube-scheduler:v1.30.0

[rootk8s-master

registry.aliyuncs.com/google_containers/kube-proxy:v1.30.0

reg.mqw.org/k8s/kube-proxy:v1.30.0

[rootk8s-master

reg.mqw.org/k8s/kube-proxy:v1.30.0

[rootk8s-master

registry.aliyuncs.com/google_containers/coredns:v1.11.3

reg.mqw.org/k8s/coredns:v1.11.3

[rootk8s-master

reg.mqw.org/k8s/coredns:v1.11.3

[rootk8s-master

registry.aliyuncs.com/google_containers/pause:3.9

[rootk8s-master

registry.aliyuncs.com/google_containers/etcd:3.5.15-0

[rootk8s-master

--pod-network-cidr10.244.0.0/16

--image-repository

--cri-socketunix:///var/run/cri-dockerd.sock

#指定集群配置文件变量

KUBECONFIG/etc/kubernetes/admin.conf

~/.bash_profile

https://github.com/flannel-io/flannel/releases/latest/download/kube-flannel.yml

[rootk8s-master

docker.io/flannel/flannel:v0.25.5

[rootk8s-master

docker.io/flannel/flannel-cni-plugin:v1.5.1-flannel1

[rootk8s-master

reg.timinglee.org/flannel/flannel:v0.25.5

[rootk8s-master

flannel/flannel-cni-plugin:v1.5.1-flannel1

reg.timinglee.org/flannel/flannel-cni-plugin:v1.5.1-flannel

[rootk8s-master

reg.timinglee.org/flannel/flannel:v0.25.5

[rootk8s-master

reg.timinglee.org/flannel/flannel-cni-plugin:v1.5.1-flannel1

#编辑kube-flannel.yml

reg.timinglee.org/flannel/flannel:v0.25.5

173:

reg.timinglee.org/flannel/flannel-cni-plugin:v1.5.1-flannel1

184:

reg.timinglee.org/flannel/flannel:v0.25.5

#安装flannel网络插件

sha256:0c08e6ff75578e3b1778cf72c7e81c91397c4ec6de21ac5abde16c71a6df34d3

--cri-socketunix:///var/run/cri-dockerd.sock

五、K8s命令

reg.timinglee.org/mnwl/busybox:latest

4.上传本地镜像到镜像仓库

reg.timinglee.org/mnwl/busybox:latest

[rootk8s-master

reg.timinglee.org/mnwl/nginx:laest

--replicas

reg.timinglee.org/mnwl/nginx:latest

[rootk8s-master

reg.timinglee.org/mnwl/nginx:latest

[rootk8s-master

7.用控制器管理的pod,删除pod,会自动创建pod,除非删除控制器

[rootk8s-master