环境搭建 | 手动搭建K8S环境

# 关闭防火墙systemctl stop firewalldsystemctl disable firewalld# 永久关闭selinuxsed -i 's/enforcing/disabled/' /etc/selinux/config# 永久关闭swapsed -ri 's/.*swap.*/#&/' /etc/fstab# 修改/etc/hosts172.16.200.70 k8s-master172.16.200.71 k8s-node1172.16.200.72 k8s-node2

cat > /etc/yum.repos.d/kubernetes.repo << EOF[kubernetes]name=Kubernetesbaseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64enabled=1gpgcheck=0repo_gpgcheck=0gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpgEOF

curl -s https://get.docker.com/ | sh

#安装kubelet、kubeadm和kubectlyum install -y kubelet-1.23.0 kubeadm-1.23.0 kubectl-1.23.0#设置kubelet开机自启systemctl enable kubelet

kubeadm init --apiserver-advertise-address=172.16.200.70 --image-repository=registry.aliyuncs.com/google_containers --kubernetes-version v1.23.0 --service-cidr=10.10.10.0/24 --pod-network-cidr=10.20.20.0/24 --ignore-preflight-errors=all

mkdir -p $HOME/.kubesudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/configsudo chown $(id -u):$(id -g) $HOME/.kube/config

kubeadm join 172.16.200.70:6443 --token y05mrn.y5yz5g0zvjyanos5 --discovery-token-ca-cert-hash sha256:683c265dcc24cdf2f1a677f0bd38236326514d4270d2d62b602912bf8f70c22e

kubeadm token create --print-join-command

wget https://docs.projectcalico.org/v3.19/manifests/calico.yaml --no-check-certificatewget https://docs.projectcalico.org/manifests/calico.yaml --no-check-certificate

cat calico.yaml |grep 'image:'sed -i 's#docker.io/##g' calico.yaml

#部署kubectl apply -f calico.yaml#查看状态，执行完上一条命令需要等一会才全部runningkubectl get pods -n kube-system

docker load < xx.tar

#移除kubectl delete -f calico.yml#部署kubectl apply -f calico.yaml

wget https://raw.githubusercontent.com/kubernetes/dashboard/v2.4.0/aio/deploy/recommended.yaml

kubectl apply -f recommended.yaml

# 创建用户kubectl create serviceaccount dashboard-admin -n kube-system# 用户授权kubectl create clusterrolebinding dashboard-admin --clusterrole=cluster-admin --serviceaccount=kube-system:dashboard-admin# 获取用户Tokenkubectl describe secrets -n kube-system $(kubectl -n kube-system get secret | awk '/dashboard-admin/{print $1}')

[kubelet-check] It seems like the kubelet isn't running or healthy.[kubelet-check] The HTTP call equal to 'curl -sSL http://localhost:10248/healthz' failed with error: Get "http://localhost:10248/healthz": dial tcp [::1]:10248: connect: connection refused.

{"exec-opts": ["native.cgroupdriver=systemd"  ],"registry-mirrors": ["http://docker-registry-mirror.kodekloud.com"  ]}