【云安全】云原生-centos7搭建/安装/部署k8s1.23.6单节点

hostnamectl set-hostname master-1hostnamectl set-hostname node1hostnamectl set-hostname node2#验证hostnamectl status

cat <<EOF >>/etc/hosts192.168.255.137 master-1192.168.255.131 node1192.168.255.132 node2EOF

# 安装docker所需的工具yum install -y yum-utils device-mapper-persistent-data lvm2# 配置阿里云的docker源yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo# 指定安装这个版本的docker-ceyum install -y docker-ce-20.10.0 docker-ce-cli-20.10.0 containerd.io# 启动dockersystemctl enable docker && systemctl start docker

cat <<EOF > /etc/docker/daemon.json{  "registry-mirrors": [    "https://docker.m.daocloud.io",    "https://noohub.ru",    "https://huecker.io",    "https://dockerhub.timeweb.cloud",    "https://docker.rainbond.cc",    "https://docker.1ms.run",    "https://docker.1panel.live",    "https://hub1.nat.tf",    "https://docker-0.unsee.tech",    "https://docker.1panel.live",    "https://registry.dockermirror.com",    "https://docker.imgdb.de",    "https://docker.m.daocloud.io"  ],  "exec-opts": ["native.cgroupdriver=systemd"]}EOF#重启dockersystemctl restart docker

# 关闭防火墙systemctl disable firewalldsystemctl stop firewalld# 临时禁用selinuxsetenforce 0# 永久关闭 修改/etc/sysconfig/selinux文件设置sed -i 's/SELINUX=permissive/SELINUX=disabled/' /etc/sysconfig/selinuxsed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config# 禁用交换分区swapoff -a# 永久禁用，打开/etc/fstab注释掉swap那一行sed -i 's/.*swap.*/#&/' /etc/fstab# 修改内核参数cat <<EOF >  /etc/sysctl.d/k8s.confnet.bridge.bridge-nf-call-ip6tables = 1net.bridge.bridge-nf-call-iptables = 1EOFsysctl --system

# 执行配置k8s阿里云源cat <<EOF > /etc/yum.repos.d/kubernetes.repo[kubernetes]name=Kubernetesbaseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/enabled=1gpgcheck=1repo_gpgcheck=1gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpgEOF# 安装kubeadm、kubectl、kubeletyum install -y kubelet-1.23.6 kubeadm-1.23.6 kubectl-1.23.6# 启动kubelet服务systemctl enable kubelet && systemctl start kubelet

kubeadm init --image-repository registry.aliyuncs.com/google_containers --kubernetes-version v1.23.6 --apiserver-advertise-address 192.168.255.137 --pod-network-cidr=10.244.0.0/16 --token-ttl 0# 下载管理节点中用到的6个docker镜像，你可以使用docker images查看到。这里需要等待两分钟，会卡在[preflight] You can also perform this action in beforehand using ''kubeadm config images pull

mkdir -p $HOME/.kubesudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/configsudo chown $(id -u):$(id -g) $HOME/.kube/config

kubectl get node

export http_proxy="http://192.168.255.1:7890"export https_proxy="http://192.168.255.1:7890"unset http_proxyunset https_proxy

#安装wgetyum install -y wget#下载calico两个配置wget https://raw.githubusercontent.com/projectcalico/calico/v3.26.0/manifests/tigera-operator.yamlwget https://raw.githubusercontent.com/projectcalico/calico/v3.26.0/manifests/custom-resources.yaml#取消代理后，执行kubectl命令，下面两条命令顺序不能错！kubectl create -f tigera-operator.yamlkubectl create -f custom-resources.yaml

#设置代理执行下面的命令wget https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml#取消代理执行kubectlkubectl apply -f kube-flannel.yml