一、禁用SELINUX：
setenforce 0
vi /etc/selinux/config
SELINUX=disabled
二、创建/etc/sysctl.d/k8s.conf文件，添加如下内容：
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward = 1
执行命令使修改生效。
modprobe br_netfilter
sysctl -p /etc/sysctl.d/k8s.conf
三、安装Docker
1、设置docker的yum源（采用阿里云）:
yum install -y yum-utils device-mapper-persistent-data lvm2
yum-config-manager \
--add-repo \
https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
2、下载docker-ce，这里采用18.06.1.ce版本
yum makecache fast
yum install -y --setopt=obsoletes=0 \
docker-ce-18.06.1.ce-3.el7
3、启动docker
systemctl start docker
systemctl enable docker
4、确认一下iptables filter表中FOWARD链的默认策略(pllicy)为ACCEPT
iptables -nvL
Chain INPUT (policy ACCEPT 263 packets, 19209 bytes) pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
如果不是ACCEPT，则修改
iptables -P FORWARD ACCEPT
四、使用kubeadm部署Kubernetes
1、安装kubeadm和kubelet（这里也采用阿里云镜像）
cat <<EOF > /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF
yum makecache fast && yum install -y kubelet kubeadm kubectl
这里会从google下载镜像，如果无法翻墙请执行下面命令后在执行上面名
docker pull mirrorgooglecontainers/kube-apiserver-amd64:v1.12.2
docker pull mirrorgooglecontainers/kube-controller-manager-amd64:v1.12.2
docker pull mirrorgooglecontainers/kube-scheduler-amd64:v1.12.2
docker pull mirrorgooglecontainers/kube-proxy-amd64:v1.12.2
docker pull mirrorgooglecontainers/pause:3.1
docker pull mirrorgooglecontainers/etcd-amd64:3.2.24
docker pull coredns/coredns:1.2.2
docker tag docker.io/mirrorgooglecontainers/kube-proxy-amd64:v1.12.2 k8s.gcr.io/kube-proxy:v1.12.2
docker tag docker.io/mirrorgooglecontainers/kube-scheduler-amd64:v1.12.2 k8s.gcr.io/kube-scheduler:v1.12.2
docker tag docker.io/mirrorgooglecontainers/kube-apiserver-amd64:v1.12.2 k8s.gcr.io/kube-apiserver:v1.12.2
docker tag docker.io/mirrorgooglecontainers/kube-controller-manager-amd64:v1.12.2 k8s.gcr.io/kube-controller-manager:v1.12.2
docker tag docker.io/mirrorgooglecontainers/etcd-amd64:3.2.24 k8s.gcr.io/etcd:3.2.24
docker tag docker.io/mirrorgooglecontainers/pause:3.1 k8s.gcr.io/pause:3.1
docker tag docker.io/coredns/coredns:1.2.2 k8s.gcr.io/coredns:1.2.2
Kubernetes 1.8开始要求关闭系统的Swap，默认配置下kubelet将无法启动。
swapoff -a
修改/etc/sysctl.d/k8s.conf，增加下面一行。然后执行sysctl -p /etc/sysctl.d/k8s.conf使修改生效。
vm.swappiness=0
sysctl -p /etc/sysctl.d/k8s.conf
修改/etc/sysconfig/kubelet，增加--fail-swap-on=false
KUBELET_EXTRA_ARGS=--fail-swap-on=false
2 使用kubeadm init初始化集群
在各节点开机启动kubelet服务：
systemctl enable kubelet.service
接下来使用kubeadm初始化集群，选择node1作为Master Node，在node1上执行下面的命令（请将IP换成你自己的master机器IP）：
kubeadm init \
--kubernetes-version=v1.12.2 \
--pod-network-cidr=10.244.0.0/16 \
--apiserver-advertise-address= 172.20.38.10
--ignore-preflight-errors=Swap
在输出日志后面你会看到成功标记
Your Kubernetes master has initialized successfully!
To start using your cluster, you need to run the following as a regular user:
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config
You should now deploy a pod network to the cluster.Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at: https://kubernetes.io/docs/concepts/cluster-administration/addons/
You can now join any number of machines by running the following on each nodeas root:
kubeadm join 172.20.38.10:6443 --token 62u3or.7rvaxpgra3r9c1u9 --discovery-token-ca-cert-hash sha256:0fe59a4d41817cff8d3190a0e3c541219957abd938c4f9243d03782523c663dc
kubeadm join ...这行是在节点上执行，用来加入到集群的命令。
按照他的提示执行以下命令
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config
3、检查集群状态
kubectl get cs
NAME STATUS MESSAGE ERROR
controller-manager Healthy ok
scheduler Healthy ok
etcd-0 Healthy {"health": "true"}
4 安装Pod Network
mkdir -p ~/k8s/cd ~/k8s
wget https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml
由于默认生成的master节点没有加入到集群，他的状态是not-ready:NoSchedule
因此需要修改成
tolerations: - key: node-role.kubernetes.io/master
operator: Exists effect: NoSchedule - key: node.kubernetes.io/not-ready
operator: Exists effect: NoSchedule
aplly修改操作
kubectl apply -f kube-flannel.yml
执行kubectl get nodes，发现ready的表示已经完成
kubectl get nodes
NAME STATUS ROLES AGE VERSION
test-chentianhui--devms--1 Ready master 6h5m v1.12.2
