MSA - K8s

1 集群部署

1.1 Master组件和Node组件

1.2 Master组件的apiserver, controller-manager, scheduler

1.3 Node组件的kubelet(创建容器), proxy(网络代理)

1.4安装证书

[root@localhost ~]# mkdir ssl

[root@localhost ~]# cd ssl

[root@localhost ssl]# wget https://pkg.cfssl.org/R1.2/cfssl_linux-amd64

[root@localhost ssl]# wget https://pkg.cfssl.org/R1.2/cfssljson_linux-amd64

[root@localhost ssl]# wget https://pkg.cfssl.org/R1.2/cfssl-certinfo_linux-amd64

[root@localhost ssl]# chmod +x cfssl_linux-amd64 cfssljson_linux-amd64 cfssl-certinfo_linux-amd64

[root@localhost ssl]# mv cfssl-certinfo_linux-amd64 /usr/local/bin/cfssl

[root@localhost ssl]# mv cfssljson_linux-amd64 /usr/local/bin/cfssljson

[root@localhost ssl]# mv cfssl_linux-amd64 /usr/local/bin/cfssl-certinfo

1.5操作命令

kubectl get node

kubectl run nginx --image=nginx --replicas=3

kubectl get pod

kubectl get all

kubectl get pod -o wide

//暴露接口

kubectl expose deployment nginx --port=88 --target-port=80 --type=NodePort

1.6实战

1.6.1配置master节点

[root@localhost ~]# unzip master.zip

[root@localhost ~]# chmod +x * //授予权限

[root@localhost ~]# mkdir /opt/kubernetes/{bin,cfg} -p //创建双目录

[root@localhost ~]# mv kube* /opt/kubernetes/bin/ //移动

[root@localhost ~]# vi apiserver.sh //查看脚本

[root@localhost ~]# apt-get install etcd -y

[root@localhost ~]# vi /etc/default/etcd //编写etcd

ETCD_DATA_DIR="/var/lib/etcd/default"

ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:2379"

ETCD_ADVERTISE_CLIENT_URLS=http://0.0.0.0:2379

[root@localhost ~]# service etcd restart

[root@localhost ~]# netstat -antp | grep etcd //查看监听状态

[root@localhost ~]# ./apiserver.sh 192.168.16.132 http://192.168.16.132:2379 //启动api server

[root@localhost ~]# ps -ef|grep kube

[root@localhost ~]# journalctl -u kube-apiserver

[root@localhost ~]# ./scheduler.sh 192.168.16.132

[root@localhost ~]# journalctl -u kube-scheduler

[root@localhost ~]# ./controller-manager.sh 192.168.16.132

[root@localhost ~]# journalctl -u kube-controller-manager

[root@localhost ~]# netstat -antp | grep 8080

controller.go:128] Unable to perform initial IP allocation check: unable to refresh the service IP block: client: etcd

Mar 14 22:26:22 localhost.localdomain systemd[1]: kube-apiserver.service: main process exited, code=exited, status=255/n/a

Mar 14 22:26:22 localhost.localdomain systemd[1]: Unit kube-apiserver.service entered failed state.

Mar 14 22:26:22 localhost.localdomain systemd[1]: kube-apiserver.service failed.

Mar 14 22:26:22 localhost.localdomain systemd[1]: kube-apiserver.service holdoff time over, scheduling restart.

Mar 14 22:26:22 localhost.localdomain systemd[1]: Started Kubernetes API Server.

Mar 14 22:26:22 localhost.localdomain systemd[1]: Starting Kubernetes API Server...

1.6.2配置node节点

chmod +x *

[root@localhost ~]# mkdir -p /opt/kubernetes/{bin,cfg}

[root@localhost ~]# mv kubelet kube-proxy /opt/kubernetes/bin

[root@localhost ~]# ./kubelet.sh 192.168.16.132 192.168.16.133 10.10.10.2

[root@localhost ~]# journalctl -u kubelet

[root@localhost ~]# free -m

[root@localhost ~]# swapoff -a

[root@localhost ~]# systemctl start kubelet

[root@localhost ~]# netstat -antp | grep 10250

[root@localhost ~]# ./proxy.sh 192.168.16.132 192.168.16.133

最后编辑于：2019.03.15 21:51:53