安装K8S集群
参考：使用kubeadm在Centos8上部署kubernetes1.18_Kubernetes中文社区
配置源
cat /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
安装工具
yum install -y kubelet-1.17.17-0 kubectl-1.17.17-0 kubeadm-1.17.17-0
初始化集群
kubeadm init \--image-repository registry.aliyuncs.com/google_containers \--kubernetes-version v1.17.17 \--pod-network-cidr=10.244.0.0/16
安装集群网络
---
kind: Namespace
apiVersion: v1
metadata:
name: kube-flannel
labels:
pod-security.kubernetes.io/enforce: privileged
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: flannel
rules:
- apiGroups:
- ""
resources:
- pods
verbs:
- get
- apiGroups:
- ""
resources:
- nodes
verbs:
- list
- watch
- apiGroups:
- ""
resources:
- nodes/status
verbs:
- patch
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: flannel
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: flannel
subjects:
- kind: ServiceAccount
name: flannel
namespace: kube-flannel
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: flannel
namespace: kube-flannel
---
kind: ConfigMap
apiVersion: v1
metadata:
name: kube-flannel-cfg
namespace: kube-flannel
labels:
tier: node
app: flannel
data:
cni-conf.json: |
{
"name": "cbr0",
"cniVersion": "0.3.1",
"plugins": [
{
"type": "flannel",
"delegate": {
"hairpinMode": true,
"isDefaultGateway": true
}
},
{
"type": "portmap",
"capabilities": {
"portMappings": true
}
}
]
}
net-conf.json: |
{
"Network": "10.244.0.0/16",
"Backend": {
"Type": "vxlan"
}
}
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
name: kube-flannel-ds
namespace: kube-flannel
labels:
tier: node
app: flannel
spec:
selector:
matchLabels:
app: flannel
template:
metadata:
labels:
tier: node
app: flannel
spec:
affinity:
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- key: kubernetes.io/os
operator: In
values:
- linux
hostNetwork: true
priorityClassName: system-node-critical
tolerations:
- operator: Exists
effect: NoSchedule
serviceAccountName: flannel
initContainers:
- name: install-cni-plugin
#image: flannelcni/flannel-cni-plugin:v1.1.0 for ppc64le and mips64le (dockerhub limitations may apply)
image: docker.io/rancher/mirrored-flannelcni-flannel-cni-plugin:v1.1.0
command:
- cp
args:
- -f
- /flannel
- /opt/cni/bin/flannel
volumeMounts:
- name: cni-plugin
mountPath: /opt/cni/bin
- name: install-cni
#image: flannelcni/flannel:v0.19.2 for ppc64le and mips64le (dockerhub limitations may apply)
image: docker.io/rancher/mirrored-flannelcni-flannel:v0.19.2
command:
- cp
args:
- -f
- /etc/kube-flannel/cni-conf.json
- /etc/cni/net.d/10-flannel.conflist
volumeMounts:
- name: cni
mountPath: /etc/cni/net.d
- name: flannel-cfg
mountPath: /etc/kube-flannel/
containers:
- name: kube-flannel
#image: flannelcni/flannel:v0.19.2 for ppc64le and mips64le (dockerhub limitations may apply)
image: docker.io/rancher/mirrored-flannelcni-flannel:v0.19.2
command:
- /opt/bin/flanneld
args:
- --ip-masq
- --kube-subnet-mgr
resources:
requests:
cpu: "100m"
memory: "50Mi"
limits:
cpu: "100m"
memory: "50Mi"
securityContext:
privileged: false
capabilities:
add: ["NET_ADMIN", "NET_RAW"]
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: EVENT_QUEUE_DEPTH
value: "5000"
volumeMounts:
- name: run
mountPath: /run/flannel
- name: flannel-cfg
mountPath: /etc/kube-flannel/
- name: xtables-lock
mountPath: /run/xtables.lock
volumes:
- name: run
hostPath:
path: /run/flannel
- name: cni-plugin
hostPath:
path: /opt/cni/bin
- name: cni
hostPath:
path: /etc/cni/net.d
- name: flannel-cfg
configMap:
name: kube-flannel-cfg
- name: xtables-lock
hostPath:
path: /run/xtables.lock
type: FileOrCreate
删除污点
kubectl get nodes 查看节点
kubectl taint nodes 节点名称 node-role.kubernetes.io/master:NoSchedule-
远程访问
在/etc/hosts添加如下记录：
47.93.32.161 kubernetes
kubeconfig配置：保存到$HOME/.kube/config
apiVersion: v1
clusters:
- cluster:
certificate-authority-data: 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
server: https://kubernetes:6443
name: kubernetes
contexts:
- context:
cluster: kubernetes
user: kubernetes-admin
name: kubernetes-admin@kubernetes
current-context: kubernetes-admin@kubernetes
kind: Config
preferences: {}
users:
- name: kubernetes-admin
user:
client-certificate-data: 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
client-key-data: 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
#在k8s中部署服务：
apiVersion: apps/v1
kind: Deployment
metadata:
name: selenium-hub
labels:
name: selenium-hub
spec:
replicas: 1
selector:
matchLabels:
name: selenium-hub
template:
metadata:
labels:
name: selenium-hub
spec:
containers:
- name: selenium-hub
image: selenium/hub:4.0.0-rc-2-prerelease-20210923
imagePullPolicy: IfNotPresent
resources:
limits:
cpu: "0.5"
requests:
cpu: "0.5"
ports:
- containerPort: 4444
- containerPort: 4442
- containerPort: 4443
- containerPort: 5557
env:
- name: TZ
value: "Asia/Shanghai"
volumeMounts:
- mountPath: "/etc/localtime"
name: "host-time"
livenessProbe:
httpGet:
path: /grid/console
port: 4444
initialDelaySeconds: 30
timeoutSeconds: 1
periodSeconds: 5
failureThreshold: 3
readinessProbe:
httpGet:
path: /grid/console
port: 4444
initialDelaySeconds: 30
timeoutSeconds: 1
periodSeconds: 5
failureThreshold: 3
volumes:
- name: "host-time"
hostPath:
path: "/etc/localtime"
---
apiVersion: v1
kind: Service
metadata:
name: selenium-hub
labels:
name: selenium-hub
spec:
type: NodePort
ports:
- name: port1
protocol: TCP
port: 4442
targetPort: 4442
- name: port2
protocol: TCP
port: 4443
targetPort: 4443
- name: port3
protocol: TCP
port: 5557
targetPort: 5557
- port: 4444
targetPort: 4444
name: port0
nodePort: 32757
selector:
name: selenium-hub
sessionAffinity: None