{"id":45,"date":"2024-11-20T19:18:57","date_gmt":"2024-11-20T11:18:57","guid":{"rendered":"https:\/\/coiio.eu.org\/?p=45"},"modified":"2025-03-03T06:59:17","modified_gmt":"2025-03-02T22:59:17","slug":"vmware-ubuntu-%e5%ae%89%e8%a3%85kubernetes","status":"publish","type":"post","link":"https:\/\/coiio.eu.org\/?p=45","title":{"rendered":"vmware ubuntu \u5b89\u88c5kubernetes"},"content":{"rendered":"
\n

1. vmware\u5b89\u88c5ubuntu<\/h2>\n

\u7565<\/p>\n

2. \u5b89\u88c5docker<\/h2>\n

2.1 \u4f7f\u7528\u56fd\u5185docker\u6e90<\/h3>\n
\n
$ cat<\/span> \/etc\/docker\/daemon.json\r\n{\r\n    \"exec-opts\"<\/span> : [\"native.cgroupdriver=systemd\"<\/span>],\r\n\r\n    \"registry-mirrors\"<\/span>: [\r\n        \"https:\/\/18lpui8e.mirror.aliyuncs.com\"<\/span>,\r\n        \"https:\/\/docker.unsee.tech\"<\/span>,\r\n        \"https:\/\/dockerpull.org\"<\/span>\r\n    ]\r\n\r\n}<\/code><\/pre>\n<\/div>\n
\n
apt install -y docker.io<\/span>\r\nsystemctl restart docker\r\nsystemctl status<\/span> docker<\/code><\/pre>\n<\/div>\n
2.2 \u7981\u7528swap<\/h3>\n
\n
swapoff -a<\/span>\r\nsed -i<\/span> '\/swap\/ s\/^\\(.*\\)$\/#\\1\/g'<\/span> \/etc\/fstab<\/code><\/pre>\n<\/div>\n
2.3 \u52a0\u8f7d\u5185\u6838\u6a21\u5757<\/h3>\n
\n
# \u4f7f\u7528 modprobe \u547d\u4ee4\u52a0\u8f7d\u4ee5\u4e0b\u5185\u6838\u6a21\u5757<\/span>\r\nmodprobe overlay\r\nmodprobe br_netfilter\r\n \r\n# \u6c38\u4e45\u52a0\u8f7d\u8fd9\u4e9b\u6a21\u5757<\/span>\r\ntee<\/span> \/etc\/modules-load.d\/k8s.conf <<EOF\r\noverlay\r\nbr_netfilter\r\nEOF<\/span>\r\n \r\n \r\n# \u4fee\u6539\u5185\u6838\u53c2\u6570\u3002\u521b\u5efa\u4e00\u4e2a\u6587\u4ef6\uff0c\u5e76\u4f7f\u7528 sysctl \u547d\u4ee4\u52a0\u8f7d\u53c2\u6570\u3002<\/span>\r\n \r\ntee<\/span> \/etc\/sysctl.d\/k8s.conf <<EOF\r\nnet.bridge.bridge-nf-call-ip6tables = 1 \r\nnet.bridge.bridge-nf-call-iptables = 1 \r\nnet.ipv4.ip_forward = 1 \r\nEOF<\/span>\r\n\r\nsysctl --system \r\n<\/code><\/pre>\n<\/div>\n
2.4 \u4fee\u6539\u4e3b\u673a\u540d\u548c\u914d\u7f6ehost\u6587\u4ef6<\/h3>\n
\n
#node\u8282\u70b9\u4fee\u6539\u6210\u5bf9\u5e94\u7684node\u540d\u79f0<\/span>\r\nhostnamectl hostname ubuntu-master<\/span><\/code><\/pre>\n<\/div>\n
\n
#\u4fee\u6539\/etc\/hosts, \u6587\u4ef6\u6700\u540e\u589e\u52a0\u5982\u4e0b\u5185\u5bb9\uff1a\r\n\r\n192.168.237.128<\/span> ubuntu-master\r\n192.168.237.129<\/span> ubuntu-node1\r\n192.168.237.130<\/span> ubuntu-node2\r\n<\/code><\/pre>\n<\/div>\n
2.5 \u5b89\u88c5kubeadm<\/h3>\n
\u4f7f\u7528aliyun\u955c\u50cf<\/h4>\n
\n
apt install -y apt-transport-https ca-certificates curl\r\n\r\ncurl https:\/\/mi<\/span>rrors.aliyun.com\/kubernetes\/<\/span>apt\/doc\/<\/span>apt-key.gpg | sudo apt-key add -\r\n\r\ncat <<EOF | tee \/etc\/<\/span>apt\/sources.list.d\/<\/span>kubernetes.list\r\ndeb https:\/\/mi<\/span>rrors.aliyun.com\/kubernetes\/<\/span>apt\/ kubernetes-xenial main\r\nEOF\r\n\r\napt update<\/code><\/pre>\n<\/div>\n
\u4f7f\u75281.23 \u6216\u4e4b\u524d\u7684\u7248\u672c, 1.24 \u4e4b\u540e\u7684\u7248\u672c\u4e0d\u652f\u6301docker<\/h4>\n
\n
apt<\/span> install -y kubeadm=1<\/span>.23<\/span>.3<\/span>-00<\/span> kubelet=1<\/span>.23<\/span>.3<\/span>-00<\/span> kubectl=1<\/span>.23<\/span>.3<\/span>-00<\/span>\r\n\r\nkubeadm<\/span> version\r\nkubectl<\/span> version<\/code><\/pre>\n<\/div>\n
\u4ecealiyun\u955c\u50cf\u4e0b\u8f7d\u76f8\u5173docker image\uff0c\u7136\u540e\u6253\u5305\u6210google\u955c\u50cf\u540d!!!<\/h4>\n
    \n
  • \u83b7\u53d6image list<\/li>\n<\/ul>\n
    \n
    clh<\/span>@ubuntu-master:~$ kubeadm config images list\r\nI1120<\/span> 00<\/span>:57<\/span>:27<\/span>.313592<\/span>   14321<\/span> version.go:255<\/span>] remote version is much newer: v1.31<\/span>.2<\/span>; falling back to: stable-1<\/span>.23<\/span>\r\nk8s<\/span>.gcr.io\/kube-apiserver:v1.23<\/span>.17<\/span>\r\nk8s<\/span>.gcr.io\/kube-controller-manager:v1.23<\/span>.17<\/span>\r\nk8s<\/span>.gcr.io\/kube-scheduler:v1.23<\/span>.17<\/span>\r\nk8s<\/span>.gcr.io\/kube-proxy:v1.23<\/span>.17<\/span>\r\nk8s<\/span>.gcr.io\/pause:3<\/span>.6<\/span>\r\nk8s<\/span>.gcr.io\/etcd:3<\/span>.5<\/span>.1<\/span>-0<\/span>\r\nk8s<\/span>.gcr.io\/coredns\/coredns:v1.8<\/span>.6<\/span>\r\nclh<\/span>@ubuntu-master:~$<\/code><\/pre>\n<\/div>\n
      \n
    • \u66ff\u6362\u5982\u4e0b\u811a\u672c\u7684image\u7248\u672c\uff0c\u5e76\u8fd0\u884c\u8be5\u811a\u672c<\/li>\n<\/ul>\n
      \n
      images=(\r\nkube-apiserver:v1.23.17\r\nkube-controller-manager:v1.23.17\r\nkube-scheduler:v1.23.17\r\nkube-proxy:v1.23.17\r\npause:3.6\r\netcd:3.5.1-0\r\ncoredns:v1.8.6\r\n)\r\nfor<\/span> imageName in<\/span> ${images[@]}<\/span> ; do<\/span>\r\n        docker pull registry.aliyuncs.com\/google_containers\/$imageName<\/span>\r\n        docker tag registry.aliyuncs.com\/google_containers\/$imageName<\/span> k8s.gcr.io\/$imageName<\/span>\r\n        docker rmi registry.aliyuncs.com\/google_containers\/$imageName<\/span>\r\ndone<\/span><\/code><\/pre>\n<\/div>\n
        \n
      • coredns \u56e0\u4e3a\u540d\u5b57\u5c11\u4e86\u4e00\u4e2acoredns\/,\u5355\u72ec\u5904\u7406\u4e00\u4e0b<\/li>\n<\/ul>\n
        \n
        root<\/span>@ubuntu-master:~# docker tag k8s.gcr.io\/coredns:v1.8<\/span>.6<\/span> k8s.gcr.io\/coredns\/coredns:v1.8<\/span>.6<\/span> \r\nroot<\/span>@ubuntu-master:~# docker rmi k8s.gcr.io\/coredns:v1.8<\/span>.6<\/span>\r\ndocker<\/span> rmi k8s.gcr.io\/coredns:v1.8<\/span>.6<\/span>\r\nroot<\/span>@ubuntu-master:~#<\/code><\/pre>\n<\/div>\n
          \n
        • \u68c0\u67e5\u4e00\u4e0bimage<\/li>\n<\/ul>\n
          \n
          root<\/span>@ubuntu-master:~# docker images\r\nREPOSITORY<\/span>                           TAG        IMAGE ID       CREATED         SIZE\r\nubuntu<\/span>                               latest     59<\/span>ab366372d5   5<\/span> weeks ago     78<\/span>.1<\/span>MB\r\nk8s<\/span>.gcr.io\/kube-apiserver            v1.23<\/span>.17<\/span>   62<\/span>bc5d8258d6   21<\/span> months ago   130<\/span>MB\r\nk8s<\/span>.gcr.io\/kube-controller-manager   v1.23<\/span>.17<\/span>   1<\/span>dab4fc7b6e0   21<\/span> months ago   120<\/span>MB\r\nk8s<\/span>.gcr.io\/kube-scheduler            v1.23<\/span>.17<\/span>   bc6794cb54ac   21<\/span> months ago   51<\/span>.9<\/span>MB\r\nk8s<\/span>.gcr.io\/kube-proxy                v1.23<\/span>.17<\/span>   f21c8d21558c   21<\/span> months ago   111<\/span>MB\r\nk8s<\/span>.gcr.io\/etcd                      3<\/span>.5<\/span>.1<\/span>-0<\/span>    25<\/span>f8c7f3da61   3<\/span> years ago     293<\/span>MB\r\nk8s<\/span>.gcr.io\/coredns\/coredns           v1.8<\/span>.6<\/span>     a4ca41631cc7   3<\/span> years ago     46<\/span>.8<\/span>MB\r\nk8s<\/span>.gcr.io\/pause \r\nroot<\/span>@ubuntu-master:~# <\/code><\/pre>\n<\/div>\n
            \n
          • \u6267\u884ckubeadm init \u547d\u4ee4\uff0c\u6307\u5b9a\u7248\u672c<\/li>\n<\/ul>\n
            \n
            root@ubuntu-master:~# kubeadm init --apiserver-advertise-address<\/span>=192.168.237.128 --pod-network-cidr<\/span>=10.244.0.0\/16 --kubernetes-version<\/span>=v1.23.3<\/code><\/pre>\n<\/div>\n
              \n
            • \u6700\u540e\u7684log<\/li>\n<\/ul>\n
              \n
              Your Kubernetes control-plane has initialized successfully!\r\n\r\nTo start<\/span> using<\/span> your cluster, you need to<\/span> run the<\/span> following as<\/span> a<\/span> regular user:\r\n\r\n  mkdir -p $HOME\/.kube\r\n  sudo cp -i \/etc\/kubernetes\/admin.conf $HOME\/.kube\/config\r\n  sudo chown $(id -u):$(id -g) $HOME\/.kube\/config\r\n\r\nAlternatively, if<\/span> you are the<\/span> root user, you can run:\r\n\r\n  export KUBECONFIG=\/etc\/kubernetes\/admin.conf\r\n\r\nYou should now deploy a<\/span> pod network to<\/span> the<\/span> cluster.\r\nRun \"kubectl apply -f [podnetwork].yaml\"<\/span> with<\/span> one<\/span> of<\/span> the<\/span> options listed at<\/span>:\r\n  https<\/span>:\/\/kubernetes.io\/docs\/concepts\/cluster-administration\/addons\/\r\n\r\nThen you can join any<\/span> number<\/span> of<\/span> worker nodes by<\/span> running the<\/span> following on<\/span> each<\/span> as<\/span> root<\/span>:\r\n\r\nkubeadm join 192.168<\/span>.237<\/span>.128<\/span>:6443<\/span> --token 43dc70.hbjdp8k1whnghxj0 \\<\/span>\r\n        --discovery-token-ca-cert-hash sha256:0a387cf419fe93f5819eab6d0017f289bd823b2ba3a5c577905094695adcb46b<\/span>\r\nroot@ubuntu-master:~# <\/span><\/code><\/pre>\n<\/div>\n
                \n
              • \u6700\u540e\u6267\u884c\uff1a<\/li>\n<\/ul>\n
                \n
                root@ubuntu-master:~# export<\/span> KUBECONFIG<\/span>=\/etc\/kubernetes\/admin.conf<\/code><\/pre>\n<\/div>\n
                  \n
                • \u53ef\u4ee5\u770b\u5230node\uff1a<\/li>\n<\/ul>\n
                  \n
                  clh@ubuntu-master<\/span>:~$ kubectl get nodes\r\nNAME            STATUS     ROLES                  AGE   VERSION<\/span>\r\nubuntu-master<\/span>   NotReady<\/span>   control-plane,master<\/span>   10h<\/span>   v1.23.3<\/span>\r\nclh@ubuntu-master<\/span>:~$<\/code><\/pre>\n<\/div>\n
                    \n
                  • \u914d\u7f6e\u7f51\u7edc<\/li>\n<\/ul>\n
                    \n
                    wget https:\/\/github.com\/flannel-io\/flannel\/releases\/latest\/download\/kube-flannel.yml\r\n\r\n# \u6ce8\u610f\uff0c\u9700\u8981\u5728kubeadm init \u65f6\u8bbe\u7f6e --pod-network-cidr=10.244.0.0\/16\uff0c\u5426\u5219\u4fee\u6539flannel.yml Network\u90e8\u5206<\/span>\r\n\r\nroot@ubuntu-master:~# kubectl apply -f kube-flannel.yml<\/span>\r\nnamespace\/kube-flannel created\r\nserviceaccount\/flannel created\r\nclusterrole.rbac.authorization.k8s.io\/flannel created\r\nclusterrolebinding.rbac.authorization.k8s.io\/flannel created\r\nconfigmap\/kube-flannel-cfg created\r\ndaemonset.apps\/kube-flannel-ds created\r\nroot@ubuntu-master:~#<\/span><\/code><\/pre>\n<\/div>\n
                      \n
                    • \u8fc7\u4f1a\u513f\u518d\u770bnode\u72b6\u6001<\/li>\n<\/ul>\n
                      \n
                      root@ubuntu-master<\/span>:~# kubectl get node<\/span>\r\nNAME            STATUS   ROLES                  AGE   VERSION<\/span>\r\nubuntu-master<\/span>   Ready<\/span>    control-plane,master<\/span>   10h<\/span>   v1.23.3<\/span>\r\nroot@ubuntu-master<\/span>:~#<\/span>\r\n<\/code><\/pre>\n<\/div>\n
                      Worker\u8282\u70b9\u5b89\u88c5<\/h1>\n
                        \n
                      • kubeadm init \u524d\u9762\u6b65\u9aa4\u8ddfmaster\u8282\u70b9\u4e00\u6837<\/li>\n
                      • master \u8282\u70b9\u6267\u884c\uff1a<\/li>\n<\/ul>\n
                        \n
                        root@ubuntu-master:~# kubeadm token create --print-join-command<\/span>\r\nkubeadm join<\/span> 192.168<\/span>.237.128<\/span>:6443<\/span> --token xkyr7l.a2x3ftpy6uld22lt --discovery-token-ca-cert-hash sha256:0a387cf419fe93f5819eab6d0017f289bd823b2ba3a5c577905094695adcb46b\r\nroot@ubuntu-master:~#<\/span><\/code><\/pre>\n<\/div>\n
                          \n
                        • worker \u8282\u70b9copy\u4e0a\u9762\u7684\u547d\u4ee4<\/li>\n<\/ul>\n
                          \n
                          root@ubuntu-node1:~# kubeadm join 192.168.237.128:6443 --token xkyr7l.a2x3ftpy6uld22lt --discovery-token-ca-cert-hash sha256:0a387cf419fe93f5819eab6d0017f289bd823b2ba3a5c577905094695adcb46b\r\n[preflight] Running pre-flight checks\r\n        [WARNING SystemVerification]: this Docker version is not on the list of validated versions: 24.0.7. Latest validated version: 20.10\r\n[preflight] Reading configuration from the cluster...\r\n[preflight] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -o yaml'\r\nW1120 01:36:15.591069    4469 utils.go:69] The recommended value for \"resolvConf\" in \"KubeletConfiguration\" is: \/run\/systemd\/resolve\/resolv.conf; the provided value is: \/run\/systemd\/resolve\/resolv.conf\r\n[kubelet-start] Writing kubelet configuration to file \"\/var\/lib\/kubelet\/config.yaml\"\r\n[kubelet-start] Writing kubelet environment file with flags to file \"\/var\/lib\/kubelet\/kubeadm-flags.env\"\r\n[kubelet-start] Starting the kubelet\r\n[kubelet-start] Waiting for the kubelet to perform the TLS Bootstrap...\r\n\r\nThis node has joined the cluster:\r\n* Certificate signing request was sent to apiserver and a response was received.\r\n* The Kubelet was informed of the new secure connection details.\r\n\r\nRun 'kubectl get nodes' on the control-plane to see this node join the cluster.\r\n\r\nroot@ubuntu-node1:~#<\/code><\/pre>\n<\/div>\n
                            \n
                          • kubernetes pods \u4e00\u76f4 ContainerCreating \u89e3\u51b3\u529e\u6cd5\uff1a \u68c0\u67e5\u6240\u6709\u8282\u70b9\u7684\/run\/flannel\/subnet.env\uff0c\u5982\u679c\u6ca1\u6709\u5c31\u4ecemaster\u62f7\u8d1d\u4e00\u4efd<\/li>\n<\/ul>\n
                            \n
                            root@ubuntu-master:~# kubectl describe pod ngx<\/span>\r\n\r\n5<\/span>c5340814addc35e971d9874069d48f3f4c376d93ea7de728542b65868575\" network for pod \"<\/span>ngx\": networkPlugin cni failed to set up pod \"<\/span>ngx_default\" network: loadFlannelSubnetEnv failed: open \/run\/flannel\/subnet.env: no such file or directory\r\n<\/span><\/code><\/pre>\n<\/div>\n
                            \n
                            root<\/span>@ubuntu-master:~# kubectl get pods\r\nNAME<\/span>                               READY   STATUS    RESTARTS   AGE\r\nnginx<\/span>-deployment-f7658b74c-dc7l5   1<\/span>\/1<\/span>     Running   0<\/span>          11<\/span>m\r\nnginx<\/span>-deployment-f7658b74c-k7wlv   1<\/span>\/1<\/span>     Running   0<\/span>          11<\/span>m\r\nnginx<\/span>-deployment-f7658b74c-tsmf9   1<\/span>\/1<\/span>     Running   0<\/span>          11<\/span>m\r\nngx<\/span>                                1<\/span>\/1<\/span>     Running   0<\/span>          55<\/span>m\r\nroot<\/span>@ubuntu-master:~#<\/code><\/pre>\n<\/div>\n
                              \n
                            • worker\u8282\u70b9\u4e0a\u6267\u884ckubectl\u62a5\u9519\uff1a<\/li>\n<\/ul>\n
                              \n
                              root@ubuntu-node1:~# kubectl get pods<\/span>\r\nThe connection to<\/span> the<\/span> server localhost:8080<\/span> was refused - did you specify the<\/span> right<\/span> host or<\/span> port?\r\nroot@ubuntu-node1:~# p<\/span><\/code><\/pre>\n<\/div>\n
                                \n
                              • \u89e3\u51b3\u65b9\u6cd5\uff1a \u4ecemaster\u8282\u70b9\u62f7\u8d1d \/etc\/kubernetes\/admin.conf \u5230worker\u8282\u70b9\uff0c\u7136\u540e\u6267\u884c\uff1a<\/li>\n<\/ul>\n
                                \n
                                export<\/span> KUBECONFIG<\/span>=\/etc\/kubernetes\/admin.conf<\/code><\/pre>\n<\/div>\n
                                  \n
                                • \u53ef\u4ee5\u628a\u8fd9\u53e5\u52a0\u5230 \/root\/.profile\u91cc\u9762\uff1a<\/li>\n<\/ul>\n
                                  \n
                                  root@ubuntu-node1:~# cat .profile<\/span>\r\n# ~\/.profile: executed by Bourne-compatible login shells.<\/span>\r\n\r\nif<\/span> [ \"$BASH<\/span>\"<\/span> ]; then<\/span>\r\n  if<\/span> [ -f ~\/.bashrc ]; then<\/span>\r\n    . ~\/.bashrc\r\n  fi<\/span>\r\nfi<\/span>\r\n\r\nmesg n 2> \/dev\/null || true<\/span>\r\n\r\nexport<\/span> KUBECONFIG=\/etc\/kubernetes\/admin.conf\r\nroot@ubuntu-node1:~#<\/span><\/code><\/pre>\n<\/div>\n
                                    \n
                                  • \u518d\u6267\u884ckubectl\u547d\u4ee4\u5c31\u53ef\u4ee5\u4e86<\/li>\n<\/ul>\n
                                    \n
                                    root<\/span>@ubuntu-node1:~# kubectl get pods\r\nNAME<\/span>                               READY   STATUS    RESTARTS   AGE\r\nnginx<\/span>-deployment-f7658b74c-dc7l5   1<\/span>\/1<\/span>     Running   0<\/span>          7<\/span>h48m\r\nnginx<\/span>-deployment-f7658b74c-k7wlv   1<\/span>\/1<\/span>     Running   0<\/span>          7<\/span>h48m\r\nnginx<\/span>-deployment-f7658b74c-tsmf9   1<\/span>\/1<\/span>     Running   0<\/span>          7<\/span>h48m\r\nngx<\/span>                                1<\/span>\/1<\/span>     Running   0<\/span>          8<\/span>h\r\nroot<\/span>@ubuntu-node1:~#<\/code><\/pre>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
                                    1. vmware\u5b89\u88c5ubuntu \u7565 2. \u5b89\u88c5docker 2.1 \u4f7f\u7528\u56fd\u5185docker\u6e90 $ cat \/ […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-45","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/coiio.eu.org\/index.php?rest_route=\/wp\/v2\/posts\/45","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coiio.eu.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coiio.eu.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coiio.eu.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/coiio.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=45"}],"version-history":[{"count":4,"href":"https:\/\/coiio.eu.org\/index.php?rest_route=\/wp\/v2\/posts\/45\/revisions"}],"predecessor-version":[{"id":49,"href":"https:\/\/coiio.eu.org\/index.php?rest_route=\/wp\/v2\/posts\/45\/revisions\/49"}],"wp:attachment":[{"href":"https:\/\/coiio.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=45"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coiio.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=45"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coiio.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=45"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}