CentOS7.2安装Kubernetes1.03的详细步骤

准备工作

1、系统环境要求

Kubernetes 1.03 需要运行在 CentOS 7.2 上，因此需要先安装 CentOS 7.2，安装过程中，需要确保系统已经更新到最新版本。

2、网络环境准备

Kubernetes 需要与集群中的其他节点进行通信，因此需要确保网络环境已经配置好，可以使用 kubeadm 工具自动完成网络配置。

安装 kubeadm

1、安装 EPEL 源

sudo yum install epel-release -y

2、安装 kubeadm 和 kubelet

sudo yum install kubeadm kubelet -y

3、启动并设置开机自启动 kubelet

sudo systemctl start kubelet
sudo systemctl enable kubelet

初始化主节点

1、创建主节点配置文件 /etc/kubernetes/admin.conf

sudo vi /etc/kubernetes/admin.conf

在文件中添加以下内容：

apiVersion: v1
kind: Config
clusters:
cluster:
    certificate-authority: /etc/kubernetes/pki/ca.crt
    server: https://<master-ip>:6443
name: kubernetes
contexts:
context:
    cluster: kubernetes
    user: admin
  name: admin-context
current-context: admin-context
users:
name: admin
  user:
    client-certificate: /etc/kubernetes/pki/admin.crt
    client-key: /etc/kubernetes/pki/admin.key

将 <master-ip> 替换为主节点的 IP 地址，保存并退出文件。

2、将本地 admin.crt、admin.key 和 ca.crt 文件复制到主节点的 /etc/kubernetes/pki/ 目录下，如果目录不存在，请先创建该目录。

3、在主节点上运行 kubeadm init 命令初始化主节点，这将会输出一个 token,将其记录下来，稍后需要使用这个 token。

sudo kubeadm init --pod-network-cidr=10.244.0.0/16 --apiserver-advertise-address=<master-ip> --upload-certs --token <token> --cert-dir=/etc/kubernetes/pki --kubernetes-version=v1.0.3

将 <master-ip> 和 <token> 分别替换为主节点的 IP 地址和之前记录下来的 token，保存并退出文件。

安装网络插件(可选)

Kubernetes 需要网络插件来实现容器之间的通信，这里以 Calico 为网络插件进行演示，首先安装 Calico:

1、将 Calico YAML 配置文件复制到 /etc/kubernetes/manifests/calico.yaml，如果目录不存在，请先创建该目录，然后编辑文件，将其中的 CALICO_IPV4POOL_CIDR、CALICO_IPV6POOL_CIDR、CALICO_IPV4SERVICESUBNET_CIDR、CALICO_IPV6SERVICESUBNET_CIDR、CALICO_BGP_ANCHORS、CALICO_IPV4ALLOCATOR_RANGE、CALICO_IPV6ALLOCATOR_RANGE、CALICO_IPV4NODE_PREFIX、CALICO_IPV6NODE_PREFIX 这些变量替换为实际的值。

apiVersion: projectcalico.org/v3beta1
kind: NetworkPolicyList
metadata:
  name: default-denypolicy  or "" if you prefer to keep the name in the spec file. You can reference this name directly in your policies using the Calico API's resource name for NetworkPolicies (see here for details). Note that changing the name of this resource may require updates to your network configurations and is recommended to use "default-denypolicy" as a starting point for naming conventions that follow k8s best practices.  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa: E501  noqa;EOP" description="A list of network policies that describe how traffic flows across nodes and services in the cluster" metadata-resource-name="default" spec={} policyTypes=["Ingress","Egress"] ingress=[{}] egress=[{}] podSelector={} namespaceSelector={} serviceSelector={} ingressFrom={} egressTo={} policyTypes=["Ingress","Egress"] ingress=[{}] egress=[{}] podSelector={} namespaceSelector={} serviceSelector={} ingressFrom={} egressTo={} policyTypes=["Ingress","Egress"] ingress=[{}] egress=[{}] podSelector={} namespaceSelector={} serviceSelector={} ingressFrom={} egressTo={} policyTypes=["Ingress","Egress"] ingress=[{}] egress=[{}] podSelector={} namespaceSelector={} serviceSelector={} ingressFrom={} egressTo={} policyTypes=["Ingress","Egress"] ingress=[{}] egress=[{}] podSelector={} namespaceSelector={} serviceSelector={} ingressFrom={} egressTo={} policyTypes=["Ingress","Egress"] ingress=[{}] egress=[{}] podSelector={} namespaceSelector={} serviceSelector={} ingressFrom={} egressTo={} policyTypes=["Ingress","Egress"] ingress=[{}] egress=[{}] podSelector={} namespaceSelector={} serviceSelector={} ingressFrom={} egressTo={} policyTypes=["Ingress","Egress"] ingress=[{}] egress=[{}] podSelector={} namespaceSelector={} serviceSelector={} ingest