kubernetes最小集群搭建
修改記錄
- Master運行服務中，增加kube-proxy服務
1. 環境
Virtual Box
CentOS 7
yum install docker kubernetes flannel
虛擬機網絡設置
新建虛擬網絡A（在主機網絡管理菜單），定義網段192.168.56.1/24，打開DHCP
所有主機創建兩塊網卡，外網NAT，內網選擇虛擬網絡vbox1
- 3臺虛擬機設置
| 主機名 | IP | 配置 |
|---|---|---|
| Master | 192.168.56.4 | 1CPU，1G |
| node1 | 192.168.56.5 | 1CPU，1G |
| node2 | 192.168.56.6 | 1CPU，1G |
2. 執行環境(無特殊說明，全部都要這樣做)
三臺主機互通
master ssh passwdless 訪問其它兩臺主機
打開內核轉發
添加net.ipv4.ip_forward 到/etc/sysctl.conf
- 修改Docker配置
修改/usr/lib/systemd/system/docker.service
service段增加 ExecStartPost=/sbin/iptables -I FORWARD -s 0.0.0.0/0 -j ACCEPT
修改/etc/sysconfig/docker
OPTIONS="--insecure-registry gcr.io --selinux-enabled=false"
- 禁用防火墻
systemctl stop firewalld
systemctl disable firewalld
- 關閉SElinux
修改/etc/selinux/config
修改SELINUX=disabled
- 修改Docker配置，增加鏡像
{
"registry-mirrors":["http://hub-mirror.c.163.com"]
}
- 設置時區與時間同步
yum -y install ntp
timedatectl set-timezone Asia/Shanghai
3. 節點功能規劃
Master 部分增加了kube-proxy，第一版忘記加了
| 主機名 | 運行的服務 |
|---|---|
| Master | docker etcd kube-apiserver flanneld kube-proxy kube-controller-manager kube-scheduler |
| node1 | docker flanneld kubelet kube-proxy |
| node2 | docker flanneld kubelet kube-proxy |
4. Master設置
-
設置etcd參數并啟動
vim /etc/etcd/config ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:2379" # 要注意這個參數的IP，這里因為是連接服務，不是監聽，所以必須用IP，不能用0.0.0.0 ETCD_ADVERTISE_CLIENT_URLS="http://192.168.56.4:2379"service etcd restart其實ETCD_LISTEN_CLIENT_URLS怎么設置都無所謂，只要正常監聽就可以。放到這里，可以設置為http://192.168.56.4:2379
-
設置flannel
vim /etc/sysconfig/flanneld FLANNEL_ETCD_ENDPOINTS="http://192.168.56.4:2379" FLANNEL_ETCD_PREFIX="/coreos.com/network"稍后補充為什么這么設置
- 手動向etcd，設置flannel網段信息
etcdctl set /coreos.com/network/config '{ "Network": "10.254.0.0/16" }'
這里采用kubenetes默認值
- 修改kube-apiserver配置文件
vim /etc/kubernetes/apiserver
KUBE_ETCD_SERVERS="--etcd-servers=http://192.168.56.4:2379"
稍后測試，是否設置為127.0.0.1會影響node1,2的etcd獲取。如果僅僅是影響api-server并且etcd與
api-server在同一臺服務器，那么127應該也是可以的。
-
修改controller-manager
vim /etc/kubernetes/controller-manager KUBE_CONTROLLER_MANAGER_ARGS="--node-monitor-grace-period=10s --pod-eviction-timeout=10s"
- 編輯kubenetes配置
vim /etc/kubenetes/config
KUBE_MASTER="--master=http://192.168.56.4:8080"
- 設置服務并啟動
systemctl enable docker flanneld kube-apiserver kube-controller-manager kube-scheduler
systemctl start flanneld docker kube-proxy kube-apiserver kube-controller-manager kube-scheduler
5. Node節點設置
- 修改kubenetes配置
vim /etc/kubernetes/config
KUBE_MASTER="--master=http://192.168.56.4:8080"
- 修改kubelets配置
vim /etc/kubernetes/kubelet
KUBELET_ADDRESS="--address=0.0.0.0"
KUBELET_HOSTNAME="--hostname-override=192.168.56.5"
KUBELET_API_SERVER="--api-servers=http://192.168.56.4:8080"
-
修改flanneld
vim /etc/sysconfig/flanneld FLANNEL_ETCD_ENDPOINTS="http://192.168.56.4:2379" FLANNEL_ETCD_PREFIX="/coreos.com/network"
-
設置服務并啟動
systemctl enable docker flanneld kubelet kube-proxy systemctl start flanneld docker kubelet kube-proxy
6. 驗證
- 驗證節點
$kubectl get nodes -o wide
NAME STATUS AGE EXTERNAL-IP
192.168.56.5 Ready 1h <none>
192.168.56.6 Ready 1h <none>
- 創建RC文件mysql-rc.yaml
apiVersion: v1
kind: ReplicationController
metadata:
name: mysql-rc
spec:
replicas: 1
selector:
app: mysql-pod
template:
metadata:
labels:
app: mysql-pod
spec:
containers:
- name: mysql
image: mysql:5.6
ports:
- containerPort: 3306
env:
- name: MYSQL_ROOT_PASSWORD
value: "123"
- 創建Service文件mysql-svc.yaml
apiVersion: v1
kind: Service
metadata:
name: mysql-svc
labels:
name: mysql-svc
spec:
type: NodePort
ports:
- port: 3306
protocol: TCP
targetPort: 3306
name: http
nodePort: 30006
selector:
app: mysql-pod
- 運行
kubectl create -f mysql-rc.yaml
kubectl create -f mysql-svc.yaml
- 結果檢查
$kubectl get pods -o wide
NAME READY STATUS RESTARTS AGE IP NODE
mysql-rc-82g2m 1/1 Running 0 1h 172.17.0.2 192.168.56.5
$kubectl get svc -o wide
NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE SELECTOR
kubernetes 10.254.0.1 <none> 443/TCP 2d <none>
mysql-svc 10.254.255.244 <nodes> 3306:30006/TCP 1h app=mysql-pod
$kubectl get endpoints
NAME ENDPOINTS AGE
kubernetes 192.168.1.114:6443 2d
mysql-svc 172.17.0.2:3306 1h
全部關聯上，創建沒問題
$ mysql -uroot -p123 -P30006 -h 192.168.56.5
mysql>
mysql連接成功
