河南做网站送记账,广告创意,哪些网站做机票酒店有优势,网站建设哪1、修改集群中各物理机主机名hostname文件
# 查看
cat /etc/hostname
# 命令修改
hostnamectl set-hostname k8s-master2、实现主机名与ip地址解析
# 查看cat /etc/hosts
# 修改
vi /etc/hosts3、配置ip_forward过滤机制
# 修改
vi /etc/sysctl.conf
net.ipv4.ip_forward1…1、修改集群中各物理机主机名hostname文件
# 查看
cat /etc/hostname
# 命令修改
hostnamectl set-hostname k8s-master2、实现主机名与ip地址解析
# 查看cat /etc/hosts
# 修改
vi /etc/hosts3、配置ip_forward过滤机制
# 修改
vi /etc/sysctl.conf
net.ipv4.ip_forward1
net.bridge.bridge-nf-call-ip6tables1
net.bridge.bridge-nf-call-iptables1
# 查看
sysctl -p
# 执行sysctl -p 报错执行
modprobe br_netfilter4、关闭防火墙
# 停止放火墙
# systemctl stop firewalld
# 禁用防火墙
# systemctl disable firewalld
# 查看防火墙状态
# systemctl status firewalld
# 查看防火墙状态
# firewall-cmd --state5、禁用swap
# 查看swap
free -m# 查看swap文件
cat /etc/fstab# 注释掉fstab的swap配置
vi /etc/fstab
# 使配置文件生效
swapoff -a6、添加时间同步
# 查看时间
date
# 安装插件
yum -y install update
# 设置
crontab -e
# 设置内容
0 */1 * * * ntpdate ntp.aliyun.com
# 查看
crontab -l7、关闭selinux
# 查看
getenforce
# 查看
sestatus # 编辑配置文件
vi /etc/selinux/config
SELINUXdisabled重启系统后 8、启用Cgroup修改配置文件/etc/default/grub启用cgroup内存限额功能,配置两个参数
vi /etc/default/grub
GRUB_CMDLINE_LINUX_DEFAULTcgroup_enablememory swapaccount1
GRUB_CMDLINE_LINUXcgroup_enablememory swapaccount1
# 更新grub
grub2-mkconfig -o /boot/grub2/grub.cfg9、添加rancher用户
# 添加用户
useradd -m rancher
# 添加至docker组
usermod -aG docker rancher
# 添加用户密码
passwd rancher10、配置ssh,需要切换到rancher用户
# 切换至rancher用户
su rancher
# master生成ssh
ssh-keygen
# 将ssh密钥复制到其它node节点上
cd .ssh/
ssh-copy-id rancherk8s-master
ssh-copy-id rancherk8s-node1
ssh-copy-id rancherk8s-node211、下载rke安装包 https://github.com/rancher/rke/releases 下载后上传到master上 切换至root用户执行
su root
mv rke_linux-amd64 /usr/local/bin/rke chmod x /usr/local/bin/rke
rke --version12、创建rke安装k8s集群产生的配置文件
mkdir -p /app/rancher
rke config --name cluster.yml官方配置参考 命令生成cluster.yml文件
[] Cluster Level SSH Private Key Path [~/.ssh/id_rsa]: 集群私钥路径~/.ssh/id_rsa[] Number of Hosts [1]: 3 集群拥有几个节点3[] SSH Address of host (1) [none]: 192.168.149.200 第一个节点ip地址192.168.149.200 [] SSH Port of host (1) [22]: 22 第一个节点端口22[] SSH Private Key Path of host (192.168.149.200) [none]: ~/.ssh/id_rsa 第一个节点私钥路径~/.ssh/id_rsa[] SSH User of host (192.168.149.200) [ubuntu]: rancher 远程用户名rancher[] Is host (192.168.149.200) a Control Plane host (y/n)? [y]: y 是否是k8s集群控制节点y[] Is host (192.168.149.200) a Worker host (y/n)? [n]: n 是否是k8s集群工作节点n[] Is host (192.168.149.200) an etcd host (y/n)? [n]: n 是否是k8s集群etcd节点n[] Override Hostname of host (192.168.149.200) [none]: 不覆盖现有主机回车默认[] Internal IP of host (192.168.149.200) [none]: 主机局域网地址没有更改回车默认[] Docker socket path on host (192.168.149.200) [/var/run/docker.sock]: /var/run/docker.sock 主机上docker.sock路径/var/run/docker.sock[] SSH Address of host (2) [none]: 192.168.149.205 第二个节点ip地址192.168.149.205[] SSH Port of host (2) [22]: 22 第二个节点远程端口22[] SSH Private Key Path of host (192.168.149.205) [none]: ~/.ssh/id_rsa 第二个节点私钥路径~/.ssh/id_rsa[] SSH User of host (192.168.149.205) [ubuntu]: rancher 第二个节点远程用户名rancher[] Is host (192.168.149.205) a Control Plane host (y/n)? [y]: n 是否是k8s集群控制节点n[] Is host (192.168.149.205) a Worker host (y/n)? [n]: y 是否是k8s集群工作节点y[] Is host (192.168.149.205) an etcd host (y/n)? [n]: n 是否是k8s集群etcd节点n[] Override Hostname of host (192.168.149.205) [none]: 不覆盖现有主机回车默认[] Internal IP of host (192.168.149.205) [none]: 主机局域网地址没有更改回车默认[] Docker socket path on host (192.168.149.205) [/var/run/docker.sock]: /var/run/docker.sock 主机上docker.sock路径/var/run/docker.sock[] SSH Address of host (3) [none]: 192.168.149.210 第三个节点ip地址192.168.149.210[] SSH Port of host (3) [22]: 22 第三个节点远程端口22[] SSH Private Key Path of host (192.168.149.210) [none]: ~/.ssh/id_rsa 第三个节点私钥路径~/.ssh/id_rsa [] SSH User of host (192.168.149.210) [ubuntu]: rancher 第三个节点远程用户名rancher[] Is host (192.168.149.210) a Control Plane host (y/n)? [y]: n 是否是k8s集群控制节点n[] Is host (192.168.149.210) a Worker host (y/n)? [n]: n 是否是k8s集群工作节点n[] Is host (192.168.149.210) an etcd host (y/n)? [n]: y 是否是k8s集群etcd节点y[] Override Hostname of host (192.168.149.210) [none]: 不覆盖现有主机回车默认[] Internal IP of host (192.168.149.210) [none]: 主机局域网地址没有更改回车默认[] Docker socket path on host (192.168.149.210) [/var/run/docker.sock]: /var/run/docker.sock 主机上docker.sock路径/var/run/docker.sock[] Network Plugin Type (flannel, calico, weave, canal, aci) [canal]: calico 网络插件类型自选我选择的是calico[] Authentication Strategy [x509]: 认证策略形式X509[] Authorization Mode (rbac, none) [rbac]: rbac 认证模式rbac[] Kubernetes Docker image [rancher/hyperkube:v1.25.9-rancher2]: rancher/hyperkube:v1.25.9-rancher2 k8s集群使用的docker镜像rancher/hyperkube:v1.25.9-rancher2[] Cluster domain [cluster.local]: sbcinfo.com 集群域名默认即可 [] Service Cluster IP Range [10.43.0.0/16]: 集群IP、server地址默认即可[] Enable PodSecurityPolicy [n]: 开启pod安全策略n[] Cluster Network CIDR [10.42.0.0/16]: 集群pod ip地址默认即可[] Cluster DNS Service IP [10.43.0.10]: 集群DNS ip地址默认即可[] Add addon manifest URLs or YAML files [no]: 添加加载项清单url或yaml文件回车默认即可或者no13、开始安装集群
rke up14、安装kubectl客户端管理工具
rke高可用k8s集群安装和实现手册 CentOS7下RKE部署k8s集群及Helm Chart 安装Rancher高可用
