k8s.txt - 墨天轮文档

k8s.txt

zayki

307

9页

1次

2021-09-17

免费下载

[root@localhost ~]# dnf install -y kubernetes-kubeadm kubernetes-kubelet

kubernetes-master

[root@openeuler ~]# systemctl enable kubelet.service

Created symlink /etc/systemd/system/multi-user.target.wants/kubelet.service →

/usr/lib/systemd/system/kubelet.service.

[root@openeuler ~]# kubeadm init --apiserver-advertise-address=192.168.128.132

--image-repository registry.aliyuncs.com/google_containers --kubernetes-version

v1.20.2 --service-cidr=10.1.0.0/16 --pod-network-cidr=10.244.0.0/16

[init] Using Kubernetes version: v1.20.2

[preflight] Running pre-flight checks

[WARNING Firewalld]: firewalld is active, please ensure ports [6443 10250]

are open or your cluster may not function correctly

[WARNING IsDockerSystemdCheck]: detected "cgroupfs" as the Docker cgroup

driver. The recommended driver is "systemd". Please follow the guide at

https://kubernetes.io/docs/setup/cri/

[WARNING Hostname]: hostname "openeuler" could not be reached

[WARNING Hostname]: hostname "openeuler": lookup openeuler on

192.168.128.2:53: server misbehaving

[preflight] Pulling images required for setting up a Kubernetes cluster

[preflight] This might take a minute or two, depending on the speed of your

internet connection

[preflight] You can also perform this action in beforehand using 'kubeadm config

images pull'

[certs] Using certificateDir folder "/etc/kubernetes/pki"

[certs] Generating "ca" certificate and key

[certs] Generating "apiserver" certificate and key

[certs] apiserver serving cert is signed for DNS names [kubernetes

kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local

openeuler] and IPs [10.1.0.1 192.168.128.132]

[certs] Generating "apiserver-kubelet-client" certificate and key

[certs] Generating "front-proxy-ca" certificate and key

[certs] Generating "front-proxy-client" certificate and key

[certs] Generating "etcd/ca" certificate and key

[certs] Generating "etcd/server" certificate and key

[certs] etcd/server serving cert is signed for DNS names [localhost openeuler]

and IPs [192.168.128.132 127.0.0.1 ::1]

[certs] Generating "etcd/peer" certificate and key

[certs] etcd/peer serving cert is signed for DNS names [localhost openeuler] and

IPs [192.168.128.132 127.0.0.1 ::1]

[certs] Generating "etcd/healthcheck-client" certificate and key

[certs] Generating "apiserver-etcd-client" certificate and key

[certs] Generating "sa" key and public key

[kubeconfig] Using kubeconfig folder "/etc/kubernetes"

[kubeconfig] Writing "admin.conf" kubeconfig file

[kubeconfig] Writing "kubelet.conf" kubeconfig file

[kubeconfig] Writing "controller-manager.conf" kubeconfig file

[kubeconfig] Writing "scheduler.conf" kubeconfig file

[kubelet-start] Writing kubelet environment file with flags to file

"/var/lib/kubelet/kubeadm-flags.env"

[kubelet-start] Writing kubelet configuration to file

"/var/lib/kubelet/config.yaml"

[kubelet-start] Starting the kubelet

[control-plane] Using manifest folder "/etc/kubernetes/manifests"

[control-plane] Creating static Pod manifest for "kube-apiserver"

[control-plane] Creating static Pod manifest for "kube-controller-manager"

[control-plane] Creating static Pod manifest for "kube-scheduler"

[etcd] Creating static Pod manifest for local etcd in

"/etc/kubernetes/manifests"

[wait-control-plane] Waiting for the kubelet to boot up the control plane as

static Pods from directory "/etc/kubernetes/manifests". This can take up to 4m0s

[apiclient] All control plane components are healthy after 9.002950 seconds

[upload-config] Storing the configuration used in ConfigMap "kubeadm-config" in

the "kube-system" Namespace

[kubelet] Creating a ConfigMap "kubelet-config-1.20" in namespace kube-system

with the configuration for the kubelets in the cluster

[upload-certs] Skipping phase. Please see --upload-certs

[mark-control-plane] Marking the node openeuler as control-plane by adding the

labels "node-role.kubernetes.io/master=''" and "node-role.kubernetes.io/control-

plane='' (deprecated)"

[mark-control-plane] Marking the node openeuler as control-plane by adding the

taints [node-role.kubernetes.io/master:NoSchedule]

[bootstrap-token] Using token: gnvwps.ydjc5gxisxxvztua

[bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC

Roles

[bootstrap-token] configured RBAC rules to allow Node Bootstrap tokens to get

nodes

[bootstrap-token] configured RBAC rules to allow Node Bootstrap tokens to post

CSRs in order for nodes to get long term certificate credentials

[bootstrap-token] configured RBAC rules to allow the csrapprover controller

automatically approve CSRs from a Node Bootstrap Token

[bootstrap-token] configured RBAC rules to allow certificate rotation for all

node client certificates in the cluster

[bootstrap-token] Creating the "cluster-info" ConfigMap in the "kube-public"

namespace

[kubelet-finalize] Updating "/etc/kubernetes/kubelet.conf" to point to a

rotatable kubelet client certificate and key

[addons] Applied essential addon: CoreDNS

[addons] Applied essential addon: kube-proxy

Your Kubernetes control-plane has initialized successfully!

To start using your cluster, you need to run the following as a regular user:

mkdir -p $HOME/.kube

sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config

sudo chown $(id -u):$(id -g) $HOME/.kube/config

Alternatively, if you are the root user, you can run:

export KUBECONFIG=/etc/kubernetes/admin.conf

You should now deploy a pod network to the cluster.

Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:

https://kubernetes.io/docs/concepts/cluster-administration/addons/

Then you can join any number of worker nodes by running the following on each as

root:

kubeadm join 192.168.128.132:6443 --token gnvwps.ydjc5gxisxxvztua \

--discovery-token-ca-cert-hash

sha256:adc61edc9452c6c44abaf9f62b976ec8c9109d2635c234c0a212e0f2f0381026

[root@localhost ~]# groupadd kubeuser

[root@localhost ~]# useradd -d /home/kubeuser -m -g kubeuser kubeuser

[root@localhost ~]# passwd kubeuser

Changing password for user kubeuser. (pass:kubepass)

New password:

BAD PASSWORD: The password contains less than 3 character classes

Retype new password:

passwd: all authentication tokens updated successfully.

[root@localhost ~]# dnf install -y kubernetes-kubeadm kubernetes-kubelet

kubernetes-master

[root@openeuler ~]# systemctl enable kubelet.service

Created symlink /etc/systemd/system/multi-user.target.wants/kubelet.service →

/usr/lib/systemd/system/kubelet.service.

[root@openeuler ~]# kubeadm init --apiserver-advertise-address=192.168.128.132

--image-repository registry.aliyuncs.com/google_containers --kubernetes-version

v1.20.2 --service-cidr=10.1.0.0/16 --pod-network-cidr=10.244.0.0/16

[init] Using Kubernetes version: v1.20.2

[preflight] Running pre-flight checks

[WARNING Firewalld]: firewalld is active, please ensure ports [6443 10250]

are open or your cluster may not function correctly

[WARNING IsDockerSystemdCheck]: detected "cgroupfs" as the Docker cgroup

driver. The recommended driver is "systemd". Please follow the guide at

https://kubernetes.io/docs/setup/cri/

[WARNING Hostname]: hostname "openeuler" could not be reached

[WARNING Hostname]: hostname "openeuler": lookup openeuler on

192.168.128.2:53: server misbehaving

[preflight] Pulling images required for setting up a Kubernetes cluster

[preflight] This might take a minute or two, depending on the speed of your

internet connection

[preflight] You can also perform this action in beforehand using 'kubeadm config

images pull'

[certs] Using certificateDir folder "/etc/kubernetes/pki"

[certs] Generating "ca" certificate and key

[certs] Generating "apiserver" certificate and key

[certs] apiserver serving cert is signed for DNS names [kubernetes

kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local

openeuler] and IPs [10.1.0.1 192.168.128.132]

[certs] Generating "apiserver-kubelet-client" certificate and key

[certs] Generating "front-proxy-ca" certificate and key

[certs] Generating "front-proxy-client" certificate and key

[certs] Generating "etcd/ca" certificate and key

[certs] Generating "etcd/server" certificate and key

[certs] etcd/server serving cert is signed for DNS names [localhost openeuler]

and IPs [192.168.128.132 127.0.0.1 ::1]

[certs] Generating "etcd/peer" certificate and key

[certs] etcd/peer serving cert is signed for DNS names [localhost openeuler] and

IPs [192.168.128.132 127.0.0.1 ::1]

[certs] Generating "etcd/healthcheck-client" certificate and key

[certs] Generating "apiserver-etcd-client" certificate and key

[certs] Generating "sa" key and public key

[kubeconfig] Using kubeconfig folder "/etc/kubernetes"

[kubeconfig] Writing "admin.conf" kubeconfig file

[kubeconfig] Writing "kubelet.conf" kubeconfig file

[kubeconfig] Writing "controller-manager.conf" kubeconfig file

[kubeconfig] Writing "scheduler.conf" kubeconfig file

[kubelet-start] Writing kubelet environment file with flags to file

"/var/lib/kubelet/kubeadm-flags.env"

[kubelet-start] Writing kubelet configuration to file

"/var/lib/kubelet/config.yaml"

[kubelet-start] Starting the kubelet

[control-plane] Using manifest folder "/etc/kubernetes/manifests"

[control-plane] Creating static Pod manifest for "kube-apiserver"

[control-plane] Creating static Pod manifest for "kube-controller-manager"

[control-plane] Creating static Pod manifest for "kube-scheduler"

[etcd] Creating static Pod manifest for local etcd in

"/etc/kubernetes/manifests"

[wait-control-plane] Waiting for the kubelet to boot up the control plane as

static Pods from directory "/etc/kubernetes/manifests". This can take up to 4m0s

[apiclient] All control plane components are healthy after 9.002950 seconds

[upload-config] Storing the configuration used in ConfigMap "kubeadm-config" in

the "kube-system" Namespace

[kubelet] Creating a ConfigMap "kubelet-config-1.20" in namespace kube-system

with the configuration for the kubelets in the cluster

[upload-certs] Skipping phase. Please see --upload-certs

[mark-control-plane] Marking the node openeuler as control-plane by adding the

labels "node-role.kubernetes.io/master=''" and "node-role.kubernetes.io/control-

plane='' (deprecated)"

[mark-control-plane] Marking the node openeuler as control-plane by adding the

taints [node-role.kubernetes.io/master:NoSchedule]

[bootstrap-token] Using token: gnvwps.ydjc5gxisxxvztua

[bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC

Roles

[bootstrap-token] configured RBAC rules to allow Node Bootstrap tokens to get

nodes

[bootstrap-token] configured RBAC rules to allow Node Bootstrap tokens to post

CSRs in order for nodes to get long term certificate credentials

[bootstrap-token] configured RBAC rules to allow the csrapprover controller

automatically approve CSRs from a Node Bootstrap Token

[bootstrap-token] configured RBAC rules to allow certificate rotation for all

node client certificates in the cluster

[bootstrap-token] Creating the "cluster-info" ConfigMap in the "kube-public"

namespace

[kubelet-finalize] Updating "/etc/kubernetes/kubelet.conf" to point to a

rotatable kubelet client certificate and key

[addons] Applied essential addon: CoreDNS

[addons] Applied essential addon: kube-proxy

Your Kubernetes control-plane has initialized successfully!

To start using your cluster, you need to run the following as a regular user:

mkdir -p $HOME/.kube

sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config

sudo chown $(id -u):$(id -g) $HOME/.kube/config

Alternatively, if you are the root user, you can run:

export KUBECONFIG=/etc/kubernetes/admin.conf

You should now deploy a pod network to the cluster.

Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:

https://kubernetes.io/docs/concepts/cluster-administration/addons/

Then you can join any number of worker nodes by running the following on each as

root:

kubeadm join 192.168.128.132:6443 --token gnvwps.ydjc5gxisxxvztua \

--discovery-token-ca-cert-hash

sha256:adc61edc9452c6c44abaf9f62b976ec8c9109d2635c234c0a212e0f2f0381026

[root@localhost ~]# groupadd kubeuser

[root@localhost ~]# useradd -d /home/kubeuser -m -g kubeuser kubeuser

[root@localhost ~]# passwd kubeuser

Changing password for user kubeuser. (pass:kubepass)

New password:

BAD PASSWORD: The password contains less than 3 character classes

Retype new password:

passwd: all authentication tokens updated successfully.

of 9

免费下载

k8s安装过程

关注

评论