kubernetes> http://cbs.centos.org/repos/virt7-docker-common-release/x86_64/os/Packages/
vi virt7-docker-common-release.repo
[virt7-docker-common-release]name=virt7-docker-common-releasebaseurl=http://cbs.centos.org/repos/virt7-docker-common-release/x86_64/os/gpgcheck=0 二、yum 安装服务
yum -y install --enablerepo=virt7-docker-common-release kubernetes etcd
三、将主机名添加到master,slave的/etc/hosts里,如果主机名有dns解析就不需要添加
echo "192.168.5.221 k8s_master192.168.5.222 k8s_slave1192.168.5.237 k8s_slave2" >> /etc/hosts 四、修改/etc/kubernetes/config(所有节点)
# logging to stderr means we get it in the systemd journalKUBE_LOGTOSTDERR="--logtostderr=true"# journal message level, 0 is debugKUBE_LOG_LEVEL="--v=0"# Should this cluster be allowed to run privileged docker containersKUBE_ALLOW_PRIV="--allow-privileged=false"# How the controller-manager, scheduler, and proxy find the apiserverKUBE_MASTER="--master=http://192.168.5.221:8080" 五、禁用防火墙
systemctl disable iptables-services firewalldsystemctl stop iptables-services firewalld 六、在master节点配置kubernetes服务
修改配置文件/etc/etcd/etcd.conf,确保etcd监听所有地址,修改如下:
ETCD_NAME=defaultETCD_DATA_DIR="/var/lib/etcd/default.etcd"ETCD_LISTEN_CLIENT_URLS="http://0.0.0.0:2379" 修改配置文件/etc/kubernetes/apiserver,修改如下:
#### kubernetes system config## The following values are used to configure the kube-apiserver## The address on the local server to listen to.KUBE_API_ADDRESS="--address=0.0.0.0"# The port on the local server to listen on.KUBE_API_PORT="--port=8080"# Port minions listen onKUBELET_PORT="--kubelet-port=10250"# Comma separated list of nodes in the etcd clusterKUBE_ETCD_SERVERS="--etcd-servers=http://127.0.0.1:2379"# Address range to use for servicesKUBE_SERVICE_ADDRESSES="--service-cluster-ip-range=10.254.0.0/16"# default admission control policiesKUBE_ADMISSION_CONTROL="--admission-control=NamespaceLifecycle,NamespaceExists,LimitRanger,ResourceQuota"# Add your own!KUBE_API_ARGS="" 修改配置文件/etc/kubernetes/controller-manager,定义minions ip地址
KUBELET_ADDRESSES="--machines=192.168.5.222,192.168.5.223" 启动服务
for SERVICES in etcd kube-apiserver kube-controller-manager kube-scheduler; do systemctl restart $SERVICES systemctl enable $SERVICES systemctl status $SERVICES done 注意:1.1开始会自动加入证书认证,程序会自动生成证书文件,需要检查目录的属主属组
[iyunv@k8s_master kubernetes]# pwd/var/run/kubernetes[iyunv@k8s_master kubernetes]# ll-rw-r--r-- 1 kube kube 1200 Nov 20 15:16 apiserver.crt-rw------- 1 kube kube 1679 Nov 20 15:16 apiserver.key 重启服务
for SERVICES in etcd kube-apiserver kube-controller-manager kube-scheduler; do systemctl restart $SERVICES systemctl status $SERVICES done minions 节点配置
#单独安装docker 1.7
yum install docker-1.7.1* docker-selinux-1.7.1systemctl enable docker-storage-setup.servicesystemctl enable docker.service #yum 安装kubernetes flannel
yum -y install --enablerepo=virt7-docker-common-release kubernetes flannel #创建docker-pool
docker-storage-setup #为etcd服务配置flannel,修改配置文件 /etc/sysconfig/flanneld
FLANNEL_ETCD="http://192.168.5.221:2379" #修改kubernetes配置文件,指定master。/etc/kubernetes/config
# How the controller-manager, scheduler, and proxy find the apiserverKUBE_MASTER="--master=http://192.168.5.221:8080" #配置kubelet服务。/etc/kubernetes/kubelet
# The address for the info server to serve on (set to 0.0.0.0 or "" for all interfaces)KUBELET_ADDRESS="--address=0.0.0.0"# The port for the info server to serve onKUBELET_PORT="--port=10250"# You may leave this blank to use the actual hostnameKUBELET_HOSTNAME="--hostname-override=192.168.5.237"# location of the api-serverKUBELET_API_SERVER="--api-servers=http://192.168.5.221:8080" #启动服务
for SERVICES in kube-proxy kubelet docker flanneld; do systemctl restart $SERVICES systemctl enable $SERVICES systemctl status $SERVICES done 如果报错Bridge ip (...) does not match existing bridge configuration,是因为docker的bridge 先于flannel启动导致冲突
删除docker 0
ip link set dev docker0 downbrctl delbr docker0 vi /usr/lib/systemd/system/docker.service 修改如下:
[Unit]Description=Docker Application Container EngineDocumentation=http://docs.docker.comAfter=flanneld.serviceWants=docker-storage-setup.serviceRequires=flanneld.service systemctl restart docker #验证
#在每个minions可以看到2块网卡:docker0和flannel0,这2块网卡的ip在不同的机器ip地址不同。但是同机器的2块网卡ip相同
ip a | grep -E "flannel|docker"|grep inet inet 172.17.58.0/16 scope global flannel0 inet 172.17.58.1/24 scope global docker0 #现在登陆master,确认minions的状态
[iyunv@k8s_master etcd]# kubectl get nodesNAME LABELS STATUS AGE192.168.5.222 kubernetes.io/hostname=192.168.5.222 Ready 1d192.168.5.237 kubernetes.io/hostname=192.168.5.237 Ready 2d 本文出自 “银狐” 博客,请务必保留此出处http://foxhound.blog.51cto.com/1167932/1717105