00 Kubernetes In Action 中的重要图

image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png

---

4.png image.png image.png 3.png 2.png image.png 6.png image.png
image.png
image.png image.png image.png

----------------------------------下面是node的配置和加入到集群中的方法（CentorOS）

[root@yay168 ~]# cat > /etc/yum.repos.d/kubernetes.repo << EOF
> [kubernetes]
> name=Kubernetes
> baseurl=https://art.si**********o.com/artifactory/public-kubernetes/yum/repos/kubernetes-el7-x86_64/
> enabled=1
> gpgcheck=0
> repo_gpgcheck=0
> gpgkey=https://art.si**********io.com/artifactory/public-kubernetes/yum/doc/yum-key.gpg https://art.si**********io.com/artifactory/public-kubernetes/yum/doc/rpm-package-key.gpg
> EOF
[root@yay168 ~]# yum clean all
[root@yay168 ~]# yum makecache fast
[root@yay168 ~]# yum install -y kubelet-1.20.4 kubeadm-1.20.4 kubectl-1.20.4


[root@yay168 ~]# setenforce 0
setenforce: SELinux is disabled
[root@yay168 ~]# systemctl stop firewalld
[root@yay168 ~]# swapoff -a
[root@yay168 ~]# sed -i 's/enforcing/disabled/' /etc/selinux/config
[root@yay168 ~]# systemctl disable firewalld
[root@yay168 ~]# sed -ri 's/.*swap.*/#&/' /etc/fstab

[root@yay168 ~]# echo "1" > /proc/sys/net/ipv4/ip_forward
[root@yay168 ~]# systemctl enable kubelet
                                     

[root@yay168 ~]# cat > /etc/sysctl.d/k8s.conf << EOF
> net.bridge.bridge-nf-call-ip6tables = 1
> net.bridge.bridge-nf-call-iptables = 1
> net.ipv4.ip_forward = 1
> vm.swappiness = 0
> EOF
[root@yay168 ~]# modprobe br_netfilter
[root@yay168 ~]# sysctl --system

[root@yay168 ~]# vim /etc/docker/daemon.json
[root@yay168 ~]# systemctl enable kubelet
[root@yay168 ~]# systemctl start kubelet


我试过，/etc/systemd/system/kubelet.service.d/10-kubeadm.conf不要配置，把这个文件删除掉
[root@yay168 ~]# vi /etc/systemd/system/kubelet.service.d/10-kubeadm.conf
[root@yay168 ~]# cat /etc/systemd/system/kubelet.service.d/10-kubeadm.conf
[root@yay168 ~]# rm /etc/systemd/system/kubelet.service.d/10-kubeadm.conf
rm: remove regular empty file ‘/etc/systemd/system/kubelet.service.d/10-kubeadm.conf’? y
[root@yay168 ~]# rm -f /etc/kubernetes/kubelet.conf ; rm -f /etc/kubernetes/pki/ca.crt ; systemctl restart kubelet
...
[root@yay168 ~]# systemctl daemon-reload
[root@yay168 ~]# kubeadm join 10.45.186.166:6443 --token 9unw7z.9blv03zydlfhv4qa     --discovery-token-ca-cert-hash sha256:5fd24069dfc2314f912262b0f95e8b9da769238e92e4efe6aa6c6cd74407f08d
......
[kubelet-start] Waiting for the kubelet to perform the TLS Bootstrap...

This node has joined the cluster:
* Certificate signing request was sent to apiserver and a response was received.
* The Kubelet was informed of the new secure connection details.

Run 'kubectl get nodes' on the control-plane to see this node join the cluster.

[root@yay168 ~]#

image.png image.png
image.png
image.png
image.png
image.png
image.png
image.png image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png
image.png