环境情况

操作系统：centos 7或者centos 8(最小安装)
k8s 版本：1.24.1
容器版本：containerd 1.6.5
服务器可以访问互联网

准备工作

安装centos 操作系统，选择最小安装
将必要的文件下载到服务器的本地目录，下载的文件包括
链接：https://pan.baidu.com/s/1ljNtZPA_fnkvzKUujM9qxg
提取码：wktf
根据实际情况修改install.sh脚本中的主机名和IP地址

修改脚本中红色方框中标记的内容
修改脚本可执行属性
chmod +x ./install.sh
执行脚本
./install.sh

脚本内容

#!/bin/bash
# 准备基础环境，支持的操作系统为centos 7、centos 8
os_version=$(cat /etc/redhat-release |grep -P "[1-9].[0-9].[0-9]*" -o)
echo "os version is ${os_version}"

# 设置软件源为国内镜像源
if [ ${os_version:0:1}x == '8'x ]; then
    repo_url="https://mirrors.aliyun.com/repo/Centos-vault-8.5.2111.repo"
elif [ ${os_version:0:1}x == '7'x ]; then
    repo_url="https://mirrors.aliyun.com/repo/Centos-7.repo"
else
    echo "os ${os_version} is unsupported"
    exit
fi
echo "repo source "${repo_url}""
mv /etc/yum.repos.d /etc/yum.repos.d.bak
mkdir -p /etc/yum.repos.d
curl -o "/etc/yum.repos.d/CentOS-Base.repo" ${repo_url}
yum makecache
echo "change repo source complete"

# 设置时区为上海
echo "set time zone to Asia/Shanghai"
timedatectl set-timezone "Asia/Shanghai"
timedatectl set-local-rtc 0
systemctl restart rsyslog 
systemctl restart crond
timedatectl show

# 设置主机名
local_node="k8s-node1"
nodes_name=(k8s-node1)
nodes_ip=(172.168.1.109)
hostnamectl set-hostname ${local_node}
for i in $(seq 0 `expr ${#nodes_name[@]} - 1`); do
    var="${nodes_ip[i]}  ${nodes_name[i]}"
    echo ${var}
    sed -i '$a\'"${var}"'' /etc/hosts
done

#关闭防火墙
echo "disable the firewall"
systemctl disable firewalld
systemctl stop firewalld

#关闭swap
echo "disable the swap"
swapoff -a
sed -i 's/^[^#].*swap*/#&/g' /etc/fstab

#关闭selinux功能
echo "close selinux"
setenforce 0
sed -i 's/^SELINUX=enforcing/#&/' /etc/selinux/config
sed -i 's/^SELINUX=disabled/#&/' /etc/selinux/config
sed -i '$a\SELINUX=disabled' /etc/selinux/config

#配置及加加载内核模块
cat << EOF > /etc/modules-load.d/containerd.conf
overlay
br_netfilter
EOF
modprobe overlay
modprobe br_netfilter

conntack_module="nf_conntrack"
if [ ${os_version:0:1} != '8' ]
then
        conntack_module="nf_conntrack_ipv4"
fi
echo ${conntack_module}
cat << EOF > /etc/modules-load.d/ipvs.conf
ip_vs
ip_vs_rr
ip_vs_wrr
ip_vs_sh
${conntack_module}
EOF
modprobe ip_vs
modprobe ip_vs_rr
modprobe ip_vs_wrr
modprobe ip_vs_sh
modprobe ${conntack_module}
lsmod | grep -e ip_vs -e nf_conntrack

systemctl restart systemd-modules-load.service

if ! type ipset >/dev/null 2>&1; then
    yum install -y ipset;
    echo "install ipset"
else
    echo 'ipset 已安装';
fi

if ! type ipvsadm >/dev/null 2>&1; then
    yum install -y ipvsadm;
    echo "install ipvsadm"
else
    echo 'ipvsadm 已安装';
fi

if ! type libseccomp  >/dev/null 2>&1; then
    yum install -y libseccomp;
    echo "install libseccomp"
else
    echo 'libseccomp  已安装';
fi

#安装containerd
yum install -y tar
tar xf ./cri-containerd-cni-1.6.5-linux-amd64.tar.gz -C /
mkdir -p /etc/containerd && containerd config default > /etc/containerd/config.toml

sed -i '/SystemdCgroup/s/^/#/' /etc/containerd/config.toml
sed -i '/SystemdCgroup/a\
            SystemdCgroup = true' /etc/containerd/config.toml

sed -i '/sandbox_image/s/^/#/' /etc/containerd/config.toml
sed -i '/sandbox_image/a\
    sandbox_image = "registry.aliyuncs.com/k8sxio/pause:3.7"' /etc/containerd/config.toml
    
sed -i '/plugins."io.containerd.grpc.v1.cri".registry.mirrors/a\
      [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]\
        endpoint = ["https://bqr1dr1n.mirror.aliyuncs.com"]\
      [plugins."io.containerd.grpc.v1.cri".registry.mirrors."k8s.gcr.io"]\
        endpoint = ["https://registry.aliyuncs.com/k8sxio"]' /etc/containerd/config.toml

sed -i '/Delegate/s/^/#/' /etc/systemd/system/containerd.service
sed -i '/Delegate/a\
Delegate = yes' /etc/systemd/system/containerd.service
sed -i '/KillMode/s/^/#/' /etc/systemd/system/containerd.service
sed -i '/KillMode/a\
KillMode=process' /etc/systemd/system/containerd.service

#安装kubeadm
kube_repo_file=/etc/yum.repos.d/kubernetes.repo
if test -f "${kube_repo_file}"; then
    echo "${kube_repo_file} exist"
else 
cat <<EOF > /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=0
gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF
fi

yum makecache
if ! type kubelet >/dev/null 2>&1; then
    yum install -y kubelet;
fi
if ! type kubeadm >/dev/null 2>&1; then
    yum install -y kubeadm;
fi
if ! type kubectl >/dev/null 2>&1; then
    yum install -y kubectl;
fi



# 优化内核参数
cat > ./kubernetes.conf <<EOF
net.bridge.bridge-nf-call-iptables=1
net.bridge.bridge-nf-call-ip6tables=1
net.ipv4.ip_forward=1
vm.swappiness=0
vm.overcommit_memory=1
vm.panic_on_oom=0
fs.inotify.max_user_instances=8192
fs.inotify.max_user_watches=1048576
fs.file-max=52706963
fs.nr_open=52706963
net.ipv6.conf.all.disable_ipv6=1
net.netfilter.nf_conntrack_max=2310720
EOF
mv ./kubernetes.conf  /etc/sysctl.d/kubernetes.conf
sysctl -p /etc/sysctl.d/kubernetes.conf
#sudo sysctl --system

# 启动相关服务
systemctl daemon-reload
systemctl enable containerd
systemctl start containerd
systemctl enable kubelet
systemctl start kubelet

kube_version=$(kubelet --version|grep -P "v[1-9].[0-9]+.[0-9]+" -o)
kubeadm init --apiserver-advertise-address=${nodes_ip[0]} --image-repository registry.aliyuncs.com/google_containers --kubernetes-version ${kube_version} --service-cidr=10.96.0.0/12 --pod-network-cidr=10.244.0.0/16

mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config

kubectl apply -f calico.yaml
kubectl apply -f dashboard.yaml
kubectl  apply -f dashboard-user.yaml
kubectl patch svc kubernetes-dashboard -p '{"spec":{"type":"NodePort"}}' -n kubernetes-dashboard
kubectl get svc -n kubernetes-dashboard

访问dashboard

执行命令查看服务端口：kubectl get svc kubernetes-dashboard -n kubernetes-dashboard
端口为红色标记的内容
浏览器访问：https://nodeip:32271
生成token：kubectl -n kubernetes-dashboard create token admin-user