mkdir /etc/docker cat > /etc/docker/daemon.json <<EOF { "exec-opts": ["native.cgroupdriver=systemd"], "log-driver": "json-file", "log-opts": { "max-size": "100m" }, "storage-driver": "overlay2", "storage-opts": [ "overlay2.override_kernel_check=true" ], "insecure-registries": ["registry.docker-cn.com"] } EOF mkdir -p /etc/systemd/system/docker.service.d systemctl daemon-reload systemctl restart docker systemctl enable docker
#下面步骤master和node都操作
cat <<EOF | sudo tee /etc/yum.repos.d/kubernetes.repo [kubernetes] name=Kubernetes baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-\$basearch enabled=1 gpgcheck=0 repo_gpgcheck=0 gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg exclude=kubelet kubeadm kubectl EOF # Set SELinux in permissive mode (effectively disabling it) setenforce 0 sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes systemctl daemon-reload systemctl restart kubelet这里的版本号最好和kubelet版本号一致
kubeadm init --kubernetes-version 1.18.6 --pod-network-cidr 192.168.0.0/24这条命令执行完成后,注意记住加入node加入集群的命令
执行第4步最后出现的命令,node加入集群,如果token已经失效,执行kubeadm token create重新生成
获取登录页面的token命令如下
kubectl -n kubernetes-dashboard describe secret $(kubectl -n kubernetes-dashboard get secret | grep admin-user | awk '{print $1}') kubectl proxy #执行完上面命令后访问下面链接使用前面获取的token可以登录 #http://127.0.0.1:8001参考链接:https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/install-kubeadm/