Network System Laboratory - Backup source of Kubernetes(No. 9)

View the diff.
View the diff current.
Go to Kubernetes.
** Kubernetes [#s3f08f98]
- 別名 k8s
- Podによるクラスター構築環境
- 勉強中
- [[kubectl>./kubectl]]
- RANCHER https://qiita.com/suzukihi724/items/00b167c6f5f2ddeca718
#br
- https://qiita.com/ishida0503/items/f3b62b02dec4f6fef42f
#br

** Install （CentOS8）[#zf601099]

*** swap を止める [#i460600e]
 # swapoff -a
- 再起動するとまた有効になるので，/etc/fstab でスワップ行をコメントアウト
#br

*** firewalld を止める． [#k1b76d7b]
#br
*** iptables の適用設定 [#k9224b53]
- /etc/sysctl.d/k8s.conf
 net.bridge.bridge-nf-call-ip6tables = 1
 net.bridge.bridge-nf-call-iptables = 1
-sysctl --system
#br

*** 本体のインストール [#sabae243]

**** K8sリポジトリ（EL7） [#o2437fdb]
- /etc/yum.repos.d/kubernetes.repo
 [kubernetes]
 name=Kubernetes
 baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
 enabled=1
 gpgcheck=1
 repo_gpgcheck=1
 gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
 exclude=kube*


- yum install -y ipvsadm  iproute-tc
- yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes
#br

**** EL7 ではなくて，最新版を手動で入れる． [#dae1dbdf]
- yum install -y socat iproute-tc ipvsadm conntrack-tools
- バイナリのダウンロード
 cd /usr/bin
 RELEASE="$(curl -sSL https://dl.k8s.io/release/stable.txt)"
 curl -L --remote-name-all https://storage.googleapis.com/kubernetes-release/release/${RELEASE}/bin/linux/amd64/{kubeadm,kubelet,kubectl}
 chmod a+rx /usr/bin/kube*

- /usr/lib/systemd/system/kubelet.service
 [Unit]
 Description=kubelet: The Kubernetes Node Agent
 Documentation=https://kubernetes.io/docs/
 Wants=network-online.target
 After=network-online.target

 [Service]
 ExecStart=/usr/bin/kubelet
 Restart=always
 StartLimitInterval=0
 RestartSec=10

 [Install]
 WantedBy=multi-user.target

- /usr/lib/systemd/system/kubelet.service.d/10-kubeadm.conf
 [Service]
 Environment="KUBELET_KUBECONFIG_ARGS=--bootstrap-kubeconfig=/etc/kubernetes/bootstrap-kubelet.conf --kubeconfig=/etc/kubernetes/kubelet.conf"
 Environment="KUBELET_CONFIG_ARGS=--config=/var/lib/kubelet/config.yaml"
 # This is a file that "kubeadm init" and "kubeadm join" generates at runtime, populating the KUBELET_KUBEADM_ARGS variable dynamically
 EnvironmentFile=-/var/lib/kubelet/kubeadm-flags.env
 # This is a file that the user can use for overrides of the kubelet args as a last resort. Preferably, the user should use
 # the .NodeRegistration.KubeletExtraArgs object in the configuration files instead. KUBELET_EXTRA_ARGS should be sourced from this file.
 EnvironmentFile=-/etc/sysconfig/kubelet
 ExecStart=
 ExecStart=/usr/bin/kubelet $KUBELET_KUBECONFIG_ARGS $KUBELET_CONFIG_ARGS $KUBELET_KUBEADM_ARGS $KUBELET_EXTRA_ARGS


#br

*** cgroup の設定 [#f418f5e8]
- /etc/sysconfig/kubelet
 KUBELET_EXTRA_ARGS="--cgroup-driver=cgroupfs"

*** 初期化 [#q2a9d75b]
- kubeadm init --pod-network-cidr=10.128.0.0/16
-- /var/lib/etcd/
-- /var/lib/kubelet
-- /etc/kubernetes
-- /etc/cni/net.d
- もう一度設定する場合は，kubeadm reset を行う
-- ネットワークインターフェイスを作った場合は，削除して置く．ex) ip link delete flannel.1
-- 何かリセットできない.... 関連ファイル削除，関連プロセス皆殺し...
#br

*** 環境設定 [#m6fea0a8]
- mkdir ~/.kube
- cp /etc/kubernetes/admin.conf  ~/.kube/config

- または

- export KUBECONFIG=/etc/kubernetes/admin.conf
#br

*** 仮想ネットワーク設定　CNI（calico） [#aa02daa6]
 curl -L https://docs.projectcalico.org/manifests/calico.yaml | \
 sed  '/            - name: CALICO_DISABLE_FILE_LOGGING/i\            # ADD' | \
 sed  '/            - name: CALICO_DISABLE_FILE_LOGGING/i\            - name: FELIX_IPTABLESBACKEND' | \
 sed  '/            - name: CALICO_DISABLE_FILE_LOGGING/i\              value: Auto'  | \
 sed  '/            - name: CALICO_DISABLE_FILE_LOGGING/i\            # ADD' | \
 sed  '/            - name: CALICO_DISABLE_FILE_LOGGING/i\            - name: CALICO_IPV4POOL_CIDR' | \
 sed  '/            - name: CALICO_DISABLE_FILE_LOGGING/i\              value: \"10.128.0.0\/16\"' | \
 cat - >  calico.yaml
 kubectl apply -f calico.yaml
- or
 cat <<EOF > /etc/NetworkManager/conf.d/calico.conf
 [keyfile]
 unmanaged-devices=interface-name:cali*;interface-name:tunl*;interface-name:vxlan.calico
 EOF
 kubectl apply -f https://docs.projectcalico.org/v3.15/manifests/calico.yaml
- or

- https://docs.projectcalico.org/getting-started/kubernetes/quickstart
 kubectl create -f https://docs.projectcalico.org/manifests/tigera-operator.yaml
 wget https://docs.projectcalico.org/manifests/custom-resources.yaml
 vi custom-resources.yaml
 kubectl create -f custom-resources.yaml
 watch kubectl get pods -n calico-system
 kubectl taint nodes --all node-role.kubernetes.io/master-
 kubectl get nodes -o wide

*** Worker node [#w001f6b1]
- 初期化で kubeadm join コマンドを打つ．
-- ex) kubeadm join 172.22.1.75:6443 --token nmtraf.wfzxuqzqti5unh9f --discovery-token-ca-cert-hash sha256:13d681e6bd6466503666bbb...
#br
** helm [#daa60f7c]
  curl https://raw.githubusercontent.com/helm/helm/HEAD/scripts/get-helm-3 | bash
« Prev Next »
Backup list of Kubernetes
Backup source of Kubernetes(No. All)
Backup source of Kubernetes (No. 9)

Site Search

Login

Sub Menu

Books

mini Calendar

Who's Online

Access Counter
