• K8s安装教程

    Kubernetes上安装KubeSphere

    1、安装步骤

    • 选择4核8G（master）、8核16G（node1）、8核16G（node2） 三台机器，按量付费进行实验，CentOS7.9
    • 安装Docker
    • 安装Kubernetes
    • 安装KubeSphere前置环境
    • 安装KubeSphere

    经过本人测试发现还是腾讯的比较便宜，都选2核的。

    1、安装Docker

    1. sudo yum remove docker*
    2. sudo yum install -y yum-utils
    3.  
    4. #配置docker的yum地址
    5. sudo yum-config-manager \
    6. --add-repo \
    7. http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
    8.  
    9.  
    10. #安装指定版本
    11. #sudo yum install -y docker-ce-20.10.7 docker-ce-cli-20.10.7 containerd.io-1.4.6
    12. #友情提示上面的版本不存在
    13. sudo yum install -y docker-ce docker-ce-cli containerd.io
    14.  
    15. #	启动&开机启动docker
    16. systemctl enable docker --now
    17.  
    18. # docker加速配置
    19. sudo mkdir -p /etc/docker
    20. sudo tee /etc/docker/daemon.json <<-'EOF'
    21. {
    22.   "registry-mirrors": ["https://82m9ar63.mirror.aliyuncs.com"],
    23.   "exec-opts": ["native.cgroupdriver=systemd"],
    24.   "log-driver": "json-file",
    25.   "log-opts": {
    26.     "max-size": "100m"
    27.   },
    28.   "storage-driver": "overlay2"
    29. }
    30. EOF
    31. sudo systemctl daemon-reload
    32. sudo systemctl restart docker

    2、安装Kubernetes

    1、基本环境

    每个机器使用内网ip互通（也就是各个节点之间相互通信）

    每个机器配置自己的hostname，不能用localhost

    1. #设置每个机器自己的hostname，主节点写 master ,从节点写node1 node2....
    2. hostnamectl set-hostname xxx
    3.  
    4. #======================下面的每台机器都要执行=======================================
    5. # 将 SELinux 设置为 permissive 模式（相当于将其禁用）
    6. sudo setenforce 0
    7. sudo sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config
    8.  
    9. #关闭swap
    10. swapoff -a  
    11. sed -ri 's/.*swap.*/#&/' /etc/fstab
    12.  
    13. #允许 iptables 检查桥接流量
    14. cat <<EOF | sudo tee /etc/modules-load.d/k8s.conf
    15. br_netfilter
    16. EOF
    17.  
    18. cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
    19. net.bridge.bridge-nf-call-ip6tables = 1
    20. net.bridge.bridge-nf-call-iptables = 1
    21. EOF
    22. sudo sysctl --system
    23.  
    24. #====================上面的每台机器都执行直接全部复制粘贴=========================

    2、安装kubelet、kubeadm、kubectl

    友情提示：

    一、下面的命令每台机器都要执行

    二、  echo "172.31.0.2  master" >> /etc/hosts    

    1、这个地址是主节点的内网Ip  通过ip a查看

    2、master是上面取名hostname我们取名叫master

    1. #配置k8s的yum源地址
    2. cat <<EOF | sudo tee /etc/yum.repos.d/kubernetes.repo
    3. [kubernetes]
    4. name=Kubernetes
    5. baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
    6. enabled=1
    7. gpgcheck=0
    8. repo_gpgcheck=0
    9. gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
    10.    http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
    11. EOF
    12.  
    13.  
    14. #安装 kubelet，kubeadm，kubectl
    15. sudo yum install -y kubelet-1.20.9 kubeadm-1.20.9 kubectl-1.20.9
    16.  
    17. #启动kubelet
    18. sudo systemctl enable --now kubelet
    19.  
    20. #下面的需要注意，172.31.0.2是主机的内网ip 
    21. #通过 ip a 查看，域名是之前上面写主节点的hostname 我们取名为master
    22. #所有机器配置master域名，这里需要注意
    23. echo "172.31.0.2  master" >> /etc/hosts

     注意：上面的命令每台节点都执行网对各个节点ping操作，主要测试各个从节点能不能通过域名master进行ping通

    3、初始化master节点

    1、初始化

    友情提示：

    *下面的命令只在主节点执行

    1、apiserver-advertise-address：对应的ip是主节点的内网ip通过命令 ip a 查看

    2、其他的都可以不用修改

    3、service-cidr    设置的就是service资源的ip地址都是这个网段的

    4、pod-network-cidr 创建的pod资源的ip都是这个网段的

    5、control-plane-endpoint 设置主节点的域名master

    1. kubeadm init \
    2. --apiserver-advertise-address=172.31.0.2 \
    3. --control-plane-endpoint=master \
    4. --image-repository registry.cn-hangzhou.aliyuncs.com/lfy_k8s_images \
    5. --kubernetes-version v1.20.9 \
    6. --service-cidr=10.96.0.0/16 \
    7. --pod-network-cidr=192.168.0.0/16

    2、上面执行结果显示

    执行上面的命令会出现下面的内容

    1、当执行完上面的命令等一会就会出现下面的内容，创建文件夹只需要在主节点执行。

    记录master执行完成后的日志

     友情提示：

    1、第一个框，在主节点执行

    2、配置pod网络，这里使用的是Calico网络插件配置

    3、第三个框想让变成主节点的执行

    4、第四个框想让变成从节点的执行

    5、在执行第一个框之后需要安装Calico网络插件，下载yaml文件，并执行


     

     3、安装Calico网络插件

    友情提示：两个命令都是在主节点执行

    1、友情提示：下面的命令执行是失败的，因为k8s版本不支持

    1. curl https://docs.projectcalico.org/manifests/calico.yaml -O
    2.  
    3. kubectl apply -f calico.yaml

     换成下面的

    1. curl https://docs.projectcalico.org/v3.18/manifests/calico.yaml -O
    2.  
    3. kubectl apply -f calico.yaml

     当执行上面命令后在主节点可以查看pod

    4、加入worker节点

     在每一个节点执行上面命令后在主节点查看节点

     友情提示：上面的token命令是存在有效时间的，过期了在主节点执行下面的额一句话

    1. 新令牌
    2. kubeadm token create --print-join-command
    3.

     如果想实现高可用，高可用部署方式，也是在这一步的时候，使用添加主节点的命令即可

    总结：到此k8s安装完成

    5、 部署dashboard（K8s自带的控制面板）

    友情提示：可以不安装，就是方便查看

    1、部署

    kubernetes官方提供的可视化界面

    https://github.com/kubernetes/dashboard

    kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.3.1/aio/deploy/recommended.yaml

     或者直接使用下面的文件执行

    1. # Copyright 2017 The Kubernetes Authors.
    2. #
    3. # Licensed under the Apache License, Version 2.0 (the "License");
    4. # you may not use this file except in compliance with the License.
    5. # You may obtain a copy of the License at
    6. #
    7. #     http://www.apache.org/licenses/LICENSE-2.0
    8. #
    9. # Unless required by applicable law or agreed to in writing, software
    10. # distributed under the License is distributed on an "AS IS" BASIS,
    11. # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    12. # See the License for the specific language governing permissions and
    13. # limitations under the License.
    14.  
    15. apiVersion: v1
    16. kind: Namespace
    17. metadata:
    18.   name: kubernetes-dashboard
    19.  
    20. ---
    21.  
    22. apiVersion: v1
    23. kind: ServiceAccount
    24. metadata:
    25.   labels:
    26.     k8s-app: kubernetes-dashboard
    27.   name: kubernetes-dashboard
    28.   namespace: kubernetes-dashboard
    29.  
    30. ---
    31.  
    32. kind: Service
    33. apiVersion: v1
    34. metadata:
    35.   labels:
    36.     k8s-app: kubernetes-dashboard
    37.   name: kubernetes-dashboard
    38.   namespace: kubernetes-dashboard
    39. spec:
    40.   ports:
    41.     - port: 443
    42.       targetPort: 8443
    43.   selector:
    44.     k8s-app: kubernetes-dashboard
    45.  
    46. ---
    47.  
    48. apiVersion: v1
    49. kind: Secret
    50. metadata:
    51.   labels:
    52.     k8s-app: kubernetes-dashboard
    53.   name: kubernetes-dashboard-certs
    54.   namespace: kubernetes-dashboard
    55. type: Opaque
    56.  
    57. ---
    58.  
    59. apiVersion: v1
    60. kind: Secret
    61. metadata:
    62.   labels:
    63.     k8s-app: kubernetes-dashboard
    64.   name: kubernetes-dashboard-csrf
    65.   namespace: kubernetes-dashboard
    66. type: Opaque
    67. data:
    68.   csrf: ""
    69.  
    70. ---
    71.  
    72. apiVersion: v1
    73. kind: Secret
    74. metadata:
    75.   labels:
    76.     k8s-app: kubernetes-dashboard
    77.   name: kubernetes-dashboard-key-holder
    78.   namespace: kubernetes-dashboard
    79. type: Opaque
    80.  
    81. ---
    82.  
    83. kind: ConfigMap
    84. apiVersion: v1
    85. metadata:
    86.   labels:
    87.     k8s-app: kubernetes-dashboard
    88.   name: kubernetes-dashboard-settings
    89.   namespace: kubernetes-dashboard
    90.  
    91. ---
    92.  
    93. kind: Role
    94. apiVersion: rbac.authorization.k8s.io/v1
    95. metadata:
    96.   labels:
    97.     k8s-app: kubernetes-dashboard
    98.   name: kubernetes-dashboard
    99.   namespace: kubernetes-dashboard
    100. rules:
    101.   # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
    102.   - apiGroups: [""]
    103.     resources: ["secrets"]
    104.     resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
    105.     verbs: ["get", "update", "delete"]
    106.     # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
    107.   - apiGroups: [""]
    108.     resources: ["configmaps"]
    109.     resourceNames: ["kubernetes-dashboard-settings"]
    110.     verbs: ["get", "update"]
    111.     # Allow Dashboard to get metrics.
    112.   - apiGroups: [""]
    113.     resources: ["services"]
    114.     resourceNames: ["heapster", "dashboard-metrics-scraper"]
    115.     verbs: ["proxy"]
    116.   - apiGroups: [""]
    117.     resources: ["services/proxy"]
    118.     resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
    119.     verbs: ["get"]
    120.  
    121. ---
    122.  
    123. kind: ClusterRole
    124. apiVersion: rbac.authorization.k8s.io/v1
    125. metadata:
    126.   labels:
    127.     k8s-app: kubernetes-dashboard
    128.   name: kubernetes-dashboard
    129. rules:
    130.   # Allow Metrics Scraper to get metrics from the Metrics server
    131.   - apiGroups: ["metrics.k8s.io"]
    132.     resources: ["pods", "nodes"]
    133.     verbs: ["get", "list", "watch"]
    134.  
    135. ---
    136.  
    137. apiVersion: rbac.authorization.k8s.io/v1
    138. kind: RoleBinding
    139. metadata:
    140.   labels:
    141.     k8s-app: kubernetes-dashboard
    142.   name: kubernetes-dashboard
    143.   namespace: kubernetes-dashboard
    144. roleRef:
    145.   apiGroup: rbac.authorization.k8s.io
    146.   kind: Role
    147.   name: kubernetes-dashboard
    148. subjects:
    149.   - kind: ServiceAccount
    150.     name: kubernetes-dashboard
    151.     namespace: kubernetes-dashboard
    152.  
    153. ---
    154.  
    155. apiVersion: rbac.authorization.k8s.io/v1
    156. kind: ClusterRoleBinding
    157. metadata:
    158.   name: kubernetes-dashboard
    159. roleRef:
    160.   apiGroup: rbac.authorization.k8s.io
    161.   kind: ClusterRole
    162.   name: kubernetes-dashboard
    163. subjects:
    164.   - kind: ServiceAccount
    165.     name: kubernetes-dashboard
    166.     namespace: kubernetes-dashboard
    167.  
    168. ---
    169.  
    170. kind: Deployment
    171. apiVersion: apps/v1
    172. metadata:
    173.   labels:
    174.     k8s-app: kubernetes-dashboard
    175.   name: kubernetes-dashboard
    176.   namespace: kubernetes-dashboard
    177. spec:
    178.   replicas: 1
    179.   revisionHistoryLimit: 10
    180.   selector:
    181.     matchLabels:
    182.       k8s-app: kubernetes-dashboard
    183.   template:
    184.     metadata:
    185.       labels:
    186.         k8s-app: kubernetes-dashboard
    187.     spec:
    188.       containers:
    189.         - name: kubernetes-dashboard
    190.           image: kubernetesui/dashboard:v2.3.1
    191.           imagePullPolicy: Always
    192.           ports:
    193.             - containerPort: 8443
    194.               protocol: TCP
    195.           args:
    196.             - --auto-generate-certificates
    197.             - --namespace=kubernetes-dashboard
    198.             # Uncomment the following line to manually specify Kubernetes API server Host
    199.             # If not specified, Dashboard will attempt to auto discover the API server and connect
    200.             # to it. Uncomment only if the default does not work.
    201.             # - --apiserver-host=http://my-address:port
    202.           volumeMounts:
    203.             - name: kubernetes-dashboard-certs
    204.               mountPath: /certs
    205.               # Create on-disk volume to store exec logs
    206.             - mountPath: /tmp
    207.               name: tmp-volume
    208.           livenessProbe:
    209.             httpGet:
    210.               scheme: HTTPS
    211.               path: /
    212.               port: 8443
    213.             initialDelaySeconds: 30
    214.             timeoutSeconds: 30
    215.           securityContext:
    216.             allowPrivilegeEscalation: false
    217.             readOnlyRootFilesystem: true
    218.             runAsUser: 1001
    219.             runAsGroup: 2001
    220.       volumes:
    221.         - name: kubernetes-dashboard-certs
    222.           secret:
    223.             secretName: kubernetes-dashboard-certs
    224.         - name: tmp-volume
    225.           emptyDir: {}
    226.       serviceAccountName: kubernetes-dashboard
    227.       nodeSelector:
    228.         "kubernetes.io/os": linux
    229.       # Comment the following tolerations if Dashboard must not be deployed on master
    230.       tolerations:
    231.         - key: node-role.kubernetes.io/master
    232.           effect: NoSchedule
    233.  
    234. ---
    235.  
    236. kind: Service
    237. apiVersion: v1
    238. metadata:
    239.   labels:
    240.     k8s-app: dashboard-metrics-scraper
    241.   name: dashboard-metrics-scraper
    242.   namespace: kubernetes-dashboard
    243. spec:
    244.   ports:
    245.     - port: 8000
    246.       targetPort: 8000
    247.   selector:
    248.     k8s-app: dashboard-metrics-scraper
    249.  
    250. ---
    251.  
    252. kind: Deployment
    253. apiVersion: apps/v1
    254. metadata:
    255.   labels:
    256.     k8s-app: dashboard-metrics-scraper
    257.   name: dashboard-metrics-scraper
    258.   namespace: kubernetes-dashboard
    259. spec:
    260.   replicas: 1
    261.   revisionHistoryLimit: 10
    262.   selector:
    263.     matchLabels:
    264.       k8s-app: dashboard-metrics-scraper
    265.   template:
    266.     metadata:
    267.       labels:
    268.         k8s-app: dashboard-metrics-scraper
    269.       annotations:
    270.         seccomp.security.alpha.kubernetes.io/pod: 'runtime/default'
    271.     spec:
    272.       containers:
    273.         - name: dashboard-metrics-scraper
    274.           image: kubernetesui/metrics-scraper:v1.0.6
    275.           ports:
    276.             - containerPort: 8000
    277.               protocol: TCP
    278.           livenessProbe:
    279.             httpGet:
    280.               scheme: HTTP
    281.               path: /
    282.               port: 8000
    283.             initialDelaySeconds: 30
    284.             timeoutSeconds: 30
    285.           volumeMounts:
    286.           - mountPath: /tmp
    287.             name: tmp-volume
    288.           securityContext:
    289.             allowPrivilegeEscalation: false
    290.             readOnlyRootFilesystem: true
    291.             runAsUser: 1001
    292.             runAsGroup: 2001
    293.       serviceAccountName: kubernetes-dashboard
    294.       nodeSelector:
    295.         "kubernetes.io/os": linux
    296.       # Comment the following tolerations if Dashboard must not be deployed on master
    297.       tolerations:
    298.         - key: node-role.kubernetes.io/master
    299.           effect: NoSchedule
    300.       volumes:
    301.         - name: tmp-volume
    302.           emptyDir: {}

     2、设置访问端口

    友情提示：下面命令会进入编辑状态，修改 type: ClusterIP 改为 type: NodePort，因为ClusterIP 只能内网访问，NodePort才可以外网访问

    kubectl edit svc kubernetes-dashboard -n kubernetes-dashboard

     type: ClusterIP 改为 type: NodePort

    下面是对其dashboard开放的端口在服务器的安全组中进行开放。

    1. kubectl get svc -A |grep kubernetes-dashboard
    2. ## 找到端口，在安全组放行

     访问： https://集群任意IP:端口 https://139.198.165.238:32759（友情提示IP地址和端口查看自己的）

    友情提示：下面就是如何获取密码

    3、创建访问账号

    友情提示：这样才能用账号登录dashboard

    1. #创建访问账号，准备一个yaml文件； vi dash.yaml
    2. apiVersion: v1
    3. kind: ServiceAccount
    4. metadata:
    5.   name: admin-user
    6.   namespace: kubernetes-dashboard
    7. ---
    8. apiVersion: rbac.authorization.k8s.io/v1
    9. kind: ClusterRoleBinding
    10. metadata:
    11.   name: admin-user
    12. roleRef:
    13.   apiGroup: rbac.authorization.k8s.io
    14.   kind: ClusterRole
    15.   name: cluster-admin
    16. subjects:
    17. - kind: ServiceAccount
    18.   name: admin-user
    19.   namespace: kubernetes-dashboard
    kubectl apply -f dash.yaml

     4、令牌访问

    1. #获取访问令牌
    2. kubectl -n kubernetes-dashboard get secret $(kubectl -n kubernetes-dashboard get sa/admin-user -o jsonpath="{.secrets[0].name}") -o go-template="{{.data.token | base64decode}}"

     随后生成一大串字符串，复制登录即可，下面的没用

     访问的时候需要使用https://方式访问

     5、界面

    3、安装KubeSphere前置环境

    1、nfs文件系统

    1、安装nfs-server

    友情提示：

    1、除了yum install -y nfs-utils是所有机器都执行，其他的都是在主节点执行

    2、下面的就相当于是nfs服务

    1. # 在每个机器。
    2. yum install -y nfs-utils
    3.  
    4.  
    5. # 在master 执行以下命令 
    6. echo "/nfs/data/ *(insecure,rw,sync,no_root_squash)" > /etc/exports
    7.  
    8.  
    9. # 执行以下命令，启动 nfs 服务;创建共享目录
    10. mkdir -p /nfs/data
    11.  
    12.  
    13. # 在master执行
    14. systemctl enable rpcbind
    15. systemctl enable nfs-server
    16. systemctl start rpcbind
    17. systemctl start nfs-server
    18.  
    19. # 使配置生效
    20. exportfs -r
    21.  
    22.  
    23. #检查配置是否生效
    24. exportfs

    2、配置nfs-client（选做）

    友情提示：这个命令只在从节点执行，相当于客户端

    1. showmount -e 172.31.0.2
    2.  
    3. mkdir -p /nfs/data
    4.  
    5. mount -t nfs 172.31.0.2:/nfs/data /nfs/data

    3、配置默认存储

    配置动态供应的默认存储类，这里动态分配存储空间，这是kubespher需要的环境，在节点执行

    这里需要修改配置文件中的主节点的内网IP（所有Ip）

    1. ## 创建了一个存储类
    2. apiVersion: storage.k8s.io/v1
    3. kind: StorageClass
    4. metadata:
    5.   name: nfs-storage
    6.   annotations:
    7.     storageclass.kubernetes.io/is-default-class: "true"
    8. provisioner: k8s-sigs.io/nfs-subdir-external-provisioner
    9. parameters:
    10.   archiveOnDelete: "true"  ## 删除pv的时候，pv的内容是否要备份
    11.  
    12. ---
    13. apiVersion: apps/v1
    14. kind: Deployment
    15. metadata:
    16.   name: nfs-client-provisioner
    17.   labels:
    18.     app: nfs-client-provisioner
    19.   # replace with namespace where provisioner is deployed
    20.   namespace: default
    21. spec:
    22.   replicas: 1
    23.   strategy:
    24.     type: Recreate
    25.   selector:
    26.     matchLabels:
    27.       app: nfs-client-provisioner
    28.   template:
    29.     metadata:
    30.       labels:
    31.         app: nfs-client-provisioner
    32.     spec:
    33.       serviceAccountName: nfs-client-provisioner
    34.       containers:
    35.         - name: nfs-client-provisioner
    36.           image: registry.cn-hangzhou.aliyuncs.com/lfy_k8s_images/nfs-subdir-external-provisioner:v4.0.2
    37.           # resources:
    38.           #    limits:
    39.           #      cpu: 10m
    40.           #    requests:
    41.           #      cpu: 10m
    42.           volumeMounts:
    43.             - name: nfs-client-root
    44.               mountPath: /persistentvolumes
    45.           env:
    46.             - name: PROVISIONER_NAME
    47.               value: k8s-sigs.io/nfs-subdir-external-provisioner
    48.             - name: NFS_SERVER
    49.               value: 172.31.0.2 ## 指定自己nfs服务器地址
    50.             - name: NFS_PATH  
    51.               value: /nfs/data  ## nfs服务器共享的目录
    52.       volumes:
    53.         - name: nfs-client-root
    54.           nfs:
    55.             server: 172.31.0.2
    56.             path: /nfs/data
    57. ---
    58. apiVersion: v1
    59. kind: ServiceAccount
    60. metadata:
    61.   name: nfs-client-provisioner
    62.   # replace with namespace where provisioner is deployed
    63.   namespace: default
    64. ---
    65. kind: ClusterRole
    66. apiVersion: rbac.authorization.k8s.io/v1
    67. metadata:
    68.   name: nfs-client-provisioner-runner
    69. rules:
    70.   - apiGroups: [""]
    71.     resources: ["nodes"]
    72.     verbs: ["get", "list", "watch"]
    73.   - apiGroups: [""]
    74.     resources: ["persistentvolumes"]
    75.     verbs: ["get", "list", "watch", "create", "delete"]
    76.   - apiGroups: [""]
    77.     resources: ["persistentvolumeclaims"]
    78.     verbs: ["get", "list", "watch", "update"]
    79.   - apiGroups: ["storage.k8s.io"]
    80.     resources: ["storageclasses"]
    81.     verbs: ["get", "list", "watch"]
    82.   - apiGroups: [""]
    83.     resources: ["events"]
    84.     verbs: ["create", "update", "patch"]
    85. ---
    86. kind: ClusterRoleBinding
    87. apiVersion: rbac.authorization.k8s.io/v1
    88. metadata:
    89.   name: run-nfs-client-provisioner
    90. subjects:
    91.   - kind: ServiceAccount
    92.     name: nfs-client-provisioner
    93.     # replace with namespace where provisioner is deployed
    94.     namespace: default
    95. roleRef:
    96.   kind: ClusterRole
    97.   name: nfs-client-provisioner-runner
    98.   apiGroup: rbac.authorization.k8s.io
    99. ---
    100. kind: Role
    101. apiVersion: rbac.authorization.k8s.io/v1
    102. metadata:
    103.   name: leader-locking-nfs-client-provisioner
    104.   # replace with namespace where provisioner is deployed
    105.   namespace: default
    106. rules:
    107.   - apiGroups: [""]
    108.     resources: ["endpoints"]
    109.     verbs: ["get", "list", "watch", "create", "update", "patch"]
    110. ---
    111. kind: RoleBinding
    112. apiVersion: rbac.authorization.k8s.io/v1
    113. metadata:
    114.   name: leader-locking-nfs-client-provisioner
    115.   # replace with namespace where provisioner is deployed
    116.   namespace: default
    117. subjects:
    118.   - kind: ServiceAccount
    119.     name: nfs-client-provisioner
    120.     # replace with namespace where provisioner is deployed
    121.     namespace: default
    122. roleRef:
    123.   kind: Role
    124.   name: leader-locking-nfs-client-provisioner
    125.   apiGroup: rbac.authorization.k8s.io

    运行完上面的内容执行下面的命令

    4、安装KubeSphere

    面向云原生应用的容器混合云，支持 Kubernetes 多集群管理的 PaaS 容器云平台解决方案 | KubeSphere

    1、下载核心文件

    如果下载不到，请复制附录的内容

    1. wget https://github.com/kubesphere/ks-installer/releases/download/v3.1.1/kubesphere-installer.yaml
    2.  
    3. wget https://github.com/kubesphere/ks-installer/releases/download/v3.1.1/cluster-configuration.yaml

    2、修改cluster-configuration

    在 cluster-configuration.yaml中指定我们需要开启的功能

    参照官网“启用可插拔组件”，完整的改成true都配置如下

    概述

    1. ---
    2. apiVersion: installer.kubesphere.io/v1alpha1
    3. kind: ClusterConfiguration
    4. metadata:
    5.   name: ks-installer
    6.   namespace: kubesphere-system
    7.   labels:
    8.     version: v3.1.1
    9. spec:
    10.   persistence:
    11.     storageClass: ""        # If there is no default StorageClass in your cluster, you need to specify an existing StorageClass here.
    12.   authentication:
    13.     jwtSecret: ""           # Keep the jwtSecret consistent with the Host Cluster. Retrieve the jwtSecret by executing "kubectl -n kubesphere-system get cm kubesphere-config -o yaml | grep -v "apiVersion" | grep jwtSecret" on the Host Cluster.
    14.   local_registry: ""        # Add your private registry address if it is needed.
    15.   etcd:
    16.     monitoring: true       # Enable or disable etcd monitoring dashboard installation. You have to create a Secret for etcd before you enable it.
    17.     endpointIps: 172.31.0.2  # etcd cluster EndpointIps. It can be a bunch of IPs here.
    18.     port: 2379              # etcd port.
    19.     tlsEnable: true
    20.   common:
    21.     redis:
    22.       enabled: true
    23.     openldap:
    24.       enabled: true
    25.     minioVolumeSize: 20Gi # Minio PVC size.
    26.     openldapVolumeSize: 2Gi   # openldap PVC size.
    27.     redisVolumSize: 2Gi # Redis PVC size.
    28.     monitoring:
    29.       # type: external   # Whether to specify the external prometheus stack, and need to modify the endpoint at the next line.
    30.       endpoint: http://prometheus-operated.kubesphere-monitoring-system.svc:9090 # Prometheus endpoint to get metrics data.
    31.     es:   # Storage backend for logging, events and auditing.
    32.       # elasticsearchMasterReplicas: 1   # The total number of master nodes. Even numbers are not allowed.
    33.       # elasticsearchDataReplicas: 1     # The total number of data nodes.
    34.       elasticsearchMasterVolumeSize: 4Gi   # The volume size of Elasticsearch master nodes.
    35.       elasticsearchDataVolumeSize: 20Gi    # The volume size of Elasticsearch data nodes.
    36.       logMaxAge: 7                     # Log retention time in built-in Elasticsearch. It is 7 days by default.
    37.       elkPrefix: logstash              # The string making up index names. The index name will be formatted as ks-<elk_prefix>-log.
    38.       basicAuth:
    39.         enabled: false
    40.         username: ""
    41.         password: ""
    42.       externalElasticsearchUrl: ""
    43.       externalElasticsearchPort: ""
    44.   console:
    45.     enableMultiLogin: true  # Enable or disable simultaneous logins. It allows different users to log in with the same account at the same time.
    46.     port: 30880
    47.   alerting:                # (CPU: 0.1 Core, Memory: 100 MiB) It enables users to customize alerting policies to send messages to receivers in time with different time intervals and alerting levels to choose from.
    48.     enabled: true         # Enable or disable the KubeSphere Alerting System.
    49.     # thanosruler:
    50.     #   replicas: 1
    51.     #   resources: {}
    52.   auditing:                # Provide a security-relevant chronological set of records，recording the sequence of activities happening on the platform, initiated by different tenants.
    53.     enabled: true         # Enable or disable the KubeSphere Auditing Log System. 
    54.   devops:                  # (CPU: 0.47 Core, Memory: 8.6 G) Provide an out-of-the-box CI/CD system based on Jenkins, and automated workflow tools including Source-to-Image & Binary-to-Image.
    55.     enabled: true             # Enable or disable the KubeSphere DevOps System.
    56.     jenkinsMemoryLim: 2Gi      # Jenkins memory limit.
    57.     jenkinsMemoryReq: 1500Mi   # Jenkins memory request.
    58.     jenkinsVolumeSize: 8Gi     # Jenkins volume size.
    59.     jenkinsJavaOpts_Xms: 512m  # The following three fields are JVM parameters.
    60.     jenkinsJavaOpts_Xmx: 512m
    61.     jenkinsJavaOpts_MaxRAM: 2g
    62.   events:                  # Provide a graphical web console for Kubernetes Events exporting, filtering and alerting in multi-tenant Kubernetes clusters.
    63.     enabled: true         # Enable or disable the KubeSphere Events System.
    64.     ruler:
    65.       enabled: true
    66.       replicas: 2
    67.   logging:                 # (CPU: 57 m, Memory: 2.76 G) Flexible logging functions are provided for log query, collection and management in a unified console. Additional log collectors can be added, such as Elasticsearch, Kafka and Fluentd.
    68.     enabled: true         # Enable or disable the KubeSphere Logging System.
    69.     logsidecar:
    70.       enabled: true
    71.       replicas: 2
    72.   metrics_server:                    # (CPU: 56 m, Memory: 44.35 MiB) It enables HPA (Horizontal Pod Autoscaler).
    73.     enabled: false                   # Enable or disable metrics-server.
    74.   monitoring:
    75.     storageClass: ""                 # If there is an independent StorageClass you need for Prometheus, you can specify it here. The default StorageClass is used by default.
    76.     # prometheusReplicas: 1          # Prometheus replicas are responsible for monitoring different segments of data source and providing high availability.
    77.     prometheusMemoryRequest: 400Mi   # Prometheus request memory.
    78.     prometheusVolumeSize: 20Gi       # Prometheus PVC size.
    79.     # alertmanagerReplicas: 1          # AlertManager Replicas.
    80.   multicluster:
    81.     clusterRole: none  # host | member | none  # You can install a solo cluster, or specify it as the Host or Member Cluster.
    82.   network:
    83.     networkpolicy: # Network policies allow network isolation within the same cluster, which means firewalls can be set up between certain instances (Pods).
    84.       # Make sure that the CNI network plugin used by the cluster supports NetworkPolicy. There are a number of CNI network plugins that support NetworkPolicy, including Calico, Cilium, Kube-router, Romana and Weave Net.
    85.       enabled: true # Enable or disable network policies.
    86.     ippool: # Use Pod IP Pools to manage the Pod network address space. Pods to be created can be assigned IP addresses from a Pod IP Pool.
    87.       type: calico # Specify "calico" for this field if Calico is used as your CNI plugin. "none" means that Pod IP Pools are disabled.
    88.     topology: # Use Service Topology to view Service-to-Service communication based on Weave Scope.
    89.       type: none # Specify "weave-scope" for this field to enable Service Topology. "none" means that Service Topology is disabled.
    90.   openpitrix: # An App Store that is accessible to all platform tenants. You can use it to manage apps across their entire lifecycle.
    91.     store:
    92.       enabled: true # Enable or disable the KubeSphere App Store.
    93.   servicemesh:         # (0.3 Core, 300 MiB) Provide fine-grained traffic management, observability and tracing, and visualized traffic topology.
    94.     enabled: true     # Base component (pilot). Enable or disable KubeSphere Service Mesh (Istio-based).
    95.   kubeedge:          # Add edge nodes to your cluster and deploy workloads on edge nodes.
    96.     enabled: true   # Enable or disable KubeEdge.
    97.     cloudCore:
    98.       nodeSelector: {"node-role.kubernetes.io/worker": ""}
    99.       tolerations: []
    100.       cloudhubPort: "10000"
    101.       cloudhubQuicPort: "10001"
    102.       cloudhubHttpsPort: "10002"
    103.       cloudstreamPort: "10003"
    104.       tunnelPort: "10004"
    105.       cloudHub:
    106.         advertiseAddress: # At least a public IP address or an IP address which can be accessed by edge nodes must be provided.
    107.           - ""            # Note that once KubeEdge is enabled, CloudCore will malfunction if the address is not provided.
    108.         nodeLimit: "100"
    109.       service:
    110.         cloudhubNodePort: "30000"
    111.         cloudhubQuicNodePort: "30001"
    112.         cloudhubHttpsNodePort: "30002"
    113.         cloudstreamNodePort: "30003"
    114.         tunnelNodePort: "30004"
    115.     edgeWatcher:
    116.       nodeSelector: {"node-role.kubernetes.io/worker": ""}
    117.       tolerations: []
    118.       edgeWatcherAgent:
    119.         nodeSelector: {"node-role.kubernetes.io/worker": ""}
    120.         tolerations: []

    3、执行安装

    1. kubectl apply -f kubesphere-installer.yaml
    2.  
    3. kubectl apply -f cluster-configuration.yaml
    4.

    4、查看安装进度

    友情提示：通过下面的命令就能查看到账号和密码

    kubectl logs -n kubesphere-system $(kubectl get pod -n kubesphere-system -l app=ks-install -o jsonpath='{.items[0].metadata.name}') -f

     运行到最后就能看到下面直接 运行即可

    访问任意机器的 30880端口

    账号 ： admin

    密码 ： P@88w0rd

    解决etcd监控证书找不到问题，下面的是当普莫米修斯pod出现问题执行下面这段

    kubectl -n kubesphere-monitoring-system create secret generic kube-etcd-client-certs  --from-file=etcd-client-ca.crt=/etc/kubernetes/pki/etcd/ca.crt  --from-file=etcd-client.crt=/etc/kubernetes/pki/apiserver-etcd-client.crt  --from-file=etcd-client.key=/etc/kubernetes/pki/apiserver-etcd-client.key

     怎么查看

    附录

    1、kubesphere-installer.yaml

    1. ---
    2. apiVersion: apiextensions.k8s.io/v1beta1
    3. kind: CustomResourceDefinition
    4. metadata:
    5.   name: clusterconfigurations.installer.kubesphere.io
    6. spec:
    7.   group: installer.kubesphere.io
    8.   versions:
    9.   - name: v1alpha1
    10.     served: true
    11.     storage: true
    12.   scope: Namespaced
    13.   names:
    14.     plural: clusterconfigurations
    15.     singular: clusterconfiguration
    16.     kind: ClusterConfiguration
    17.     shortNames:
    18.     - cc
    19.  
    20. ---
    21. apiVersion: v1
    22. kind: Namespace
    23. metadata:
    24.   name: kubesphere-system
    25.  
    26. ---
    27. apiVersion: v1
    28. kind: ServiceAccount
    29. metadata:
    30.   name: ks-installer
    31.   namespace: kubesphere-system
    32.  
    33. ---
    34. apiVersion: rbac.authorization.k8s.io/v1
    35. kind: ClusterRole
    36. metadata:
    37.   name: ks-installer
    38. rules:
    39. - apiGroups:
    40.   - ""
    41.   resources:
    42.   - '*'
    43.   verbs:
    44.   - '*'
    45. - apiGroups:
    46.   - apps
    47.   resources:
    48.   - '*'
    49.   verbs:
    50.   - '*'
    51. - apiGroups:
    52.   - extensions
    53.   resources:
    54.   - '*'
    55.   verbs:
    56.   - '*'
    57. - apiGroups:
    58.   - batch
    59.   resources:
    60.   - '*'
    61.   verbs:
    62.   - '*'
    63. - apiGroups:
    64.   - rbac.authorization.k8s.io
    65.   resources:
    66.   - '*'
    67.   verbs:
    68.   - '*'
    69. - apiGroups:
    70.   - apiregistration.k8s.io
    71.   resources:
    72.   - '*'
    73.   verbs:
    74.   - '*'
    75. - apiGroups:
    76.   - apiextensions.k8s.io
    77.   resources:
    78.   - '*'
    79.   verbs:
    80.   - '*'
    81. - apiGroups:
    82.   - tenant.kubesphere.io
    83.   resources:
    84.   - '*'
    85.   verbs:
    86.   - '*'
    87. - apiGroups:
    88.   - certificates.k8s.io
    89.   resources:
    90.   - '*'
    91.   verbs:
    92.   - '*'
    93. - apiGroups:
    94.   - devops.kubesphere.io
    95.   resources:
    96.   - '*'
    97.   verbs:
    98.   - '*'
    99. - apiGroups:
    100.   - monitoring.coreos.com
    101.   resources:
    102.   - '*'
    103.   verbs:
    104.   - '*'
    105. - apiGroups:
    106.   - logging.kubesphere.io
    107.   resources:
    108.   - '*'
    109.   verbs:
    110.   - '*'
    111. - apiGroups:
    112.   - jaegertracing.io
    113.   resources:
    114.   - '*'
    115.   verbs:
    116.   - '*'
    117. - apiGroups:
    118.   - storage.k8s.io
    119.   resources:
    120.   - '*'
    121.   verbs:
    122.   - '*'
    123. - apiGroups:
    124.   - admissionregistration.k8s.io
    125.   resources:
    126.   - '*'
    127.   verbs:
    128.   - '*'
    129. - apiGroups:
    130.   - policy
    131.   resources:
    132.   - '*'
    133.   verbs:
    134.   - '*'
    135. - apiGroups:
    136.   - autoscaling
    137.   resources:
    138.   - '*'
    139.   verbs:
    140.   - '*'
    141. - apiGroups:
    142.   - networking.istio.io
    143.   resources:
    144.   - '*'
    145.   verbs:
    146.   - '*'
    147. - apiGroups:
    148.   - config.istio.io
    149.   resources:
    150.   - '*'
    151.   verbs:
    152.   - '*'
    153. - apiGroups:
    154.   - iam.kubesphere.io
    155.   resources:
    156.   - '*'
    157.   verbs:
    158.   - '*'
    159. - apiGroups:
    160.   - notification.kubesphere.io
    161.   resources:
    162.   - '*'
    163.   verbs:
    164.   - '*'
    165. - apiGroups:
    166.   - auditing.kubesphere.io
    167.   resources:
    168.   - '*'
    169.   verbs:
    170.   - '*'
    171. - apiGroups:
    172.   - events.kubesphere.io
    173.   resources:
    174.   - '*'
    175.   verbs:
    176.   - '*'
    177. - apiGroups:
    178.   - core.kubefed.io
    179.   resources:
    180.   - '*'
    181.   verbs:
    182.   - '*'
    183. - apiGroups:
    184.   - installer.kubesphere.io
    185.   resources:
    186.   - '*'
    187.   verbs:
    188.   - '*'
    189. - apiGroups:
    190.   - storage.kubesphere.io
    191.   resources:
    192.   - '*'
    193.   verbs:
    194.   - '*'
    195. - apiGroups:
    196.   - security.istio.io
    197.   resources:
    198.   - '*'
    199.   verbs:
    200.   - '*'
    201. - apiGroups:
    202.   - monitoring.kiali.io
    203.   resources:
    204.   - '*'
    205.   verbs:
    206.   - '*'
    207. - apiGroups:
    208.   - kiali.io
    209.   resources:
    210.   - '*'
    211.   verbs:
    212.   - '*'
    213. - apiGroups:
    214.   - networking.k8s.io
    215.   resources:
    216.   - '*'
    217.   verbs:
    218.   - '*'
    219. - apiGroups:
    220.   - kubeedge.kubesphere.io
    221.   resources:
    222.   - '*'
    223.   verbs:
    224.   - '*'
    225. - apiGroups:
    226.   - types.kubefed.io
    227.   resources:
    228.   - '*'
    229.   verbs:
    230.   - '*'
    231.  
    232. ---
    233. kind: ClusterRoleBinding
    234. apiVersion: rbac.authorization.k8s.io/v1
    235. metadata:
    236.   name: ks-installer
    237. subjects:
    238. - kind: ServiceAccount
    239.   name: ks-installer
    240.   namespace: kubesphere-system
    241. roleRef:
    242.   kind: ClusterRole
    243.   name: ks-installer
    244.   apiGroup: rbac.authorization.k8s.io
    245.  
    246. ---
    247. apiVersion: apps/v1
    248. kind: Deployment
    249. metadata:
    250.   name: ks-installer
    251.   namespace: kubesphere-system
    252.   labels:
    253.     app: ks-install
    254. spec:
    255.   replicas: 1
    256.   selector:
    257.     matchLabels:
    258.       app: ks-install
    259.   template:
    260.     metadata:
    261.       labels:
    262.         app: ks-install
    263.     spec:
    264.       serviceAccountName: ks-installer
    265.       containers:
    266.       - name: installer
    267.         image: kubesphere/ks-installer:v3.1.1
    268.         imagePullPolicy: "Always"
    269.         resources:
    270.           limits:
    271.             cpu: "1"
    272.             memory: 1Gi
    273.           requests:
    274.             cpu: 20m
    275.             memory: 100Mi
    276.         volumeMounts:
    277.         - mountPath: /etc/localtime
    278.           name: host-time
    279.       volumes:
    280.       - hostPath:
    281.           path: /etc/localtime
    282.           type: ""
    283.         name: host-time

    2、cluster-configuration.yaml

    1. ---
    2. apiVersion: installer.kubesphere.io/v1alpha1
    3. kind: ClusterConfiguration
    4. metadata:
    5.   name: ks-installer
    6.   namespace: kubesphere-system
    7.   labels:
    8.     version: v3.1.1
    9. spec:
    10.   persistence:
    11.     storageClass: ""        # If there is no default StorageClass in your cluster, you need to specify an existing StorageClass here.
    12.   authentication:
    13.     jwtSecret: ""           # Keep the jwtSecret consistent with the Host Cluster. Retrieve the jwtSecret by executing "kubectl -n kubesphere-system get cm kubesphere-config -o yaml | grep -v "apiVersion" | grep jwtSecret" on the Host Cluster.
    14.   local_registry: ""        # Add your private registry address if it is needed.
    15.   etcd:
    16.     monitoring: true       # Enable or disable etcd monitoring dashboard installation. You have to create a Secret for etcd before you enable it.
    17.     endpointIps: 172.31.0.4  # etcd cluster EndpointIps. It can be a bunch of IPs here.
    18.     port: 2379              # etcd port.
    19.     tlsEnable: true
    20.   common:
    21.     redis:
    22.       enabled: true
    23.     openldap:
    24.       enabled: true
    25.     minioVolumeSize: 20Gi # Minio PVC size.
    26.     openldapVolumeSize: 2Gi   # openldap PVC size.
    27.     redisVolumSize: 2Gi # Redis PVC size.
    28.     monitoring:
    29.       # type: external   # Whether to specify the external prometheus stack, and need to modify the endpoint at the next line.
    30.       endpoint: http://prometheus-operated.kubesphere-monitoring-system.svc:9090 # Prometheus endpoint to get metrics data.
    31.     es:   # Storage backend for logging, events and auditing.
    32.       # elasticsearchMasterReplicas: 1   # The total number of master nodes. Even numbers are not allowed.
    33.       # elasticsearchDataReplicas: 1     # The total number of data nodes.
    34.       elasticsearchMasterVolumeSize: 4Gi   # The volume size of Elasticsearch master nodes.
    35.       elasticsearchDataVolumeSize: 20Gi    # The volume size of Elasticsearch data nodes.
    36.       logMaxAge: 7                     # Log retention time in built-in Elasticsearch. It is 7 days by default.
    37.       elkPrefix: logstash              # The string making up index names. The index name will be formatted as ks-<elk_prefix>-log.
    38.       basicAuth:
    39.         enabled: false
    40.         username: ""
    41.         password: ""
    42.       externalElasticsearchUrl: ""
    43.       externalElasticsearchPort: ""
    44.   console:
    45.     enableMultiLogin: true  # Enable or disable simultaneous logins. It allows different users to log in with the same account at the same time.
    46.     port: 30880
    47.   alerting:                # (CPU: 0.1 Core, Memory: 100 MiB) It enables users to customize alerting policies to send messages to receivers in time with different time intervals and alerting levels to choose from.
    48.     enabled: true         # Enable or disable the KubeSphere Alerting System.
    49.     # thanosruler:
    50.     #   replicas: 1
    51.     #   resources: {}
    52.   auditing:                # Provide a security-relevant chronological set of records，recording the sequence of activities happening on the platform, initiated by different tenants.
    53.     enabled: true         # Enable or disable the KubeSphere Auditing Log System. 
    54.   devops:                  # (CPU: 0.47 Core, Memory: 8.6 G) Provide an out-of-the-box CI/CD system based on Jenkins, and automated workflow tools including Source-to-Image & Binary-to-Image.
    55.     enabled: true             # Enable or disable the KubeSphere DevOps System.
    56.     jenkinsMemoryLim: 2Gi      # Jenkins memory limit.
    57.     jenkinsMemoryReq: 1500Mi   # Jenkins memory request.
    58.     jenkinsVolumeSize: 8Gi     # Jenkins volume size.
    59.     jenkinsJavaOpts_Xms: 512m  # The following three fields are JVM parameters.
    60.     jenkinsJavaOpts_Xmx: 512m
    61.     jenkinsJavaOpts_MaxRAM: 2g
    62.   events:                  # Provide a graphical web console for Kubernetes Events exporting, filtering and alerting in multi-tenant Kubernetes clusters.
    63.     enabled: true         # Enable or disable the KubeSphere Events System.
    64.     ruler:
    65.       enabled: true
    66.       replicas: 2
    67.   logging:                 # (CPU: 57 m, Memory: 2.76 G) Flexible logging functions are provided for log query, collection and management in a unified console. Additional log collectors can be added, such as Elasticsearch, Kafka and Fluentd.
    68.     enabled: true         # Enable or disable the KubeSphere Logging System.
    69.     logsidecar:
    70.       enabled: true
    71.       replicas: 2
    72.   metrics_server:                    # (CPU: 56 m, Memory: 44.35 MiB) It enables HPA (Horizontal Pod Autoscaler).
    73.     enabled: false                   # Enable or disable metrics-server.
    74.   monitoring:
    75.     storageClass: ""                 # If there is an independent StorageClass you need for Prometheus, you can specify it here. The default StorageClass is used by default.
    76.     # prometheusReplicas: 1          # Prometheus replicas are responsible for monitoring different segments of data source and providing high availability.
    77.     prometheusMemoryRequest: 400Mi   # Prometheus request memory.
    78.     prometheusVolumeSize: 20Gi       # Prometheus PVC size.
    79.     # alertmanagerReplicas: 1          # AlertManager Replicas.
    80.   multicluster:
    81.     clusterRole: none  # host | member | none  # You can install a solo cluster, or specify it as the Host or Member Cluster.
    82.   network:
    83.     networkpolicy: # Network policies allow network isolation within the same cluster, which means firewalls can be set up between certain instances (Pods).
    84.       # Make sure that the CNI network plugin used by the cluster supports NetworkPolicy. There are a number of CNI network plugins that support NetworkPolicy, including Calico, Cilium, Kube-router, Romana and Weave Net.
    85.       enabled: true # Enable or disable network policies.
    86.     ippool: # Use Pod IP Pools to manage the Pod network address space. Pods to be created can be assigned IP addresses from a Pod IP Pool.
    87.       type: calico # Specify "calico" for this field if Calico is used as your CNI plugin. "none" means that Pod IP Pools are disabled.
    88.     topology: # Use Service Topology to view Service-to-Service communication based on Weave Scope.
    89.       type: none # Specify "weave-scope" for this field to enable Service Topology. "none" means that Service Topology is disabled.
    90.   openpitrix: # An App Store that is accessible to all platform tenants. You can use it to manage apps across their entire lifecycle.
    91.     store:
    92.       enabled: true # Enable or disable the KubeSphere App Store.
    93.   servicemesh:         # (0.3 Core, 300 MiB) Provide fine-grained traffic management, observability and tracing, and visualized traffic topology.
    94.     enabled: true     # Base component (pilot). Enable or disable KubeSphere Service Mesh (Istio-based).
    95.   kubeedge:          # Add edge nodes to your cluster and deploy workloads on edge nodes.
    96.     enabled: true   # Enable or disable KubeEdge.
    97.     cloudCore:
    98.       nodeSelector: {"node-role.kubernetes.io/worker": ""}
    99.       tolerations: []
    100.       cloudhubPort: "10000"
    101.       cloudhubQuicPort: "10001"
    102.       cloudhubHttpsPort: "10002"
    103.       cloudstreamPort: "10003"
    104.       tunnelPort: "10004"
    105.       cloudHub:
    106.         advertiseAddress: # At least a public IP address or an IP address which can be accessed by edge nodes must be provided.
    107.           - ""            # Note that once KubeEdge is enabled, CloudCore will malfunction if the address is not provided.
    108.         nodeLimit: "100"
    109.       service:
    110.         cloudhubNodePort: "30000"
    111.         cloudhubQuicNodePort: "30001"
    112.         cloudhubHttpsNodePort: "30002"
    113.         cloudstreamNodePort: "30003"
    114.         tunnelNodePort: "30004"
    115.     edgeWatcher:
    116.       nodeSelector: {"node-role.kubernetes.io/worker": ""}
    117.       tolerations: []
    118.       edgeWatcherAgent:
    119.         nodeSelector: {"node-role.kubernetes.io/worker": ""}
    120.         tolerations: []

    一键安装k8s

    1、 安装docker

    1. sudo yum remove docker*
    2. sudo yum install -y yum-utils
    3.  
    4. #配置docker的yum地址
    5. sudo yum-config-manager \
    6. --add-repo \
    7. http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
    8.  
    9.  
    10. #安装指定版本
    11. #sudo yum install -y docker-ce-20.10.7 docker-ce-cli-20.10.7 containerd.io-1.4.6
    12. #友情提示上面的版本不存在
    13. sudo yum install -y docker-ce docker-ce-cli containerd.io
    14.  
    15. #	启动&开机启动docker
    16. systemctl enable docker --now
    17.  
    18. # docker加速配置
    19. sudo mkdir -p /etc/docker
    20. sudo tee /etc/docker/daemon.json <<-'EOF'
    21. {
    22.   "registry-mirrors": ["https://82m9ar63.mirror.aliyuncs.com"],
    23.   "exec-opts": ["native.cgroupdriver=systemd"],
    24.   "log-driver": "json-file",
    25.   "log-opts": {
    26.     "max-size": "100m"
    27.   },
    28.   "storage-driver": "overlay2"
    29. }
    30. EOF
    31. sudo systemctl daemon-reload
    32. sudo systemctl restart docker

    2、安装依赖

    1. yum update
    2. yum install -y curl
    3. yum install -y socat
    4. yum install -y vim
    5. yum install -y conntrack

     3、关闭防火墙和分区

    1. swapoff -a
    2. #查看防火墙状态
    3. firewall-cmd --state
    4. #CentOS 7.0默认使用的是firewall作为防火墙
    5. #停止firewall
    6. systemctl stop firewalld.service
    7. #禁止防火墙开启启动
    8. systemctl disable firewalld.service

    4、通过kubekey安装

    1. export KKZONE=cn
    2. curl -sfL https://get-kk.kubesphere.io | VERSION=v2.2.1 sh -
    3. chmod +x kk
    4.  
    5. #输入yes
    6. ./kk create cluster --with-kubernetes v1.22.10 --with-kubesphere v3.3.0

  • 相关阅读:
    【Ansible自动化运维工具 1】Ansible常用模块详解（附各模块应用实例和Ansible环境安装部署）
    智慧公厕预见幸福生活、美好未来
    B站app作品列表sign
    leetcode算法之前缀和
    有10个学生,每个学生的数据包括学号、姓名、3门课程的成绩,从键盘输人10个学
    .NET 8新预览版本使用 Blazor 组件进行服务器端呈现
    【比邻智选】M5310-E系列模组
    GO微服务实战第八节 如何基于 Go-kit 开发 Web 应用：从接口层到业务层再到数据层
    网络安全问题
    那个写出最烂代码的程序员，不但进了Google，还财务自由了！
  • 原文地址：https://blog.csdn.net/qq_36437693/article/details/126677700