前期准备

参考

  1. 同步hosts文件/etc/hostsshell 172.24.102.255 master1 172.24.102.254 master2 172.24.103.1 master3 172.24.102.253 node1 172.24.103.0 node2 172.24.87.246 rancher-server1 172.24.87.248 rancher-server2 172.24.87.247 rancher-server3

  2. 关闭防火墙和selinux```bash sudo sed -i ‘s/SELINUX=enforcing/SELINUX=disabled/g’ /etc/selinux/config

centos

systemctl stop firewalld.service && systemctl disable firewalld.service

ubuntu

ufw disable

  2. 3. kernel性能调优<br />**文档修改**：waatchdog改为kernel.watchdog```bash
  3. cat >> /etc/sysctl.d/kubernetes.conf<<EOF
  4. net.ipv4.ip_forward=1
  5. kernel.watchdog_thresh=30
  6. net.bridge.bridge-nf-call-iptables=1
  7. net.ipv4.neigh.default.gc_thresh1=4096
  8. net.ipv4.neigh.default.gc_thresh2=6144
  9. net.ipv4.neigh.default.gc_thresh3=8192
  10. EOF
  12. # 保存
  13. sysctl -p
  15. # 模块加载
  16. modprobe br_netfilter
  1. 安装docker
    • 改一下密码，删除升级降级部分 echo rancher | passwd —stdin rancher 删除version= 部分，直接用
      sudo yum -y install docker-ce-19.03.7-3.el7 docker-ce-cli-19.03.7-3.el7 containerd.io ```bash NEW_USER=rancher sudo adduser $NEW_USER echo rancher | passwd —stdin rancher sudo echo “$NEW_USER ALL=(ALL) ALL” >> /etc/sudoers sudo yum remove docker \
      1.      docker-client \
      2.      docker-client-latest \
      3.      docker-common \
      4.      docker-latest \
      5.      docker-latest-logrotate \
      6.      docker-logrotate \
      7.      docker-selinux \
      8.      docker-engine-selinux \
      9.      docker-engine \
      10.      container*

sudo yum install -y yum-utils device-mapper-persistent-data \ lvm2 bash-completion; sudo yum-config-manager —add-repo \ http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo; sudo yum makecache all; sudo yum -y install docker-ce-19.03.7-3.el7 docker-ce-cli-19.03.7-3.el7 containerd.io sudo usermod -aG docker $NEW_USER; sudo systemctl enable —now docker;

  2. 5. 配置ssh和改root密码```bash
  3. PasswordAuthor..... yes
  4. sudo passwd root
  1. 配置免密
    rancher用户```bash ssh-keygen ssh-copy-id master1

测试免密

for i in cat /etc/hosts | grep -v localhost | grep -Ev '^$' | awk '{print $2}'; do ssh $i hostname ; done

  2. 7. 配置镜像加速<br />vi /etc/docker/daemon.json```bash
  3. cat > /etc/docker/daemon.json<<EOF
  4. {
  5. "registry-mirrors": ["https://dockerhub.azk8s.cn","http://hub-mirror.c.163.com","https://3laho3y3.mirror.aliyuncs.com","http://f1361db2.m.daocloud.io"],
  6. "max-concurrent-downloads": 3,
  7. "max-concurrent-uploads": 5,
  8. "storage-driver": "overlay2",
  9.     "storage-opts": [
  10.         "overlay2.override_kernel_check=true"
  11.     ],
  12. "log-driver": "json-file",
  13.     "log-opts": {
  14.     "max-size": "100m",
  15.     "max-file": "3"
  16.     }
  17. }
  18. EOF
  1. 下载rke```bash wget https://docs.rancher.cn/download/rke/v1.0.5-rke_linux-amd64

chmod +x ….

mv v1.0.4 /usr/local/bin/rke

  2. 9. 编辑cluster.yml```yml
  3. cat << EOF >  cluster.yml
  4. nodes:
  5.   - address: 172.24.103.2
  6.     hostname_override: master1
  7.     internal_address:
  8.     user: rancher
  9.     role: [controlplane,etcd]
  10.   - address: 172.24.103.4
  11.     hostname_override: master2
  12.     internal_address:
  13.     user: rancher
  14.     role: [controlplane,etcd]
  15.   - address: 172.24.103.6
  16.     hostname_override: master3
  17.     internal_address:
  18.     user: rancher
  19.     role: [controlplane,etcd]
  20.   - address: 172.24.103.5
  21.     hostname_override: node1
  22.     internal_address:
  23.     user: rancher
  24.     role: [worker]
  25.   - address: 172.24.103.3
  26.     hostname_override: node2
  27.     internal_address:
  28.     user: rancher
  29.     role: [worker]
  31. kubernetes_version: v1.17.2-rancher1-2
  32. services:
  33.   etcd:
  34.     extra_args:
  35.       auto-compaction-retention: 240
  36.       quota-backend-bytes: '6442450944'
  37.     snapshot: true
  38.     creation: 5m0s
  39.     retention: 24h
  40.   kubelet:
  41.     extra_args:
  42.       pod-manifest-path: "/etc/kubernetes/manifest/"
  43. network:
  44.   plugin: canal
  45.   options:
  46.     flannel_backend_type: "vxlan"
  47. ingress:
  48.   provider: nginx
  50. EOF
  52. rke up --config ./cluster.yml
  1. 配置kube```bash wget https://docs.rancher.cn/download/kubernetes/linux-amd64-v1.17.4-kubectl

chmod + x dddd

mv dfsf /usr/local/bin/kubectl

cp kube-configlll ~/.kube/config

yum install -y bash-completion

source /usr/share/bash-completion/bash_completion

source <(kubectl completion bash) ```