yum降级安装

  1. yum downgrade kubelet-1.21.6 kubeadm-1.21.6 kubectl-1.21.6

更新kubelet kubeadm kubectl版本

  1. yum update -y kubelet kubeadm kubectl

查看更新计划

  1. kubeadm upgrade plan
  1. [upgrade/config] Making sure the configuration is correct:
  2. [upgrade/config] Reading configuration from the cluster...
  3. [upgrade/config] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -o yaml'
  4. [preflight] Running pre-flight checks.
  5. [upgrade] Running cluster health checks
  6. [upgrade] Fetching available versions to upgrade to
  7. [upgrade/versions] Cluster version: v1.19.0
  8. [upgrade/versions] kubeadm version: v1.20.1
  9. [upgrade/versions] Latest stable version: v1.20.1
  10. [upgrade/versions] Latest stable version: v1.20.1
  11. [upgrade/versions] Latest version in the v1.19 series: v1.19.6
  12. [upgrade/versions] Latest version in the v1.19 series: v1.19.6
  13. Components that must be upgraded manually after you have upgraded the control plane with 'kubeadm upgrade apply':
  14. COMPONENT CURRENT AVAILABLE
  15. kubelet 1 x v1.19.0 v1.19.6
  16. 1 x v1.19.2 v1.19.6
  17. Upgrade to the latest version in the v1.19 series:
  18. COMPONENT CURRENT AVAILABLE
  19. kube-apiserver v1.19.0 v1.19.6
  20. kube-controller-manager v1.19.0 v1.19.6
  21. kube-scheduler v1.19.0 v1.19.6
  22. kube-proxy v1.19.0 v1.19.6
  23. CoreDNS 1.6.7 1.7.0
  24. etcd 3.4.9-1 3.4.13-0
  25. You can now apply the upgrade by executing the following command:
  26. kubeadm upgrade apply v1.19.6
  27. _____________________________________________________________________
  28. Components that must be upgraded manually after you have upgraded the control plane with 'kubeadm upgrade apply':
  29. COMPONENT CURRENT AVAILABLE
  30. kubelet 1 x v1.19.0 v1.20.1
  31. 1 x v1.19.2 v1.20.1
  32. Upgrade to the latest stable version:
  33. COMPONENT CURRENT AVAILABLE
  34. kube-apiserver v1.19.0 v1.20.1
  35. kube-controller-manager v1.19.0 v1.20.1
  36. kube-scheduler v1.19.0 v1.20.1
  37. kube-proxy v1.19.0 v1.20.1
  38. CoreDNS 1.6.7 1.7.0
  39. etcd 3.4.9-1 3.4.13-0
  40. You can now apply the upgrade by executing the following command:
  41. kubeadm upgrade apply v1.20.1
  42. _____________________________________________________________________
  43. The table below shows the current state of component configs as understood by this version of kubeadm.
  44. Configs that have a "yes" mark in the "MANUAL UPGRADE REQUIRED" column require manual config upgrade or
  45. resetting to kubeadm defaults before a successful upgrade can be performed. The version to manually
  46. upgrade to is denoted in the "PREFERRED VERSION" column.
  47. API GROUP CURRENT VERSION PREFERRED VERSION MANUAL UPGRADE REQUIRED
  48. kubeproxy.config.k8s.io v1alpha1 v1alpha1 no
  49. kubelet.config.k8s.io v1beta1 v1beta1 no
  50. _____________________________________________________________________

更新kubernetes版本

  1. kubeadm upgrade apply ${version} --v=5

修改etcd配置文件

  1. apiVersion: v1
  2. kind: Pod
  3. metadata:
  4. annotations:
  5. kubeadm.kubernetes.io/etcd.advertise-client-urls: https://127.0.0.1:2379
  6. creationTimestamp: null
  7. labels:
  8. component: etcd
  9. tier: control-plane
  10. name: etcd
  11. namespace: kube-system
  12. spec:
  13. containers:
  14. - command:
  15. - etcd
  16. - --advertise-client-urls=https://127.0.0.1:2379
  17. - --cert-file=/etc/kubernetes/pki/etcd/server.crt
  18. - --client-cert-auth=true
  19. - --data-dir=/var/lib/etcd
  20. - --initial-advertise-peer-urls=https://101.37.15.135:2380
  21. - --initial-cluster=izbp160f904j9af7s53jk7z=https://101.37.15.135:2380
  22. - --key-file=/etc/kubernetes/pki/etcd/server.key
  23. - --listen-client-urls=https://127.0.0.1:2379,https://127.0.0.1:2379
  24. - --listen-metrics-urls=http://127.0.0.1:2381
  25. - --listen-peer-urls=https://127.0.0.1:2380
  26. - --name=izbp160f904j9af7s53jk7z
  27. - --peer-cert-file=/etc/kubernetes/pki/etcd/peer.crt
  28. - --peer-client-cert-auth=true
  29. - --peer-key-file=/etc/kubernetes/pki/etcd/peer.key
  30. - --peer-trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt
  31. - --snapshot-count=10000
  32. - --trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt
  33. image: registry.aliyuncs.com/google_containers/etcd:3.4.13-0
  34. imagePullPolicy: IfNotPresent

kubeadm.kubernetes.io/etcd.advertise-client-urls,—advertise-client-urls,—listen-client-urls,—listen-peer-urls修改为127.0.0.1

重启kubelet

  1. systemctl restart kubelet