基于rancher搭建k8s

快速搭建rancher

-v 用来挂载证书，如果没有证书，可以删除，默认使用rancher内置的自签证书

1. docker run -d --name rancher --privileged --restart=unless-stopped \
2.     -p 10080:80 -p 10443:443 \
3.     -v /root/tmp/rancher.mb.com.crt:/etc/rancher/ssl/cert.pem \
4.     -v /root/tmp/rancher.mb.com.key:/etc/rancher/ssl/key.pem \
5.     -v /root/tmp/cacerts.pem:/etc/rancher/ssl/cacerts.pem \
6.     rancher/rancher:v2.7.5

复制代码

访问 https://ip:10443

rancher启动较慢，可以稍等片刻，大约半分钟，即可访问。前提是防火墙放行端口10443

获取rancher UI 默认的登录密码

浏览器访问到rancher的登录页面后，执行shell  docker logs  rancher  2>&1 | grep "Bootstrap Password:"   查看默认的登录密码

登录成功后，进入集群管理


创建集群

由于docker run的时候没有信任的证书，所以此处打勾

复制注册命令在需要安装的k8s机器上执行命令，静默安装. 我这边4h8g的机器大概在5分钟内安装完毕
rancher查看安装日志

安装过程中，会看到些许ERROR日志， 只要这个日志不会卡在那里1分钟以上， 就不要人为干预，rancher会自行调整

1. docker logs -f rancher

复制代码

安装过程中的图


安装完成。节点状态变成Active，表示k8s可用。

需要安装k8s集群时，拿着命令在目标机上执行即可

遇到的坑

执行创建k8s的命令后， 一直都在Update状态

• 背景说明：安装完成后，想再折腾一下，于是删除节点，再重复上面的操作，发现一直都创建不成功
  
• 解决办法
  
  
  
  • 在rancher移除节点
    
  • 在rancher集群管理，删除前面创建的集群
    
  • 在k8s机器上执行卸载命令， 命令一般放在/usr/local/bin目录，可以通过 shell /usr/local/bin/k3s-uninstall.sh  查找
    
  • 如果安装的k3s,执行 k3s-uninstall.sh 和 rancher-system-agent-uninstall.sh ；如果安装的是rke2,则卸载rke2的命令，rke2卸载命令的查找方法和k3s的查找方法类似
    
  
  

卸载命令备份

这些命令是rancher安装集群的时候自动生成的，做个备份在这里，防止失联

k3s-uninstall.sh

1. #!/bin/sh
2. set -x
3. [ $(id -u) -eq 0 ] || exec sudo $0 $@
5. /usr/local/bin/k3s-killall.sh
7. if command -v systemctl; then
8.     systemctl disable k3s
9.     systemctl reset-failed k3s
10.     systemctl daemon-reload
11. fi
12. if command -v rc-update; then
13.     rc-update delete k3s default
14. fi
16. rm -f /etc/systemd/system/k3s.service
17. rm -f /etc/systemd/system/k3s.service.env
19. remove_uninstall() {
20.     rm -f /usr/local/bin/k3s-uninstall.sh
21. }
22. trap remove_uninstall EXIT
24. if (ls /etc/systemd/system/k3s*.service || ls /etc/init.d/k3s*) >/dev/null 2>&1; then
25.     set +x; echo 'Additional k3s services installed, skipping uninstall of k3s'; set -x
26.     exit
27. fi
29. for cmd in kubectl crictl ctr; do
30.     if [ -L /usr/local/bin/$cmd ]; then
31.         rm -f /usr/local/bin/$cmd
32.     fi
33. done
35. rm -rf /etc/rancher/k3s
36. rm -rf /run/k3s
37. rm -rf /run/flannel
38. rm -rf /var/lib/rancher/k3s
39. rm -rf /var/lib/kubelet
40. rm -f /usr/local/bin/k3s
41. rm -f /usr/local/bin/k3s-killall.sh
43. if type yum >/dev/null 2>&1; then
44.     yum remove -y k3s-selinux
45.     rm -f /etc/yum.repos.d/rancher-k3s-common*.repo
46. elif type rpm-ostree >/dev/null 2>&1; then
47.     rpm-ostree uninstall k3s-selinux
48.     rm -f /etc/yum.repos.d/rancher-k3s-common*.repo
49. elif type zypper >/dev/null 2>&1; then
50.     uninstall_cmd="zypper remove -y k3s-selinux"
51.     if [ "${TRANSACTIONAL_UPDATE=false}" != "true" ] && [ -x /usr/sbin/transactional-update ]; then
52.         uninstall_cmd="transactional-update --no-selfupdate -d run $uninstall_cmd"
53.     fi
54.     $uninstall_cmd
55.     rm -f /etc/zypp/repos.d/rancher-k3s-common*.repo
56. fi

复制代码

rancher-system-agent-uninstall.sh

1. #!/bin/sh
3. if [ ! $(id -u) -eq 0 ]; then
4.   fatal "This script must be run as root."
5. fi
7. # Environment variables:
8. #   System Agent Variables
9. #   - CATTLE_AGENT_CONFIG_DIR (default: /etc/rancher/agent)
10. #   - CATTLE_AGENT_VAR_DIR (default: /var/lib/rancher/agent)
11. #   - CATTLE_AGENT_BIN_PREFIX (default: /usr/local)
12. #
14. # warn logs the given argument at warn log level.
15. warn() {
16.     echo "[WARN] " "$@" >&2
17. }
19. # check_target_mountpoint return success if the target directory is on a dedicated mount point
20. check_target_mountpoint() {
21.     mountpoint -q "${CATTLE_AGENT_BIN_PREFIX}"
22. }
24. # check_target_ro returns success if the target directory is read-only
25. check_target_ro() {
26.     touch "${CATTLE_AGENT_BIN_PREFIX}"/.r-sa-ro-test && rm -rf "${CATTLE_AGENT_BIN_PREFIX}"/.r-sa-ro-test
27.     test $? -ne 0
28. }
30. setup_env() {
31.     if [ -z "${CATTLE_AGENT_CONFIG_DIR}" ]; then
32.         CATTLE_AGENT_CONFIG_DIR=/etc/rancher/agent
33.     fi
35.     if [ -z "${CATTLE_AGENT_VAR_DIR}" ]; then
36.         CATTLE_AGENT_VAR_DIR=/var/lib/rancher/agent
37.     fi
39.     # --- resources are installed to /usr/local by default, except if /usr/local is on a separate partition or is
40.     # --- read-only in which case we go into /opt/rancher-system-agent. If variable isn't passed and this criteria is
41.     # --- true, assume that is what was done, since removing from /usr/local wouldn't be possible anyway.
42.     if [ -z "${CATTLE_AGENT_BIN_PREFIX}" ]; then
43.         CATTLE_AGENT_BIN_PREFIX="/usr/local"
44.         if check_target_mountpoint || check_target_ro; then
45.             CATTLE_AGENT_BIN_PREFIX="/opt/rancher-system-agent"
46.             warn "/usr/local is read-only or a mount point; checking ${CATTLE_AGENT_BIN_PREFIX}"
47.         fi
48.     fi
50. }
52. uninstall_stop_services() {
53.     if command -v systemctl >/dev/null 2>&1; then
54.         systemctl stop rancher-system-agent
55.     fi
56. }
58. uninstall_remove_self() {
59.     rm -f "${CATTLE_AGENT_BIN_PREFIX}/bin/rancher-system-agent-uninstall.sh"
60. }
62. uninstall_disable_services()
63. {
64.     if command -v systemctl >/dev/null 2>&1; then
65.         systemctl disable rancher-system-agent || true
66.         systemctl reset-failed rancher-system-agent || true
67.         systemctl daemon-reload
68.     fi
69. }
71. uninstall_remove_files() {
72.     rm -f /etc/systemd/system/rancher-system-agent.service
73.     rm -f /etc/systemd/system/rancher-system-agent.env
74.     rm -rf ${CATTLE_AGENT_VAR_DIR}
75.     rm -rf ${CATTLE_AGENT_CONFIG_DIR}
76.     rm -f "${CATTLE_AGENT_BIN_PREFIX}/bin/rancher-system-agent"
77. }
79. setup_env
80. uninstall_stop_services
81. trap uninstall_remove_self EXIT
82. uninstall_disable_services
83. uninstall_remove_files

复制代码

免责声明：如果侵犯了您的权益，请联系站长，我们会及时删除侵权内容，谢谢合作！