使用kubeadm安装kubernetes集群脚本（更新日期：2024.7.19） ...

现在kubernetes使用的 CRI（容器运行时）主流的是docker和containerd，以下是一个自动化安装kubernetes集群的脚本，并且支持两种运行时，按照如下步调操作即可。
系统版本为centos 7.9，docker的安装方式我已经试验过没问题了
1. 添加脚本

1. vi /usr/local/bin/kubestart

复制代码

将以下内容复制进去

1. #! /bin/bash
2. ###############################################
3. ##       Simple Install Your K8S
4. ###############################################
6. kube_pod_subnet="10.244.0.0/16"
7. # kubernetes版本
8. kube_version="1.23.9"
9. kube_image_server="registry.cn-hangzhou.aliyuncs.com/google_containers"
10. crictl_url="https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.21.0/"
11. crictl_name="crictl-v1.21.0-linux-amd64.tar.gz"
13. # 关闭SElinux
14. function init-env-disable-selinux()
15. {
16.   sudo setenforce 0
17.   sudo sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config
18. }
20. # 禁用防火墙
21. function init-env-disable-firewalld()
22. {
23.   sudo systemctl stop firewalld
24.   sudo systemctl disable --now firewalld
25. }
27. # 添加 kubernetes.repo 文件和一些必要工具
28. function init-env-repository()
29. {
30.   # kubernetes.repo
31.   sudo echo -e "[kubernetes] \nname=Kubernetes \nbaseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/ \nenabled=1 \ngpgcheck=1 \nrepo_gpgcheck=1 \ngpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg" > /etc/yum.repos.d/kubernetes.repo
32.   # replace base.repo
33.   mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.bak
34.   echo '# CentOS-Base.repo' > CentOS-Base.repo
35.   echo '#' >> CentOS-Base.repo
36.   echo '# The mirror system uses the connecting IP address of the client and the' >> CentOS-Base.repo
37.   echo '# update status of each mirror to pick mirrors that are updated to and' >> CentOS-Base.repo
38.   echo '# geographically close to the client.  You should use this for CentOS updates' >> CentOS-Base.repo
39.   echo '# unless you are manually picking other mirrors.' >> CentOS-Base.repo
40.   echo '#' >> CentOS-Base.repo
41.   echo '# If the mirrorlist= does not work for you, as a fall back you can try the ' >> CentOS-Base.repo
42.   echo '# remarked out baseurl= line instead.' >> CentOS-Base.repo
43.   echo '#' >> CentOS-Base.repo
44.   echo '#' >> CentOS-Base.repo
45.   echo ' ' >> CentOS-Base.repo
46.   echo '[base]' >> CentOS-Base.repo
47.   echo 'name=CentOS-$releasever - Base - mirrors.aliyun.com' >> CentOS-Base.repo
48.   echo 'failovermethod=priority' >> CentOS-Base.repo
49.   echo 'baseurl=https://mirrors.aliyun.com/centos/$releasever/os/$basearch/' >> CentOS-Base.repo
50.   echo '        https://mirrors.aliyuncs.com/centos/$releasever/os/$basearch/' >> CentOS-Base.repo
51.   echo '        https://mirrors.cloud.aliyuncs.com/centos/$releasever/os/$basearch/' >> CentOS-Base.repo
52.   echo 'gpgcheck=1' >> CentOS-Base.repo
53.   echo 'gpgkey=https://mirrors.aliyun.com/centos/RPM-GPG-KEY-CentOS-7' >> CentOS-Base.repo
54.   echo ' ' >> CentOS-Base.repo
55.   echo '#released updates ' >> CentOS-Base.repo
56.   echo '[updates]' >> CentOS-Base.repo
57.   echo 'name=CentOS-$releasever - Updates - mirrors.aliyun.com' >> CentOS-Base.repo
58.   echo 'failovermethod=priority' >> CentOS-Base.repo
59.   echo 'baseurl=https://mirrors.aliyun.com/centos/$releasever/updates/$basearch/' >> CentOS-Base.repo
60.   echo '        https://mirrors.aliyuncs.com/centos/$releasever/updates/$basearch/' >> CentOS-Base.repo
61.   echo '        https://mirrors.cloud.aliyuncs.com/centos/$releasever/updates/$basearch/' >> CentOS-Base.repo
62.   echo 'gpgcheck=1' >> CentOS-Base.repo
63.   echo 'gpgkey=https://mirrors.aliyun.com/centos/RPM-GPG-KEY-CentOS-7' >> CentOS-Base.repo
64.   echo ' ' >> CentOS-Base.repo
65.   echo '#additional packages that may be useful' >> CentOS-Base.repo
66.   echo '[extras]' >> CentOS-Base.repo
67.   echo 'name=CentOS-$releasever - Extras - mirrors.aliyun.com' >> CentOS-Base.repo
68.   echo 'failovermethod=priority' >> CentOS-Base.repo
69.   echo 'baseurl=https://mirrors.aliyun.com/centos/$releasever/extras/$basearch/' >> CentOS-Base.repo
70.   echo '        https://mirrors.aliyuncs.com/centos/$releasever/extras/$basearch/' >> CentOS-Base.repo
71.   echo '        https://mirrors.cloud.aliyuncs.com/centos/$releasever/extras/$basearch/' >> CentOS-Base.repo
72.   echo 'gpgcheck=1' >> CentOS-Base.repo
73.   echo 'gpgkey=https://mirrors.aliyun.com/centos/RPM-GPG-KEY-CentOS-7' >> CentOS-Base.repo
74.   echo ' ' >> CentOS-Base.repo
75.   echo '#additional packages that extend functionality of existing packages' >> CentOS-Base.repo
76.   echo '[centosplus]' >> CentOS-Base.repo
77.   echo 'name=CentOS-$releasever - Plus - mirrors.aliyun.com' >> CentOS-Base.repo
78.   echo 'failovermethod=priority' >> CentOS-Base.repo
79.   echo 'baseurl=https://mirrors.aliyun.com/centos/$releasever/centosplus/$basearch/' >> CentOS-Base.repo
80.   echo '        https://mirrors.aliyuncs.com/centos/$releasever/centosplus/$basearch/' >> CentOS-Base.repo
81.   echo '        https://mirrors.cloud.aliyuncs.com/centos/$releasever/centosplus/$basearch/' >> CentOS-Base.repo
82.   echo 'gpgcheck=1' >> CentOS-Base.repo
83.   echo 'enabled=0' >> CentOS-Base.repo
84.   echo 'gpgkey=https://mirrors.aliyun.com/centos/RPM-GPG-KEY-CentOS-7' >> CentOS-Base.repo
85.   echo ' ' >> CentOS-Base.repo
86.   echo '#contrib - packages by Centos Users' >> CentOS-Base.repo
87.   echo '[contrib]' >> CentOS-Base.repo
88.   echo 'name=CentOS-$releasever - Contrib - mirrors.aliyun.com' >> CentOS-Base.repo
89.   echo 'failovermethod=priority' >> CentOS-Base.repo
90.   echo 'baseurl=https://mirrors.aliyun.com/centos/$releasever/contrib/$basearch/' >> CentOS-Base.repo
91.   echo '        https://mirrors.aliyuncs.com/centos/$releasever/contrib/$basearch/' >> CentOS-Base.repo
92.   echo '        https://mirrors.cloud.aliyuncs.com/centos/$releasever/contrib/$basearch/' >> CentOS-Base.repo
93.   echo 'gpgcheck=1' >> CentOS-Base.repo
94.   echo 'enabled=0' >> CentOS-Base.repo
95.   echo 'gpgkey=https://mirrors.aliyun.com/centos/RPM-GPG-KEY-CentOS-7' >> CentOS-Base.repo
96.   echo ' ' >> CentOS-Base.repo
98.   # docker repo
99.   sudo yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
101.   cd /etc/yum.repos.d
102.   for file in *.repo; do
103.     if [[ "$file" != "CentOS-Base.repo" && "$file" != "kubernetes.repo" && "$file" != "docker-ce.repo" ]]; then
104.       mv "$file" "$file.bak"
105.     fi
106.   done
107.   yum clean all
108.   yum makecache
109.   # tools
110.   sudo yum install -y yum-utils device-mapper-persistent-data lvm2
111. }
113. # 安装 kubelet kubeadm kubectl
114. function init-install-kube()
115. {
116.   sudo yum install -y kubeadm-${kube_version} kubectl-${kube_version} kubelet-${kube_version} --disableexcludes=kubernetes
117. }
119. # 安装docker
120. function init-docker()
121. {
122.   sudo yum install docker-ce docker-ce-cli containerd.io
123.   systemctl start docker
124.   systemctl enable docker
125.   # 更改 cgroupdriver 为 systemd，设置代理
126.   echo -e "{" > /etc/docker/daemon.json
127.   echo -e "  "exec-opts": ["native.cgroupdriver=systemd"]," >> /etc/docker/daemon.json
128.   echo -e "  "registry-mirrors": ["https://docker.m.daocloud.io"]" >> /etc/docker/daemon.json
129.   echo -e "}" >> /etc/docker/daemon.json
130.   systemctl restart docker
131.   systemctl enable kubelet
132. }
134. # 安装containerd
135. function init-containerd()
136. {
137.   sudo yum install -y wget containerd.io openvswitch* certbot
138.   mkdir -p /etc/containerd
140.   cd /home
141.   wget $crictl_url$crictl_name
142.   tar zxf $crictl_name
143.   mv crictl /usr/local/bin/
145.   rm -rf $crictl_name
147.   echo "overlay" > /etc/modules-load.d/containerd.conf  
148.   echo "br_netfilter" >> /etc/modules-load.d/containerd.conf  
150.   sudo modprobe overlay
151.   sudo modprobe br_netfilter
153.   echo "net.bridge.bridge-nf-call-iptables  = 1" > /etc/sysctl.d/99-kubernetes-cri.conf
154.   echo "net.ipv4.ip_forward                 = 1" >> /etc/sysctl.d/99-kubernetes-cri.conf
155.   echo "net.bridge.bridge-nf-call-ip6tables = 1" >> /etc/sysctl.d/99-kubernetes-cri.conf
157.   sudo sysctl --system
159.   sudo containerd config default > /etc/containerd/config.toml
161.   sed -i 's/k8s.gcr.io\/pause:3.1/registry.cn-hangzhou.aliyuncs.com\/google_containers\/pause:3.2/g' /etc/containerd/config.toml
163.   sudo systemctl restart containerd
164.   sudo systemctl enable containerd
166.   echo "KUBELET_EXTRA_ARGS=--cgroup-driver=systemd" > /etc/sysconfig/kubelet
168.   echo "runtime-endpoint: unix:///run/containerd/containerd.sock" > /etc/crictl.yaml
169.   echo "image-endpoint: unix:///run/containerd/containerd.sock" >> /etc/crictl.yaml
170.   echo "timeout: 10" >> /etc/crictl.yaml
171.   echo "debug: false" >> /etc/crictl.yaml
173.   sudo systemctl restart kubelet
174.   sudo systemctl enable kubelet
175. }
177. function init-env-kubeconfig()
178. {
179.   mkdir /etc/kubernetes
181.   echo -e "apiVersion: kubeadm.k8s.io/v1beta3" > /etc/kubernetes/kubeadm.yaml
182.   echo -e "kind: InitConfiguration" >> /etc/kubernetes/kubeadm.yaml
183.   echo -e "bootstrapTokens:" >> /etc/kubernetes/kubeadm.yaml
184.   echo -e "  - ttl: "0"" >> /etc/kubernetes/kubeadm.yaml
185.   echo -e "---" >> /etc/kubernetes/kubeadm.yaml
186.   echo -e "apiVersion: kubeadm.k8s.io/v1beta3" >> /etc/kubernetes/kubeadm.yaml
187.   echo -e "kind: ClusterConfiguration" >> /etc/kubernetes/kubeadm.yaml
188.   echo -e "networking:" >> /etc/kubernetes/kubeadm.yaml
189.   echo -e "  podSubnet: "${kube_pod_subnet}"" >> /etc/kubernetes/kubeadm.yaml
190.   echo -e "kubernetesVersion: "v${kube_version}"" >> /etc/kubernetes/kubeadm.yaml
191.   echo -e "imageRepository: "${kube_image_server}"" >> /etc/kubernetes/kubeadm.yaml
192. }
194. function init-env-kubecomp()
195. {
196.   # default calico cni
197.   echo -e "https://docs.projectcalico.org/manifests/calico.yaml" > /etc/kubernetes/kubeenv.list
198.   # flannel: cni config url
199.   # echo -e "https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml" > /etc/kubernetes/kubeenv.list
200. }
202. function init-env()
203. {
204.   init-env-disable-selinux
205.   init-env-disable-firewalld
206.   init-env-repository
207.   init-install-kube
208.   if [[ -z $2 ]]
209.   then
210.     init-docker
211.   elif [[ $2 == "docker" ]]
212.   then
213.     init-docker
214.   elif [[ $2 == "containerd" ]]
215.   then
216.     init-containerd
217.   else
218.     echo "only support docker or containerd"
219.     exit 1
220.   fi
221.   init-env-kubeconfig
222.   init-env-kubecomp
223. }
225. function run-kube()
226. {
227.   sudo swapoff -a && sysctl -w vm.swappiness=0
228.   sudo sed -ri '/^[^#]*swap/s@^@#@' /etc/fstab
230.   systemctl restart kubelet
232.   echo "1" > /proc/sys/net/bridge/bridge-nf-call-iptables
233.   echo "1" > /proc/sys/net/ipv4/ip_forward
235.   kubeadm init --config /etc/kubernetes/kubeadm.yaml
237.   rm -rf $HOME/.kube
238.   mkdir -p $HOME/.kube
239.   sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
240.   sudo chown $(id -u):$(id -g) $HOME/.kube/config
241.   iptables -P FORWARD ACCEPT
242.   
243.   while read line
244.   do
245.     kubectl apply -f $line
246.   done  < /etc/kubernetes/kubeenv.list
247. }
249. function help()
250. {
251.   echo -e "Commands:"
252.   echo -e "  init-env      :\t(Init): Initialize the environment configuration, simplify configuring node, such as disable selinux, install docker or containerd..."
253.   echo -e "  run-kube      :\t(Init): deploy Kubernetes as your want by editing /etc/kubernetes/kubeenv.list. Now it includes calico, flannel"
254. }
256. case $1 in
257.   "init-env")
258.     init-env $*
259.     ;;
260.   "run-kube")
261.     run-kube $*
262.     ;;
263.   "--help")
264.     help
265.     ;;
266.   *)
267.   help
268.   ;;
269. esac

复制代码

2. 修改为可执行文件

1. sudo chmod +x /usr/local/bin/kubestart

复制代码

3. 支持的命令

然后你就可以使用以下两条命令去创建你的k8s集群了

1. # 初始化各种环境配置
2. kubestart init-env
4. # 启动集群，应用cni
5. kubestart run-kube
7. # 帮助命令
8. kubestart help

复制代码

4. 可能遇到的问题

• 关于镜像拉取，现在dockerhub已经不能使用，脚本里面设置了镜像代理：https://docker.m.daocloud.io，拉不下来的可以自己使用docker pull命令多拉几次，仍旧欠好使或者您的集群可以顺利从dockerhub拉去镜像不必要代理的话，可以去掉这个设置：
  

1. vi /etc/docker/daemon.json
2. # 删除掉这行
3. "registry-mirrors": ["https://docker.m.daocloud.io"]
4. # 删除掉之后注意保持json文件格式正确，上一行末尾的逗号去掉，然后保存执行
5. systemctl restart docker
6. systemctl enable kubelet

复制代码

PS 脚本分析：

• 脚本开头的几个参数，是关于你想使用的 k8s 版本以及 crictl 安装包，想要使用其他版本的可以在开头改一下。
  

想要检察现在支持哪些版本可以使用以下命令：

1. yum list --showduplicates kubeadm --disableexcludes=kubernetes

复制代码

• kubestart init-env 命令后面还可以添加其他参数，选择容器运行时，可以使用 docker 或者 containerd，默认是 docker
  
• 执行 kubeadm init 命令使用的是 /etc/kubernetes/kubeadm.yaml 设置文件启动的，如果有特殊必要，在执行完 init-env 命令后去修改这个文件内容就可以，其实启动集群的方式就是这条命令：
  

1. kubeadm init --config /etc/kubernetes/kubeadm.yaml

复制代码

• 默认使用的是 calico 作为 cni 应用，你如果想使用其他的，去修改一下脚本里面的 init-env-kubecomp 函数即可。
  

免责声明：如果侵犯了您的权益，请联系站长，我们会及时删除侵权内容，谢谢合作！更多信息从访问主页：qidao123.com:ToB企服之家，中国第一个企服评测及商务社交产业平台。