锐客网

  1. 首页 > 睿知 > it技术 > >

ansible搭建k8s

IT知识ansible搭建

高斋晓开卷，独共圣人语。这篇文章主要讲述ansible搭建k8s相关的知识，希望能为你提供帮助。
1.主机规划

类型
主机ip
域名
vip
k8s-master
192.168.47.47
k8s-master.example.com
192.168.47.49
k8s-harbar/haproxy
192.168.47.48
k8s-?harbar.example.com


k8s-etcd1
?192.168.47.50
k8s-???etcd1.example.com


k8s-etcd2
?192.168.47.51
k8s-???etcd2.example.com


k8s-etcd3
?192.168.47.52
k8s-???etcd3?.example.com


k8s-node1
?192.168.47.53
k8s-???node1.example.com


k8s-node2
?192.168.47.54
k8s-???node2.example.com


环境
root@ubuntu:~# cat /etc/issue
Ubuntu 18.04.3 LTS \\n \\l

2.基础环境准备2.1.更改网卡名称为eth0
vim /etc/default/grub
------------------------------------------------------
GRUB_CMDLINE_LINUX="net.ifnames=0 biosdevname=0"
------------------------------------------------------
update-grub

2.2.更改系统ip地址
vim /etc/netplan/01-netcfg.yaml
------------------------------------------------------
network:
version: 2
renderer: networkd
ethernets:
eth0:
dhcp4: no
addresses: [192.168.47.47/24]
gateway4: 192.168.47.2
nameservers:
addresses: [192.168.47.2]
------------------------------------------------------
netplanapply

2.3.更改主机名
cat /etc/hostname
------------------------
k8s-master.example.com
------------------------

2.4.apt源改为阿里源
??https://developer.aliyun.com/mirror/ubuntu?spm=a2c6h.13651102.0.0.3e221b11mmN9H3??
apt-get upgrade

2.5.安装常用命令
apt-getinstall iproute2ntpdatetcpdump telnet traceroute \\
nfs-kernel-server nfs-commonlrzsz treeopenssl libssl-dev \\
libpcre3 libpcre3-dev zlib1g-dev ntpdate tcpdump telnet traceroute \\
gcc openssh-server lrzsz treeopenssl libssl-dev libpcre3 libpcre3-dev \\
zlib1g-dev ntpdate tcpdump telnet traceroute iotop unzip zip -y

2.6.其他配置
grep "^[a-Z]" /etc/sysctl.conf
---------------------------------------------
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
vm.swappiness=0
net.ipv4.ip_forward = 1
---------------------------------------------

2.7.安装docker
【ansible搭建k8s】参考:??https://developer.aliyun.com/article/110806??
#方式1:官方安装脚本自动安装
curl -fsSL https://get.docker.com | bash -s docker --mirror Aliyun

#方式2:
apt-get update
apt-get -y install apt-transport-https ca-certificates curl software-properties-common
curl -fsSL http://mirrors.aliyun.com/docker-ce/linux/ubuntu/gpg | sudo apt-key add -
add-apt-repository "deb [arch=amd64] http://mirrors.aliyun.com/docker-ce/linux/ubuntu $(lsb_release -cs) stable"
apt-get -y update & & apt-get -y install docker-ce
docker info

#镜像加速：
sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json < < -EOF

"registry-mirrors": ["https://vmaivck0.mirror.aliyuncs.com"]

EOF
sudo systemctl daemon-reload
sudo systemctl restart docker

2.8.禁用swap,selinux(ubuntu没有),iptables
swapoff -a #临时关闭swap

2.9master/node/etcd安装
apt-get install python2.7 -y & & ln -s /usr/bin/python2.7 /usr/bin/python

2.10.reboot做快照
3.keepalived
apt-get install keepalived-y

cp /usr/share/doc/keepalived/samples/keepalived.conf.vrrp/etc/keepalived/keepalived.conf
vim /etc/keepalived/keepalived.conf
-----------------------------------------------------------------
virtual_ipaddress
192.168.47.49/24 dev eth0 label eth0:1#设置的vip必须被master访问

-----------------------------------------------------------------
systemctl restart keepalived & & systemctl enablekeepalived

4.harproxy
apt-get install haproxy -y

vim /etc/haproxy/haproxy.cfg
----

    推荐阅读


    上一篇：Gitlab其他用户登录返回500错误解决

    下一篇：linux硬核知识点