1
hostnamectl hostname k8smaster1
2

3
hostnamectl hostname k8sworker1
4

5
hostnamectl hostname k8sworker2

1
172.16.126.130 k8smaster1
2
172.16.126.131 k8sworker1
3
172.16.126.132 k8sworker2

1
# 结果显示空白则说明swap已经关闭
2
swapon --show

1
swapoff -a

1
sed -i 's/.*swap.*/#&/' /etc/fstab

1
systemctl list-unit-files --type=swap
2
# 找到swap的unit文件,例如dev-nvme0n1p3.swap
3
systemctl mask dev-nvme0n1p3.swap
4
重启系统

1
iptables -F
2
systemctl stop iptables nftables
3
systemctl disable iptables nftables
4

5
ufw disable

1
modprobe br_netfilter

1
cat << EOF | tee /etc/modules-load.d/br_netfilter.conf
2
br_netfilter
3
EOF

1
lsmod | grep "br_netfilter"

1
cat > /etc/sysctl.d/k8s.conf <<EOF
2
net.bridge.bridge-nf-call-ip6tables = 1
3
net.bridge.bridge-nf-call-iptables = 1
4
net.ipv4.ip_forward = 1
5
EOF

1
sysctl --system

1
apt install ntpdate -y
2
ntpdate ntp.aliyun.com
3

4
添加定时任务
5
crontab -e
6
# 添加内容,并保存
7
0 0 * * * ntpdate ntp.aliyun.com
8

9
立即生效
10
service cron restart

1
sudo groupadd docker
2
sudo usermod -aG docker $USER
3
newgrp docker
4

5
sudo systemctl enable docker.service
6
sudo systemctl enable containerd.service

1
cat << EOF > /etc/docker/daemon.json
2
{
3
    "exec-opts": ["native.cgroupdriver=systemd"],
4
    "registry-mirrors": [
5
    "https://docker.1panel.live",
6
    "https://docker.m.daocloud.io",
7
    "https://docker.1ms.run",
8
    "https://ghcr-pull.ygxz.in"
9
  ]
10
}
11
EOF

1
systemctl daemon-reload
2
systemctl restart docker
3
systemctl status docker

1
sudo apt-get update
2
# apt-transport-https 可能是一个虚拟包（dummy package）；如果是的话，你可以跳过安装这个包
3
sudo apt-get install -y apt-transport-https ca-certificates curl gpg
4

5

6
# 如果 `/etc/apt/keyrings` 目录不存在，则应在 curl 命令之前创建它，请阅读下面的注释。
7
# sudo mkdir -p -m 755 /etc/apt/keyrings
8
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.31/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg
9

10
在低于 Debian 12 和 Ubuntu 22.04 的发行版本中，`/etc/apt/keyrings` 默认不存在。 应在 curl 命令之前创建它
11
# 此操作会覆盖 /etc/apt/sources.list.d/kubernetes.list 中现存的所有配置。
12
echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.31/deb/ /' | sudo tee /etc/apt/sources.list.d/kubernetes.list

1
sudo apt-get update
2
sudo apt-get install -y kubelet kubeadm kubectl
3
sudo apt-mark hold kubelet kubeadm kubectl

1
systemctl enable kubelet

1
kubeadm version
2
得到GitVersion:"v1.31.0"

1
kubeadm config images list --image-repository registry.cn-hangzhou.aliyuncs.com/google_containers --kubernetes-version=v1.31.0| grep pause

1
systemctl daemon-reload
2
systemctl enable --now cri-docker.socket
3
systemctl restart cri-docker
4
systemctl status cri-docker

1
kubeadm config print init-defaults > kubeadm-config.yaml

1
vim kubeadm-config.yaml

1
apiVersion: kubeadm.k8s.io/v1beta4
2
bootstrapTokens:
3
- groups:
4
  - system:bootstrappers:kubeadm:default-node-token
5
  token: abcdef.0123456789abcdef
6
  # token 24小时过期
7
  ttl: 24h0m0s
8
  usages:
9
  - signing
10
  - authentication
11
kind: InitConfiguration
12
localAPIEndpoint:
13
  # 修改为当前主机ip,例如我的是172.16.126.130
14
  advertiseAddress: 172.16.126.130
15
  bindPort: 6443
16
nodeRegistration:
17
  # 因为我使用的是cri-dockerd,因此修改此处
18
  criSocket: unix:///var/run/cri-dockerd.sock
19
  imagePullPolicy: IfNotPresent
20
  imagePullSerial: true
21
  # 节点名修改为当前主机名
22
  name: k8smaster1
23
  taints: null
24
timeouts:
25
  controlPlaneComponentHealthCheck: 4m0s
26
  discovery: 5m0s
27
  etcdAPICall: 2m0s
28
  kubeletHealthCheck: 4m0s
29
  kubernetesAPICall: 1m0s
30
  tlsBootstrap: 5m0s
31
  upgradeManifests: 5m0s
32
---
33
apiServer: {}
34
apiVersion: kubeadm.k8s.io/v1beta4
35
# 配置CA certificate有效期,默认是10年,下面改为100年
36
caCertificateValidityPeriod: 876000h0m0s
37
# 配置non-CA certificate有效期,默认1年,下面改为100年
38
certificateValidityPeriod: 876000h0m0s
39
certificatesDir: /etc/kubernetes/pki
40
clusterName: kubernetes
41
controllerManager: {}
42
dns: {}
43
encryptionAlgorithm: RSA-2048
44
etcd:
45
  local:
46
    dataDir: /var/lib/etcd
47
# 修改拉取镜像的仓库为阿里云,因为默认的仓库在国外,国内环境下载不了
48
imageRepository: registry.cn-hangzhou.aliyuncs.com/google_containers
49
kind: ClusterConfiguration
50
# 指定k8s版本
51
kubernetesVersion: 1.31.0
52
networking:
53
  dnsDomain: cluster.local
54
  # service网段保持默认即可
55
  serviceSubnet: 10.96.0.0/12
56
  # 添加下面一行,指定Pod所使用的子网,在下面配置网络扩展时需用到
57
  podSubnet: 10.244.0.0/16
58
proxy: {}
59
scheduler: {}

1
kubeadm init --config kubeadm-config.yaml --v=9
2
或
3
kubeadm init --config kubeadm-config.yaml --upload-certs --v=9

1
  mkdir -p $HOME/.kube
2
  sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
3
  sudo chown $(id -u):$(id -g) $HOME/.kube/config

1
kubeadm token create --print-join-command

1
kubeadm join 172.16.126.130:6443 --token abcdef.0123456789abcdef \
2
        --discovery-token-ca-cert-hash sha256:f15048f57d1038c8e125b88c9084c1609160d510b8d1bafb5e22058b82cd5  --cri-socket unix:///var/run/cri-dockerd.sock

1
root@k8smaster1:~# kubectl get nodes
2
NAME         STATUS     ROLES           AGE     VERSION
3
k8smaster1   NotReady   control-plane   14m     v1.31.0
4
k8sworker1   NotReady   <none>          4m1s    v1.31.0
5
k8sworker2   NotReady   <none>          4m12s   v1.31.0

1
kubectl label node k8sworker1 node-role.kubernetes.io/worker=worker
2
kubectl label node k8sworker2 node-role.kubernetes.io/worker=worker