UOS 系统基于 CentOS 8 深度定制，虽可沿用 CentOS 8 的软件源，但 CentOS 8 已终止技术支持，可选的安全软件包极为有限，这无疑增加了 Kubernetes 1.28 部署过程的难度。
根据下面的步骤可以成功部署kuberntes集群
普通组件
yum install wget jq psmisc vim net-tools telnet yum-utils device-mapper-persistent-data lvm2 git -y基础组件
yum install conntrack iproute-tc -yipvs
yum install ipvsadm ipset sysstat libseccomp -yulimit -SHn 65535
cat <<EOF >> /etc/security/limits.conf
# Add custom limits for all users
* soft nofile 65536
* hard nofile 131072
* soft nproc 65535
* hard nproc 65535
* soft memlock unlimited
* hard memlock unlimited
EOF使用如下命令查看生效情况
开机自动加载
cat << EOF >> /etc/modules-load.d/ipvs.conf
ip_vs
ip_vs_lc
ip_vs_wlc
ip_vs_rr
ip_vs_wrr
ip_vs_lblc
ip_vs_lblcr
ip_vs_dh
ip_vs_sh
ip_vs_fo
ip_vs_nq
ip_vs_sed
ip_vs_ftp
ip_vs_sh
nf_conntrack
ip_tables
ip_set
xt_set
ipt_set
ipt_rpfilter
ipt_REJECT
ipip
overlay
br_netfilter
EOF重新加载模块
systemctl restart systemd-modules-load.servicecri和网络专项优化
cat <<EOF > /etc/sysctl.d/k8s.conf
net.ipv4.ip_forward = 1
net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-ip6tables = 1
fs.may_detach_mounts = 1
vm.overcommit_memory=1
vm.panic_on_oom=0
fs.inotify.max_user_watches=89100
fs.file-max=52706963
fs.nr_open=52706963
net.netfilter.nf_conntrack_max=2310720
net.ipv4.tcp_keepalive_time = 600
net.ipv4.tcp_keepalive_probes = 3
net.ipv4.tcp_keepalive_intvl =15
net.ipv4.tcp_max_tw_buckets = 36000
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_max_orphans = 327680
net.ipv4.tcp_orphan_retries = 3
net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_max_syn_backlog = 16384
net.ipv4.ip_conntrack_max = 65536
net.ipv4.tcp_max_syn_backlog = 16384
net.ipv4.tcp_timestamps = 0
net.core.somaxconn = 16384
EOF
sysctl --system
# 如果不生效，需要检查sysctl.conf里面是否有冲突的内核配置版本必须大于1.6否则会报错OCI有问题
因为默认使用了4.19版本内核找不到匹配的包，请使用命令直接安装3.1内核版本，已测试功能兼容，可以正常工作。
yum install https://mirrors.tuna.tsinghua.edu.cn/docker-ce/linux/centos/8Server/x86_64/stable/Packages/containerd.io-1.6.9-3.1.el8.x86_64.rpm生成默认配置，并更改参数
containerd config default > /etc/containerd/config.toml
# 修改Cgroup为true
SystemdCgroup = true
# 修改pause为 registry.aliyuncs.com/google_containers/pause:3.9 ,请使用较新的3.9版本。
sandbox_image = "registry.aliyuncs.com/google_containers/pause:3.9"
systemctl daemon-reload && systemctl restart containerd/etc/crictl.yaml
runtime-endpoint: unix:///run/containerd/containerd.sock
image-endpoint: unix:///run/containerd/containerd.sock
timeout: 10
debug: falsecat <<EOF > /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF最新就是1.28 不用锁定版本
yum install kubeadm kubelet kubectl
systemctl enable kubeletkubeadm config print init-defaults > /root/kubeadm.yml修改关键参数
...
镜像源： registry.aliyuncs.com/google_containers/
api地址： aa.bb.cc.dd
node名字： master?拉取默认镜像减少出错概率
kubeadm config images pull --config /root/kubeadm.yml初始化
kubeadm init --config /root/kubeadm.yml复制集群凭证
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config其他节点加入集群
kubeadm join 192.168.122.10:6443 --token abcdef.0123456789abcdef \
--discovery-token-ca-cert-hash sha256:1111c01dff5e4f70xxxxxxxx2b28117487ebe5这里是为了兼容flannel网络插件做的更改
--cluster-cidr=10.244.0.0/16 \
--allocate-node-cidrs=trueclusterCIDR: 10.244.0.0/16这个版本的系统calico是不用想了，实测calico 1.30、1.29、1.28版本都不可能安装。选择flannel的vxlan模式安装
关联项目 https://github.com/flannel-io/flannel
wget https://github.com/flannel-io/flannel/releases/latest/download/kube-flannel.yml注意点
If you use custom podCIDR (not 10.244.0.0/16) you first need to download the above manifest and modify the network to match your one.部署
kubectl apply -f flannel.yaml
reboot此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。