基础系统配置
- 2c/4g内存/40g硬盘（该配置仅测试用）
- 最小化安装Ubuntu 16.04 server或者CentOS 7 Minimal
- 配置基础网络、更新源、SSH登录等
环境规划
| ip | 主机名 | 角色 |
|---|---|---|
| 192.168.199.113 | yfm13 | master1 ，etcd |
| 192.168.199.114 | yfm14 | master2 ， |
| 192.168.199.115 | yfm15 | node1 , etcd |
| 192.168.199.116 | yfm16 | node2 , etcd |
在每个节点安装依赖工具
yum update
# 安装python
yum install python -y
在部署节点安装ansible及准备ssh免密登陆
3.1 安装ansible (也可以使用容器化运行kubeasz，已经预装好ansible)
# 注意pip 21.0以后不再支持python2和python3.5，需要如下安装
# To install pip for Python 2.7 install it from https://bootstrap.pypa.io/2.7/ :
curl -O https://bootstrap.pypa.io/2.7/get-pip.py
python get-pip.py
python -m pip install --upgrade "pip < 21.0"
# pip安装ansible(国内如果安装太慢可以直接用pip阿里云加速)
pip install ansible -i https://mirrors.aliyun.com/pypi/simple/
3.2 在ansible控制端配置免密码登录
# 更安全 Ed25519 算法
ssh-keygen -t ed25519 -N '' -f ~/.ssh/id_ed25519
# 或者传统 RSA 算法
ssh-keygen -t rsa -b 2048 -N '' -f ~/.ssh/id_rsa
ssh-copy-id $IPs #$IPs为所有节点地址包括自身，按照提示输入yes 和root密码
在部署节点编排k8s安装
4.1 下载项目源码、二进制及离线镜像
# 下载工具脚本ezdown，举例使用kubeasz版本3.0.0
export release=3.0.0
curl -C- -fLO --retry 3 https://github.com/easzlab/kubeasz/releases/download/${release}/ezdown
chmod +x ./ezdown
# 使用工具脚本下载
./ezdown -D
上述脚本运行成功后，所有文件（kubeasz代码、二进制、离线镜像）均已整理好放入目录/etc/kubeasz
4.2 创建集群配置实例
ezctl new k8s-01
2021-01-19 10:48:23 DEBUG generate custom cluster files in /etc/kubeasz/clusters/k8s-01
2021-01-19 10:48:23 DEBUG set version of common plugins
2021-01-19 10:48:23 DEBUG cluster k8s-01: files successfully created.
2021-01-19 10:48:23 INFO next steps 1: to config '/etc/kubeasz/clusters/k8s-01/hosts'
2021-01-19 10:48:23 INFO next steps 2: to config '/etc/kubeasz/clusters/k8s-01/config.yml'
然后根据提示配置’/etc/kubeasz/clusters/k8s-01/hosts’ 和 ‘/etc/kubeasz/clusters/k8s-01/config.yml’：根据前面节点规划修改hosts 文件和其他集群层面的主要配置选项；其他集群组件等配置项可以在config.yml 文件中修改。
4.3 开始安装 如果你对集群安装流程不熟悉，请阅读项目首页 安装步骤 讲解后分步安装，并对 每步都进行验证
# 一键安装
ezctl setup k8s-01 all
# 或者分步安装，具体使用 ezctl help setup 查看分步安装帮助信息
# ezctl setup k8s-01 01
# ezctl setup k8s-01 02
# ezctl setup k8s-01 03
# ezctl setup k8s-01 04
...
验证结果
访问dashboard
https://192.168.199.113:31150/
令牌登录(admin)
[root@yfm13 kubeasz]# kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep admin-user | awk '{print $1}')
Name: admin-user-token-b89x8
Namespace: kube-system
Labels: <none>
Annotations: kubernetes.io/service-account.name: admin-user
kubernetes.io/service-account.uid: fc926a59-5c82-4246-8e8d-23a65aff0211
Type: kubernetes.io/service-account-token
Data
====
namespace: 11 bytes
token: eyJhbGciOiJSUzI1NiIsImtpZCI6Inpyd2xlSGRVVEJUdEk4RkZUc2ZTNmNMbVh1OVBQLVVlMnh0bXhiRzVvTmsifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJhZG1pbi11c2VyLXRva2VuLWI4OXg4Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQubmFtZSI6ImFkbWluLXVzZXIiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC51aWQiOiJmYzkyNmE1OS01YzgyLTQyNDYtOGU4ZC0yM2E2NWFmZjAyMTEiLCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6a3ViZS1zeXN0ZW06YWRtaW4tdXNlciJ9.HnjEZxhKhFFHVdzdwMf4VneZf1kuVC0IC9dkKwxNaStb3-OEJ586ayNuLXCO49TiD4oYdeCwxw6qw4qe0QFpQJgGUorAadFHueAP5AfZxgFKRovAyqDpn7SXcAb3It4Uy83NBGEDhno1-whIbgd3gNW0yQcA3Autwhxl2t8BybFVOZ8ctgEO89gb5rNHuBhe1SHh0xSap1DEtEi04emC_n_MxqiOHURNnf_vsNs3WqM3Iv9hjRqLoNRcaV-wO08I0zUMNjYg1sVNtAZyY9y4Usb_jc0CqKA0f0P9G4Zfu0zirf3MVqQSFFny0ZETzK3Chq7lmPpQXJ8BoTYQyqmEVg
ca.crt: 1350 bytes
复制下面输出的admin token 字段到输入框
令牌登录(只读)
[root@yfm13 kubeasz]# kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep read-user | awk '{print $1}')
Name: dashboard-read-user-token-2tjmz
Namespace: kube-system
Labels: <none>
Annotations: kubernetes.io/service-account.name: dashboard-read-user
kubernetes.io/service-account.uid: 9f81542f-d1ac-4403-8d00-77d1002dbb4a
Type: kubernetes.io/service-account-token
Data
====
ca.crt: 1350 bytes
namespace: 11 bytes
token: eyJhbGciOiJSUzI1NiIsImtpZCI6Inpyd2xlSGRVVEJUdEk4RkZUc2ZTNmNMbVh1OVBQLVVlMnh0bXhiRzVvTmsifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJkYXNoYm9hcmQtcmVhZC11c2VyLXRva2VuLTJ0am16Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQubmFtZSI6ImRhc2hib2FyZC1yZWFkLXVzZXIiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC51aWQiOiI5ZjgxNTQyZi1kMWFjLTQ0MDMtOGQwMC03N2QxMDAyZGJiNGEiLCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6a3ViZS1zeXN0ZW06ZGFzaGJvYXJkLXJlYWQtdXNlciJ9.ZHiM1J5vrx7RRMZ2aKPRUhlk_HbKbtekjxaj8SFfzFB1oW9lqa8XwOmrRYT2UFIos9P4y7ZPlsbTHjmff_QE31mTbdjNxCxRgilq5yHk8clK7iFjQhnffKU7KwibsQo0MFj77jfUu2MYJJlkME5ACO9TaD308liZkc6uZmm_SY_4m0T7RS586BlLk_6lcSatbICjqgxy1JSUMRwNb5K3c-xMCu_C8uc52RWrsEDUdNeKb3hWEB7lr7IJgvdYH7sNaKxHwU61DoaPUAtVAIrxIBLwY4e70ZJEAn9-FJ2vS6KQ6xjZC1eAqQHe29GcEP4bFp6pc85zO4JisSwhXHGSpw
复制下面输出的read token 字段到输入框
Kubeconfig登录（admin）
kubeconfig文件默认位置：/root/.kube/config，该文件中默认没有token字段，使用Kubeconfig方式登录，还需要将admin token追加到该文件中即可
Kubeconfig登录（只读）
kubeconfig文件默认位置：/root/.kube/config，该文件中默认没有token字段，使用Kubeconfig方式登录，还需要将read token追加到该文件中即可
Prometheus
kubeasz 集成安装
1.修改 clusters/k8s-01/config.yml 中配置项 prom_install: “yes”
2.安装 ezctl setup k8s-01 07
- 访问prometheus的web界面：http://$NodeIP:30901
- 访问alertmanager的web界面：http://$NodeIP:30902
- 访问grafana的web界面：http://$NodeIP:30903 (默认用户密码 admin:Admin1234!)
参考：