# 卸载docker
sudo yum remove docker \docker-client \docker-client-latest \docker-common \docker-latest \docker-latest-logrotate \docker-logrotate \docker-engine
# 安装docker需要的依赖
sudo yum install -y yum-utils
# 设置docker yum源
sudo yum-config-manager \--add-repo \https://download.docker.com/linux/centos/docker-ce.repo
# 安装docker社区版
sudo yum install docker-ce docker-ce-cli containerd.io
# 启动docker
sudo systemctl start docker
# 查看docker启动状态
sudo systemctl status docker
# 运行 helloworld
sudo docker run hello-world
# 设置docker开机启动
sudo systemctl enable docker
# 临时关闭SELinux防火墙
sudo setenforce 0
# 允许系统管理员在不影响系统安全性的前提下，对SELinux的安全策略规则进行测试和调试
sudo sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config# 配置k8s工具 yum 源
cat <<EOF | sudo tee /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://pkgs.k8s.io/core:/stable:/v1.26/rpm/
enabled=1
gpgcheck=1
gpgkey=https://pkgs.k8s.io/core:/stable:/v1.26/rpm/repodata/repomd.xml.key
exclude=kubelet kubeadm kubectl cri-tools kubernetes-cni
EOF# 安装k8s工具
sudo yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes
# 临时关闭 swap
swapoff -a
# 永久关闭 swap 将swap对应行注释掉
vim /etc/fstab
# 启动 kubelet
sudo systemctl enable --now kubelet
# 修改docker镜像仓库地址
vim /etc/docker/daemon.json
{"registry-mirrors": ["https://xxx.mirror.aliyuncs.com"]
}kubeadm config images pull. -- 大概率超时，可以使用代理，有代理地址很简单
# 注意版本号 需要与kubeadm要启动的镜像版本一直. 在执行 kubeadm init 时有提示
images=(
kube-apiserver:v1.17.17
kube-controller-manager:v1.17.17
kube-scheduler:v1.17.17
kube-proxy:v1.17.17
pause:3.1
etcd:3.4.3-0
coredns:1.6.5
)
# 下载指定的镜像版本
for imageName in ${images[@]} ; dodocker pull registry.cn-hangzhou.aliyuncs.com/google_containers/$imageNamedocker tag registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName k8s.gcr.io/$imageNamedocker rmi registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName
done
# 启动的时候版本还会变，绝，重新下载对应的镜像版本
images=(
kube-apiserver:v1.17.4
kube-controller-manager:v1.17.4
kube-scheduler:v1.17.4
kube-proxy:v1.17.4
pause:3.1
etcd:3.4.3-0
coredns:1.6.5
)for imageName in ${images[@]} ; dodocker pull registry.cn-hangzhou.aliyuncs.com/google_containers/$imageNamedocker tag registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName k8s.gcr.io/$imageNamedocker rmi registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName
done
# 创建k8s集群 最后的IP设置为自己的即可
kubeadm init --kubernetes-version=v1.17.4 --pod-network-cidr=10.244.0.0/16 --service-cidr=10.96.0.0/12 --apiserver-advertise-address=192.168.1.100
# kubelet报错时，修改内核参数
vim /etc/sysctl.confnet.ipv4.ip_forward=1
net.ipv4.ip_forward=1
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-arptables = 0# 重新加载
sysctl -p
