1、安装环境初始化1.1、centos8-minimal安装更新并安装vim命令

cd /etc/yum.repos.d/sed -i 's/mirrorlist/#mirrorlist/g' /etc/yum.repos.d/CentOS-*sed -i 's|#baseurl=; /etc/yum.repos.d/CentOS-*yum makecacheyum update -yyum -y install vim

更新完成后，检查centos版本

[root@localhost yum.repos.d]# cat /etc/redhat-releaseCentOS Linux release 8.5.2111[root@localhost yum.repos.d]# rpm -q kernelkernel-4.18.0-348.7.1.el8_5.x86_64

setenforce 0sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

swapoff -ased -i 's/^[^#].*swap/#&/' /etc/fstabsystemctl daemon-reload

echo net.ipv6.conf.all.disable_ipv6=1 >> /etc/sysctl.confecho NETWORKING_IPV6=no >> /etc/sysconfig/networksed -i 's/IPV6INIT=yes/IPV6INIT=no/g' /etc/sysconfig/network-scripts/ifcfg-enp0s3sysctl -p

ip a可查看ipv6是否关闭

1.5、关闭防火墙

systemctl stop firewalldsystemctl disable firewalldsystemctl status firewalld

cat <<EOF | sudo tee /etc/modules-load.d/k8s.confoverlaybr_netfilterEOFsudo modprobe overlaysudo modprobe br_netfiltercat <<EOF | sudo tee /etc/sysctl.d/k8s.confnet.bridge.bridge-nf-call-iptables  = 1net.bridge.bridge-nf-call-ip6tables = 1net.ipv4.ip_forward                 = 1EOFsudo sysctl --system

在查看最新版本的containerd，目前最新版本为containerd 1.6.8，下载地址为

解压安装如下

tar Cxzvf /usr/local containerd-1.6.8-linux-amd64.tar.gzmkdir -p /usr/local/lib/systemd/system/mv containerd.service /usr/local/lib/systemd/system/systemctl daemon-reloadsystemctl enable --now containerd

在 中下载 runc.amd64，同时执行以下安装命令

install -m 755 runc.amd64 /usr/local/sbin/runc

在下载cni插件并安装

mkdir -p /opt/cni/bintar Cxzvf /opt/cni/bin cni-plugins-linux-amd64-v1.1.1.tgz

在下载nerdctl工具并解压安装

tar Cxzvvf /usr/local/bin nerdctl-0.23.0-linux-amd64.tar.gz

以上安装containerd总共4个文件，如下

cni-plugins-linux-amd64-v1.1.1.tgzcontainerd-1.6.8-linux-amd64.tar.gznerdctl-0.23.0-linux-amd64.tar.gzrunc.amd64

安装完成后，即可使用nerdctl images查看镜像，与docker images类似，需要注意的是containerd有命名空间的区分

查看命名空间nerdctl ns ls查看指定命名空间的镜像nerdctl -n k8s.io images

创建containerd默认配置目录，并将现有的默认配置导出

sudo mkdir -p /etc/containerdcontainerd config default | sudo tee /etc/containerd/config.toml

然后修改config.toml，将里面的配置项SystemdCgroup = false改为SystemdCgroup = true，同时修改默认的sandbox镜像（因无法从k8s.gcr.io下载镜像），修改内容如下

sandbox_image = "k8s.gcr.io/pause:3.6"=>sandbox_image = "registry.aliyuncs.com/google_containers/pause:3.6"

修改完成后重新加载并重启

systemctl daemon-reloadsystemctl enable containerd --nowsystemctl restart containerd

至此，containerd安装完成。

3、安装kubernetes

在下载kubernetes安装文件，当然也可以去官网下载，下载的安装文件如下

14083ac8b11792469524dae98ebb6905b3921923937d6d733b8abb58113082b7-kubernetes-cni-1.1.1-0.x86_64.rpm40c1f30871f010cdc338ee1dfe78f25cb389e17cce6067fb2b9c3e0c55895c6e-kubeadm-1.25.4-0.x86_64.rpm7ed577f67bc98553ff7816f592d66b00a3a572559a665834ea97de8dd6e99c0a-kubectl-1.25.4-0.x86_64.rpma34253f2adef09943b26afd6cff6eb22983aa334d54d875f74e5a7a6bab1c7f1-kubelet-1.25.4-0.x86_64.rpme382ead81273ab8ebcddf14cc15bf977e44e1fd541a2cfda6ebe5741c255e59f-cri-tools-1.25.0-0.x86_64.rpmiproute-tc-5.12.0-4.el8.x86_64.rpm

下载完成后，执行本地安装yum localinstall -y *.rpm，安装成功后查看版本

[root@localhost ~]# kubectl version  --output=yamlclientVersion:  buildDate: "2022-11-09T13:36:36Z"  compiler: gc  gitCommit: 872a965c6c6526caa949f0c6ac028ef7aff3fb78  gitTreeState: clean  gitVersion: v1.25.4  goVersion: go1.19.3  major: "1"  minor: "25"  platform: linux/amd64kustomizeVersion: v4.5.7

此时已完成基本的安装，master和worker均需完成以上步骤，本人是使用VirtualBox虚拟出master及worker两台机器，因此在此复制一台worker机器，修改hostname并配置/etc/hosts

4、master上安装集群4.1、准备好基础镜像

将hostname改为kubernetes-master并配置host，hostnamectl set-hostname kubernetes-master

master机器上准备好以下镜像

registry.aliyuncs.com/google_containers/coredns                    v1.9.3 registry.aliyuncs.com/google_containers/etcd                       3.5.5-0registry.aliyuncs.com/google_containers/kube-apiserver             v1.25.0registry.aliyuncs.com/google_containers/kube-controller-manager    v1.25.0registry.aliyuncs.com/google_containers/kube-proxy                 v1.25.0registry.aliyuncs.com/google_containers/kube-scheduler             v1.25.0registry.aliyuncs.com/google_containers/pause                      3.6    registry.aliyuncs.com/google_containers/pause                      3.8    

可以预先准备好镜像将其导入节约下载时间

nerdctl load -i coredns--v1.9.3.tar.gznerdctl load -i etcd--3.5.5-0.tar.gznerdctl load -i kube-apiserver--v1.25.0.tar.gznerdctl load -i kube-controller-manager--v1.25.0.tar.gznerdctl load -i kube-proxy--v1.25.0.tar.gznerdctl load -i kube-scheduler--v1.25.0.tar.gznerdctl load -i pause--3.8.tar.gznerdctl load -i pause--3.6.tar.gz

导出kubeadm默认配置并修改

kubeadm config print init-defaults --component-configs KubeletConfiguration >   kubeadm.yaml

kubeadm.yaml修改内容如下，没有重复项，均只有一项需要修改

advertiseAddress: 1.2.3.4=>advertiseAddress: 192.168.30.88criSocket: unix:///var/run/containerd/containerd.sock=>criSocket: /run/containerd/containerd.sockname: Node=>name: kubernetes-masterimageRepository: registry.k8s.io=>imageRepository: registry.aliyuncs.com/google_containers

修改完成后，开始初始化集群kubeadm init --config kubeadm.yaml，事先准备好镜像后，大概10几秒钟即可完成初始化，看到以下结果

[addons] Applied essential addon: CoreDNS[addons] Applied essential addon: kube-proxyYour Kubernetes control-plane has initialized successfully!To start using your cluster, you need to run the following as a regular user:  mkdir -p $HOME/.kube  sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config  sudo chown $(id -u):$(id -g) $HOME/.kube/configAlternatively, if you are the root user, you can run:  export KUBECONFIG=/etc/kubernetes/admin.confYou should now deploy a pod network to the cluster.Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:   you can join any number of worker nodes by running the following on each as root:kubeadm join 192.168.30.88:6443 --token abcdef.0123456789abcdef \        --discovery-token-ca-cert-hash sha256:ccc7f320b1b64af6a2b51ecf422dc575f0be771aecfb2de8d72c5089c6feb13a 

按照提示执行以下命令即可

  mkdir -p $HOME/.kube  sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config  sudo chown $(id -u):$(id -g) $HOME/.kube/config

此时获取节点信息如下，kubectl describe node kubernetes-master可以看到是cni plugin not initialized，即插件没有安装

 [root@kubernetes-master ~]# kubectl get nodeNAME                STATUS     ROLES           AGE    VERSIONkubernetes-master   NotReady   control-plane   100s   v1.25.4

在 下载好部署文件，或者直接安装kubectl apply -f ，但是在安装之前同样先将准备好的镜像导入节省时间

nerdctl load -i cni--v3.24.5.tar.gznerdctl load -i kube-controllers--v3.24.5.tar.gznerdctl load -i node--v3.24.5.tar.gz

镜像如下

calico/cni               v3.24.5calico/kube-controllers  v3.24.5calico/node              v3.24.5

安装完成后即可看到以下结果

[root@kubernetes-master calico]# kubectl get nodeNAME                STATUS   ROLES           AGE   VERSIONkubernetes-master   Ready    control-plane   21m   v1.25.4[root@kubernetes-master calico]# kubectl get po -ANAMESPACE     NAME                                        READY   STATUS    RESTARTS   AGEkube-system   calico-kube-controllers-798cc86c47-2xq82    1/1     Running   0          8m56skube-system   calico-node-ztzqr                           1/1     Running   0          8m56skube-system   coredns-c676cc86f-frpkj                     1/1     Running   0          20mkube-system   coredns-c676cc86f-jxqbc                     1/1     Running   0          20mkube-system   etcd-kubernetes-master                      1/1     Running   0          20mkube-system   kube-apiserver-kubernetes-master            1/1     Running   0          20mkube-system   kube-controller-manager-kubernetes-master   1/1     Running   0          20mkube-system   kube-proxy-qrlwt                            1/1     Running   0          20mkube-system   kube-scheduler-kubernetes-master            1/1     Running   0          20m

将hostname改为kubernetes-worker并配置host，使用执行加入集群语句

kubeadm join 192.168.30.88:6443 --token abcdef.0123456789abcdef \        --discovery-token-ca-cert-hash sha256:ccc7f320b1b64af6a2b51ecf422dc575f0be771aecfb2de8d72c5089c6feb13a 

加入后获得结果，在等待calico-node及kube-proxy部署成功后即可。

回到master节点上，查看集群状态

其中需要特别注意的是containerd镜像的命名空间