{"id":47,"date":"2026-08-17T23:12:27","date_gmt":"2026-08-17T15:12:27","guid":{"rendered":"https:\/\/www.xiaoxindong.cloud\/?p=47"},"modified":"2026-08-18T15:32:36","modified_gmt":"2026-08-18T07:32:36","slug":"day1-k8s%e9%9b%86%e7%be%a4%e6%9e%b6%e6%9e%84%e9%87%8d%e7%82%b9%ef%bc%88%e5%bf%85%e9%a1%bb%e6%8e%8c%e6%8f%a1%ef%bc%89","status":"publish","type":"post","link":"https:\/\/www.xiaoxindong.cloud\/?p=47","title":{"rendered":"Day1 K8S\u96c6\u7fa4\u67b6\u6784\u4e0e\u7ec4\u4ef6"},"content":{"rendered":"\n
\"\"<\/div><\/figure>\n\n\n\n

\u4e00\u3001\u90e8\u7f72\u65f6\u4ee3\u6f14\u8fdb<\/h2>\n\n\n\n

1. \u4f20\u7edf\u7269\u7406\u673a\u90e8\u7f72<\/h3>\n\n\n\n
    \n
  • \u573a\u666f<\/strong>\uff1a\u76f4\u63a5\u5728\u7269\u7406\u670d\u52a1\u5668\u90e8\u7f72\u591a\u4e2a\u5e94\u7528<\/li>\n\n\n\n
  • \u75db\u70b9<\/strong>\n
      \n
    1. \u8d44\u6e90\u6d6a\u8d39<\/strong>\uff1a\u786c\u4ef6\u8d44\u6e90\u5927\u91cf\u95f2\u7f6e<\/li>\n\n\n\n
    2. \u73af\u5883\u51b2\u7a81<\/strong>\uff1a\u4e0d\u540c\u5e94\u7528\u4f9d\u8d56\u7248\u672c\u51b2\u7a81<\/li>\n\n\n\n
    3. \u8fc1\u79fb\u56f0\u96be<\/strong>\uff1a\u8de8\u673a\u5668\u8fc1\u79fb\u9700\u8981\u91cd\u88c5\u914d\u7f6e\u73af\u5883\uff0c\u6781\u6613\u51fa\u9519<\/li>\n<\/ol>\n<\/li>\n<\/ul>\n\n\n\n

      2. \u865a\u62df\u5316\u90e8\u7f72\uff08VMware\u3001VirtualBox\uff09<\/h3>\n\n\n\n
        \n
      • \u573a\u666f<\/strong>\uff1a\u4e00\u53f0\u7269\u7406\u673a\u865a\u62df\u591a\u53f0\u72ec\u7acb\u865a\u62df\u673a\uff0c\u6bcf\u53f0\u865a\u62df\u673a\u62e5\u6709\u5b8c\u6574\u64cd\u4f5c\u7cfb\u7edf<\/li>\n\n\n\n
      • \u4f18\u70b9<\/strong>\uff1a\u8d44\u6e90\u9694\u79bb\uff0c\u89e3\u51b3\u73af\u5883\u51b2\u7a81\uff0c\u53ef\u7cbe\u7ec6\u5206\u914d CPU\u3001\u5185\u5b58<\/li>\n\n\n\n
      • \u75db\u70b9<\/strong>\uff1a\u865a\u62df\u673a\u643a\u5e26\u5b8c\u6574 OS\uff0c\u4f53\u79ef\u5927\u3001\u542f\u52a8\u6162\uff1b\u5927\u91cf\u8d44\u6e90\u6d88\u8017\u5728\u865a\u62df\u673a\u64cd\u4f5c\u7cfb\u7edf\u4e0a<\/li>\n<\/ul>\n\n\n\n

        3. \u5bb9\u5668\u90e8\u7f72\uff08Docker\uff09<\/h3>\n\n\n\n
          \n
        • \u573a\u666f<\/strong>\uff1a\u865a\u62df\u5316\u64cd\u4f5c\u7cfb\u7edf\u5185\u6838\uff0c\u591a\u4e2a\u5bb9\u5668\u5171\u4eab\u5bbf\u4e3b\u673a\u5185\u6838<\/li>\n\n\n\n
        • \u4f18\u70b9<\/strong>\uff1a\u8f7b\u91cf\u79d2\u7ea7\u542f\u52a8\uff1b\u4e00\u6b21\u6784\u5efa\u968f\u5904\u8fd0\u884c\uff0c\u89e3\u51b3\u73af\u5883\u4f9d\u8d56<\/li>\n\n\n\n
        • \u75db\u70b9<\/strong>\uff1a\u5bb9\u5668\u6570\u91cf\u5e9e\u5927\u4e4b\u540e\uff0c\u7f3a\u5c11\u8c03\u5ea6\u3001\u6545\u969c\u81ea\u6108\u3001\u81ea\u52a8\u6269\u7f29\u5bb9\u3001\u670d\u52a1\u53d1\u73b0\u80fd\u529b\uff0cK8s \u7528\u6765\u89e3\u51b3\u5bb9\u5668\u5927\u89c4\u6a21\u7ba1\u7406\u96be\u9898<\/strong><\/li>\n<\/ul>\n\n\n\n
          \n

          \u6bd4\u55bb\uff1aDocker \u662f\u6253\u5305\u96c6\u88c5\u7bb1\uff1bK8s \u662f\u667a\u80fd\u6e2f\u53e3\uff0c\u8c03\u5ea6\u3001\u7ef4\u62a4\u5927\u91cf\u96c6\u88c5\u7bb1\u3002<\/p>\n<\/blockquote>\n\n\n\n

          4. \u4e3a\u4ec0\u4e48\u88f8 Docker \u4e0d\u591f\uff0c\u9700\u8981 K8s<\/h3>\n\n\n\n
          \u88f8\u5bb9\u5668\u95ee\u9898<\/th>K8s \u89e3\u51b3\u65b9\u6848<\/th><\/tr><\/thead>
          \u5bbf\u4e3b\u673a\u5b95\u673a\uff0c\u5bb9\u5668\u65e0\u6cd5\u81ea\u52a8\u6062\u590d<\/td>\u6545\u969c\u8282\u70b9 Pod \u81ea\u52a8\u8c03\u5ea6\u5230\u5065\u5eb7\u8282\u70b9\uff0c\u6545\u969c\u81ea\u6108<\/td><\/tr>
          \u5bb9\u5668\u8fdb\u7a0b\u5b58\u6d3b\uff0c\u4f46\u4e1a\u52a1\u5361\u6b7b\u65e0\u54cd\u5e94<\/td>\u5b58\u6d3b\u63a2\u9488 livenessProbe\u3001\u5c31\u7eea\u63a2\u9488 readinessProbe \u68c0\u6d4b\u4e1a\u52a1\u72b6\u6001\uff0c\u5f02\u5e38\u81ea\u52a8\u5904\u7406<\/td><\/tr>
          \u90e8\u7f72\u3001\u56de\u6eda\u3001\u6269\u7f29\u5bb9\u5168\u9760\u4eba\u5de5\u64cd\u4f5c<\/td>Deployment \u5b9e\u73b0\u6eda\u52a8\u66f4\u65b0\u3001\u4e00\u952e\u56de\u6eda\u3001\u6c34\u5e73\u6269\u7f29\u5bb9<\/td><\/tr>
          \u5927\u91cf\u5bb9\u5668\u7aef\u53e3\u7ef4\u62a4\u6df7\u4e71\uff0c\u65e0\u670d\u52a1\u53d1\u73b0<\/td>Service \u5b9e\u73b0\u670d\u52a1\u53d1\u73b0\u3001\u8d1f\u8f7d\u5747\u8861\uff0cDNS \u8bbf\u95ee\u670d\u52a1<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

          \u4e8c\u3001K8s \u7b80\u4ecb<\/h2>\n\n\n\n

          Kubernetes \u7b80\u79f0 K8s\uff0c\u5f00\u6e90\u5bb9\u5668\u96c6\u7fa4\u7f16\u6392\u7ba1\u7406\u5e73\u53f0\uff0c\u5b9e\u73b0\u5bb9\u5668\u81ea\u52a8\u5316\u90e8\u7f72\u3001\u6269\u7f29\u5bb9\u3001\u6545\u969c\u81ea\u6108\u3002<\/p>\n\n\n\n

          \u2705 K8s \u6838\u5fc3\u80fd\u529b<\/p>\n\n\n\n

            \n
          1. \u670d\u52a1\u53d1\u73b0 & \u8d1f\u8f7d\u5747\u8861<\/strong>\uff1aDNS\/IP \u66b4\u9732\u670d\u52a1\uff0c\u6d41\u91cf\u8d1f\u8f7d\u5747\u8861<\/li>\n\n\n\n
          2. \u5b58\u50a8\u7f16\u6392<\/strong>\uff1a\u81ea\u52a8\u6302\u8f7d\u672c\u5730\u3001\u4e91\u5b58\u50a8<\/li>\n\n\n\n
          3. \u81ea\u52a8\u90e8\u7f72\u4e0e\u56de\u6eda<\/strong>\uff1a\u58f0\u660e\u5f0f API\uff0c\u53d7\u63a7\u901f\u7387\u53d8\u66f4\u5e94\u7528\u72b6\u6001<\/li>\n\n\n\n
          4. \u81ea\u52a8\u8c03\u5ea6\u88c5\u7bb1<\/strong>\uff1a\u4f9d\u636e CPU\u3001\u5185\u5b58\u9700\u6c42\uff0c\u628a Pod \u8c03\u5ea6\u5230\u8282\u70b9\uff0c\u6700\u5927\u5316\u786c\u4ef6\u5229\u7528\u7387<\/li>\n\n\n\n
          5. \u81ea\u6211\u4fee\u590d<\/strong>\uff1a\u91cd\u542f\u5931\u8d25\u5bb9\u5668\u3001\u6740\u6b7b\u4e0d\u5065\u5eb7\u5b9e\u4f8b\uff0c\u672a\u5c31\u7eea\u4e0d\u5bf9\u5916\u63d0\u4f9b\u670d\u52a1<\/li>\n\n\n\n
          6. \u5bc6\u94a5\u4e0e\u914d\u7f6e\u7ba1\u7406<\/strong>\uff1a\u7ba1\u7406\u5bc6\u7801\u3001\u5bc6\u94a5\uff0c\u66f4\u65b0\u914d\u7f6e\u65e0\u9700\u91cd\u5efa\u955c\u50cf<\/li>\n\n\n\n
          7. \u6c34\u5e73\u6269\u7f29\u5bb9<\/strong>\uff1a\u547d\u4ee4 \/ \u76d1\u63a7\u6307\u6807\u81ea\u52a8\u4f38\u7f29\u5e94\u7528\u5b9e\u4f8b<\/li>\n\n\n\n
          8. \u53ef\u6269\u5c55<\/strong>\uff1a\u65e0\u9700\u4fee\u6539\u6e90\u7801\u5373\u53ef\u6269\u5c55\u96c6\u7fa4\u529f\u80fd<\/li>\n<\/ol>\n\n\n\n

            \u4e09\u3001K8s \u96c6\u7fa4\u67b6\u6784<\/h2>\n\n\n\n

            \u96c6\u7fa4\u5206\u4e3a\u63a7\u5236\u5e73\u9762\uff08Master \u5927\u8111\uff09<\/strong> + \u5de5\u4f5c\u8282\u70b9\uff08Node \u624b\u811a\uff0c\u6267\u884c\u4e1a\u52a1\uff09<\/strong><\/p>\n\n\n\n

            1. \u63a7\u5236\u5e73\u9762\u7ec4\u4ef6\uff08\u7ba1\u7406\u96c6\u7fa4\uff09<\/h3>\n\n\n\n
              \n
            1. kube\u2011apiserver<\/strong> \u96c6\u7fa4\u552f\u4e00\u5165\u53e3\uff0c\u6240\u6709\u8bf7\u6c42\u5fc5\u7ecf\u7ec4\u4ef6\uff1b\u8d1f\u8d23\u8eab\u4efd\u8ba4\u8bc1\u3001\u6388\u6743\uff1b\u96c6\u7fa4\u901a\u4fe1\u67a2\u7ebd\uff1b\u8bfb\u5199 etcd \u5b58\u50a8\u6240\u6709\u96c6\u7fa4\u72b6\u6001\u3002<\/li>\n\n\n\n
            2. etcd<\/strong> \u5206\u5e03\u5f0f\u952e\u503c\u6570\u636e\u5e93\uff0c\u96c6\u7fa4\u552f\u4e00\u6570\u636e\u6e90\uff1b\u5b58\u50a8 Pod\u3001Service\u3001\u914d\u7f6e\u3001\u5bc6\u94a5\u7b49\u5168\u90e8\u96c6\u7fa4\u6570\u636e\uff1b\u9ad8\u53ef\u7528\u591a\u526f\u672c\u4fdd\u8bc1\u6570\u636e\u5b89\u5168\u3002<\/li>\n<\/ol>\n\n\n\n
              \n

              \u2757\u6240\u6709\u7ec4\u4ef6\u4e0d\u80fd\u76f4\u63a5\u8bfb\u5199 etcd\uff0c\u5fc5\u987b\u901a\u8fc7 apiserver\u3002<\/p>\n<\/blockquote>\n\n\n\n

                \n
              1. kube\u2011scheduler \u8c03\u5ea6\u5668<\/strong> \u76d1\u542c\u672a\u8c03\u5ea6 Pod\uff0c\u6839\u636e\u8282\u70b9\u8d44\u6e90\u3001\u4eb2\u548c \/ \u53cd\u4eb2\u548c\u7b56\u7565\uff0c\u9009\u51fa\u6700\u5408\u9002\u8282\u70b9\u8fd0\u884c Pod\uff0c\u5b9e\u73b0\u8d1f\u8f7d\u5747\u8861\u3002<\/li>\n\n\n\n
              2. kube\u2011controller\u2011manager \u63a7\u5236\u5668\u7ba1\u7406\u5668<\/strong> \u591a\u4e2a\u63a7\u5236\u5668\u540e\u53f0\u8fd0\u884c\uff0c\u6301\u7eed\u8c03\u8c10\u96c6\u7fa4\u72b6\u6001\uff0c\u4fdd\u8bc1\u5b9e\u9645\u72b6\u6001 = \u671f\u671b\u72b6\u6001<\/strong>\u3002 \u5305\u542b\u8282\u70b9\u63a7\u5236\u5668\u3001\u526f\u672c\u63a7\u5236\u5668\u3001\u7aef\u70b9\u63a7\u5236\u5668\u7b49\uff1b\u526f\u672c\u5c11\u4e86\u65b0\u5efa Pod\uff0c\u526f\u672c\u591a\u4e86\u5220\u9664 Pod\uff0c\u5904\u7406\u8282\u70b9\u6545\u969c\u3002<\/li>\n\n\n\n
              3. cloud\u2011controller\u2011manager\uff08\u53ef\u9009\uff09<\/strong> \u5bf9\u63a5\u4e91\u5382\u5546 API\uff0c\u5c4f\u853d\u4e0d\u540c\u4e91\u5e73\u53f0\u5dee\u5f02\uff1b\u7ba1\u7406\u4e91\u8d1f\u8f7d\u5747\u8861\u3001\u4e91\u5b58\u50a8\u3001\u4e91\u8282\u70b9\u3002<\/li>\n<\/ol>\n\n\n\n

                2. \u5de5\u4f5c\u8282\u70b9\u7ec4\u4ef6\uff08\u8fd0\u884c\u4e1a\u52a1 Pod\uff09<\/h3>\n\n\n\n
                  \n
                1. kubelet<\/strong> \u6bcf\u4e2a Node \u4e0a\u8fd0\u884c\u7684\u4ee3\u7406\uff1b\u63a5\u6536 apiserver \u6307\u4ee4\uff1b\u7ba1\u7406\u672c\u8282\u70b9 Pod \u751f\u547d\u5468\u671f\uff08\u521b\u5efa\u3001\u76d1\u63a7\u3001\u9500\u6bc1\u5bb9\u5668\uff09\uff1b\u5b9a\u671f\u4e0a\u62a5\u8282\u70b9\u548c Pod \u72b6\u6001\u7ed9\u63a7\u5236\u5e73\u9762\u3002<\/li>\n\n\n\n
                2. kube\u2011proxy<\/strong> \u7ef4\u62a4\u8282\u70b9\u7f51\u7edc\u89c4\u5219\uff1b\u5b9e\u73b0 Service \u670d\u52a1\u53d1\u73b0\u548c\u8d1f\u8f7d\u5747\u8861\uff1b\u4f7f\u7528 iptables\/ipvs \u8f6c\u53d1\u6d41\u91cf\uff0c\u628a\u8bf7\u6c42\u5206\u53d1\u5230\u540e\u7aef Pod\u3002<\/li>\n\n\n\n
                3. \u5bb9\u5668\u8fd0\u884c\u65f6 Container Runtime<\/strong> \u5e95\u5c42\u8f6f\u4ef6\uff0c\u771f\u6b63\u8d1f\u8d23\u8dd1\u5bb9\u5668\uff1b\u5e38\u89c1containerd(\u5b98\u65b9\u63a8\u8350)<\/code>\u3001cri\u2011o\uff1b<\/li>\n<\/ol>\n\n\n\n
                  \n

                  Docker \u9ad8\u7248\u672c K8s \u4e0d\u518d\u539f\u751f\u652f\u6301\uff0c\u5e95\u5c42\u5b9e\u9645\u4e5f\u662f containerd\u3002<\/p>\n\n\n\n

                  \u901a\u8fc7 namespace \u505a\u9694\u79bb\u3001cgroup \u9650\u5236\u8d44\u6e90\uff0c\u62c9\u53d6\u955c\u50cf\u3001\u542f\u505c\u5bb9\u5668\u3002<\/p>\n<\/blockquote>\n\n\n\n

                  \n

                  \ud83d\udcddPod\uff1aK8s \u6700\u5c0f\u90e8\u7f72\u5355\u5143\uff0c\u5bb9\u5668\u8fd0\u884c\u5728 Pod \u5185\u90e8\u3002<\/p>\n<\/blockquote>\n\n\n\n

                  3. \u5b8c\u6574\u8c03\u7528\u6d41\u7a0b\uff08\u90e8\u7f72 Nginx \u793a\u4f8b\uff09<\/h3>\n\n\n\n
                    \n
                  1. \u7528\u6237\u8bf7\u6c42\u53d1\u9001\u5230kube\u2011apiserver<\/code><\/li>\n\n\n\n
                  2. apiserver \u901a\u77e5 scheduler\uff0cscheduler \u8bfb\u53d6 etcd \u8282\u70b9\u4fe1\u606f\uff0c\u7b97\u6cd5\u9009\u51fa\u5408\u9002 node<\/li>\n\n\n\n
                  3. apiserver \u901a\u77e5 controller\u2011manager\uff0c\u4e0b\u53d1\u4efb\u52a1\u7ed9\u76ee\u6807\u8282\u70b9 kubelet<\/li>\n\n\n\n
                  4. kubelet \u8c03\u7528\u5bb9\u5668\u8fd0\u884c\u65f6 (containerd) \u542f\u52a8 nginx Pod<\/li>\n\n\n\n
                  5. kube\u2011proxy \u7ef4\u62a4\u7f51\u7edc\u89c4\u5219\uff0c\u5916\u90e8\u901a\u8fc7 Service \u8bbf\u95ee nginx \u670d\u52a1<\/li>\n<\/ol>\n\n\n\n

                    \u56db\u3001Kubeadm \u90e8\u7f72 K8s\uff08CentOS7 \u4e09\u8282\u70b9\uff09<\/h2>\n\n\n\n

                    \u73af\u5883\u89c4\u5212<\/h3>\n\n\n\n
                    \u4e3b\u673a\u540d<\/th>IP<\/th>\u914d\u7f6e<\/th>\u7cfb\u7edf<\/th><\/tr><\/thead>
                    k8s\u2011master<\/td>192.168.10.11<\/td>2 \u6838 2G40G<\/td>CentOS7.9<\/td><\/tr>
                    k8s\u2011node01<\/td>192.168.10.12<\/td>2 \u6838 2G40G<\/td>CentOS7.9<\/td><\/tr>
                    k8s\u2011node02<\/td>192.168.10.13<\/td>2 \u6838 2G40G<\/td>CentOS7.9<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

                    \u6240\u6709\u8282\u70b9\u521d\u59cb\u5316\uff08\u5fc5\u987b\u5168\u90e8\u6267\u884c\uff09<\/h3>\n\n\n\n
                      \n
                    1. \u57fa\u7840\u8981\u6c42<\/strong> CPU \u5185\u5b58\u22652C2G\uff1b\u7f51\u7edc\u4e92\u901a\uff1b\u4e3b\u673a\u540d \/ MAC\/product\u2011uuid \u4e0d\u91cd\u590d\uff1b\u5173\u95ed swap\uff1b\u5173\u95ed firewalld\u3001SELinux<\/li>\n\n\n\n
                    2. \u5173\u95ed\u9632\u706b\u5899\u4e0e SELinux<\/li>\n<\/ol>\n\n\n\n

                      <\/p>\n\n\n\n

                      systemctl disable firewalld --now\nsed -i '\/^SELINUX=\/s\/enforcing\/disabled\/g' \/etc\/selinux\/config\nsetenforce 0\n<\/code><\/pre>\n\n\n\n
                        \n
                      1. \u8bbe\u7f6e\u4e3b\u673a\u540d\uff0c\u914d\u7f6e \/etc\/hosts \u57df\u540d\u89e3\u6790\uff0c\u4fdd\u8bc1\u4e92\u76f8 ping \u901a<\/li>\n\n\n\n
                      2. \u65f6\u95f4\u540c\u6b65<\/li>\n<\/ol>\n\n\n\n
                        <\/p>\n\n\n\n
                        yum -y install ntpdate\nntpdate time1.aliyun.com\ncrontab -e\n# *\/5 * * * * \/usr\/sbin\/ntpdate time1.aliyun.com\n<\/code><\/pre>\n\n\n\n
                          \n
                        1. \u5173\u95ed swap\uff08K8s \u5f3a\u5236\uff09<\/strong> swap \u4f1a\u9020\u6210\u5185\u5b58\u7edf\u8ba1\u4e0d\u51c6\u3001\u6027\u80fd\u6296\u52a8\uff0ckubeadm \u521d\u59cb\u5316\u4f1a\u6821\u9a8c<\/li>\n<\/ol>\n\n\n\n
                          <\/p>\n\n\n\n
                          swapoff -a\nsed -i '\/swap\/s\/^\/#\/g' \/etc\/fstab\nfree -h\n<\/code><\/pre>\n\n\n\n
                            \n
                          1. \u5f00\u542f ipv4 \u6570\u636e\u5305\u8f6c\u53d1\uff08\u5bb9\u5668\u7f51\u7edc\u8def\u7531\uff09<\/li>\n<\/ol>\n\n\n\n
                            <\/p>\n\n\n\n
                            cat <<EOF | sudo tee \/etc\/sysctl.d\/k8s.conf\nnet.ipv4.ip_forward = 1\nEOF\nsysctl --system\nsysctl net.ipv4.ip_forward\n<\/code><\/pre>\n\n\n\n
                            \u5b89\u88c5 containerd \u5bb9\u5668\u8fd0\u884c\u65f6\uff08\u5168\u90e8\u8282\u70b9\uff09<\/h3>\n\n\n\n
                            <\/p>\n\n\n\n
                            yum install -y yum-utils\nyum-config-manager --add-repo https:\/\/mirrors.aliyun.com\/docker-ce\/linux\/centos\/docker-ce.repo\nyum -y install containerd.io\n#\u751f\u6210\u9ed8\u8ba4\u914d\u7f6e\ncontainerd config default > \/etc\/containerd\/config.toml\n#\u4fee\u6539\u914d\u7f6e\uff1apause\u955c\u50cf\u4e3a\u56fd\u5185\u955c\u50cf\u3001\u5f00\u542fSystemdCgroup=true\nvim \/etc\/containerd\/config.toml\n# sandbox_image = 'registry.cn\u2011shanghai.aliyuncs.com\/aliyun_lqkhn\/pause:3.10'\n# SystemdCgroup = true\nsystemctl enable containerd --now\n<\/code><\/pre>\n\n\n\n
                            \n
                            cgroup \u9a71\u52a8\u7edf\u4e00\u4f7f\u7528systemd<\/code>\uff0c\u7cfb\u7edf\u548c kubelet \u4fdd\u6301\u4e00\u81f4\uff0c\u907f\u514d\u8282\u70b9 NotReady\u3002<\/p>\n<\/blockquote>\n\n\n\n
                            \u5b89\u88c5 kubeadm kubelet kubectl\uff08\u5168\u90e8\u8282\u70b9\uff09<\/h3>\n\n\n\n
                            \u914d\u7f6e\u56fd\u5185 k8s yum \u6e90<\/p>\n\n\n\n
                            <\/p>\n\n\n\n
                            yum install -y kubelet kubeadm kubectl\nsystemctl enable kubelet --now\n#\u6b64\u65f6kubelet\u542f\u52a8\u5931\u8d25\uff0c\u96c6\u7fa4\u521d\u59cb\u5316\u5b8c\u6210\u624d\u6b63\u5e38\n<\/code><\/pre>\n\n\n\n
                            Master \u8282\u70b9\u521d\u59cb\u5316\u96c6\u7fa4<\/h3>\n\n\n\n
                            <\/p>\n\n\n\n
                            kubeadm init \\\n--apiserver-advertise-address=192.168.10.11 \\\n--image-repository registry.aliyuncs.com\/google_containers \\\n--pod-network-cidr=172.10.0.0\/16 \\\n--service-cidr=10.64.0.0\/12\n<\/code><\/pre>\n\n\n\n
                            \u521d\u59cb\u5316\u5b8c\u6210\u6267\u884c\u914d\u7f6e kubectl \u6743\u9650\uff1a<\/p>\n\n\n\n
                            <\/p>\n\n\n\n
                            mkdir -p $HOME\/.kube\ncp -i \/etc\/kubernetes\/admin.conf $HOME\/.kube\/config\nchown $(id -u):$(id -g) $HOME\/.kube\/config\n<\/code><\/pre>\n\n\n\n
                            \n
                            \u53c2\u6570\u8bf4\u660e<\/p>\n\n\n\n
                            –apiserver\u2011advertise\u2011address\uff1amaster \u901a\u544a\u5185\u7f51 IP<\/p>\n\n\n\n
                            –image\u2011repository\uff1a\u56fd\u5185\u955c\u50cf\u4ed3\u5e93\uff0c\u66ff\u4ee3 k8s.gcr.io<\/p>\n\n\n\n
                            –pod\u2011network\u2011cidr\uff1aPod \u7f51\u6bb5\uff0c\u5fc5\u987b\u548c CNI \u63d2\u4ef6 yaml \u5339\u914d<\/p>\n\n\n\n
                            –service\u2011cidr\uff1aService \u865a\u62df IP \u7f51\u6bb5<\/p>\n<\/blockquote>\n\n\n\n
                            Node \u8282\u70b9\u52a0\u5165\u96c6\u7fa4<\/h3>\n\n\n\n
                            \u590d\u5236 init \u8f93\u51fa\u7684 join \u547d\u4ee4\uff0c\u5728 node \u8282\u70b9 root \u6267\u884c<\/p>\n\n\n\n
                            <\/p>\n\n\n\n
                            kubeadm join 192.168.10.11:6443 --token xxx --discovery-token-ca-cert-hash sha256:xxx\n<\/code><\/pre>\n\n\n\n
                            \n
                            token \u6709\u6548\u671f 24 \u5c0f\u65f6\uff0c\u8fc7\u671f\u53ef\u91cd\u65b0\u751f\u6210 token\u3002<\/p>\n<\/blockquote>\n\n\n\n
                            \u90e8\u7f72\u7f51\u7edc\u63d2\u4ef6 Calico<\/h3>\n\n\n\n
                            \n
                            \u6ca1\u6709 CNI \u7f51\u7edc\u63d2\u4ef6\uff0c\u8282\u70b9\u72b6\u6001NotReady<\/code>\uff0cK8s \u4e0d\u81ea\u5e26\u5bb9\u5668\u7f51\u7edc\u3002<\/p>\n\n\n\n
                            Calico\uff1a\u652f\u6301 BGP \u4e09\u5c42\u8def\u7531\uff0c\u652f\u6301 NetworkPolicy \u7f51\u7edc\u7b56\u7565\uff0c\u751f\u4ea7\u6700\u5e38\u7528\u3002<\/p>\n<\/blockquote>\n\n\n\n
                            <\/p>\n\n\n\n
                            wget https:\/\/cdn.jsdelivr.net\/gh\/projectcalico\/calico@v3.31.4\/manifests\/calico.yaml\nkubectl apply -f calico.yaml\n<\/code><\/pre>\n\n\n\n
                            \u7b49\u5f85 kube-system \u4e0b calico \u5168\u90e8 Pod \u72b6\u6001Running<\/code>\uff0c\u8282\u70b9\u53d8\u4e3a Ready\u3002<\/p>\n\n\n\n
                            \u96c6\u7fa4\u6821\u9a8c\u547d\u4ee4<\/p>\n\n\n\n
                            <\/p>\n\n\n\n
                            kubectl get node                 #\u67e5\u770b\u96c6\u7fa4\u8282\u70b9\u72b6\u6001\nkubectl get pod -n kube-system   #\u67e5\u770b\u7cfb\u7edfPod\u72b6\u6001\nkubectl get nodes -w             #\u5b9e\u65f6\u89c2\u5bdf\u8282\u70b9\u72b6\u6001 ctrl+c\u9000\u51fa\nkubectl describe node \u8282\u70b9\u540d      #\u67e5\u770b\u8282\u70b9\u8be6\u7ec6\u4fe1\u606f\n<\/code><\/pre>\n\n\n\n
                            \n
                            \u91cd\u7f6e\u96c6\u7fa4\uff1akubeadm reset<\/code><\/p>\n<\/blockquote>\n\n\n\n
                            \u9644\u52a0\u914d\u7f6e<\/h3>\n\n\n\n
                              \n
                            1. kubectl \u547d\u4ee4\u8865\u5168\uff08master\uff09 \u5b89\u88c5 bash\u2011completion\uff0c\u751f\u6210\u8865\u5168\u811a\u672c\u5199\u5165.bash_profile<\/code>\uff0csource \u751f\u6548\uff0cTab \u81ea\u52a8\u8865\u5168\u8d44\u6e90\u4e0e\u53c2\u6570\u3002<\/li>\n\n\n\n
                            2. node \u8282\u70b9\u4f7f\u7528 kubectl\uff1a\u628a master \u7684\/etc\/kubernetes\/admin.conf<\/code>\u62f7\u8d1d\u5230 node \u8282\u70b9~\/.kube\/config<\/code><\/li>\n<\/ol>\n\n\n\n
                              \u4e94\u3001\u9ad8\u9891\u9762\u8bd5\u9898\u901f\u8bb0<\/h2>\n\n\n\n
                                \n
                              1. Docker \u4e0e K8s \u533a\u522b<\/strong> Docker \u662f\u5bb9\u5668\u865a\u62df\u5316\u6280\u672f\uff0c\u8d1f\u8d23\u6253\u5305\u3001\u8fd0\u884c\u5355\u4e2a\u5bb9\u5668\uff1bK8s \u662f\u5bb9\u5668\u7f16\u6392\u5e73\u53f0\uff0c\u7ba1\u7406\u5927\u89c4\u6a21\u5bb9\u5668\u96c6\u7fa4\uff0c\u63d0\u4f9b\u8c03\u5ea6\u3001\u81ea\u6108\u3001\u6269\u7f29\u5bb9\u3001\u670d\u52a1\u53d1\u73b0\u3001\u8d1f\u8f7d\u5747\u8861\u6574\u5957\u80fd\u529b\u3002<\/li>\n\n\n\n
                              2. K8s \u6838\u5fc3\u7ec4\u4ef6\u53ca\u4f5c\u7528<\/strong><\/li>\n<\/ol>\n\n\n\n
                                  \n
                                • etcd\uff1a\u96c6\u7fa4\u6570\u636e\u5e93\uff0c\u6301\u4e45\u5316\u5168\u90e8\u96c6\u7fa4\u914d\u7f6e\u72b6\u6001<\/li>\n\n\n\n
                                • apiserver\uff1a\u96c6\u7fa4\u552f\u4e00\u5165\u53e3\uff0c\u8ba4\u8bc1\u6388\u6743\uff0c\u7ec4\u4ef6\u901a\u4fe1\u67a2\u7ebd<\/li>\n\n\n\n
                                • controller\u2011manager\uff1a\u63a7\u5236\u5668\uff0c\u4fdd\u8bc1\u96c6\u7fa4\u5b9e\u9645\u72b6\u6001\u7b49\u4e8e\u671f\u671b\u72b6\u6001<\/li>\n\n\n\n
                                • scheduler\uff1a\u8c03\u5ea6\u5668\uff0c\u628a Pod \u8c03\u5ea6\u5230\u5408\u9002\u5de5\u4f5c\u8282\u70b9<\/li>\n\n\n\n
                                • kubelet\uff1a\u8282\u70b9\u4ee3\u7406\uff0c\u7ba1\u7406\u672c\u8282\u70b9 Pod \u751f\u547d\u5468\u671f\uff0c\u4e0a\u62a5\u72b6\u6001<\/li>\n\n\n\n
                                • kube\u2011proxy\uff1a\u7ef4\u62a4\u7f51\u7edc\u89c4\u5219\uff0c\u5b9e\u73b0 Service \u670d\u52a1\u53d1\u73b0\u3001\u8d1f\u8f7d\u5747\u8861<\/li>\n<\/ul>\n\n\n\n
                                    \n
                                  1. K8s \u4e09\u7c7b IP \u7f51\u6bb5<\/strong><\/li>\n<\/ol>\n\n\n\n
                                      \n
                                    • \u8282\u70b9 IP\uff1a\u670d\u52a1\u5668\u865a\u62df\u673a\u7269\u7406\u7f51\u5361 IP<\/li>\n\n\n\n
                                    • Pod \u7f51\u6bb5\uff1aPod \u5185\u90e8\u5bb9\u5668 IP\uff0cPod \u4e4b\u95f4\u901a\u4fe1<\/li>\n\n\n\n
                                    • Service \u7f51\u6bb5\uff1a\u96c6\u7fa4\u5185\u90e8\u865a\u62df ClusterIP\uff0c\u670d\u52a1\u8bbf\u95ee\u5165\u53e3<\/li>\n<\/ul>\n\n\n\n
                                        \n
                                      1. kubeadm \u8bc1\u4e66\u7ba1\u7406<\/strong> \u8bc1\u4e66\u8def\u5f84\/etc\/kubernetes\/pki\/<\/code>\uff1b\u9ed8\u8ba4\u6709\u6548\u671f 1 \u5e74\uff1b \u67e5\u770b\u8fc7\u671f\uff1akubeadm certs check\u2011expiration<\/code>\uff1b\u624b\u52a8\u7eed\u671f\uff1akubeadm certs renew all<\/code><\/li>\n\n\n\n
                                      2. K8s \u96c6\u7fa4\u90e8\u7f72\u65b9\u5f0f<\/strong><\/li>\n<\/ol>\n\n\n\n
                                          \n
                                        • kubeadm\uff1a\u5b98\u65b9\u63a8\u8350\uff0c\u751f\u4ea7\u73af\u5883\uff0c\u7b80\u5355\u6807\u51c6\u5316<\/li>\n\n\n\n
                                        • \u4e8c\u8fdb\u5236\uff1a\u624b\u52a8\u7f16\u8bd1\u90e8\u7f72\uff0c\u9ad8\u5ea6\u5b9a\u5236<\/li>\n\n\n\n
                                        • Minikube\/Kind\uff1a\u672c\u5730\u5f00\u53d1\u6d4b\u8bd5\u5355\u8282\u70b9\u96c6\u7fa4<\/li>\n\n\n\n
                                        • K3s\/RKE2\uff1a\u8f7b\u91cf\u7ea7\uff0c\u9002\u5408\u8fb9\u7f18\u3001\u79bb\u7ebf\u73af\u5883<\/li>\n<\/ul>\n\n\n\n
                                            \n
                                          1. Calico vs Flannel \u5bf9\u6bd4<\/strong> \u8868\u683cCalicoFlannel\u7f51\u7edc\u7b56\u7565\u652f\u6301 NetworkPolicy \u505a Pod \u7f51\u7edc\u9694\u79bb\u4e0d\u652f\u6301\u7f51\u7edc\u7b56\u7565\u7f51\u7edc\u6a21\u5f0f\u9ed8\u8ba4 BGP \u4e09\u5c42\u8def\u7531\uff0c\u6027\u80fd\u9ad8Overlay \u96a7\u9053\u5c01\u88c5\uff0c\u6709\u6027\u80fd\u5f00\u9500\u590d\u6742\u5ea6\u7ec4\u4ef6\u591a\uff0c\u6392\u969c\u590d\u6742\u7b80\u5355\u8f7b\u91cf\u9002\u7528\u573a\u666f\u751f\u4ea7\u4e2d\u5927\u578b\u96c6\u7fa4\uff0c\u9700\u8981\u5b89\u5168\u7ba1\u63a7\u6d4b\u8bd5\u3001\u5c0f\u89c4\u6a21\u96c6\u7fa4<\/li>\n<\/ol>\n\n\n\n
                                            \u516d\u3001\u91cd\u8981\u8e29\u5751\u70b9\u603b\u7ed3<\/h2>\n\n\n\n
                                              \n
                                            1. swap \u5fc5\u987b\u5173\u95ed\uff0c\u5426\u5219 kubeadm \u521d\u59cb\u5316\u62a5\u9519<\/li>\n\n\n\n
                                            2. containerd \u914d\u7f6e\u5fc5\u987b\u5f00\u542fSystemdCgroup=true<\/code>\uff0c\u5426\u5219\u8282\u70b9 NotReady<\/li>\n\n\n\n
                                            3. pod\u2011network\u2011cidr \u53c2\u6570\u5fc5\u987b\u548c calico \u914d\u7f6e\u6587\u4ef6\u7f51\u6bb5\u4fdd\u6301\u4e00\u81f4<\/li>\n\n\n\n
                                            4. \u96c6\u7fa4\u521d\u59cb\u5316\u5b8c\u6210\u524d kubelet \u4f1a\u542f\u52a8\u5931\u8d25\uff0c\u5c5e\u4e8e\u6b63\u5e38\u73b0\u8c61<\/li>\n\n\n\n
                                            5. \u8282\u70b9\u52a0\u5165\u96c6\u7fa4\u540e\u8282\u70b9 NotReady \u4f18\u5148\u6392\u67e5 CNI \u7f51\u7edc\u63d2\u4ef6 Pod \u72b6\u6001<\/li>\n\n\n\n
                                            6. \u6240\u6709\u7ec4\u4ef6\u4e0d\u76f4\u63a5\u8bfb\u5199 etcd\uff0c\u5168\u90e8\u8d70 apiserver<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"
                                              \u4e00\u3001\u90e8\u7f72\u65f6\u4ee3\u6f14\u8fdb 1. \u4f20\u7edf\u7269\u7406\u673a\u90e8\u7f72 2. \u865a\u62df\u5316\u90e8\u7f72\uff08VMware\u3001VirtualBox\uff09 3. \u5bb9\u5668\u90e8\u7f72 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-47","post","type-post","status-publish","format-standard","hentry","category-article"],"_links":{"self":[{"href":"https:\/\/www.xiaoxindong.cloud\/index.php?rest_route=\/wp\/v2\/posts\/47","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xiaoxindong.cloud\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xiaoxindong.cloud\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xiaoxindong.cloud\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xiaoxindong.cloud\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=47"}],"version-history":[{"count":11,"href":"https:\/\/www.xiaoxindong.cloud\/index.php?rest_route=\/wp\/v2\/posts\/47\/revisions"}],"predecessor-version":[{"id":65,"href":"https:\/\/www.xiaoxindong.cloud\/index.php?rest_route=\/wp\/v2\/posts\/47\/revisions\/65"}],"wp:attachment":[{"href":"https:\/\/www.xiaoxindong.cloud\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=47"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xiaoxindong.cloud\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=47"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xiaoxindong.cloud\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=47"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}