K8s集群部署

# 添加Docker官方GPG密钥
sudo mkdir -m 0755 -d /etc/apt/keyrings
sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
sudo chmod a+r /etc/apt/keyrings/docker.asc

# 添加阿里云的Docker CE仓库镜像
echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://mirrors.aliyun.com/docker-ce/linux/ubuntu $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

# 更新源并安装containerd
sudo apt-get update
sudo apt-get install -y containerd.io

# 备份原配置
cp /etc/containerd/config.toml /etc/containerd/config.toml.bak

# 生成包含CRI插件的完整配置文件
containerd config default > /etc/containerd/config.toml

# 修改配置文件
disabled_plugins = []  #确保括号内不含cri
SystemdCgroup = true  #使用systemd作为cgroup驱动
sandbox = "registry.aliyuncs.com/google_containers/pause:3.10.1"  #Kubernetes需要使用pause镜像作为sandbox容器

# 验证 
grep disabled_plugins /etc/containerd/config.toml
grep SystemdCgroup /etc/containerd/config.toml
grep sandbox /etc/containerd/config.toml

# 使用systemd管理containerd
sudo systemctl daemon-reload
sudo systemctl enable --now containerd
sudo systemctl restart containerd
sudo systemctl status containerd

# 镜像加速配置参考
https://xuanyuan.cloud/usage/containerd

## 选择版本 https://github.com/kubernetes-sigs/cri-tools/releases
 
wget https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz
 
tar xvf crictl-v1.23.0-linux-amd64.tar.gz -C /usr/local/bin
 
cat <<EOF> /etc/crictl.yaml
runtime-endpoint: unix:///run/containerd/containerd.sock
image-endpoint: unix:///run/containerd/containerd.sock
timeout: 10
debug: false
EOF
 
# 验证
crictl pull hello-world
crictl images

# 安装依赖
sudo apt install -y apt-transport-https ca-certificates curl gpg conntrack

# 添加Kubernetes官方仓库
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.31/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg

echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.31/deb/ /' | sudo tee /etc/apt/sources.list.d/kubernetes.list

sudo apt update

# 安装kubeadm、kubelet和kubectl
sudo apt install -y kubelet kubeadm kubectl

# 锁定版本防止自动更新
sudo apt-mark hold kubelet kubeadm kubectl

# 启用kubelet服务
sudo systemctl enable --now kubelet

# 验证安装
kubeadm version
kubectl version --client

# 在主节点执行
kubeadm init \
  --apiserver-advertise-address=192.168.19.128 \
  --pod-network-cidr=10.244.0.0/16 \
  --service-cidr=10.96.0.0/12 \
  --image-repository=registry.aliyuncs.com/google_containers \
  --cri-socket=unix:///var/run/containerd/containerd.sock \

# 主节点和工作节点分别执行输入后的提示信息！！！
# 在主节点验证
kubectl get nodes
kubectl get pods -A

#下载并修改Calico配置文件使用国内镜像
curl -O https://raw.githubusercontent.com/projectcalico/calico/v3.28.0/manifests/calico.yaml
##替换镜像为国内镜像源
sed -i 's|docker.io/calico/|docker.m.daocloud.io/calico/|g' calico.yaml
sed -i 's|quay.io/calico/|quay.m.daocloud.io/calico/|g' calico.yaml
#应用修改后的配置文件
kubectl apply -f calico.yaml
#检查状态
kubectl get pods -n kube-system -w  

#后续升级Calico
##重新下载新版本的calico.yaml
curl -O https://raw.githubusercontent.com/projectcalico/calico/<新版>/manifests/calico.yaml
#修改镜像源后应用
kubectl apply -f calico.yaml

cat > nginx.yaml << EOF
apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx-deployment
  labels:
    app: nginx
spec:
  replicas: 2
  selector:
    matchLabels:
      app: nginx
  template:
    metadata:
      labels:
        app: nginx
    spec:
      containers:
      - name: nginx
        image: swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/library/nginx:1.23.2
        ports:
        - containerPort: 80
---
apiVersion: v1
kind: Service
metadata:
  name: nginx-service
  labels:
    app: nginx
spec:
  type: NodePort
  selector:
    app: nginx
  ports:
    - port: 80
      targetPort: 80
      protocol: TCP
      nodePort: 30080
      name: nginx
EOF

kubectl apply -f nginx.yaml
kubectl get pod
kubectl get svc