{"id":4467,"date":"2021-07-21T19:33:25","date_gmt":"2021-07-21T11:33:25","guid":{"rendered":"http:\/\/blog.ywdevops.cn\/?p=4467"},"modified":"2026-05-18T11:27:52","modified_gmt":"2026-05-18T03:27:52","slug":"k8s-3","status":"publish","type":"post","link":"https:\/\/blog.ywdevops.cn\/index.php\/2021\/07\/21\/k8s-3\/","title":{"rendered":"\u901a\u8fc7kubeadm\u5b89\u88c5K8s\u96c6\u7fa4"},"content":{"rendered":"\n

kubeadm<\/code>\u662f\u5b98\u65b9\u793e\u533a\u63a8\u51fa\u7684\u4e00\u4e2a\u7528\u4e8e\u5feb\u901f\u90e8\u7f72kubernetes\u96c6\u7fa4\u7684\u5de5\u5177\u3002\u8fd9\u4e2a\u5de5\u5177\u80fd\u901a\u8fc7\u4e24\u6761\u6307\u4ee4\u5feb\u901f\u5b8c\u6210\u4e00\u4e2akubernetes\u96c6\u7fa4\u7684\u90e8\u7f72\u3002 <\/p>\n\n\n\n

\u672c\u4f8b\u5b50\u4e2d\u4f7f\u7528centos7\u7cfb\u7edf\u5b89\u88c5k8s\u96c6\u7fa4<\/p>\n\n\n\n

\u4e00\u3001\u7cfb\u7edf\u521d\u59cb\u5316\u8bbe\u7f6e\uff1a<\/strong><\/p>\n\n\n\n

\u53c2\u8003k8s\u4e8c\u8fdb\u5236\u90e8\u7f72\u7ae0\u8282\uff1a\u7cfb\u7edf\u521d\u59cb\u5316<\/a><\/p>\n\n\n\n

\u4e8c\u3001docker\u5b89\u88c5\uff1a<\/strong><\/p>\n\n\n\n

\u53c2\u8003k8s\u4e8c\u8fdb\u5236\u90e8\u7f72\uff1adocker\u5b89\u88c5<\/a><\/p>\n\n\n\n

\u4e09\u3001\u673a\u5668IP\u4fe1\u606f\uff1a<\/strong><\/p>\n\n\n\n

\u4e3b\u673a\u540d<\/td>IP<\/td>\u8282\u70b9\u7c7b\u578b<\/td>\u6700\u4f4e\u914d\u7f6e<\/td><\/tr>
k8s-master1<\/td>192.168.15.215<\/td>master1\u8282\u70b9<\/td>1G2CPU<\/td><\/tr>
k8s-master2<\/td> 192.168.15.216 <\/td> master2\u8282\u70b9 <\/td> 1G2CPU <\/td><\/tr>
k8s-master3<\/td> 192.168.15.217 <\/td> master3\u8282\u70b9 <\/td> 1G2CPU <\/td><\/tr>
k8s-worker1<\/td> 192.168.15.218 <\/td> worker1\u8282\u70b9 <\/td> 1G2CPU <\/td><\/tr>
k8s-worker2 <\/td> 192.168.15.219<\/td>worker2\u8282\u70b9 <\/td> 1G2CPU <\/td><\/tr>
k8s-worker3 <\/td> 192.168.15.221 <\/td> worker3\u8282\u70b9 <\/td> 1G2CPU <\/td><\/tr>
VIP<\/td>192.168.15.253<\/td>\u90e8\u7f72\u5728master\u8282\u70b9<\/td><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
#\u6ce8\u610f\uff1amaster\u8282\u70b9\u81f3\u5c11\u89812\u4e2acpu\uff0c\u5426\u5219\u62a5\u9519\nerror execution phase preflight: [preflight] Some fatal errors occurred:\n[ERROR NumCPU]: the number of available CPUs 1 is less than the required 2<\/code><\/pre>\n\n\n\n
\u56db\u3001\u5b89\u88c5keepalived\u548cnginx:<\/strong><\/p>\n\n\n\n
keepalived\u76f4\u63a5yum\u5373\u53ef\uff0ckeepalived\u914d\u7f6e\u6587\u4ef6\u53ef\u53c2\u8003\u4e8c\u8fdb\u5236\u5b89\u88c5\u4e00\u7bc7\uff0cnginx\u9700\u8981\u7f16\u8bd1\u5b89\u88c5\uff0c\u56e0\u4e3a\u9700\u8981stream\u6a21\u5757\uff0cNginx\u7f16\u8bd1\u5b89\u88c5\u53c2\u8003\uff1aNginx\u7f16\u8bd1\u5b89\u88c5<\/a><\/p>\n\n\n\n
nginx\u914d\u7f6e\u6587\u4ef6\u5185\u5bb9\u5982\u4e0b\uff1a<\/p>\n\n\n\n
events {\n    worker_connections  1024;\n}\n#\u6ce8\uff1astream\u6a21\u5757\u8ddfhttp\u540c\u7ea7\nstream {\n    log_format  main  '$remote_addr $upstream_addr - [$time_local] $status $upstream_bytes_sent';\n\n    access_log  \/var\/log\/nginx\/k8s-access.log  main;\n\n    upstream k8s-apiserver {\n       server 192.168.15.215:6443;   # Master1 APISERVER IP:PORT\n       server 192.168.15.216:6443;   # Master2 APISERVER IP:PORT\n       server 192.168.15.217:6443;    # Master3 APISEVER  IP:PORT\n    }\n\n    server {\n       listen 16443;  # \u7531\u4e8enginx\u4e0emaster\u8282\u70b9\u590d\u7528\uff0c\u8fd9\u4e2a\u76d1\u542c\u7aef\u53e3\u4e0d\u80fd\u662f6443\uff0c\u5426\u5219\u4f1a\u51b2\u7a81\n       proxy_pass k8s-apiserver;\n    }\n}\n\nhttp { \n    server {\n        listen       80;\n        server_name  localhost;    \n    }\n}\n<\/code><\/pre>\n\n\n\n
keepalived\u4e2d\u914d\u7f6enginx\u5065\u5eb7\u72b6\u6001\u68c0\u6d4b\u811a\u672c\uff0c\u5982\u4e0b\uff1a<\/p>\n\n\n\n
! Configuration File for keepalived\n\nglobal_defs {\n   notification_email {\n     acassen@firewall.loc\n     failover@firewall.loc\n     sysadmin@firewall.loc\n   }\n   notification_email_from Alexandre.Cassen@firewall.loc\n   smtp_server 192.168.200.1\n   smtp_connect_timeout 30\n   router_id LVS_DEVEL\n   vrrp_skip_check_adv_addr\n   vrrp_garp_interval 0\n   vrrp_gna_interval 0\n}\nvrrp_script check_nginx {\n     script \"\/etc\/keepalived\/check_nginx.sh\"\n     interval 2\n     weight -20                         #\u811a\u672c\u8fd4\u56de\u72b6\u6001\u7801\u4e3a1\uff0c\u90a3\u4e48\u6743\u91cd\u4e0b\u964d20\uff0c\u5b9e\u73b0VIP\u98d8\u9038\n   }\nvrrp_instance VI_1 {\n    state MASTER\n    interface ens33\n    virtual_router_id 51\n    priority 100\n    advert_int 1\n    authentication {\n        auth_type PASS\n        auth_pass 1111\n    }\n    virtual_ipaddress {\n        192.168.15.253\/24\n    }\n    track_script {\n      check_nginx\n    }\n}\n<\/code><\/pre>\n\n\n\n
check_nginx\u811a\u672c\u5185\u5bb9\u5982\u4e0b\uff1a<\/p>\n\n\n\n
#!\/bin\/bash\ncount=$(ss -antp |grep 16443 |egrep -cv \"grep|$$\")\n\nif [ \"$count\" -eq 0 ];then\n    exit 1\nelse\n    exit 0\nfi\n<\/code><\/pre>\n\n\n\n
\u6ce8\u610f\uff1a\u5982\u679c\u662f\u5355master\uff0c\u90a3\u4e48\u5c31\u4e0d\u9700\u8981\u5b89\u88c5 keepalived\u548cnginx<\/p>\n\n\n\n
\u4e94\u3001\u5b89\u88c5etcd:<\/strong><\/p>\n\n\n\n
\u672c\u6559\u7a0b\u4e2detcd\u91c7\u7528\u5355\u72ec\u5b89\u88c5\u7684\u65b9\u5f0f\uff0c\u5b89\u88c5\u65b9\u6cd5\u53c2\u8003\u4e8c\u8fdb\u5236\u90e8\u7f72\u7ae0\u8282https:\/\/blog.ywdevops.cn\/index.php\/2021\/06\/29\/k8s-2\/<\/a><\/p>\n\n\n\n
\u516d\u3001\u5b89\u88c5k8s\u7ec4\u4ef6\uff1a<\/strong><\/p>\n\n\n\n
1\u3001\u4e0b\u8f7dk8s\u7ec4\u4ef6\uff1a<\/p>\n\n\n\n
\u6211\u4eec\u9700\u8981\u5b89\u88c5kubeadm, kubelet, kubectl\uff0c\u7248\u672c\u9700\u8981\u4e00\u81f4<\/strong>\u3002\u5728\u53ef\u4ee5\u8fde\u5916\u7f51\u7684\u673a\u5668\u4e0a\u4e0b\u8f7d\u7ec4\u4ef6\u3002<\/p>\n\n\n\n
\u6dfb\u52a0kubernetes yum\u6e90\uff1a<\/p>\n\n\n\n
cat > \/etc\/yum.repos.d\/kubernetes.repo <<EOF\n[kubernetes]\nname=Kubernetes Repo\nbaseurl=https:\/\/mirrors.aliyun.com\/kubernetes\/yum\/repos\/kubernetes-el7-x86_64\/\ngpgcheck=1\ngpgkey=https:\/\/mirrors.aliyun.com\/kubernetes\/yum\/doc\/rpm-package-key.gpg\nenabled=1\nEOF<\/code><\/pre>\n\n\n\n
\u6267\u884c\u547d\u4ee4\u66f4\u65b0\u7f13\u5b58\uff0c\u5982\u4e0b\uff1a<\/p>\n\n\n\n
yum clean all\nyum makecache<\/code><\/pre>\n\n\n\n
\u67e5\u770bkubeadm\u7248\u672c<\/p>\n\n\n\n
yum list kubeadm --showduplicates<\/code><\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u6211\u4eec\u4e0b\u8f7d1.20.8\u7248\u672c(\u4e5f\u53ef\u6839\u636e\u9700\u8981\u4e0b\u8f7d\u4efb\u4f55\u7248\u672c)<\/p>\n\n\n\n
yum install --downloadonly --downloaddir ~\/k8s\/kubernetes kubeadm-1.20.8-0<\/code><\/pre>\n\n\n\n
\u5728\u6839\u636e\u4e0a\u8ff0\u65b9\u5f0f\u67e5\u627ekubelet\u3001kubectl\u7248\u672c\uff0c\u4ee5\u53ca\u4f9d\u8d56\u5305\uff0c\u5e76\u4e0b\u8f7d<\/p>\n\n\n\n
yum install --downloadonly --downloaddir ~\/k8s\/kubernetes kubelet-1.20.8-0\nyum install --downloadonly --downloaddir ~\/k8s\/kubernetes kubectl-1.20.8-0\nyum install --downloadonly --downloaddir ~\/k8s\/kubernetes kubernetes-cni-0.8.7-0\nyum install --downloadonly --downloaddir ~\/k8s\/kubernetes cri-tools-1.13.0-0<\/code><\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u6ce8\u610f\uff1a\u5982\u679c\u662f\u7f51\u7edc\u5b89\u88c5\uff0c\u8981\u5148\u5b89\u88c5kubelet\u7136\u540e\u624d\u80fd\u5b89\u88c5kubeadm\uff0c\u56e0\u4e3akubeadm\u4f9d\u8d56\u4e8ekubelet\uff0c\u5426\u5219\u53ef\u80fd\u9020\u6210\u7248\u672c\u4e0d\u4e00\u81f4<\/p>\n\n\n\n
2\u3001\u5b89\u88c5k8s\u7ec4\u4ef6\uff1a<\/p>\n\n\n\n
\u5c06\u4e0a\u56fe\u4e2d\u7684rpm\u5305\u62f7\u8d1d\u5230\u6bcf\u4e00\u4e2a\u8282\u70b9\uff0c\u6267\u884c\u5982\u4e0b\u547d\u4ee4\u5b89\u88c5<\/p>\n\n\n\n
yum install ~\/k8s\/kubernetes\/*.rpm<\/code><\/pre>\n\n\n\n
\u6267\u884c\u5b8c\u6210\u540e\uff0c kubeadm, kubectl, kubelet\u5c31\u5df2\u7ecf\u5b89\u88c5\u597d\u4e86 <\/p>\n\n\n\n
3\u3001 \u8bbe\u7f6ekubelet\u7684\u5f00\u673a\u542f\u52a8\u3002\u6211\u4eec\u5e76\u4e0d\u9700\u8981\u542f\u52a8kubelet\uff0c\u5c31\u7b97\u542f\u52a8\uff0c\u4e5f\u662f\u4e0d\u80fd\u6210\u529f\u7684\u3002\u6267\u884ckubeadm\u547d\u4ee4\uff0c\u4f1a\u751f\u6210\u4e00\u4e9b\u914d\u7f6e\u6587\u4ef6 \uff0c\u8fd9\u65f6\u624d\u4f1a\u8ba9kubelet\u542f\u52a8\u6210\u529f\u7684\u3002 <\/p>\n\n\n\n
systemctl enable kubelet<\/code><\/pre>\n\n\n\n
4\u3001\u62c9\u53d6\u955c\u50cf\uff1a<\/p>\n\n\n\n
 \u6267\u884ckubeadm\u65f6\uff0c\u9700\u8981\u7528\u5230\u4e00\u4e9b\u955c\u50cf\uff0c\u6211\u4eec\u9700\u8981\u63d0\u524d\u51c6\u5907 <\/p>\n\n\n\n
\u67e5\u770b\u9700\u8981\u4f9d\u8d56\u54ea\u4e9b\u955c\u50cf\uff1a<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u7531\u4e8e\u56fd\u5185\u8bbf\u95ee\u4e0d\u4e86k8s.gcr.io\u5730\u5740\uff0c\u56e0\u6b64\u9700\u8981\u901a\u8fc7\u56fd\u5185\u955c\u50cf\u5730\u5740\uff0c\u6216\u8005\u76f4\u63a5\u901a\u8fc7docker hub<\/strong>\u5730\u5740\u62c9\u53d6\u955c\u50cf\u4e5f\u53ef\u4ee5\uff0c\u672c\u4f8b\u5b50\u5df2\u7ecf\u4ecedocker hub\u4e0a\u62c9\u53d6\u4e86\u955c\u50cf\uff0c\u5e76tag\u6210k8s.gcr.io\u7684\u5730\u5740\u7c7b\u578b\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u4e03\u3001\u90e8\u7f72k8s\u96c6\u7fa4\uff1a<\/strong><\/p>\n\n\n\n
1\u3001 \u83b7\u53d6\u9ed8\u8ba4\u914d\u7f6e\u6587\u4ef6 \uff1a<\/p>\n\n\n\n
kubeadm config print init-defaults > kubeadm-config.yaml<\/code><\/pre>\n\n\n\n
kubeadm-config.yaml\u6587\u4ef6\u7684\u5185\u5bb9\u5982\u4e0b\uff1a<\/p>\n\n\n\n
apiVersion: kubeadm.k8s.io\/v1beta2\nbootstrapTokens:\n- groups:\n  - system:bootstrappers:kubeadm:default-node-token\n  token: abcdef.0123456789abcdef\n  ttl: 24h0m0s\n  usages:\n  - signing\n  - authentication\nkind: InitConfiguration\nlocalAPIEndpoint:\n  advertiseAddress: 192.168.15.215\n  bindPort: 6443\nnodeRegistration:\n  criSocket: \/var\/run\/dockershim.sock\n  name: k8s-master1\n  taints:\n  - effect: NoSchedule\n    key: node-role.kubernetes.io\/master\n---\napiServer:\n  certSANs:\n  - k8s-master1\n  - k8s-master2\n  - k8s-master3\n  - 192.168.15.215\n  - 192.168.15.216\n  - 192.168.15.217\n  - 192.168.15.253\n  - 127.0.0.1\n  extraArgs:\n    authorization-mode: Node,RBAC\n  timeoutForControlPlane: 4m0s\napiVersion: kubeadm.k8s.io\/v1beta2\ncertificatesDir: \/etc\/kubernetes\/pki\nclusterName: kubernetes\ncontrolPlaneEndpoint: \"192.168.15.253:16443\"     #vip\ncontrollerManager: {}\ndns:\n  type: CoreDNS\netcd:\n  external:\n   endpoints:\n   - https:\/\/192.168.15.215:2379   \n   - https:\/\/192.168.15.216:2379   \n   - https:\/\/192.168.15.217:2379\n   caFile: \/opt\/etcd\/ssl\/etcd-ca.pem\n   certFile: \/opt\/etcd\/ssl\/server.pem\n   keyFile: \/opt\/etcd\/ssl\/server-key.pem \nimageRepository: registry.aliyuncs.com\/google_containers      #\u963f\u91cc\u4e91\u4ed3\u5e93\nkind: ClusterConfiguration\nkubernetesVersion: v1.20.8\nnetworking:\n  dnsDomain: cluster.local\n  podSubnet: 10.244.0.0\/16                      #pod\u7f51\u6bb5\n  serviceSubnet: 10.96.0.0\/12                   #server\u7f51\u6bb5\nscheduler: {}\n---\napiVersion: kubeproxy.config.k8s.io\/v1alpha1\nkind: KubeProxyConfiguration\nmode: ipvs                                      #\u5f00\u542fipvs\u6a21\u5f0f\n---\n#\u6ce8\u610f\uff1a\u5728\u521d\u59cb\u5316\u96c6\u7fa4\u4e4b\u524d\uff0c\u9700\u8981\u786e\u4fdd\u5f53\u524d\u673a\u5668\u53ef\u4ee5\u767b\u5f55\u955c\u50cf\u4ed3\u5e93\uff0c\u5426\u5219\u62c9\u53d6\u955c\u50cf\u5931\u8d25<\/code><\/pre>\n\n\n\n
\u4e5f\u53ef\u4ee5\u4f7f\u7528\u547d\u4ee4\u5c06\u65e7\u7684kubeadm-config.yaml\u8f6c\u6362\u4e3a\u65b0\u7684\u6587\u4ef6\uff0c\u6267\u884c\u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n\n\n\n
kubeadm config migrate --old-config kubeadm-config.yaml --new-config new.yaml<\/code><\/pre>\n\n\n\n
2\u3001\u5c06\u4ece\u5916\u7f51\u4e0b\u8f7d\u955c\u50cf\u5bfc\u5165\u5230\u673a\u5668\u4e2d\uff0c\u6267\u884c\u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n\n\n\n
dokcer load -i  \u955c\u50cf\u540d\n\n#\u6ce8\u610f\uff1a\u5982\u679c\u4e0a\u9762\u521d\u59cb\u5316\u6587\u4ef6\u4e2d\u914d\u7f6e\u4e86\u955c\u50cf\u4ed3\u5e93\u5730\u5740\uff0c\u5c31\u4e0d\u7528\u518d\u6b21load\u4e86<\/code><\/pre>\n\n\n\n
3\u3001 \u521d\u59cb\u5316\u96c6\u7fa4\uff1a<\/p>\n\n\n\n
kubeadm init --config kubeadm-config.yaml\n\n#\u5982\u679c\u96c6\u7fa4\u521d\u59cb\u5316\u5931\u8d25\u9700\u8981\u91cd\u7f6e\u96c6\u7fa4\uff0c\u53ef\u6267\u884c\u4e0b\u9762\u547d\u4ee4\nkubeadm reset -f\niptables -F && iptables -t nat -F && iptables -t mangle -F && iptables -X<\/code><\/pre>\n\n\n\n
\u5982\u679c\u521d\u59cb\u5316\u6210\u529f\uff0c\u53ef\u4ee5\u770b\u5230\u5185\u5bb9\u5982\u4e0b\uff1a<\/p>\n\n\n\n
Your Kubernetes control-plane has initialized successfully!\n\nTo start using your cluster, you need to run the following as a regular user:\n\n  mkdir -p $HOME\/.kube\n  sudo cp -i \/etc\/kubernetes\/admin.conf $HOME\/.kube\/config\n  sudo chown $(id -u):$(id -g) $HOME\/.kube\/config\n\nAlternatively, if you are the root user, you can run:\n\n  export KUBECONFIG=\/etc\/kubernetes\/admin.conf\n\nYou should now deploy a pod network to the cluster.\nRun \"kubectl apply -f [podnetwork].yaml\" with one of the options listed at:\n  https://kubernetes.io\/docs\/concepts\/cluster-administration\/addons\/\n\nYou can now join any number of control-plane nodes by copying certificate authorities\nand service account keys on each node and then running the following as root:\n\n  kubeadm join 192.168.15.253:16443 --token abcdef.0123456789abcdef \\\n    --discovery-token-ca-cert-hash sha256:9363682fcdbfedd6e059d7428d859d5b0ae5388641dcd098b6876d89461b0625 \\\n    --control-plane \n\nThen you can join any number of worker nodes by running the following on each as root:\n\nkubeadm join 192.168.15.253:16443 --token abcdef.0123456789abcdef \\\n    --discovery-token-ca-cert-hash sha256:9363682fcdbfedd6e059d7428d859d5b0ae5388641dcd098b6876d89461b0625 \n\n\u6ce8\u610f\uff1amaster\u8282\u70b9\u52a0\u5165\u547d\u4ee4\u548cNode\u8282\u70b9\u52a0\u5165\u547d\u4ee4\u7684\u552f\u4e00\u533a\u522b\u5c31\u662fmaster\u8282\u70b9\u52a0\u5165\u547d\u4ee4\u591a\u4e86\u4e00\u4e2a\u53c2\u6570 --control-plane\uff0c\u5176\u4f59\u90fd\u662f\u4e00\u6478\u4e00\u6837\u7684\n<\/code><\/pre>\n\n\n\n
\u6ce8\u610f\uff1a\u5982\u679c\u521d\u59cb\u5316\u5361\u5728\u8fd9\u4e2a\u4f4d\u7f6e\uff1a[kubelet-check] Initial timeout of 40s passed.\uff0c \u5219\u8bf4\u660e\u662f\u521d\u59cb\u5316\u914d\u7f6e\u6587\u4ef6\u4e2d\u7684controlPlaneEndpoint\u4e0d\u901a\uff0c\u53ef\u6392\u67e5\u4e0b<\/p>\n\n\n\n
4\u3001 \u5728\u5176\u5b83\u4e24\u4e2amaster\u8282\u70b9\u521b\u5efa\u4ee5\u4e0b\u76ee\u5f55 \uff1a<\/p>\n\n\n\n
mkdir -p \/etc\/kubernetes\/pki\/<\/code><\/pre>\n\n\n\n
5\u3001 \u628a\u4e3bmaster\u8282\u70b9\u8bc1\u4e66\u5206\u522b\u590d\u5236\u5230\u5176\u4f59master\u8282\u70b9 \uff1a<\/p>\n\n\n\n
scp -r \/etc\/kubernetes\/pki\/ca.* root@192.168.15.216:\/etc\/kubernetes\/pki\/\nscp -r \/etc\/kubernetes\/pki\/sa.* root@192.168.15.216:\/etc\/kubernetes\/pki\/\nscp -r \/etc\/kubernetes\/pki\/front-proxy-ca.* root@192.168.15.216:\/etc\/kubernetes\/pki\nscp -r \/etc\/kubernetes\/pki\/etcd\/ca.* root@192.168.15.216:\/etc\/kubernetes\/pki\/etcd\nscp -r \/etc\/kubernetes\/admin.conf root@192.168.15.216:\/etc\/kubernetes\/\n<\/code><\/pre>\n\n\n\n
6\u3001 \u5176\u4ed6master\u8282\u70b9\u52a0\u5165\u96c6\u7fa4\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4 \uff1a<\/p>\n\n\n\n
kubeadm join 10.88.15.253:8443 --token abcdef.0123456789abcdef --discovery-token-ca-cert-hash sha256:9363682fcdbfedd6e059d7428d859d5b0ae5388641dcd098b6876d89461b0625 --control-plane<\/code><\/pre>\n\n\n\n
7\u3001 \u6240\u6709master\u8282\u70b9\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4(\u7ba1\u7406\u96c6\u7fa4\uff0c\u67e5\u770b\u96c6\u7fa4\u7b49)\uff0cnode\u8282\u70b9\u968f\u610f \uff1a<\/p>\n\n\n\n
#root\u7528\u6237\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a\necho \"export KUBECONFIG=\/etc\/kubernetes\/admin.conf\" >> ~\/.bash_profile\nsource .bash_profile\n\n#\u975eroot\u7528\u6237\u53ef\u4ee5\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a\nmkdir -p $HOME\/.kube\nsudo cp -i \/etc\/kubernetes\/admin.conf $HOME\/.kube\/config\nsudo chown $(id -u):$(id -g) $HOME\/.kube\/config<\/code><\/pre>\n\n\n\n
8\u3001 node\u8282\u70b9\u52a0\u5165\u96c6\u7fa4\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4(\u8981\u5b89\u88c5kubeadm\u3001kubelet\u3001kubectl) \uff1a<\/p>\n\n\n\n
kubeadm join 10.88.15.253:8443 --token abcdef.0123456789abcdef --discovery-token-ca-cert-hash sha256:9363682fcdbfedd6e059d7428d859d5b0ae5388641dcd098b6876d89461b0625<\/code><\/pre>\n\n\n\n
\u6ce8\u610f\uff1a\u5982\u679c\u52a0\u5165\u65f6\u5361\u5728\u4e86\u8fd9\u4e2a\u547d\u4ee4\u4f4d\u7f6e\uff0c[preflight] Running pre-flight checks\uff0c\u8bf4\u660etoken\u5df2\u7ecf\u8fc7\u671f\uff0c\u6b64\u65f6\u53ef\u4ee5\u6267\u884c\u4e0b\u9762\u547d\u4ee4\u91cd\u65b0\u751f\u6210token\u548chash\u7684\u503c<\/p>\n\n\n\n
kubeadm token create\nkubeadm token list\nopenssl x509 -pubkey -in \/etc\/kubernetes\/pki\/ca.crt | openssl rsa -pubin -outform der 2>\/dev\/null | openssl dgst -sha256 -hex | sed 's\/^.* \/\/'<\/code><\/pre>\n\n\n\n
\u751f\u6210\u540e\u4f7f\u7528\u65b0\u7684token\u548chash\u503c\u518d\u6b21\u6267\u884c\u547d\u4ee4\u52a0\u5165\u96c6\u7fa4\u5373\u53ef<\/p>\n\n\n\n
\u5982\u679c\u52a0\u5165node\u8282\u70b9\uff0c\u51fa\u73b0\u5982\u4e0b\u9519\u8bef\uff1a error execution phase kubelet-start: error uploading crisocket: timed out waiting for the condition
 To see the stack trace of this error execute with –v=5 or higher\uff0c\u6b64\u65f6\u53ef\u4ee5\u6309\u7167\u5982\u4e0b\u6b65\u9aa4\u6267\u884c\uff0c\u5982\u4e0b\uff1a<\/p>\n\n\n\n
swapoff -a\nkubeadm reset\nsystemctl daemon-reload\nsystemctl restart kubelet\niptables -F && iptables -t nat -F && iptables -t mangle -F && iptables -X\n#\u6267\u884c\u5b8c\u6210\u540e\u91cd\u65b0\u52a0\u5165\u96c6\u7fa4\u5373\u53ef<\/code><\/pre>\n\n\n\n
9\u3001\u52a0\u5165\u5b8c\u6210\u540e\uff0c\u5728master\u8282\u70b9\u6267\u884c\u547d\u4ee4\u67e5\u770b\u96c6\u7fa4\u8d44\u6e90\uff0c\u5982\u4e0b\uff1a<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u4ece\u4e0a\u56fe\u53ef\u4ee5\u770b\u51fa\uff0cSTATUS\u663e\u793aNotReady\uff0c\u56e0\u4e3a\u8fd8\u6ca1\u6709\u5b89\u88c5\u7f51\u7edc\u7ec4\u4ef6<\/p>\n\n\n\n
\u6267\u884c\u547d\u4ee4kubectl get cs \u67e5\u770b\u96c6\u7fa4\u72b6\u6001\u53ef\u4ee5\u770b\u51fa\u663e\u793a\u5982\u4e0b\uff1a<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u51fa\u73b0\u8fd9\u79cd\u60c5\u51b5\uff0c\u662f\/etc\/kubernetes\/manifests\/\u4e0b\u7684kube-controller-manager.yaml\u548ckube-scheduler.yaml\u8bbe\u7f6e\u7684\u9ed8\u8ba4\u7aef\u53e3\u662f0\u5bfc\u81f4\u7684\uff0c\u89e3\u51b3\u65b9\u5f0f\u662f\u6ce8\u91ca\u6389\u5bf9\u5e94\u7684port\u5373\u53ef\uff0c\u64cd\u4f5c\u5982\u4e0b\uff1a<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u6267\u884c\u547d\u4ee4kubectl get po -n kube-system\u53ef\u4ee5\u770b\u5230coredns\u5904\u4e8epending\u72b6\u6001\uff0c\u56e0\u4e3a\u6ca1\u6709\u5b89\u88c5calico<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
10\u3001\u5b89\u88c5calico\u7f51\u7edc\u63d2\u4ef6\uff1a\u4e0b\u8f7d\u6587\u4ef6\uff0c\u6267\u884c\u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n\n\n\n
#\u6ce8\u610f\uff1a\u6b64calico\u662f\u9488\u5bf950\u4e2a\u8282\u70b9\u4e4b\u5185\u7684\ncurl https:\/\/docs.projectcalico.org\/manifests\/calico.yaml -O<\/code><\/pre>\n\n\n\n
\u4fee\u6539pod CIDR\u5730\u5740\uff0c\u9ed8\u8ba4\u662f192.168.0.0\/16\uff0c\u9700\u8981\u4fee\u6539\u6210\u6211\u4eec\u81ea\u5df1\u7684\uff0c\u5148\u6253\u5f00\u6ce8\u91ca\uff0c\u4fee\u6539\u81ea\u5b9a\u4e49\u7684pod\u7f51\u6bb5\u5730\u5740<\/strong>\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u91cc\u9762\u7684\u955c\u50cf\u5730\u5740\u4fee\u6539\u4e3a\u81ea\u5df1\u7684\u4ed3\u5e93\u5730\u5740\uff0c\u672c\u4f8b\u5b50\u4e2d\u7528\u7684\u963f\u91cc\u4e91\u955c\u50cf\u4ed3\u5e93(\u4e0d\u9700\u8981secret\u8ba4\u8bc1)\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u5982\u679c\u662f\u4e2a\u4eba\u4ed3\u5e93\u8fd8\u9700\u8981\u5728\u955c\u50cf\u62c9\u53d6\u7b56\u7565\u4f4d\u7f6e\u8981\u8bbe\u7f6e\u4ed3\u5e93\u8ba4\u8bc1\u540d\u79f0(Deployment\u548cDaemonSet\u4f4d\u7f6e\u90fd\u8981\u8bbe\u7f6e)\u548c\u62c9\u53d6\u7b56\u7565(\u4e5f\u53ef\u4ee5\u4e0d\u8bbe\u7f6e\u9ed8\u8ba4\u662fAlways)\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u6ce8\u610f\uff1a\u9700\u8981\u521b\u5efa\u4ed3\u5e93\u8ba4\u8bc1\u6587\u4ef6secret.yml\uff0c\u7136\u540e\u914d\u7f6e\u5728calico\u4e2d\uff0c\u8fd9\u6837\u624d\u53ef\u4ee5\u987a\u5229\u5c06\u955c\u50cf\u62c9\u53bb\u4e0b\u6765\uff0c\u53c2\u8003\u4e8c\u8fdb\u5236\u90e8\u7f72\u4e2d\u7684\u914d\u7f6e\u8bf4\u660ehttps:\/\/blog.ywdevops.cn\/index.php\/2021\/06\/29\/k8s-2\/<\/a><\/strong><\/p>\n\n\n\n
\u6700\u540e\u6267\u884c\u547d\u4ee4kubectl apply -f calico.yaml\u5373\u53ef\uff0c\u6267\u884c\u5b8c\u6210\u540e\u53ef\u4ee5\u770b\u5230coredns<\/strong>\u4e5f\u6062\u590d\u6b63\u5e38\u4e86\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u5404\u4e2a\u8282\u70b9\u72b6\u6001\u90fd\u53d8\u6210\u4e86Ready\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u6ce8\u610f\uff1a\u5982\u679c\u51fa\u73b0\u5982\u4e0b\u9519\u8befcalico\/node is not ready: BIRD is not ready: BGP not established\uff0c\u8868\u793acalico\u6ca1\u6709 \u53d1\u73b0\u5b9e\u9645\u771f\u6b63\u7684\u7f51\u5361 \uff0c\u53ef\u7528\u5982\u4e0b\u65b9\u5f0f\u89e3\u51b3\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u5982\u679ccalico\u7684\u63a7\u5236\u5668pod calico-kube-controllers\u63d0\u793a\u9519\u8bef\u5982\u4e0b\uff1a<\/p>\n\n\n\n
Failed to create pod sandbox: rpc error: code = Unknown desc = [failed to set up sandbox container “70a2175a467ba631594c6f661ff612e15eed9d5f31332061ef7d2b399d5cacdb” network for pod “calico-kube-controllers-dbc86d6cc-7cbs9”: networkPlugin cni failed to set up pod “calico-kube-controllers-dbc86d6cc-7cbs9_kube-system” network: error getting ClusterInformation: connection is unauthorized: Unauthorized, failed to clean up sandbox container “70a2175a467ba631594c6f661ff612e15eed9d5f31332061ef7d2b399d5cacdb” network for pod “calico-kube-controllers-dbc86d6cc-7cbs9”: networkPlugin cni failed to teardown pod “calico-kube-controllers-dbc86d6cc-7cbs9_kube-system” network: error getting ClusterInformation: connection is unauthorized: Unauthorized<\/p>\n\n\n\n
\u89e3\u51b3\u65b9\u6cd5\uff1a<\/p>\n\n\n\n
    \n
  • kubelet delete -f calico.yaml  #\u5378\u8f7dcalico<\/li>\n\n\n\n
  • rm -rf \/etc\/cni\/net.d\/*            #\u5220\u9664\u5168\u90e8\u8282\u70b9\u7684calico\u6b8b\u7559\u914d\u7f6e\u6587\u4ef6<\/li>\n\n\n\n
  • modprobe -r ipip                    #\u5220\u9664tun10\u7f51\u5361<\/li>\n\n\n\n
  • reboot \u6216\u8005systemctl restart kubelet<\/li>\n\n\n\n
  • kubectl apply -f calico.yaml   #\u6700\u540e\u5728\u91cd\u65b0\u90e8\u7f72calico<\/li>\n<\/ul>\n\n\n\n
    \u6ce8\uff1ak8s 1.20.8\u7248\u672c\u53ef\u4f7f\u7528calico\u76843.19.1 \uff0ck8s 1.23.5\u7248\u672c\u53ef\u7528calico\u76843.25.0\u7248\u672c<\/p>\n\n\n\n
    metrics\u90e8\u7f72\uff1a<\/strong><\/p>\n\n\n\n
    \u5728\u65b0\u7248\u7684k8s\u4e2d\uff0c\u8d44\u6e90\u91c7\u96c6\u5747\u4f7f\u7528Metirc-server\uff0c\u53ef\u4ee5\u901a\u8fc7Metirc\u91c7\u96c6\u8282\u70b9\u548cPod\u7684\u5185\u5b58\u3001\u78c1\u76d8\u3001cpu\u548c\u7f51\u7edc\u4f7f\u7528\u7387<\/p>\n\n\n\n
    \u9996\u5148\u5c06mastere1\u8282\u70b9\u7684front-proxy-ca.crt\u62f7\u8d1d\u5230\u6240\u6709Node\u8282\u70b9<\/strong><\/p>\n\n\n\n
    scp \/etc\/kubernetes\/pki\/front-proxy-ca.crt root192.168.15.218:\/etc\/kubernetes\/pki<\/code><\/pre>\n\n\n\n
    github.com\u4e0b\u8f7dmetrics\u7684yaml\u6587\u4ef6\uff0c\u5730\u5740\u5982\u4e0b\uff1a<\/p>\n\n\n\n
    https://github.com\/kubernetes-sigs\/metrics-server\/releases\/tag\/v0.4.4\n#\u540d\u79f0\u4e3a\uff1acomponents.yaml<\/code><\/pre>\n\n\n\n
    \u4fee\u6539\u6587\u4ef6components.yaml\uff0c\u5185\u90e8\u7684\u955c\u50cf\u5730\u5740\u6539\u4e3a\u81ea\u5df1\u7684\u4ed3\u5e93\u5730\u5740(\u9700\u8981\u63d0\u524d\u628a\u955c\u50cf\u4e0b\u8f7d\u56de\u6765\u4f20\u5165\u4ed3\u5e93)\uff0c\u7136\u540e\u52a0\u5165\u6307\u5b9a\u8bc1\u4e66\u7684\u53c2\u6570\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u6ce8\uff1a\u4e0d\u52a0\u8bc1\u4e66\u53c2\u6570\u53ef\u80fd\u83b7\u53d6\u4e0d\u5230\u5ea6\u91cf\u6307\u6807<\/p>\n\n\n\n
    \u6267\u884c\u547d\u4ee4kubectl create -f components.yaml\u521b\u5efaPod\u5373\u53ef\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u6ce8\u610f\uff1a\u5982\u679c\u955c\u50cf\u62c9\u53d6\u4e0d\u6210\u529f\uff0c\u90a3\u5c31\u624b\u52a8\u5c06\u955c\u50cf\u62c9\u53d6\u5230\u6bcf\u4e2a\u8282\u70b9\u4e0a\u5373\u53ef\uff0c\u6ce8\u610f\u770b\u955c\u50cf\u62c9\u53d6\u7b56\u7565imagePullPolicy\uff0c\u5982\u679c\u662fIfNotPresent\uff0c\u90a3\u4e48\u5982\u679c\u4ece\u4ed3\u5e93\u62c9\u53d6\u4e0d\u6210\u529f\u5c31\u4f1a\u5bfb\u627e\u672c\u5730\u955c\u50cf<\/p>\n\n\n\n
    \u8fd0\u884c\u6210\u529f\u540e\uff0c\u6267\u884c\u547d\u4ee4kubectl top  node \u53ef\u4ee5\u67e5\u770b\u6240\u6709\u8282\u70b9\u7684\u8d44\u6e90\u60c5\u51b5\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u6267\u884c\u547d\u4ee4kubectl top po -A \u53ef\u4ee5\u67e5\u770b\u6240\u6709pod\u7684\u8d44\u6e90\u60c5\u51b5\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u6ce8\uff1a-A \u8868\u793a\u6240\u6709\u547d\u540d\u7a7a\u95f4<\/p>\n\n\n\n
    \u81f3\u6b64\uff1ak8s\u96c6\u7fa4\u5df2\u7ecf\u90e8\u7f72\u5b8c\u6210\uff0c\u4e0b\u9762\u7684dashboard\u53ef\u6839\u636e\u9700\u8981\u8fdb\u884c\u90e8\u7f72<\/strong><\/p>\n\n\n\n
    dashboard\u90e8\u7f72 <\/strong><\/p>\n\n\n\n
    \u5c06\u6587\u4ef6\u4e0b\u8f7d\u56de\u6765\uff0c\u4e00\u5171\u4e24\u4e2a\u6587\u4ef6\uff0cdashboard-user.yaml\u548cdashboard.yaml\uff0c\u4fee\u6539dashboard.yaml\u4e2d\u7684\u955c\u50cf\u5730\u5740\u4e3a\u672c\u5730\u5730\u5740\uff0c\u4e00\u5171\u4e24\u4e2a\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u6267\u884c\u547d\u4ee4\u521b\u5efapod\uff0c\u5982\u4e0b\uff1a<\/p>\n\n\n\n
    kubectl create -f dashborad-user.yaml dashboard.yaml<\/code><\/pre>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u6ce8\u610f\uff1a\u5982\u679c\u955c\u50cf\u62c9\u53d6\u4e0d\u6210\u529f\uff0c\u53ef\u68c0\u67e5\u4e0b\u62c9\u53d6\u7b56\u7565\u662f\u5426\u4e3aIfNotPresent\uff0c\u5efa\u8bae\u91c7\u7528\u6b64\u7b56\u7565<\/p>\n\n\n\n
    \u90e8\u7f72\u5b8c\u6210\u540e\uff0c\u9700\u8981\u4fee\u6539\u8c37\u6b4c\u6d4f\u89c8\u5668\u7684\u914d\u7f6e\uff0c\u7136\u540e\u624d\u53ef\u4ee5\u8bbf\u95ee\u81ea\u7b7e\u540d\u7684https\u9875\u9762\uff0c\u5728\u542f\u52a8\u6587\u4ef6\u540e\u9762\u6dfb\u52a0\u53c2\u6570–test-type –ignore-certificate-errors\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u7136\u540e\u66f4\u6539kubernetes-dashboard\u7684svc\u4e3aNodePort\uff0c\u5426\u5219\u8bbf\u95ee\u4e0d\u4e86\uff0c\u6267\u884c\u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n\n\n\n
    #\u9996\u5148\u67e5\u770b\u4e0bsvc\nkubectl get svc -n kubernetes-dashboard\n#\u7f16\u8f91svc\nkubectl edit svc kubernetes-dashboard -n kubernetes-dashboard\n#\u7f16\u8f91\u540e\uff0c\u4fee\u6539\u6700\u4e0b\u65b9\u7684type:ClusterIP \u4e3atype:NodePort<\/code><\/pre>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u518d\u6b21\u67e5\u770bsvc\u53ef\u4ee5\u770b\u5230\u5df2\u7ecf\u53d8\u6210NodePort\u7c7b\u578b\uff0c\u6620\u5c04\u5230\u5bbf\u4e3b\u7684\u7aef\u53e3\u4e3a30500\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u6b64\u65f6\u901a\u8fc7vip\u5730\u5740\u52a0\u7aef\u53e3\u5373\u53ef\u8bbf\u95eedashboard\uff0chttps:\/\/192.168.15.253:30500<\/strong>\u5982\u56fe\uff1a<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u6ce8\u610f\uff1a\u901a\u8fc7https\u6765\u8bbf\u95ee<\/p>\n\n\n\n
    \u67e5\u770b\u767b\u5f55token\uff0c\u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n\n\n\n
    kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep admin-user | awk '{print $1}')<\/code><\/pre>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u5c06\u6b64token\u8f93\u5165\u540e\uff0c\u70b9\u51fb\u767b\u5f55\u5373\u53ef\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u4fee\u6539proxy\u6a21\u5f0f\u4e3aipvs<\/strong><\/p>\n\n\n\n
    \u9996\u5148\u67e5\u770b\u4e0b\u9ed8\u8ba4\u7684\u6a21\u5f0f\uff0c\u6267\u884c\u547d\u4ee4\u5982\u4e0b:<\/p>\n\n\n\n
    curl 127.0.0.1:10249\/proxyMode<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u8f93\u5165\u547d\u4ee4\u7f16\u8f91kube-proxy\uff0c\u4fee\u6539\u6a21\u5f0f\u4e3aipvs\uff0c\u5982\u4e0b\uff1a<\/p>\n\n\n\n
    #\u67e5\u770bcomfigmap\u60c5\u51b5\nkubectl get cm -n kube-system\n#\u7f16\u8f91kube-proxy\uff0c\u4fee\u6539\u6a21\u5f0f\nkubectl edit cm kube-proxy -n kube-system<\/code><\/pre>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u6267\u884c\u547d\u4ee4\u6eda\u52a8\u66f4\u65b0\uff0c\u5982\u4e0b\uff1a<\/p>\n\n\n\n
    kubectl patch daemonset kube-proxy -p \"{\\\"spec\\\":{\\\"template\\\":{\\\"metadata\\\":{\\\"annotations\\\":{\\\"date\\\":\\\"`date +'%s'`\\\"}}}}}\" -n kube-system<\/code><\/pre>\n\n\n\n
    \u518d\u6b21\u67e5\u770b\u6a21\u5f0f\uff0c\u5df2\u7ecf\u53d8\u6210ipvs\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u4e03\u3001\u96c6\u7fa4\u53ef\u7528\u6027\u9a8c\u8bc1\uff1a<\/p>\n\n\n\n
    1\u3001\u9996\u5148\u901a\u8fc7\u547d\u4ee4kubectl get po –all-namespace(\u6216\u8005-A\u53c2\u6570)\u67e5\u770b\u6240\u6709\u5bb9\u5668\u90fd\u5df2\u542f\u52a8\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    2\u3001\u9a8c\u8bc1\u4e0b\u7f51\u7edc\u60c5\u51b5\uff0c\u9996\u5148\u67e5\u770bk8s\u7684service ip\u60c5\u51b5\uff0c\u6267\u884c\u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n\n\n\n
    kubectl get svc\n#k8s\u7684IP\u5730\u5740\u4e00\u822c\u4e3acluster ip\u7684\u7b2c\u4e00\u4e2aIP\u5730\u5740<\/code><\/pre>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u9a8c\u8bc1\u6bcf\u53f0\u673a\u5668\u5230\u6b64IP\u7684443\u7aef\u53e3\u662f\u5426\u901a\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u67e5\u8be2coredns\u7684serviceip \u5730\u5740\uff0c\u6267\u884c\u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n\n\n\n
    kubectl get svc -n kube-system\n#coredns\u7684IP\u5730\u5740\u4e00\u822c\u4e3aclusterip \u7684\u7b2c10\u4e2aIP\u5730\u5740<\/code><\/pre>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u9a8c\u8bc1\u6bcf\u53f0\u673a\u5668\u5230\u6b64IP\u768453\u7aef\u53e3\u662f\u5426\u901a\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    3\u3001\u9a8c\u8bc1\u5176\u4f59\u673a\u5668\u5230\u67d0\u53f0\u673a\u5668\u7684pod \u662f\u5426\u901a(\u8de8\u670d\u52a1\u5668\u8bbf\u95ee)\uff0c\u9996\u5148\u67e5\u770bpod\u5730\u5740\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
    kubctl get po -A -o wide      \/\/\u67e5\u8be2\u8be6\u7ec6\u4fe1\u606f<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u4ece\u4e0a\u56fe\u53ef\u4ee5\u770b\u51fa\uff0c\u5728master2\u673a\u5668\u4e0a\u6709\u4e00\u4e2aPod \uff0c\u5730\u5740\u4e3a172.169.115.66\uff0c\u7136\u540e\u5728\u5176\u4ed6\u6240\u6709\u8282\u70b9\u4e0aping\u6b64IP\u5730\u5740\uff0c\u770b\u662f\u5426\u901a\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    \u7ecf\u8fc7\u6d4b\u8bd5\uff0c\u6240\u6709\u8282\u70b9\u90fd\u901a\uff0c\u8bf4\u660e\u8de8\u670d\u52a1\u5668\u8bbf\u95ee\u6ca1\u95ee\u9898<\/p>\n\n\n\n
    4\u3001\u63a5\u4e0b\u6765\u9a8c\u8bc1pod\u548cpod\u4e4b\u95f4\u662f\u5426\u901a\uff0c\u9009\u62e9\u5176\u4ed6\u4efb\u610f\u4e00\u53f0\u673a\u5668\uff0c\u8fdb\u5165pod\u4e2d\uff0c\u7136\u540eping master\u8282\u70b9\u7684172.169.115.66\uff0c\u6267\u884c\u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n\n\n\n
    \u901a\u8fc7\u5982\u4e0b\u7ec4\u4ef6\u53ef\u5b9e\u73b0\u56fa\u5b9apod\u7684ip\/mac\u5730\u5740\uff1a<\/p>\n\n\n\n
    https://github.com\/google-fabric<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
    kubeadm\u662f\u5b98\u65b9\u793e\u533a\u63a8\u51fa\u7684\u4e00\u4e2a\u7528\u4e8e\u5feb\u901f\u90e8\u7f72kubernetes\u96c6\u7fa4\u7684\u5de5\u5177\u3002\u8fd9\u4e2a\u5de5\u5177\u80fd\u901a\u8fc7\u4e24\u6761\u6307\u4ee4\u5feb\u901f\u5b8c\u6210\u4e00 […]<\/p>\n","protected":false},"author":3,"featured_media":4492,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[93,29],"tags":[],"class_list":["post-4467","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kubernetes","category-yunwei"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"_links":{"self":[{"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/posts\/4467","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/comments?post=4467"}],"version-history":[{"count":111,"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/posts\/4467\/revisions"}],"predecessor-version":[{"id":20314,"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/posts\/4467\/revisions\/20314"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/media\/4492"}],"wp:attachment":[{"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/media?parent=4467"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/categories?post=4467"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.ywdevops.cn\/index.php\/wp-json\/wp\/v2\/tags?post=4467"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}