节点加入

操作系统环境初始化

apt-get update && apt-get install -y apt-transport-https curl
apt install docker.io

配置阿里巴巴kubernetes.list

cat <<EOF >/etc/apt/sources.list.d/kubernetes.list
deb https://mirrors.aliyun.com/kubernetes/apt/ kubernetes-xenial main
EOF

安装kube工具

apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 6A030B21BA07F4FB   //镜像源

apt-get update
apt-get install -y kubernetes-cni=0.6.0-00
apt-get install -y kubelet=1.12.2-00 --allow-unauthenticated
apt-get install -y kubeadm=1.12.2-00 --allow-unauthenticated
apt-get install -y kubectl=1.12.2-00 --allow-unauthenticated
apt-mark hold kubelet kubeadm kubectl

下载基础docker镜像

docker pull         gcrxio/kube-proxy:v1.12.1  
docker pull         gcrxio/pause-amd64:3.1
docker pull         gcrxio/pause:3.1
docker tag          gcrxio/kube-proxy:v1.12.1                         k8s.gcr.io/kube-proxy:v1.12.1
docker tag          gcrxio/pause-amd64:3.1         k8s.gcr.io/pause-amd64:3.1
docker tag          gcrxio/pause:3.1         k8s.gcr.io/pause:3.1
k8s.gcr.io/fluentd-elasticsearch:v2.2.0

master节点创建token

kubeadm token create

master节点Sha256

openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed ‘s/^.* //‘

节点接入

kubeadm join 192.168.1.66:6443 --token 1c0ped.c5sqhkapx3mjurol --discovery-token-ca-cert-hash sha256:62c961a11e1abc985cb6ba7e6c380ada73ab075dd113934dae8f48a0f32515ae --ignore-preflight-errors=all

节点资源限制

 cat /etc/default/kubelet 
KUBELET_EXTRA_ARGS=--system-reserved=cpu=1500m,memory=1024Mi --kube-reserved=cpu=500m,memory=512Mi --eviction-hard=memory.available<2Gi,nodefs.available<6Gi,imagefs.available<1Gi --eviction-minimum-reclaim="memory.available=1.2Gi,nodefs.available=5Gi,imagefs.available=1Gi"

重启kubelet

 systemctl restart kubelet.service