《蹲坑学kubernetes》之10-2：安装部署kubelet

[root@k8s-master ~]# tar -zxvfkubernetes-node-linux-amd64.tar.gz -C /usr/src/
[root@k8s-master ~]# cd /usr/src/kubernetes/node/bin
[root@k8s-master bin]# cp kubelet kubectlkube-proxy /usr/local/kubernetes/bin/
复制

[root@k8s-master ~]# vim /usr/local/kubernetes/conf/environment.sh
添加：
# 创建kubelet bootstrapping kubeconfig
BOOTSTRAP_TOKEN=a6cccdfca47a9766da8db559b81fb6c4
KUBE_APISERVER="https://192.168.1.3:6443"
# 设置集群参数
kubectl config set-cluster kubernetes \
       --certificate-authority=/usr/local/kubernetes/ssl/ca.pem \
       --embed-certs=true \
       --server=${KUBE_APISERVER} \
       --kubeconfig=/usr/local/kubernetes/conf/bootstrap.kubeconfig
 
# 设置客户端认证参数
kubectl config set-credentials kubelet-bootstrap \
       --token=${BOOTSTRAP_TOKEN} \
       --kubeconfig=/usr/local/kubernetes/conf/bootstrap.kubeconfig
 
# 设置上下文参数
kubectl config set-context default \
       --cluster=kubernetes \
       --user=kubelet-bootstrap \
       --kubeconfig=/usr/local/kubernetes/conf/bootstrap.kubeconfig
 
# 设置默认上下文
kubectl config use-context default \
       --kubeconfig=/usr/local/kubernetes/conf/bootstrap.kubeconfig
复制

[root@k8s-master ~]# chmod +x/usr/local/kubernetes/conf/environment.sh
[root@k8s-master ~]# /usr/local/kubernetes/conf/environment.sh
复制

[root@k8s-master ~]# ls/usr/local/kubernetes/conf/bootstrap.kubeconfig
复制

[root@k8s-master ~]# scp /usr/local/kubernetes/conf/bootstrap.kubeconfig192.168.1.1:/usr/local/kubernetes/conf/
[root@k8s-master ~]# scp /usr/local/kubernetes/conf/bootstrap.kubeconfig192.168.1.2:/usr/local/kubernetes/conf/
复制

[root@k8s-master ~]# vim/usr/local/kubernetes/conf/envkubelet.kubeconfig.sh
添加：
# 创建kubelet kubeconfig
BOOTSTRAP_TOKEN=a6cccdfca47a9766da8db559b81fb6c4
KUBE_APISERVER="https://192.168.1.3:6443"
 
# 设置集群参数
kubectl config set-cluster kubernetes \
       --certificate-authority=/usr/local/kubernetes/ssl/ca.pem  \
       --embed-certs=true \
       --server=${KUBE_APISERVER} \
       --kubeconfig=/usr/local/kubernetes/conf/kubelet.kubeconfig
 
# 设置客户端认证参数
kubectl config set-credentials kubelet \
        --token=${BOOTSTRAP_TOKEN} \
       --kubeconfig=/usr/local/kubernetes/conf/kubelet.kubeconfig
 
# 设置上下文参数
kubectl config set-context default \
       --cluster=kubernetes \
       --user=kubelet \
       --kubeconfig=/usr/local/kubernetes/conf/kubelet.kubeconfig
 
# 设置默认上下文
kubectl config use-context default \
       --kubeconfig=/usr/local/kubernetes/conf/kubelet.kubeconfig
 
 
复制

[root@k8s-master ~]# chmod +x /usr/local/kubernetes/conf/envkubelet.kubeconfig.sh
[root@k8s-master ~]#/usr/local/kubernetes/conf/envkubelet.kubeconfig.sh
复制

[root@k8s-master ~]# ls/usr/local/kubernetes/conf/kubelet.kubeconfig
复制

[root@k8s-master ~]# scp /usr/local/kubernetes/conf/kubelet.kubeconfig 192.168.1.1:/usr/local/kubernetes/conf/
[root@k8s-master ~]# scp /usr/local/kubernetes/conf/kubelet.kubeconfig 192.168.1.2:/usr/local/kubernetes/conf/
复制

[root@k8s-master ~]# vim /usr/local/kubernetes/conf/kubelet.config
添加：
kind: KubeletConfiguration
apiVersion: kubelet.config.k8s.io/v1beta1
address: 192.168.1.3                               ###改为本机ip地址
port: 10250
readOnlyPort: 10255
cgroupDriver: cgroupfs
clusterDNS: ["10.0.0.10"]
clusterDomain: cluster.local.
failSwapOn: false
authentication:
  anonymous:
    enabled:true
 
[root@k8s-master ~]# scp /usr/local/kubernetes/conf/kubelet.config192.168.1.1:/usr/local/kubernetes/conf/
[root@k8s-master ~]# scp /usr/local/kubernetes/conf/kubelet.config192.168.1.2:/usr/local/kubernetes/conf/
复制

[root@k8s-master ~]# docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.1
复制

[root@k8s-master ~]# vim /usr/local/kubernetes/conf/kubelet
添加：
KUBELET_OPTS="--logtostderr=true \
       --v=4 \
       --hostname-override=k8s-master \
       --kubeconfig=/usr/local/kubernetes/conf/kubelet.kubeconfig \
       --bootstrap-kubeconfig=/usr/local/kubernetes/conf/bootstrap.kubeconfig \
       --config=/usr/local/kubernetes/conf/kubelet.config \
       --cert-dir=/usr/local/kubernetes/ssl/ \
       --cluster-dns=10.0.0.10 \
       --cluster-domain=cluster.local \
       --client-ca-file=/usr/local/kubernetes/ssl/ca.pem \
    --pod-infra-container-image=registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.1"
 
注意：如果启用CNI则添加如下配置：
        --network-plugin=cni


        --cni-conf-dir=/etc/cni/net.d 


        --cni-bin-dir=/opt/cni/bin


 
 
[root@k8s-master ~]# scp /usr/local/kubernetes/conf/kubelet 192.168.1.1:/usr/local/kubernetes/conf/
[root@k8s-master ~]# scp /usr/local/kubernetes/conf/kubelet 192.168.1.2:/usr/local/kubernetes/conf/
复制

[root@k8s-node-1 ~]# vim /usr/lib/systemd/system/kubelet.service
添加：
[Unit]
Description=Kubernetes Kubelet
After=docker.service
Requires=docker.service
 
[Service]
EnvironmentFile=-/usr/local/kubernetes/conf/kubelet
ExecStart=/usr/local/kubernetes/bin/kubelet$KUBELET_OPTS
Restart=on-failure
KillMode=process
 
[Install]
WantedBy=multi-user.target
 
[root@k8s-master ~]# scp /usr/lib/systemd/system/kubelet.service 192.168.1.1:/usr/lib/systemd/system/
[root@k8s-master ~]# scp /usr/lib/systemd/system/kubelet.service 192.168.1.2:/usr/lib/systemd/system/
复制

[root@k8s-master~]# kubectl create clusterrolebindingkubelet-bootstrap --clusterrole=system:node-bootstrapper --user=kubelet-bootstrap
复制

[root@k8s-master ~]# systemctl enable kubelet.service
[root@k8s-master ~]# systemctl start kubelet.service
[root@k8s-master ~]# systemctl status kubelet.service
复制

[root@k8s-master ~]# netstat -anpt | grep kubelet
复制

[root@k8s-master ~]# kubectl create clusterrolebindingkubelet-bootstrap --clusterrole=system:node-bootstrapper --user=kubelet-bootstrap
复制

[root@k8s-master ~]# kubectl get csr
复制

[root@k8s-master ~]# kubectl certificate approvenode-csr-4f1CiCedNim94v0u8dMrj0YKw79wrU8BzEl5oDKKINY
[root@k8s-master ~]# kubectl certificate approvenode-csr-HU6O86iGyvB_L45oQMEQPS-4EdMA_8Rkjv2GqQurIjM
[root@k8s-master ~]# kubectl certificate approvenode-csr-XGnfhQvE0b1dnOlHKrzHTRqi9YGA4ZetwmG64_vKi0g
复制

[root@k8s-master ~]# kubectl get  nodes
复制