rke2 部署 k8s集群

环境准备所有主机都做# 主机名设置 tee -a /etc/hosts /dev/null EOF 192.168.238.125 k8s-master 192.168.238.126 k8s-node1 192.168.238.127 k8s-node2 EOF # 关闭swap swapoff -all # 开启ipvs modprobe ip_vs ip_vs_rr ip_vs_wrr ip_vs_sh nf_conntrack # 写入文件确保配置永久生效 rootk8s-master:~# vim /etc/modules-load.d/ipvs.conf ip_vs ip_vs_rr ip_vs_wrr ip_vs_sh nf_conntrack # 开启内核参数 modprobe br_netfilter modprobe overlay echo net.ipv4.ip_forward1 /etc/sysctl.conf echo net.bridge.bridge-nf-call-iptables1 /etc/sysctl.conf echo net.bridge.bridge-nf-call-ip6tables1 /etc/sysctl.conf sysctl --system # 确认生效情况 rootk8s-master:~# lsmod | grep -E ip_vs|br_netfilter|overlay overlay 212992 0 br_netfilter 32768 0 bridge 425984 1 br_netfilter ip_vs_sh 12288 0 ip_vs_wrr 12288 0 ip_vs_rr 12288 0 ip_vs 221184 6 ip_vs_rr,ip_vs_sh,ip_vs_wrr nf_conntrack 196608 1 ip_vs nf_defrag_ipv6 24576 2 nf_conntrack,ip_vs libcrc32c 12288 4 nf_conntrack,btrfs,raid456,ip_vs# 在master上安装rke2 mkdir -p /etc/rancher/rke2/ curl -sfL https://rancher-mirror.rancher.cn/rke2/install.sh | INSTALL_RKE2_MIRRORcn sh - # 换镜像源 vim /etc/rancher/rke2/registries.yaml mirrors: docker.io: endpoint: - https://docker.1ms.run # 第一次启动 RKE2 时读取定义集群基础参数集群初始化用 vim /etc/rancher/rke2/config.yaml token: rke2-secret-token tls-san: - 192.168.238.125 write-kubeconfig-mode: 0644 node-name: k8s-master node-label: - rolemaster debug: true kube-proxy-arg: - proxy-modeipvs # 如果多master节点其余master config参考 vim /etc/rancher/rke2/config.yaml server: https://192.168.238.125:9345 token: rke2-secret-token tls-san: - 192.168.238.125 write-kubeconfig-mode: 0644 node-name: k8s-master02 node-label: - rolemaster debug: true kube-proxy-arg: - proxy-modeipvs # 启动服务 systemctl enable rke2-server.service systemctl start rke2-server.service所有从节点所作操作mkdir -p /etc/rancher/rke2/ curl -sfL https://rancher-mirror.rancher.cn/rke2/install.sh | INSTALL_RKE2_MIRRORcn INSTALL_RKE2_TYPEagent sh - # 换镜像源 vim /etc/rancher/rke2/registries.yaml mirrors: docker.io: endpoint: - https://docker.1ms.run # 同样写config 注意 node name更改 vim /etc/rancher/rke2/config.yaml server: https://192.168.238.125:9345 token: rke2-secret-token node-name: k8s-node01 node-label: - roleworker debug: true kube-proxy-arg: - proxy-modeipvs # 启动服务 systemctl enable rke2-agent.service systemctl start rke2-agent.service部署如果没问题 生产环境debug可以修改回来修改之后重启 对于 rke2服务kubectl 等命令路径rootk8s-master:~# ls /var/lib/rancher/rke2/bin/kubectl /var/lib/rancher/rke2/bin/kubectl 可做软链接 或者 声明下PATH路径 echo export PATH$PATH:/var/lib/rancher/rke2/bin ~/.bashrc # 2. 让配置立即生效 source ~/.bashrc集群默认配置文件rootk8s-master:~# ls /etc/rancher/rke2/rke2.yaml /etc/rancher/rke2/rke2.yaml rootk8s-master:~# kubectl get node --kubeconfig /etc/rancher/rke2/rke2.yaml NAME STATUS ROLES AGE VERSION k8s-master Ready control-plane,etcd 133m v1.35.4rke2r1 k8s-node01 Ready none 114m v1.35.4rke2r1 k8s-node02 Ready none 114m v1.35.4rke2r1 # node节点没有标签可以手动打 kubectl label node k8s-node01 node-role.kubernetes.io/workertrue kubectl label node k8s-node02 node-role.kubernetes.io/workertrue # 如果想让这个集群成为默认集群 # 需要 将yml文件放到默认config目录 # 由于rke2 默认不创建 .kube 到主目录需要的话可以手动建 mkdir -p ~/.kube cp /etc/rancher/rke2/rke2.yaml ~/.kube/configcrictl 需要处理一下套接字文件vim /etc/crictl.yaml runtime-endpoint: unix:///run/k3s/containerd/containerd.sock image-endpoint: unix:///run/k3s/containerd/containerd.sock