{"id":35511,"date":"2023-03-13T19:09:40","date_gmt":"2023-11-07T06:16:35","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82\/"},"modified":"2024-04-29T18:44:03","modified_gmt":"2024-04-29T10:44:03","slug":"%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82\/","title":{"rendered":"\u4f7f\u7528containerd\u548ckubeadm\u6765\u6784\u5efakubernetes"},"content":{"rendered":"<h2>\u74b0\u5883<\/h2>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">ubuntu\uff1a22.0.4.1 LTS<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">kubernetes\uff1a1.28.2<\/ul>\n<h2>\u306f\u3058\u3081\u306b<\/h2>\n<p>\u672c\u8a18\u4e8b\u3067\u306f\u3001kubeadm\u3092\u4f7f\u7528\u3059\u308b\u3046\u3048\u3067\u306e\u6e96\u5099\u304c\u5b8c\u4e86\u3057\u3066\u3044\u308b\u3082\u306e\u3068\u3057\u307e\u3059\u3002<br \/>\n\u6e96\u5099\u306b\u3064\u3044\u3066\u306f\u3001\u4ee5\u4e0b\u306e\u8a18\u4e8b\u3092\u66f8\u3044\u305f\u306e\u3067\u53c2\u8003\u307e\u3067\u306b\u3002<\/p>\n<p>&nbsp;<\/p>\n<h2>kuberadm\u5411\u3051Configuration\uff08InitConfiguration\/JoinConfiguration\uff09\u306e\u6e96\u5099<\/h2>\n<p>\u4eca\u56de\u6e96\u5099\u3057\u305f\u30b5\u30fc\u30d0\u30fc\u306b\u306f\u30012\u3064\u306eNIC\u304c\u3042\u308a\u307e\u3059\u3002\u304a\u305d\u3089\u304f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067kubernetes\u3067\u4f7f\u7528\u3055\u308c\u308bNIC\u306f\u3001Default Route\u304c\u8a2d\u5b9a\u3055\u308c\u3066\u3044\u308bNIC\u3092\u4f7f\u3044\u307e\u3059\u3002<br \/>\n\u4eca\u56de\u7ba1\u7406\u7cfb\u30672\u3064\u76ee\u306eNIC\u3092\u7528\u610f\u3057\u305f\u306e\u3067\u3059\u304c\u3001\u3053\u306e\u307e\u307e\u69cb\u7bc9\u3057\u3088\u3046\u3068\u3059\u308b\u3068\u3001\u671f\u5f85\u3059\u308bNIC\u3067\u30ce\u30fc\u30c9\u540c\u5fd7\u306e\u901a\u4fe1\u304c\u3055\u308c\u306a\u304b\u3063\u305f\u306e\u3067\u3001Configuration\u30d5\u30a1\u30a4\u30eb\u3092\u7528\u610f\u3057kubeadm\u5b9f\u884c\u6642\u306b\u98df\u308f\u305b\u3088\u3046\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n<h3>\u30c7\u30d5\u30a9\u30eb\u30c8\u306e\u30b3\u30f3\u30d5\u30a3\u30b0\u3092\u78ba\u8a8d<\/h3>\n<p>\u60a8\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u751f\u6210init\u548cjoin\u7684\u9ed8\u8ba4\u914d\u7f6e\u3002<\/p>\n<ul class=\"post-ul\">InitConfiguration<\/ul>\n<pre class=\"post-pre\"><code>kubeadm config print init-defaults\r\n<\/code><\/pre>\n<details>\u51fa\u529b\u4f8bapiVersion: kubeadm.k8s.io\/v1beta3<br \/>\nbootstrapTokens:<br \/>\n&#8211; groups:<br \/>\n&#8211; system:bootstrappers:kubeadm:default-node-token<br \/>\ntoken: abcdef.0123456789abcdef<br \/>\nttl: 24h0m0s<br \/>\nusages:<br \/>\n&#8211; signing<br \/>\n&#8211; authentication<br \/>\nkind: InitConfiguration<br \/>\nlocalAPIEndpoint:<br \/>\nadvertiseAddress: 1.2.3.4<br \/>\nbindPort: 6443<br \/>\nnodeRegistration:<br \/>\ncriSocket: unix:\/\/\/var\/run\/containerd\/containerd.sock<br \/>\nimagePullPolicy: IfNotPresent<br \/>\nname: node<br \/>\ntaints: null<br \/>\n&#8212;<br \/>\napiServer:<br \/>\ntimeoutForControlPlane: 4m0s<br \/>\napiVersion: kubeadm.k8s.io\/v1beta3<br \/>\ncertificatesDir: \/etc\/kubernetes\/pki<br \/>\nclusterName: kubernetes<br \/>\ncontrollerManager: {}<br \/>\ndns: {}<br \/>\netcd:<br \/>\nlocal:<br \/>\ndataDir: \/var\/lib\/etcd<br \/>\nimageRepository: registry.k8s.io<br \/>\nkind: ClusterConfiguration<br \/>\nkubernetesVersion: 1.28.0<br \/>\nnetworking:<br \/>\ndnsDomain: cluster.local<br \/>\nserviceSubnet: 10.96.0.0\/12<br \/>\nscheduler: {}<\/p>\n<\/details>\n<ul class=\"post-ul\">JoinConfiguration<\/ul>\n<pre class=\"post-pre\"><code>kubeadm config print join-defaults\r\n<\/code><\/pre>\n<details>\u51fa\u529b\u4f8bapiVersion: kubeadm.k8s.io\/v1beta3<br \/>\ncaCertPath: \/etc\/kubernetes\/pki\/ca.crt<br \/>\ndiscovery:<br \/>\nbootstrapToken:<br \/>\napiServerEndpoint: kube-apiserver:6443<br \/>\ntoken: abcdef.0123456789abcdef<br \/>\nunsafeSkipCAVerification: true<br \/>\ntimeout: 5m0s<br \/>\ntlsBootstrapToken: abcdef.0123456789abcdef<br \/>\nkind: JoinConfiguration<br \/>\nnodeRegistration:<br \/>\ncriSocket: unix:\/\/\/var\/run\/containerd\/containerd.sock<br \/>\nimagePullPolicy: IfNotPresent<br \/>\nname: kube-controlplane-001<br \/>\ntaints: null<\/p>\n<\/details>\n<h3>\u521b\u5efa\u914d\u7f6e\u6587\u4ef6<\/h3>\n<p>\u6839\u636e\u8fd9\u4e9b\u8fdb\u884c\uff0c\u5c06\u5728\u5404\u81ea\u76ee\u6807\u8282\u70b9\u4e0a\u521b\u5efa\u914d\u7f6e\u6587\u4ef6\u3002\u5728\u8fd9\u4e2a\u73af\u5883\u4e2d\uff0c\u6211\u4eec\u521b\u5efa\u4e86\u5982\u4e0b\u7684\u914d\u7f6e\u3002<\/p>\n<ul class=\"post-ul\">InitConfiguration<\/ul>\n<pre class=\"post-pre\"><code>apiVersion: kubeadm.k8s.io\/v1beta3\r\nbootstrapTokens:\r\n- groups:\r\n  - system:bootstrappers:kubeadm:default-node-token\r\n  token: abcdef.0123456789abcdef\r\n  ttl: 24h0m0s\r\n  usages:\r\n  - signing\r\n  - authentication\r\nkind: InitConfiguration\r\nlocalAPIEndpoint:\r\n  advertiseAddress: 172.21.0.8\r\n  bindPort: 6443\r\nnodeRegistration:\r\n  criSocket: unix:\/\/\/var\/run\/containerd\/containerd.sock\r\n  imagePullPolicy: IfNotPresent\r\n  name: kube-controlplane-001\r\n  taints: null\r\n  kubeletExtraArgs:\r\n    node-ip: 172.21.0.8\r\n---\r\napiServer:\r\n  timeoutForControlPlane: 4m0s\r\napiVersion: kubeadm.k8s.io\/v1beta3\r\ncertificatesDir: \/etc\/kubernetes\/pki\r\nclusterName: kubernetes\r\ncontrollerManager: {}\r\ndns: {}\r\netcd:\r\n  local:\r\n    dataDir: \/var\/lib\/etcd\r\nimageRepository: registry.k8s.io\r\nkind: ClusterConfiguration\r\nkubernetesVersion: 1.28.0\r\nnetworking:\r\n  dnsDomain: example.local\r\n  serviceSubnet: 192.16.0.0\/12\r\n  podSubnet: 192.168.0.0\/16\r\nscheduler: {}\r\n<\/code><\/pre>\n<ul class=\"post-ul\">JoinConfiguration<\/ul>\n<pre class=\"post-pre\"><code>apiVersion: kubeadm.k8s.io\/v1beta3\r\ncaCertPath: \/etc\/kubernetes\/pki\/ca.crt\r\ndiscovery:\r\n  bootstrapToken:\r\n    apiServerEndpoint: 172.21.0.8:6443\r\n    token: abcdef.0123456789abcdef\r\n    caCertHashes:\r\n    - sha256:xxxxxxxxxxxxxxxxxxxxxxxxxxxx\r\n    unsafeSkipCAVerification: true\r\n  timeout: 5m0s\r\n  tlsBootstrapToken: abcdef.0123456789abcdef\r\nkind: JoinConfiguration\r\nnodeRegistration:\r\n  criSocket: unix:\/\/\/var\/run\/containerd\/containerd.sock\r\n  imagePullPolicy: IfNotPresent\r\n  name: kube-worker-001\r\n  taints: null\r\n  kubeletExtraArgs:\r\n    node-ip: 172.21.0.18\r\n<\/code><\/pre>\n<p>\u5982\u679c\u5c1d\u8bd5\u4f7f\u7528\u4e0e\u5b9e\u9645\u4e3b\u673a\u540d\u4e0d\u540c\u7684\u540d\u79f0\u6ce8\u518cnodeRegistration.name\uff0c\u4f1a\u5728kubeadm\u6267\u884c\u65f6\u4ea7\u751f\u4ee5\u4e0b\u8b66\u544a\uff0c\u56e0\u6b64\u5c06\u5176\u8bb0\u5f55\u5728hosts\u6587\u4ef6\u4e2d\u3002<\/p>\n<pre class=\"post-pre\"><code>[preflight] Running pre-flight checks\r\n        [WARNING Hostname]: hostname \"kube-worker-001\" could not be reached\r\n        [WARNING Hostname]: hostname \"kube-worker-001\": lookup kube-worker-001 on 127.0.0.53:53: server misbehaving\r\n<\/code><\/pre>\n<p>\u540c\u6837\uff0c\u8fd8\u9700\u8981\u5355\u72ec\u4fee\u6b63discovery.bootstrapToken.caCertHashes[]\uff08\u8be6\u89c1\u540e\u6587\uff09\u3002<\/p>\n<h2>\u6267\u884ckubeadm init<\/h2>\n<p>\u305d\u308c\u3067\u306f\u3001\u5148\u306b\u4f5c\u6210\u3057\u305f\u30b3\u30f3\u30d5\u30a3\u30b0\u30d5\u30a1\u30a4\u30eb\u3092\u4f7f\u7528\u3057\u3066kubeadm init\u3092\u5b9f\u884c\u3057\u3066\u307f\u307e\u3059\u3002<\/p>\n<pre class=\"post-pre\"><code>sudo kubeadm init --config ~\/config.yaml\r\n<\/code><\/pre>\n<details>\u51fa\u529b\u4f8b[init] Using Kubernetes version: v1.28.0<br \/>\n[preflight] Running pre-flight checks<br \/>\n[preflight] Pulling images required for setting up a Kubernetes cluster<br \/>\n[preflight] This might take a minute or two, depending on the speed of your internet connection<br \/>\n[preflight] You can also perform this action in beforehand using &#8216;kubeadm config images pull&#8217;<br \/>\n[certs] Using certificateDir folder &#8220;\/etc\/kubernetes\/pki&#8221;<br \/>\n[certs] Generating &#8220;ca&#8221; certificate and key<br \/>\n[certs] Generating &#8220;apiserver&#8221; certificate and key<br \/>\n[certs] apiserver serving cert is signed for DNS names [kube-controlplane-001 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.example.local] and IPs [192.16.0.1 172.21.0.8]<br \/>\n[certs] Generating &#8220;apiserver-kubelet-client&#8221; certificate and key<br \/>\n[certs] Generating &#8220;front-proxy-ca&#8221; certificate and key<br \/>\n[certs] Generating &#8220;front-proxy-client&#8221; certificate and key<br \/>\n[certs] Generating &#8220;etcd\/ca&#8221; certificate and key<br \/>\n[certs] Generating &#8220;etcd\/server&#8221; certificate and key<br \/>\n[certs] etcd\/server serving cert is signed for DNS names [kube-controlplane-001 localhost] and IPs [172.21.0.8 127.0.0.1 ::1]<br \/>\n[certs] Generating &#8220;etcd\/peer&#8221; certificate and key<br \/>\n[certs] etcd\/peer serving cert is signed for DNS names [kube-controlplane-001 localhost] and IPs [172.21.0.8 127.0.0.1 ::1]<br \/>\n[certs] Generating &#8220;etcd\/healthcheck-client&#8221; certificate and key<br \/>\n[certs] Generating &#8220;apiserver-etcd-client&#8221; certificate and key<br \/>\n[certs] Generating &#8220;sa&#8221; key and public key<br \/>\n[kubeconfig] Using kubeconfig folder &#8220;\/etc\/kubernetes&#8221;<br \/>\n[kubeconfig] Writing &#8220;admin.conf&#8221; kubeconfig file<br \/>\n[kubeconfig] Writing &#8220;kubelet.conf&#8221; kubeconfig file<br \/>\n[kubeconfig] Writing &#8220;controller-manager.conf&#8221; kubeconfig file<br \/>\n[kubeconfig] Writing &#8220;scheduler.conf&#8221; kubeconfig file<br \/>\n[etcd] Creating static Pod manifest for local etcd in &#8220;\/etc\/kubernetes\/manifests&#8221;<br \/>\n[control-plane] Using manifest folder &#8220;\/etc\/kubernetes\/manifests&#8221;<br \/>\n[control-plane] Creating static Pod manifest for &#8220;kube-apiserver&#8221;<br \/>\n[control-plane] Creating static Pod manifest for &#8220;kube-controller-manager&#8221;<br \/>\n[control-plane] Creating static Pod manifest for &#8220;kube-scheduler&#8221;<br \/>\n[kubelet-start] Writing kubelet environment file with flags to file &#8220;\/var\/lib\/kubelet\/kubeadm-flags.env&#8221;<br \/>\n[kubelet-start] Writing kubelet configuration to file &#8220;\/var\/lib\/kubelet\/config.yaml&#8221;<br \/>\n[kubelet-start] Starting the kubelet<br \/>\n[wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory &#8220;\/etc\/kubernetes\/manifests&#8221;. This can take up to 4m0s<br \/>\n[apiclient] All control plane components are healthy after 16.506164 seconds<br \/>\n[upload-config] Storing the configuration used in ConfigMap &#8220;kubeadm-config&#8221; in the &#8220;kube-system&#8221; Namespace<br \/>\n[kubelet] Creating a ConfigMap &#8220;kubelet-config&#8221; in namespace kube-system with the configuration for the kubelets in the cluster<br \/>\n[upload-certs] Skipping phase. Please see &#8211;upload-certs<br \/>\n[mark-control-plane] Marking the node kube-controlplane-001 as control-plane by adding the labels: [node-role.kubernetes.io\/control-plane node.kubernetes.io\/exclude-from-external-load-balancers]<br \/>\n[mark-control-plane] Marking the node kube-controlplane-001 as control-plane by adding the taints [node-role.kubernetes.io\/control-plane:NoSchedule]<br \/>\n[bootstrap-token] Using token: abcdef.0123456789abcdef<br \/>\n[bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles<br \/>\n[bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes<br \/>\n[bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials<br \/>\n[bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token<br \/>\n[bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster<br \/>\n[bootstrap-token] Creating the &#8220;cluster-info&#8221; ConfigMap in the &#8220;kube-public&#8221; namespace<br \/>\n[kubelet-finalize] Updating &#8220;\/etc\/kubernetes\/kubelet.conf&#8221; to point to a rotatable kubelet client certificate and key<br \/>\n[addons] Applied essential addon: CoreDNS<br \/>\n[addons] Applied essential addon: kube-proxy<\/p>\n<p>Your Kubernetes control-plane has initialized successfully!<\/p>\n<p>To start using your cluster, you need to run the following as a regular user:<\/p>\n<p>mkdir -p $HOME\/.kube<br \/>\nsudo cp -i \/etc\/kubernetes\/admin.conf $HOME\/.kube\/config<br \/>\nsudo chown $(id -u):$(id -g) $HOME\/.kube\/config<\/p>\n<p>Alternatively, if you are the root user, you can run:<\/p>\n<p>export KUBECONFIG=\/etc\/kubernetes\/admin.conf<\/p>\n<p>You should now deploy a pod network to the cluster.<br \/>\nRun &#8220;kubectl apply -f [podnetwork].yaml&#8221; with one of the options listed at:<br \/>\nhttps:\/\/kubernetes.io\/docs\/concepts\/cluster-administration\/addons\/<\/p>\n<p>Then you can join any number of worker nodes by running the following on each as root:<\/p>\n<p>kubeadm join 172.21.0.8:6443 &#8211;token abcdef.0123456789abcdef \\<br \/>\n&#8211;discovery-token-ca-cert-hash sha256:dc254f77ea2ad56f5c2e2d4db4ab3a3c4859cece253198640a2a4bc8c2b0f6a7<\/p>\n<\/details>\n<p>\u3053\u3053\u3067\u3001\u6700\u7d42\u884c\u306e\u300csha256:\u300d\u304b\u3089\u306f\u3058\u307e\u308b\u30cf\u30c3\u30b7\u30e5\u5024\u304c\u5148\u306eJoinConfiguration\u306b\u5fc5\u8981\u306a\u60c5\u5831\u3067\u3059\u306e\u3067\u3001JoinConfiguration\u3092\u4fee\u6b63\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<pre class=\"post-pre\"><code>    caCertHashes:\r\n<span class=\"gd\">-   - sha256:xxxxxxxxxxxxxxxxxxxxxxxxxxxx\r\n<\/span><span class=\"gi\">+   - sha256:922084bff5a544762a8a7421938b7fe89c508e356a3943492a7e43025fcab63b\r\n<\/span><\/code><\/pre>\n<p>\u53e6\u5916\uff0c\u5982\u679c\u5fd8\u8bb0\u4e86\u4e0a\u8ff0\u54c8\u5e0c\u503c\u7684\u5907\u5fd8\u5f55\uff0c\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u547d\u4ee4\u91cd\u65b0\u8f93\u51fa\u3002<\/p>\n<pre class=\"post-pre\"><code>openssl x509 -pubkey -in \/etc\/kubernetes\/pki\/ca.crt | openssl rsa -pubin -outform der 2&gt;\/dev\/null | \\\r\n   openssl dgst -sha256 -hex | sed 's\/^.* \/\/'\r\n<\/code><\/pre>\n<h3>\u6267\u884ckubeadm join<\/h3>\n<p>\u305d\u308c\u3067\u306f\u3001\u30ef\u30fc\u30ab\u30fc\u30ce\u30fc\u30c9\u306e\u6e96\u5099\u3082\u5b8c\u4e86\u3057\u305f\u306e\u3067\u3001\u30af\u30e9\u30b9\u30bf\u30fc\u306b\u53c2\u52a0\u3055\u305b\u3066\u307f\u305f\u3044\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n<pre class=\"post-pre\"><code>sudo kubeadm join --config ~\/join_config.yaml\r\n<\/code><\/pre>\n<details>\u51fa\u529b\u4f8b[preflight] Running pre-flight checks<br \/>\n[preflight] Reading configuration from the cluster&#8230;<br \/>\n[preflight] FYI: You can look at this config file with &#8216;kubectl -n kube-system get cm kubeadm-config -o yaml&#8217;<br \/>\n[kubelet-start] Writing kubelet configuration to file &#8220;\/var\/lib\/kubelet\/config.yaml&#8221;<br \/>\n[kubelet-start] Writing kubelet environment file with flags to file &#8220;\/var\/lib\/kubelet\/kubeadm-flags.env&#8221;<br \/>\n[kubelet-start] Starting the kubelet<br \/>\n[kubelet-start] Waiting for the kubelet to perform the TLS Bootstrap&#8230;<\/p>\n<p>This node has joined the cluster:<br \/>\n* Certificate signing request was sent to apiserver and a response was received.<br \/>\n* The Kubelet was informed of the new secure connection details.<\/p>\n<p>Run &#8216;kubectl get nodes&#8217; on the control-plane to see this node join the cluster.<\/p>\n<\/details>\n<p>\u3053\u308c\u3067\u30af\u30e9\u30b9\u30bf\u30fc\u3092\u4f5c\u6210\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3057\u305f\u3002<br \/>\n\u30ef\u30fc\u30ab\u30fc\u30ce\u30fc\u30c9\u30922\u53f0\u76ee\u4ee5\u964d\u8ffd\u52a0\u3059\u308b\u5834\u5408\u306b\u306f\u3001\u4e0a\u8a18\u306e\u624b\u9806\u3092\u7e70\u308a\u8fd4\u305b\u3070\u3088\u3044\u3067\u3059\u3002<\/p>\n<h3>\u4f7f\u7528kubectl\u7684\u51c6\u5907\u5de5\u4f5c<\/h3>\n<p>\u5728\u4ee5\u540e\uff0c\u6211\u4eec\u5c06\u4f7f\u7528kubectl\u6765\u7ba1\u7406\u96c6\u7fa4\uff0c\u4f46\u76ee\u524d\u8fd8\u4e0d\u80fd\u4f7f\u7528\u3002\u9700\u8981\u8fdb\u884c\u4e00\u4e9b\u8fde\u63a5kube-api\u7684\u8bbe\u7f6e\u3002\u5982\u679c\u518d\u6b21\u67e5\u770b\u4e0a\u4e00\u6b65kubeadm init\u7684\u8f93\u51fa\u65e5\u5fd7&#8230;<\/p>\n<pre class=\"post-pre\"><code>To start using your cluster, you need to run the following as a regular user:\r\n\r\n  mkdir -p $HOME\/.kube\r\n  sudo cp -i \/etc\/kubernetes\/admin.conf $HOME\/.kube\/config\r\n  sudo chown $(id -u):$(id -g) $HOME\/.kube\/config\r\n<\/code><\/pre>\n<p>\u3053\u308c\u304c\u3001kube-api\u306b\u63a5\u7d9a\u3059\u308b\u305f\u3081\u306e\u8a2d\u5b9a\u3068\u306a\u308a\u307e\u3059\u306e\u3067\u3001\u9806\u756a\u306b\u5b9f\u884c\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<h2>\u8bf7\u786e\u8ba4\u72b6\u6001\u3002<\/h2>\n<p>\u5b8c\u6210\u4e0a\u8ff0\u8bbe\u7f6e\u540e\uff0c\u60a8\u5c31\u53ef\u4ee5\u987a\u5229\u4f7f\u7528kubectl\u4e86\u3002\u8ba9\u6211\u4eec\u8bd5\u7740\u67e5\u770b\u5df2\u6ce8\u518c\u5230\u96c6\u7fa4\u7684\u8282\u70b9\u4fe1\u606f\u3002<\/p>\n<pre class=\"post-pre\"><code># kubectl get nodes -owide\r\nNAME                    STATUS     ROLES           AGE    VERSION   INTERNAL-IP   EXTERNAL-IP   OS-IMAGE             KERNEL-VERSION      CONTAINER-RUNTIME\r\nkube-controlplane-001   NotReady   control-plane   104s   v1.28.2   172.21.0.8    &lt;none&gt;        Ubuntu 22.04.1 LTS   5.15.0-88-generic   containerd:\/\/1.6.24\r\nkube-worker-001         NotReady   &lt;none&gt;          39s    v1.28.2   172.21.0.18   &lt;none&gt;        Ubuntu 22.04.1 LTS   5.15.0-88-generic   containerd:\/\/1.6.24\r\n<\/code><\/pre>\n<p>\u901a\u8fc7\u8fd9\u4e2a\uff0c\u96c6\u7fa4\u5df2\u7ecf\u521b\u5efa\u5b8c\u6210\u3002\u867d\u7136 &#8220;STATUS&#8221; \u72b6\u6001\u662f &#8220;NotReady&#8221;\uff0c\u4f46\u901a\u8fc7\u5b89\u88c5 CNI \u63d2\u4ef6\uff0c\u96c6\u7fa4\u5c06\u987a\u5229\u8f6c\u53d8\u4e3a &#8220;Ready&#8221; \u72b6\u6001\u3002<\/p>\n<p>\u4ee5\u4e0b\u5bf9\u4e8e\u300cHostName\u300d\u3001\u300cINTERNAL-IP\u300d\u548c\u300cEXTERNAL-IP\u300d\u6709\u89e3\u91ca\u3002<\/p>\n<blockquote><p>\u4e3b\u673a\u540d: \u662f\u7531\u8282\u70b9\u5185\u6838\u4f20\u9012\u7684\u4e3b\u673a\u540d\u3002<br \/>\n\u5916\u90e8IP\uff1a\u901a\u5e38\u662f\u53ef\u901a\u8fc7\u8def\u7531\u8bbf\u95ee\u7684\u8282\u70b9\u7684IP\u5730\u5740\uff08\u53ef\u4ee5\u4ece\u96c6\u7fa4\u5916\u8bbf\u95ee\uff09\u3002<br \/>\n\u5185\u90e8IP\uff1a\u901a\u5e38\u662f\u53ea\u5728\u96c6\u7fa4\u5185\u53ef\u8fdb\u884c\u8def\u7531\u7684\u8282\u70b9\u7684IP\u5730\u5740\u3002<\/p><\/blockquote>\n<p>&nbsp;<\/p>\n<p>\u8fd9\u6b21\u5c31\u5230\u8fd9\u91cc\u5427\u3002<\/p>\n<p>\u4e0b\u4e00\u6b65\uff0c\u6211\u4eec\u5c06\u4f7f\u7528Calico\u6765\u5f15\u5165CNI\u63d2\u4ef6\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u74b0\u5883 ubuntu\uff1a22.0.4.1 LTS &nbsp; kubernetes\uff1a1.28.2 \u306f\u3058\u3081\u306b \u672c\u8a18 [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-35511","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u4f7f\u7528containerd\u548ckubeadm\u6765\u6784\u5efakubernetes - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528containerd\u548ckubeadm\u6765\u6784\u5efakubernetes\u3002\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f7f\u7528containerd\u548ckubeadm\u6765\u6784\u5efakubernetes\" \/>\n<meta property=\"og:description\" content=\"\u74b0\u5883 ubuntu\uff1a22.0.4.1 LTS &nbsp; kubernetes\uff1a1.28.2 \u306f\u3058\u3081\u306b \u672c\u8a18 [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528containerd\u548ckubeadm\u6765\u6784\u5efakubernetes\u3002\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-11-07T06:16:35+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-29T10:44:03+00:00\" \/>\n<meta name=\"author\" content=\"\u6e05, \u5b87\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u6e05, \u5b87\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82\/\",\"name\":\"\u4f7f\u7528containerd\u548ckubeadm\u6765\u6784\u5efakubernetes - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-11-07T06:16:35+00:00\",\"dateModified\":\"2024-04-29T10:44:03+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/1a6ecd3d914d22a5ac32791ffc1fbd8e\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f7f\u7528containerd\u548ckubeadm\u6765\u6784\u5efakubernetes\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/1a6ecd3d914d22a5ac32791ffc1fbd8e\",\"name\":\"\u6e05, \u5b87\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4b2016c18459a605fc469c7566608f5686491baa112d0871ee613f61b7210565?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4b2016c18459a605fc469c7566608f5686491baa112d0871ee613f61b7210565?s=96&d=mm&r=g\",\"caption\":\"\u6e05, \u5b87\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyu\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u4f7f\u7528containerd\u548ckubeadm\u6765\u6784\u5efakubernetes - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528containerd\u548ckubeadm\u6765\u6784\u5efakubernetes\u3002\/","og_locale":"zh_CN","og_type":"article","og_title":"\u4f7f\u7528containerd\u548ckubeadm\u6765\u6784\u5efakubernetes","og_description":"\u74b0\u5883 ubuntu\uff1a22.0.4.1 LTS &nbsp; kubernetes\uff1a1.28.2 \u306f\u3058\u3081\u306b \u672c\u8a18 [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528containerd\u548ckubeadm\u6765\u6784\u5efakubernetes\u3002\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-11-07T06:16:35+00:00","article_modified_time":"2024-04-29T10:44:03+00:00","author":"\u6e05, \u5b87","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u6e05, \u5b87","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"6 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82\/","name":"\u4f7f\u7528containerd\u548ckubeadm\u6765\u6784\u5efakubernetes - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-11-07T06:16:35+00:00","dateModified":"2024-04-29T10:44:03+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/1a6ecd3d914d22a5ac32791ffc1fbd8e"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u4f7f\u7528containerd\u548ckubeadm\u6765\u6784\u5efakubernetes"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/1a6ecd3d914d22a5ac32791ffc1fbd8e","name":"\u6e05, \u5b87","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4b2016c18459a605fc469c7566608f5686491baa112d0871ee613f61b7210565?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4b2016c18459a605fc469c7566608f5686491baa112d0871ee613f61b7210565?s=96&d=mm&r=g","caption":"\u6e05, \u5b87"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyu\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8containerd%e5%92%8ckubeadm%e6%9d%a5%e6%9e%84%e5%bb%bakubernetes%e3%80%82\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35511","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=35511"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35511\/revisions"}],"predecessor-version":[{"id":86982,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35511\/revisions\/86982"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=35511"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=35511"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=35511"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}