{"id":35828,"date":"2023-08-24T18:39:38","date_gmt":"2022-11-01T06:56:55","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89\/"},"modified":"2024-04-30T19:56:11","modified_gmt":"2024-04-30T11:56:11","slug":"%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89\/","title":{"rendered":"\u4f7f\u7528Kubernetes 1.15.1 \u4e8c\u8fdb\u5236\u6587\u4ef6\u8fdb\u884c\u5b89\u88c5\uff08worker\u90e8\u5206\uff09"},"content":{"rendered":"

\u5148\u884c\u53d1\u5e03Worker\u7248\u800c\u4e0d\u662fMaster\u7248\u3002
\n\u5c06Kubernetes\u5b89\u88c5\u5728\u5de5\u4f5c\u8282\u70b9\uff08\u4ee5\u4e0b\u7b80\u79f0\u4e3a\u8282\u70b9\uff09\u4e0a\u3002
\n\u4e0d\u4f7f\u7528Kubeadm\u3002<\/p>\n

\u7f16\u8f91Node\u7684Host\u6587\u4ef6<\/h2>\n

\u5728\u6bcf\u4e2a\u8282\u70b9\u7684\/etc\/hosts\u6587\u4ef6\u4e2d\u6dfb\u52a0\u4e0e\u4e3b\u8282\u70b9\u7684\/etc\/hosts\u6587\u4ef6\u76f8\u540c\u7684\u6761\u76ee\u3002<\/h3>\n

\u6211\u5c06Master \u7684\/etc\/hosts\u6587\u4ef6\u5185\u5bb9\u6dfb\u52a0\u5230node\u3002<\/p>\n

[master3]# cat \/etc\/hosts\r\n127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4\r\n::1         localhost localhost.localdomain localhost6 localhost6.localdomain6\r\n\r\n192.168.1.201 master1\r\n192.168.1.202 master2\r\n192.168.1.203 master3\r\n\r\n192.168.1.201 k8svip.com\r\n<\/code><\/pre>\n
\u56e0\u4e3a127.0.0.1\u548c::1\u5e94\u8be5\u5df2\u7ecf\u88ab\u5199\u5165\u4e86Node\u7684Host\u6587\u4ef6\u4e2d\uff0c\u6240\u4ee5\u6211\u4eec\u9700\u8981\u590d\u5236192.168.1.201\u30012\u30013\u548cVIP\u3002<\/p>\n
\u7b80\u800c\u8a00\u4e4b\uff0c\u5982\u679c\u5728\u6dfb\u52a0\u540e\u67e5\u770bNode\u7684Host\u6587\u4ef6\uff0c\u5e94\u8be5\u662f\u4ee5\u4e0b\u72b6\u6001\u3002<\/p>\n
[root@node1 ~]# cat \/etc\/hosts\r\n\r\n127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4\r\n::1         localhost localhost.localdomain localhost6 localhost6.localdomain6\r\n\r\n192.168.1.201 master1\r\n192.168.1.202 master2\r\n192.168.1.203 master3\r\n\r\n192.168.1.201 k8svip.com\r\n<\/code><\/pre>\n
\u4ece\u8001\u5e08\u90a3\u513f\u590d\u5370\u8bc1\u4e66\u3002<\/h1>\n
\u5728Master\u4e0a\u521b\u5efaSSH\u8bc1\u4e66\uff0c\u5e76\u53d6\u6d88rsync\u7684\u8ba4\u8bc1\uff08\u901a\u8fc7Master\u8fdb\u884c\u64cd\u4f5c\uff09\u3002<\/p>\n
[master]#ssh-keygen\r\n#\u3059\u3079\u3066Enter\r\n\r\n[master]#ssh-copy-id node1\r\n#node1\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b\u3002node1\u306f\u5404\u81ea\u306e\u74b0\u5883\u3001IP\u306b\u5909\u66f4\r\n<\/code><\/pre>\n
\u8bf7(worker)\u521b\u5efa\u6587\u4ef6\u5939\u3002<\/p>\n
mkdir -p \/etc\/kubernetes\/\r\n<\/code><\/pre>\n
\uff08\u7531Master\u64cd\u4f5c\uff09\uff08node01\u4f7f\u7528\u5404\u81ea\u7684\u8282\u70b9\u540d\u79f0\u6216IP\u5730\u5740\uff09<\/p>\n
[master]# rsync -av \/etc\/kubernetes\/ssl\/ca* node01:\/etc\/kubernetes\/ssl\/\r\n[master]# rsync -av \/etc\/kubernetes\/config node01:\/etc\/kubernetes\/\r\n[master]# rsync -av \/etc\/kubernetes\/bootstrap.kubeconfig node01:\/etc\/kubernetes\/\r\n\r\n<\/code><\/pre>\n
Docker\u7684\u5b89\u88c5\u548c\u542f\u52a8<\/h1>\n
yum install -y yum-utils device-mapper-persistent-data lvm2\r\nyum-config-manager --add-repo https:\/\/download.docker.com\/linux\/centos\/docker-ce.repo\r\nyum install -y docker-ce\r\n\r\nsystemctl enable docker\r\nsystemctl daemon-reload\r\nsystemctl start docker\r\n\r\n<\/code><\/pre>\n
\u4e09\u8272\u732b<\/h1>\n
\u6ce8\u518c\u548c\u542f\u52a8calico service<\/h2>\n
\u8bf7\u6ce8\u610f\u4ee5\u4e0b\u4e8b\u9879\uff1a
\n\u5c06 Environment=ETCD_ENDPOINTS= \u66ff\u6362\u4e3a\u81ea\u5df1\u7684\u4e3b\u673a\u540d\u7b49\u3002<\/p>\n
cat >\/usr\/lib\/systemd\/system\/calico-node.service <<\"EOF\"\r\n[Unit]\r\nDescription=calico-node\r\nAfter=docker.service\r\nRequires=docker.service\r\n[Service]\r\nUser=root\r\nEnvironment=ETCD_ENDPOINTS=http:\/\/master1:2379,http:\/\/master2:2379,http:\/\/master3:2379\r\nPermissionsStartOnly=true\r\nExecStart=\/usr\/bin\/docker run --net=host --privileged --name=calico-node \\\r\n  -e ETCD_ENDPOINTS=${ETCD_ENDPOINTS} \\\r\n  -e NODENAME=${HOSTNAME} \\\r\n  -e IP= \\\r\n  -e IP6= \\\r\n  -e AS= \\\r\n  -e NO_DEFAULT_POOLS= \\\r\n  -e CALICO_NETWORKING_BACKEND=bird \\\r\n  -e FELIX_DEFAULTENDPOINTTOHOSTACTION=ACCEPT \\\r\n  -e CALICO_LIBNETWORK_ENABLED=true \\\r\n  -v \/lib\/modules:\/lib\/modules \\\r\n  -v \/run\/docker\/plugins:\/run\/docker\/plugins \\\r\n  -v \/var\/run\/calico:\/var\/run\/calico \\\r\n  -v \/var\/log\/calico:\/var\/log\/calico \\\r\n  -v \/var\/lib\/calico:\/var\/lib\/calico \\\r\n  calico\/node:v3.8.0\r\nExecStop=\/usr\/bin\/docker rm -f calico-node\r\nRestart=always\r\nRestartSec=10\r\n[Install]\r\nWantedBy=multi-user.target\r\nEOF\r\n\r\n\r\nsystemctl daemon-reload\r\nsystemctl start calico-node\r\nsystemctl enable calico-node\r\nsystemctl status calico-node\r\n\r\n<\/code><\/pre>\n
\u67e5\u770b\u591a\u6b21 systemctl status calico-node\uff0c\u786e\u4fdd\u8fdb\u7a0b\u6ca1\u6709\u5d29\u6e83\u3002
\n\u5728\u4ee3\u7406\u73af\u5883\u4e0b\uff0c\u65e0\u6cd5\u8fdb\u884c Docker pull\uff0c\u5bfc\u81f4\u5d29\u6e83\u3002
\n\u56e0\u6b64\uff0c\u5728\u4ee3\u7406\u73af\u5883\u4e0b\u9700\u8981\u8fdb\u884c Docker \u7684\u4ee3\u7406\u8bbe\u7f6e\u3002<\/p>\n
\u5728Docker\u4e2d\u8bbe\u7f6e\u4ee3\u7406\uff08\u4ec5\u9002\u7528\u4e8e\u4ee3\u7406\u73af\u5883\u4e0b\uff09\u3002<\/h3>\n
mkdir -p \/etc\/systemd\/system\/docker.service.d\r\n\r\ncat >\/etc\/systemd\/system\/docker.service.d\/http-proxy.conf <<\"EOF\"\r\n\r\n[Service]\r\nEnvironment=\"HTTP_PROXY=http:\/\/<user>:<pass>@<proxy_host>:<proxy_port>\" \"HTTPS_PROXY=http:\/\/<user>:<pass>@<proxy_host>:<proxy_port>\" \"NO_PROXY=localhost\"\r\nEOF\r\n\r\nsystemctl daemon-reload\r\nsystemctl restart docker\r\nsystemctl start calico-node\r\nsystemctl status calico-node\r\n\r\n<\/code><\/pre>\n
\u73af\u5883\u662f\u6211\u7684\u4e00\u4e2a\u4f8b\u5b50\u3002<\/p>\n
Environment=\"HTTP_PROXY=http:\/\/10.0.0.254:8080\" \"HTTPS_PROXY=http:\/\/\"10.0.0.254:8080 \"NO_PROXY=localhost\"\r\n<\/code><\/pre>\n
\u5361\u5229\u79d1\u7684\u914d\u7f6e\u8bbe\u7f6e<\/h2>\n
“etcd_endpoints”: “http:\/\/master1:2379,http:\/\/master2:2379,http:\/\/master3:2379″\uff0c\u9700\u8981\u6839\u636e\u4e2a\u4eba\u73af\u5883\u8fdb\u884c\u76f8\u5e94\u8c03\u6574\u3002<\/p>\n
[ -d \/opt\/cni\/bin ] || mkdir -p \/opt\/cni\/bin && cd \/opt\/cni\/bin\r\nwget -N https:\/\/github.com\/projectcalico\/cni-plugin\/releases\/download\/v3.8.0\/calico-amd64\r\nwget -N https:\/\/github.com\/projectcalico\/cni-plugin\/releases\/download\/v3.8.0\/calico-ipam-amd64\r\nmv calico-ipam-amd64 calico-ipam\r\nmv calico-amd64 calico\r\nchmod +x \/opt\/cni\/bin\/calico \/opt\/cni\/bin\/calico-ipam\r\n\r\n\r\n[ -d \/var\/src ] || mkdir \/var\/src && cd \/var\/src\r\nwget https:\/\/github.com\/containernetworking\/plugins\/releases\/download\/v0.7.1\/cni-plugins-amd64-v0.7.1.tgz\r\nmkdir cni-plugins-amd64-v0.7.1\r\ntar -xzvf cni-plugins-amd64-v0.7.1.tgz -C cni-plugins-amd64-v0.7.1\r\nrsync -av cni-plugins-amd64-v0.7.1\/* \/opt\/cni\/bin\/\r\nmkdir -p \/etc\/cni\/net.d\r\nrm -f \/etc\/cni\/net.d\/*\r\n\r\n\r\ncat >\/etc\/cni\/net.d\/10-calico.conflist <<EOF\r\n{\r\n  \"name\": \"calico-k8s-network\",\r\n  \"cniVersion\": \"0.3.1\",\r\n  \"plugins\": [\r\n    {\r\n      \"type\": \"calico\",\r\n      \"log_level\": \"info\",\r\n      \"etcd_endpoints\": \"http:\/\/master1:2379,http:\/\/master2:2379,http:\/\/master3:2379\",\r\n      \"ipam\": {\r\n        \"type\": \"calico-ipam\"\r\n      },\r\n      \"policy\": {\r\n        \"type\": \"k8s\"\r\n      },\r\n      \"kubernetes\": {\r\n        \"kubeconfig\": \"\/etc\/kubernetes\/kubelet.kubeconfig\"\r\n      }\r\n    },\r\n    {\r\n      \"type\": \"portmap\",\r\n      \"capabilities\": {\"portMappings\": true}\r\n    }\r\n  ]\r\n}\r\nEOF\r\n<\/code><\/pre>\n
\u5c06\/etc\/kubernetes\/kubelet.kubeconfig\u6307\u5b9a\u7684\u6587\u4ef6\u4eceMaster\u590d\u5236\u3002(\u7531Master\u64cd\u4f5c)<\/p>\n
[master]# rsync -av \/root\/.kube\/config node1:\/etc\/kubernetes\/kubelet.kubeconfig\r\n<\/code><\/pre>\n
kubelet\u7684\u5f15\u5165<\/h1>\n
\u51c6\u5907\u6587\u4ef6\u5e76\u521b\u5efa\u6863\u6848<\/h2>\n
cd \/var\/src\r\nwget https:\/\/dl.k8s.io\/v1.15.2\/kubernetes-node-linux-amd64.tar.gz -O kubernetes-node-linux-amd64-v1.15.2.tar.gz\r\ntar -xzvf kubernetes-node-linux-amd64-v1.15.2.tar.gz\r\nmv kubernetes \/usr\/local\/\r\n\r\ncat > \/etc\/profile.d\/kubernetes.sh << EOF\r\nexport PATH=\/usr\/local\/kubernetes\/node\/bin:\\$PATH\r\nEOF\r\n\r\nsource \/etc\/profile\r\n\r\nmkdir -p \/var\/lib\/kubelet\r\n\r\n<\/code><\/pre>\n
Kubelet\u670d\u52a1\u6ce8\u518c<\/h2>\n
cat > \/usr\/lib\/systemd\/system\/kubelet.service <<\"EOF\"\r\n[Unit]\r\nDescription=Kubernetes Kubelet\r\nDocumentation=https:\/\/github.com\/kubernetes\/kubernetes\r\nAfter=docker.service\r\nRequires=docker.service\r\n\r\n[Service]\r\nUser=root\r\nGroup=root\r\nEnvironmentFile=\/etc\/kubernetes\/kubelet.conf\r\nExecStart=\/usr\/local\/kubernetes\/node\/bin\/kubelet $KUBELET_OPTS\r\nRestart=on-failure\r\nLimitNOFILE=65536\r\n\r\n[Install]\r\nWantedBy=multi-user.target\r\nEOF\r\n<\/code><\/pre>\n
\u5275\u5efa\u591a\u500b\u6587\u4ef6\u593e<\/h2>\n
mkdir \/var\/log\/kubernetes\r\nmkdir -p \/var\/lib\/kubelet\r\n<\/code><\/pre>\n
\u521b\u5efakubelet.conf\u6587\u4ef6<\/h2>\n
–hostname-override=node1 \u8bf7\u6839\u636e\u81ea\u5df1\u7684\u8282\u70b9\u540d\u79f0\u8fdb\u884c\u8c03\u6574\u3002<\/p>\n
cat > \/etc\/kubernetes\/kubelet.conf <<\"EOF\"\r\nKUBELET_OPTS=\"\\\r\n  --logtostderr=false \\\r\n  --log-dir=\/var\/log\/kubernetes \\\r\n  --v=4 \\\r\n  --hostname-override=node1 \\\r\n  --kubeconfig=\/etc\/kubernetes\/kubelet.kubeconfig \\\r\n  --bootstrap-kubeconfig=\/etc\/kubernetes\/bootstrap.kubeconfig \\\r\n  --config=\/etc\/kubernetes\/kubelet.yaml \\\r\n  --cert-dir=\/etc\/kubernetes\/ssl \\\r\n  --network-plugin=cni \\\r\n  --container-runtime=docker \\\r\n  --container-runtime-endpoint=unix:\/\/\/var\/run\/dockershim.sock \\\r\n  --pod-infra-container-image=gcr.io\/google-containers\/pause:3.1\"\r\nEOF\r\n<\/code><\/pre>\n
kubelet.yaml\u4f5c\u6210<\/h2>\n
clusterDNS: [“10.254.0.2”]\u5e94\u6839\u636e\u4e2a\u4eba\u73af\u5883\u8fdb\u884c\u8c03\u6574\u5417\uff1f<\/p>\n
cat > \/etc\/kubernetes\/kubelet.yaml <<\"EOF\"\r\nkind: KubeletConfiguration\r\napiVersion: kubelet.config.k8s.io\/v1beta1\r\naddress: 0.0.0.0\r\nport: 10250\r\nreadOnlyPort: 10255\r\ncgroupDriver: cgroupfs\r\nclusterDNS:  [\"10.254.0.2\"]\r\nclusterDomain: cluster.local.\r\nfailSwapOn: false\r\nhairpin-mode: promiscuous-bridge\r\nauthentication:\r\n  anonymous:\r\n    enabled: false\r\n  webhook:\r\n    enbaled: false\r\n  x509:\r\n    clientCAFile: \"\/etc\/kubernetes\/ssl\/ca.pem\"\r\nEOF\r\n<\/code><\/pre>\n
\u3053\u3053\u3067Kubelet\u3092\u8d77\u52d5\u3057\u3066\u3082\u8d77\u52d5\u3067\u304d\u306a\u3044\u306e\u3067\u4e00\u65e6\u4fdd\u7559\u3002<\/p>\n
Kube-proxy\u7684\u5f15\u5165<\/h1>\n
\u4e0b\u6e96\u5099<\/h2>\n
yum install conntrack-tools -y\r\n<\/code><\/pre>\n
\u4eceMaster\u590d\u5236\u8bc1\u4e66\u7b49\u6587\u4ef6\uff08\u4eceMaster\u6267\u884c\u64cd\u4f5c\uff09<\/h2>\n
\u5c06node1\u66ff\u6362\u4e3a\u6bcf\u4e2a\u8282\u70b9\u7684\u540d\u79f0<\/p>\n
[master]# rsync -av \/etc\/kubernetes\/kube-proxy.kubeconfig node1:\/etc\/kubernetes\/\r\n[master]# rsync -av \/etc\/kubernetes\/ssl\/kube-proxy* node1:\/etc\/kubernetes\/ssl\/\r\n[master]# rsync -av \/etc\/kubernetes\/config node1:\/etc\/kubernetes\/\r\n<\/code><\/pre>\n
\u521b\u5efa Kube-proxy \u670d\u52a1\u3002<\/h2>\n
cat > \/usr\/lib\/systemd\/system\/kube-proxy.service <<\"EOF\"\r\n[Unit]\r\nDescription=Kubernetes Kube-Proxy Server\r\nDocumentation=https:\/\/github.com\/GoogleCloudPlatform\/kubernetes\r\nAfter=network.target\r\n\r\n[Service]\r\nEnvironmentFile=-\/etc\/kubernetes\/config\r\nEnvironmentFile=-\/etc\/kubernetes\/proxy.conf\r\nExecStart=\/usr\/local\/kubernetes\/node\/bin\/kube-proxy \\\r\n        --config=\/etc\/kubernetes\/proxy.yaml \\\r\n        $KUBE_LOGTOSTDERR \\\r\n        $KUBE_LOGDIR \\\r\n        $KUBE_LOG_LEVEL \\\r\n        $KUBE_PROXY_ARGS\r\nRestart=on-failure\r\nLimitNOFILE=65536\r\n\r\n[Install]\r\nWantedBy=multi-user.target\r\nEOF\r\n<\/code><\/pre>\n
\u521b\u5efaKube-proxy.yaml\u6587\u4ef6<\/h2>\n
hostnameOverride\uff1a\u5c06 node1 \u66ff\u6362\u4e3a\u6bcf\u4e2a\u8282\u70b9\u7684\u5b9e\u9645\u8282\u70b9\u540d\u3002<\/p>\n
cat > \/etc\/kubernetes\/proxy.yaml <<\"EOF\"\r\nkind: KubeProxyConfiguration\r\napiVersion: kubeproxy.config.k8s.io\/v1alpha1\r\nclientConnection:\r\n  burst: 200\r\n  kubeconfig: \"\/etc\/kubernetes\/kube-proxy.kubeconfig\"\r\n  qps: 100\r\nbindAddress: 0.0.0.0\r\nhealthzBindAddress: 0.0.0.0:10256\r\nmetricsBindAddress: 0.0.0.0:10249\r\nclusterCIDR: 192.168.0.0\/16\r\nhostnameOverride: node1\r\nmode: ipvs\r\nkubeProxyIPVSConfiguration:\r\n  syncPeriod: 5s\r\n  minSyncPeriod: 1s\r\n  scheduler: lc\r\nEOF\r\n\r\n<\/code><\/pre>\n
\u987a\u4fbf\u8bf4\u4e00\u53e5\uff0cv1alpha1\u7684API\u7248\u672c\u662f\u4ec0\u4e48\u9b3c\u3002
\n\u6211\u5bf9\u8fd9\u4e00\u70b9\u4e0d\u592a\u4e86\u89e3\uff0c\u56e0\u4e3a\u6211\u4e0d\u77e5\u9053\u4ee3\u7406\u8bbe\u7f6e\u662f\u53c2\u8003\u4e0b\u9762\u54ea\u4e2a\u3002
\n\u6240\u4ee5\u6211\u4e5f\u4f1a\u8fdb\u884c\u4ee5\u4e0b\u7684\u8bbe\u7f6e\u3002<\/p>\n
\u521b\u5efa\u4ee3\u7406\u914d\u7f6e\u6587\u4ef6\u3002<\/h2>\n
KUBE_PROXY_ARGS=”–hostname-override=node1″ \u5e94\u5c06\u5176\u66ff\u6362\u4e3a\u5404\u81ea\u8282\u70b9\u7684\u540d\u79f0\u3002<\/p>\n
cat >\/etc\/kubernetes\/proxy.conf <<\"EOF\"\r\nKUBE_PROXY_ARGS=\"--hostname-override=node1 \\\r\n                 --cluster-cidr=192.168.0.0\/16 \\\r\n                 --ipvs-min-sync-period=5s \\\r\n                 --ipvs-sync-period=5s \\\r\n                 --ipvs-scheduler=rr\"\r\nEOF\r\n<\/code><\/pre>\n
\u5f15\u5165ipvs(NAT,\u8d1f\u8f7d\u5747\u8861\u5668)\u3002<\/h1>\n
\u4e3a\u4e86\u8fde\u63a5\u5bb9\u5668\u5185\u5916\u7684\u7f51\u7edc\uff0c\u5e76\u63d0\u4f9b\u8d1f\u8f7d\u5747\u8861\uff0c\u8fdb\u884c\u4e86\u5f15\u5165\u3002<\/p>\n
\u521b\u5efaipvs.module<\/h2>\n
cat > \/etc\/sysconfig\/modules\/ipvs.modules <<EOF\r\n#!\/bin\/bash\r\nipvs_modules=\"ip_vs ip_vs_lc ip_vs_wlc ip_vs_rr ip_vs_wrr ip_vs_lblc ip_vs_lblcr ip_vs_dh ip_vs_sh ip_vs_fo ip_vs_nq ip_vs_sed ip_vs_ftp nf_conntrack_ipv4\"\r\nfor kernel_module in \\${ipvs_modules}; do\r\n    \/sbin\/modinfo -F filename \\${kernel_module} > \/dev\/null 2>&1\r\n    if [ $? -eq 0 ]; then\r\n        \/sbin\/modprobe \\${kernel_module}\r\n    fi\r\ndone\r\nEOF\r\n\r\nchmod 755 \/etc\/sysconfig\/modules\/ipvs.modules && bash \/etc\/sysconfig\/modules\/ipvs.modules && lsmod | grep ip_vs\r\n\r\n<\/code><\/pre>\n
\u521b\u5efaipvs.conf\u6587\u4ef6<\/h2>\n
cat > \/etc\/modprobe.d\/ip_vs.conf << EOF\r\noptions ip_vs conn_tab_bits=20\r\nEOF\r\n\r\nmodprobe -r ip_vs\r\n<\/code><\/pre>\n
\u6218\u6597\u5f00\u59cb<\/h1>\n
systemctl daemon-reload\r\nsystemctl enable kubelet\r\nsystemctl start kubelet\r\nsystemctl status kubelet\r\n\r\nsystemctl enable kube-proxy\r\nsystemctl start kube-proxy\r\nsystemctl status kube-proxy\r\n\r\n<\/code><\/pre>\n
\u5728Master\u8eab\u4e0a<\/h1>\n
(Master)kube-proxy-rbac.yaml\u306e\u4f5c\u6210(Master\u306e\u3046\u30611\u53f0\u3067\u5b9f\u884c)<\/h2>\n
[master]# cat >kube-proxy-rbac.yaml <<\"EOF\"\r\napiVersion: v1\r\nkind: ServiceAccount\r\nmetadata:\r\n  name: kube-proxy\r\n  namespace: kube-system\r\n  labels:\r\n    addonmanager.kubernetes.io\/mode: Reconcile\r\n---\r\nkind: ClusterRoleBinding\r\napiVersion: rbac.authorization.k8s.io\/v1\r\nmetadata:\r\n  name: system:kube-proxy\r\n  labels:\r\n    addonmanager.kubernetes.io\/mode: Reconcile\r\nsubjects:\r\n  - kind: ServiceAccount\r\n    name: kube-proxy\r\n    namespace: kube-system\r\nroleRef:\r\n  kind: ClusterRole\r\n  name: system:node-proxier\r\n  apiGroup: rbac.authorization.k8s.io\r\nEOF\r\n<\/code><\/pre>\n
kube-proxy-rbac\u90e8\u7f72\uff08Master\uff09<\/h2>\n
[master]# kubectl apply -f kube-proxy-rbac.yaml\r\n<\/code><\/pre>\n
\u4f7f\u7528Nginx\u8fdb\u884c\u6d4b\u8bd5\uff08\u4e3b\u670d\u52a1\u5668\uff09<\/h2>\n
\u8ba9\u6211\u4eec\u8bd5\u7740\u8fd0\u884c\u4e00\u4e0b\u5e38\u7528\u7684nginx\u3002<\/p>\n
[master]# cat > nginx-ds.yml <<EOF\r\napiVersion: v1\r\nkind: Service\r\nmetadata:\r\n  name: nginx-ds\r\n  labels:\r\n    app: nginx-ds\r\nspec:\r\n  type: NodePort\r\n  selector:\r\n    app: nginx-ds\r\n  ports:\r\n  - name: http\r\n    port: 80\r\n    targetPort: 80\r\n\r\n---\r\n\r\napiVersion: extensions\/v1beta1\r\nkind: DaemonSet\r\nmetadata:\r\n  name: nginx-ds\r\n  labels:\r\n    addonmanager.kubernetes.io\/mode: Reconcile\r\nspec:\r\n  template:\r\n    metadata:\r\n      labels:\r\n        app: nginx-ds\r\n    spec:\r\n      containers:\r\n      - name: my-nginx\r\n        image: nginx\r\n        ports:\r\n        - containerPort: 80\r\n\r\nEOF\r\n\r\n[master]# kubectl create -f nginx-ds.yml\r\n[master]# kubectl get pods\r\n\r\n[master]#  kubectl get pods\r\n#NAME             READY   STATUS    RESTARTS   AGE\r\n#nginx-ds-bqc6t   1\/1     Running   0          1m\r\n\r\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
\u5148\u884c\u53d1\u5e03Worker\u7248\u800c\u4e0d\u662fMaster\u7248\u3002 \u5c06Kubernetes\u5b89\u88c5\u5728\u5de5\u4f5c\u8282\u70b9\uff08\u4ee5\u4e0b\u7b80\u79f0\u4e3a\u8282\u70b9\uff09\u4e0a\u3002 \u4e0d\u4f7f […]<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-35828","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n\u4f7f\u7528Kubernetes 1.15.1 \u4e8c\u8fdb\u5236\u6587\u4ef6\u8fdb\u884c\u5b89\u88c5\uff08worker\u90e8\u5206\uff09 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528kubernetes-1-15-1-\u4e8c\u8fdb\u5236\u6587\u4ef6\u8fdb\u884c\u5b89\u88c5\uff08worker\u90e8\u5206\uff09\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f7f\u7528Kubernetes 1.15.1 \u4e8c\u8fdb\u5236\u6587\u4ef6\u8fdb\u884c\u5b89\u88c5\uff08worker\u90e8\u5206\uff09\" \/>\n<meta property=\"og:description\" content=\"\u5148\u884c\u53d1\u5e03Worker\u7248\u800c\u4e0d\u662fMaster\u7248\u3002 \u5c06Kubernetes\u5b89\u88c5\u5728\u5de5\u4f5c\u8282\u70b9\uff08\u4ee5\u4e0b\u7b80\u79f0\u4e3a\u8282\u70b9\uff09\u4e0a\u3002 \u4e0d\u4f7f […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528kubernetes-1-15-1-\u4e8c\u8fdb\u5236\u6587\u4ef6\u8fdb\u884c\u5b89\u88c5\uff08worker\u90e8\u5206\uff09\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2022-11-01T06:56:55+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-30T11:56:11+00:00\" \/>\n<meta name=\"author\" content=\"\u96c5, \u609f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u96c5, \u609f\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89\/\",\"name\":\"\u4f7f\u7528Kubernetes 1.15.1 \u4e8c\u8fdb\u5236\u6587\u4ef6\u8fdb\u884c\u5b89\u88c5\uff08worker\u90e8\u5206\uff09 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2022-11-01T06:56:55+00:00\",\"dateModified\":\"2024-04-30T11:56:11+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f7f\u7528Kubernetes 1.15.1 \u4e8c\u8fdb\u5236\u6587\u4ef6\u8fdb\u884c\u5b89\u88c5\uff08worker\u90e8\u5206\uff09\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6\",\"name\":\"\u96c5, \u609f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g\",\"caption\":\"\u96c5, \u609f\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/yawu\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u4f7f\u7528Kubernetes 1.15.1 \u4e8c\u8fdb\u5236\u6587\u4ef6\u8fdb\u884c\u5b89\u88c5\uff08worker\u90e8\u5206\uff09 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528kubernetes-1-15-1-\u4e8c\u8fdb\u5236\u6587\u4ef6\u8fdb\u884c\u5b89\u88c5\uff08worker\u90e8\u5206\uff09\/","og_locale":"zh_CN","og_type":"article","og_title":"\u4f7f\u7528Kubernetes 1.15.1 \u4e8c\u8fdb\u5236\u6587\u4ef6\u8fdb\u884c\u5b89\u88c5\uff08worker\u90e8\u5206\uff09","og_description":"\u5148\u884c\u53d1\u5e03Worker\u7248\u800c\u4e0d\u662fMaster\u7248\u3002 \u5c06Kubernetes\u5b89\u88c5\u5728\u5de5\u4f5c\u8282\u70b9\uff08\u4ee5\u4e0b\u7b80\u79f0\u4e3a\u8282\u70b9\uff09\u4e0a\u3002 \u4e0d\u4f7f […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528kubernetes-1-15-1-\u4e8c\u8fdb\u5236\u6587\u4ef6\u8fdb\u884c\u5b89\u88c5\uff08worker\u90e8\u5206\uff09\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2022-11-01T06:56:55+00:00","article_modified_time":"2024-04-30T11:56:11+00:00","author":"\u96c5, \u609f","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u96c5, \u609f","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"6 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89\/","name":"\u4f7f\u7528Kubernetes 1.15.1 \u4e8c\u8fdb\u5236\u6587\u4ef6\u8fdb\u884c\u5b89\u88c5\uff08worker\u90e8\u5206\uff09 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2022-11-01T06:56:55+00:00","dateModified":"2024-04-30T11:56:11+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u4f7f\u7528Kubernetes 1.15.1 \u4e8c\u8fdb\u5236\u6587\u4ef6\u8fdb\u884c\u5b89\u88c5\uff08worker\u90e8\u5206\uff09"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6","name":"\u96c5, \u609f","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g","caption":"\u96c5, \u609f"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/yawu\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kubernetes-1-15-1-%e4%ba%8c%e8%bf%9b%e5%88%b6%e6%96%87%e4%bb%b6%e8%bf%9b%e8%a1%8c%e5%ae%89%e8%a3%85%ef%bc%88worker%e9%83%a8%e5%88%86%ef%bc%89\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35828","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=35828"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35828\/revisions"}],"predecessor-version":[{"id":93972,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35828\/revisions\/93972"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=35828"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=35828"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=35828"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}