Ansible部署K8s集群的方法
更新時間：2022年02月28日 08:27:29 作者：wuenwuen
這篇文章主要介紹了Ansible部署K8s集群,本文給大家介紹的非常詳細，對大家的學習或工作具有一定的參考借鑒價值，需要的朋友可以參考下
環(huán)境：
| 主機 | IP地址 | 組件 |
|---|---|---|
| ansible | 192.168.175.130 | ansible |
| master | 192.168.175.140 | docker，kubectl，kubeadm，kubelet |
| node | 192.168.175.141 | docker，kubectl，kubeadm，kubelet |
| node | 192.168.175.142 | docker，kubectl，kubeadm，kubelet |
檢查及調(diào)試相關(guān)命令：
$ ansible-playbook -v k8s-time-sync.yaml --syntax-check $ ansible-playbook -v k8s-*.yaml -C $ ansible-playbook -v k8s-yum-cfg.yaml -C --start-at-task="Clean origin dir" --step $ ansible-playbook -v k8s-kernel-cfg.yaml --step
主機inventory文件：
/root/ansible/hosts
[k8s_cluster] master ansible_host=192.168.175.140 node1 ansible_host=192.168.175.141 node2 ansible_host=192.168.175.142 [k8s_cluster:vars] ansible_port=22 ansible_user=root ansible_password=hello123
檢查網(wǎng)絡(luò)：k8s-check.yaml檢查k8s各主機的網(wǎng)絡(luò)是否可達;
檢查k8s各主機操作系統(tǒng)版本是否達到要求；
- name: step01_check
hosts: k8s_cluster
gather_facts: no
tasks:
- name: check network
shell:
cmd: "ping -c 3 -m 2 {{ansible_host}}"
delegate_to: localhost
- name: get system version
shell: cat /etc/system-release
register: system_release
- name: check system version
vars:
system_version: "{{ system_release.stdout | regex_search('([7-9].[0-9]+).*?') }}"
suitable_version: 7.5
debug:
msg: "{{ 'The version of the operating system is '+ system_version +', suitable!' if (system_version | float >= suitable_version) else 'The version of the operating system is unsuitable' }}"調(diào)試命令：
$ ansible-playbook --ssh-extra-args '-o StrictHostKeyChecking=no' -v -C k8s-check.yaml $ ANSIBLE_HOST_KEY_CHECKING=False ansible-playbook -v -C k8s-check.yaml $ ANSIBLE_HOST_KEY_CHECKING=False ansible-playbook -v k8s-check.yaml --start-at-task="get system version"
- 連接配置：k8s-conn-cfg.yaml在
ansible服務(wù)器的/etc/hosts文件中添加k8s主機名解析配置 - 生成密鑰對，配置
ansible免密登錄到k8s各主機
- name: step02_conn_cfg
hosts: k8s_cluster
gather_facts: no
vars_prompt:
- name: RSA
prompt: Generate RSA or not(Yes/No)?
default: "no"
private: no
- name: password
prompt: input your login password?
default: "hello123"
tasks:
- name: Add DNS of k8s to ansible
delegate_to: localhost
lineinfile:
path: /etc/hosts
line: "{{ansible_host}} {{inventory_hostname}}"
backup: yes
- name: Generate RSA
run_once: true
shell:
cmd: ssh-keygen -t rsa -f ~/.ssh/id_rsa -N ''
creates: /root/.ssh/id_rsa
when: RSA | bool
- name: Configure password free login
shell: |
/usr/bin/ssh-keyscan {{ ansible_host }} >> /root/.ssh/known_hosts 2> /dev/null
/usr/bin/ssh-keyscan {{ inventory_hostname }} >> /root/.ssh/known_hosts 2> /dev/null
/usr/bin/sshpass -p'{{ password }}' ssh-copy-id root@{{ ansible_host }}
#/usr/bin/sshpass -p'{{ password }}' ssh-copy-id root@{{ inventory_hostname }}
- name: Test ssh
shell: hostname執(zhí)行：
$ ansible-playbook k8s-conn-cfg.yaml Generate RSA or not(Yes/No)? [no]: yes input your login password? [hello123]: PLAY [step02_conn_cfg] ********************************************************************************************************** TASK [Add DNS of k8s to ansible] ************************************************************************************************ ok: [master -> localhost] ok: [node1 -> localhost] ok: [node2 -> localhost] TASK [Generate RSA] ************************************************************************************************************* changed: [master -> localhost] TASK [Configure password free login] ******************************************************************************************** changed: [node1 -> localhost] changed: [node2 -> localhost] TASK [Test ssh] ***************************************************************************************************************** changed: [master] changed: [node1] changed: [node2] PLAY RECAP ********************************************************************************************************************** master : ok=4 changed=3 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 node1 : ok=3 changed=2 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 node2 : ok=3 changed=2 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
配置k8s集群dns解析： k8s-hosts-cfg.yaml
設(shè)置主機名
/etc/hosts文件中互相添加dns解析
- name: step03_cfg_host
hosts: k8s_cluster
gather_facts: no
tasks:
- name: set hostname
hostname:
name: "{{ inventory_hostname }}"
use: systemd
- name: Add dns to each other
lineinfile:
path: /etc/hosts
backup: yes
line: "{{item.value.ansible_host}} {{item.key}}"
loop: "{{ hostvars | dict2items }}"
loop_control:
label: "{{ item.key }} {{ item.value.ansible_host }}"執(zhí)行：
$ ansible-playbook k8s-hosts-cfg.yaml PLAY [step03_cfg_host] ********************************************************************************************************** TASK [set hostname] ************************************************************************************************************* ok: [master] ok: [node1] ok: [node2] TASK [Add dns to each other] **************************************************************************************************** ok: [node2] => (item=node1 192.168.175.141) ok: [master] => (item=node1 192.168.175.141) ok: [node1] => (item=node1 192.168.175.141) ok: [node2] => (item=node2 192.168.175.142) ok: [master] => (item=node2 192.168.175.142) ok: [node1] => (item=node2 192.168.175.142) ok: [node2] => (item=master 192.168.175.140) ok: [master] => (item=master 192.168.175.140) ok: [node1] => (item=master 192.168.175.140) PLAY RECAP ********************************************************************************************************************** master : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 node1 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 node2 : ok=2 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
配置yum源：k8s-yum-cfg.yaml
- name: step04_yum_cfg
hosts: k8s_cluster
gather_facts: no
tasks:
- name: Create back-up directory
file:
path: /etc/yum.repos.d/org/
state: directory
- name: Back-up old Yum files
shell:
cmd: mv -f /etc/yum.repos.d/*.repo /etc/yum.repos.d/org/
removes: /etc/yum.repos.d/org/
- name: Add new Yum files
copy:
src: ./files_yum/
dest: /etc/yum.repos.d/
- name: Check yum.repos.d
cmd: ls /etc/yum.repos.d/*時鐘同步：k8s-time-sync.yaml
- name: step05_time_sync
hosts: k8s_cluster
gather_facts: no
tasks:
- name: Start chronyd.service
systemd:
name: chronyd.service
state: started
enabled: yes
- name: Modify time zone & clock
shell: |
cp -f /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
clock -w
hwclock -w
- name: Check time now
command: date禁用iptable、firewalld、NetworkManager服務(wù)
- name: step06_net_service
hosts: k8s_cluster
gather_facts: no
tasks:
- name: Stop some services for net
systemd:
name: "{{ item }}"
state: stopped
enabled: no
loop:
- firewalld
- iptables
- NetworkManager執(zhí)行：
$ ansible-playbook -v k8s-net-service.yaml
... ...
failed: [master] (item=iptables) => {
"ansible_loop_var": "item",
"changed": false,
"item": "iptables"
}
MSG:
Could not find the requested service iptables: host
PLAY RECAP **********************************************************************************************************************
master : ok=0 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0
node1 : ok=0 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0
node2 : ok=0 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0禁用SElinux、swap：k8s-SE-swap-disable.yaml
- name: step07_net_service
hosts: k8s_cluster
gather_facts: no
tasks:
- name: SElinux disabled
lineinfile:
path: /etc/selinux/config
line: SELINUX=disabled
regexp: ^SELINUX=
state: present
backup: yes
- name: Swap disabled
path: /etc/fstab
line: '#\1'
regexp: '(^/dev/mapper/centos-swap.*$)'
backrefs: yes修改內(nèi)核：k8s-kernel-cfg.yaml
- name: step08_kernel_cfg
hosts: k8s_cluster
gather_facts: no
tasks:
- name: Create /etc/sysctl.d/kubernetes.conf
copy:
content: ''
dest: /etc/sysctl.d/kubernetes.conf
force: yes
- name: Cfg bridge and ip_forward
lineinfile:
path: /etc/sysctl.d/kubernetes.conf
line: "{{ item }}"
state: present
loop:
- 'net.bridge.bridge-nf-call-ip6tables = 1'
- 'net.bridge.bridge-nf-call-iptables = 1'
- 'net.ipv4.ip_forward = 1'
- name: Load cfg
shell:
cmd: |
sysctl -p
modprobe br_netfilter
removes: /etc/sysctl.d/kubernetes.conf
- name: Check cfg
cmd: '[ $(lsmod | grep br_netfilter | wc -l) -ge 2 ] && exit 0 || exit 3'執(zhí)行：
$ ansible-playbook -v k8s-kernel-cfg.yaml --step
TASK [Check cfg] ****************************************************************************************************************
changed: [master] => {
"changed": true,
"cmd": "[ $(lsmod | grep br_netfilter | wc -l) -ge 2 ] && exit 0 || exit 3",
"delta": "0:00:00.011574",
"end": "2022-02-27 04:26:01.332896",
"rc": 0,
"start": "2022-02-27 04:26:01.321322"
}
changed: [node2] => {
"delta": "0:00:00.016331",
"end": "2022-02-27 04:26:01.351208",
"start": "2022-02-27 04:26:01.334877"
changed: [node1] => {
"delta": "0:00:00.016923",
"end": "2022-02-27 04:26:01.355983",
"start": "2022-02-27 04:26:01.339060"
PLAY RECAP **********************************************************************************************************************
master : ok=4 changed=4 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
node1 : ok=4 changed=4 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
node2 : ok=4 changed=4 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0配置ipvs：k8s-ipvs-cfg.yaml
- name: step09_ipvs_cfg
hosts: k8s_cluster
gather_facts: no
tasks:
- name: Install ipset and ipvsadm
yum:
name: "{{ item }}"
state: present
loop:
- ipset
- ipvsadm
- name: Load modules
shell: |
modprobe -- ip_vs
modprobe -- ip_vs_rr
modprobe -- ip_vs_wrr
modprobe -- ip_vs_sh
modprobe -- nf_conntrack_ipv4
- name: Check cfg
shell:
cmd: '[ $(lsmod | grep -e -ip_vs -e nf_conntrack_ipv4 | wc -l) -ge 2 ] && exit 0 || exit 3'安裝docker：k8s-docker-install.yaml
- name: step10_docker_install
hosts: k8s_cluster
gather_facts: no
tasks:
- name: Install docker-ce
yum:
name: docker-ce-18.06.3.ce-3.el7
state: present
- name: Cfg docker
copy:
src: ./files_docker/daemon.json
dest: /etc/docker/
- name: Start docker
systemd:
name: docker.service
state: started
enabled: yes
- name: Check docker version
shell:
cmd: docker --version安裝k8s組件[kubeadm\kubelet\kubectl]：k8s-install-kubepkgs.yaml
- name: step11_k8s_install_kubepkgs
hosts: k8s_cluster
gather_facts: no
tasks:
- name: Install k8s components
yum:
name: "{{ item }}"
state: present
loop:
- kubeadm-1.17.4-0
- kubelet-1.17.4-0
- kubectl-1.17.4-0
- name: Cfg k8s
copy:
src: ./files_k8s/kubelet
dest: /etc/sysconfig/
force: no
backup: yes
- name: Start kubelet
systemd:
name: kubelet.service
state: started
enabled: yes安裝集群鏡像：k8s-apps-images.yaml
- name: step12_apps_images
hosts: k8s_cluster
gather_facts: no
vars:
apps:
- kube-apiserver:v1.17.4
- kube-controller-manager:v1.17.4
- kube-scheduler:v1.17.4
- kube-proxy:v1.17.4
- pause:3.1
- etcd:3.4.3-0
- coredns:1.6.5
vars_prompt:
- name: cfg_python
prompt: Do you need to install docker pkg for python(Yes/No)?
default: "no"
private: no
tasks:
- block:
- name: Install python-pip
yum:
name: python-pip
state: present
- name: Install docker pkg for python
shell:
cmd: |
pip install docker==4.4.4
pip install websocket-client==0.32.0
creates: /usr/lib/python2.7/site-packages/docker/
when: cfg_python | bool
- name: Pull images
community.docker.docker_image:
name: "registry.cn-hangzhou.aliyuncs.com/google_containers/{{ item }}"
source: pull
loop: "{{ apps }}"
- name: Tag images
repository: "k8s.gcr.io/{{ item }}"
force_tag: yes
source: local
- name: Remove images for ali
state: absent執(zhí)行：
$ ansible-playbook k8s-apps-images.yaml Do you need to install docker pkg for python(Yes/No)? [no]: PLAY [step12_apps_images] ******************************************************************************************************* TASK [Install python-pip] ******************************************************************************************************* skipping: [node1] skipping: [master] skipping: [node2] TASK [Install docker pkg for python] ******************************************************************************************** TASK [Pull images] ************************************************************************************************************** changed: [node1] => (item=kube-apiserver:v1.17.4) changed: [node2] => (item=kube-apiserver:v1.17.4) changed: [master] => (item=kube-apiserver:v1.17.4) changed: [node1] => (item=kube-controller-manager:v1.17.4) changed: [master] => (item=kube-controller-manager:v1.17.4) changed: [node1] => (item=kube-scheduler:v1.17.4) changed: [master] => (item=kube-scheduler:v1.17.4) changed: [node1] => (item=kube-proxy:v1.17.4) changed: [node2] => (item=kube-controller-manager:v1.17.4) changed: [master] => (item=kube-proxy:v1.17.4) changed: [node1] => (item=pause:3.1) changed: [master] => (item=pause:3.1) changed: [node2] => (item=kube-scheduler:v1.17.4) changed: [node1] => (item=etcd:3.4.3-0) changed: [master] => (item=etcd:3.4.3-0) changed: [node2] => (item=kube-proxy:v1.17.4) changed: [node1] => (item=coredns:1.6.5) changed: [master] => (item=coredns:1.6.5) changed: [node2] => (item=pause:3.1) changed: [node2] => (item=etcd:3.4.3-0) changed: [node2] => (item=coredns:1.6.5) TASK [Tag images] *************************************************************************************************************** ok: [node1] => (item=kube-apiserver:v1.17.4) ok: [master] => (item=kube-apiserver:v1.17.4) ok: [node2] => (item=kube-apiserver:v1.17.4) ok: [node1] => (item=kube-controller-manager:v1.17.4) ok: [master] => (item=kube-controller-manager:v1.17.4) ok: [node2] => (item=kube-controller-manager:v1.17.4) ok: [master] => (item=kube-scheduler:v1.17.4) ok: [node1] => (item=kube-scheduler:v1.17.4) ok: [node2] => (item=kube-scheduler:v1.17.4) ok: [master] => (item=kube-proxy:v1.17.4) ok: [node1] => (item=kube-proxy:v1.17.4) ok: [node2] => (item=kube-proxy:v1.17.4) ok: [master] => (item=pause:3.1) ok: [node1] => (item=pause:3.1) ok: [node2] => (item=pause:3.1) ok: [master] => (item=etcd:3.4.3-0) ok: [node1] => (item=etcd:3.4.3-0) ok: [node2] => (item=etcd:3.4.3-0) ok: [master] => (item=coredns:1.6.5) ok: [node1] => (item=coredns:1.6.5) ok: [node2] => (item=coredns:1.6.5) TASK [Remove images for ali] **************************************************************************************************** PLAY RECAP ********************************************************************************************************************** master : ok=3 changed=2 unreachable=0 failed=0 skipped=2 rescued=0 ignored=0 node1 : ok=3 changed=2 unreachable=0 failed=0 skipped=2 rescued=0 ignored=0 node2 : ok=3 changed=2 unreachable=0 failed=0 skipped=2 rescued=0 ignored=0
k8s集群初始化：k8s-cluster-init.yaml
- name: step13_cluster_init
hosts: master
gather_facts: no
tasks:
- block:
- name: Kubeadm init
shell:
cmd:
kubeadm init
--apiserver-advertise-address={{ ansible_host }}
--kubernetes-version=v1.17.4
--service-cidr=10.96.0.0/12
--pod-network-cidr=10.244.0.0/16
--image-repository registry.aliyuncs.com/google_containers
- name: Create /root/.kube
file:
path: /root/.kube/
state: directory
owner: root
group: root
- name: Copy /root/.kube/config
copy:
src: /etc/kubernetes/admin.conf
dest: /root/.kube/config
remote_src: yes
backup: yes
- name: Copy kube-flannel
src: ./files_k8s/kube-flannel.yml
dest: /root/
- name: Apply kube-flannel
cmd: kubectl apply -f /root/kube-flannel.yml
- name: Get token
cmd: kubeadm token create --print-join-command
register: join_token
- name: debug join_token
debug:
var: join_token.stdout到此這篇關(guān)于Ansible部署K8s集群的文章就介紹到這了,更多相關(guān)Ansible部署K8s集群內(nèi)容請搜索腳本之家以前的文章或繼續(xù)瀏覽下面的相關(guān)文章希望大家以后多多支持腳本之家！
相關(guān)文章
這篇文章主要為大家介紹了k8s編排之DaemonSet知識點詳解，有需要的朋友可以借鑒參考下，希望能夠有所幫助，祝大家多多進步，早日升職加薪2023-01-01
Podman開機自啟容器實現(xiàn)過程及與Docker對比
這篇文章主要為大家介紹了Podman開機自啟容器實現(xiàn)過程，通過示例代碼的形式進行演繹過程，有需要的朋友可以參考下，希望可以有所幫助2021-09-09
k8s?Ingress實現(xiàn)流量路由規(guī)則控制的定義格式類型
這篇文章主要為大家介紹了k8s?Ingress?實現(xiàn)流量路由規(guī)則控制的定義格式及類型詳解，有需要的朋友可以借鑒參考下，希望能夠有所幫助，祝大家多多進步，早日升職加薪2023-04-04
MinIO是一款高性能的分布式對象存儲系統(tǒng),兼容Amazon S3協(xié)議,具有輕量級、易部署、高可用和可擴展性等優(yōu)勢,它通過糾刪碼技術(shù)實現(xiàn)數(shù)據(jù)冗余與高容錯性,適用于私有云存儲、大數(shù)據(jù)分析和靜態(tài)資源托管等場景,本文介紹MinIO分布式文件存儲的相關(guān)知識,感興趣的朋友一起看看吧2025-03-03
這篇文章主要為大家介紹了k8s設(shè)置非強一致反親和性示例詳解,有需要的朋友可以借鑒參考下,希望能夠有所幫助,祝大家多多進步,早日升職加薪2023-10-10
在Kubernetes集群中搭建Istio微服務(wù)網(wǎng)格的過程詳解
這篇文章主要介紹了在Kubernetes集群中搭建Istio微服務(wù)網(wǎng)格,我們采用default配置檔部署istio網(wǎng)格，istioctl?install命令不指定任何配置檔默認就是呀default配置檔，需要的朋友可以參考下2022-05-05
Rainbond云原生快捷部署生產(chǎn)可用的Gitlab步驟詳解
這篇文章主要為大家介紹了Rainbond云原生快捷部署生產(chǎn)可用的Gitlab步驟詳解，有需要的朋友可以借鑒參考下，希望能夠有所幫助，祝大家多多進步，早日升職加薪2022-04-04
Rainbond應(yīng)用分享與發(fā)布官方文檔說明
這篇文章主要為大家介紹了Rainbond應(yīng)用分享與發(fā)布的官方文檔說明，有需要的朋友可以借鑒參考下，希望能夠有所幫助，祝大家多多進步，早日升職加薪2022-04-04
這篇文章主要介紹了Kubernetes安裝Jenkins,Jenkins插件可以在Kubernetes集群中運行動態(tài)jenkins-slave代理，基于Kubernetes的docker，自動化在Kubernetes中運行的Jenkins-slave代理的縮放，需要的朋友可以參考下2022-06-06
這篇文章主要為大家介紹了Kubernetes探針使用詳細介紹，有需要的朋友可以借鑒參考下，希望能夠有所幫助，祝大家多多進步，早日升職加薪2022-03-03