浏览此站
联系我们相册切换到窄版 Language

 找回密码
 注册
易陆发现论坛»论坛 › docker社区 › docker社区 › k8s集群
返回列表 发新帖
查看: 4706|回复: 1

k8s集群

[复制链接]
admin

1

主题

0

回帖

12

积分

管理员

积分
12
QQ
发表于 2018-9-19 17:08:18 | 显示全部楼层 |阅读模式

edis和docker这两个词语会自动被修改为首字母大写并链接到知识库，所以在这里先写一遍，后面就不会被改写了。

0、具体操作见 （vmware中搭建k8s），virtulbox也是相同的流程。* ~+ x  t5 R% }! ^

1、学习k8s，读的是这本书《KUBERNETES权威指南  从DOCKET到KURBERNETES实践全接触.pdf》

2、这边书刚开始讲的是在单机上搭建一个k8s的hello world，用的是centos7.

    于是我也在virtulbox中安装了centos7，并成功运行hello world。

3、然后，开始尝试集群了。在网上找了个教程，比较简单，很快就成功了，kubectl get nodes能看到各node了。

    但是，应用跑的不正常，有的节点可以访问，有的节点不可以。而且从不同节点访问，查到的数据不相同，似乎是多个独立的系统。怀疑是iptables中cluster ip的规则有问题。   
+ X+ E' p# Q% i+ Y( k2 i; U

     接着，集群坏了，k8s的基础服务都启动不了。怀疑是不是因为我创建这些虚机时，用的是链接式拷贝，是不是原始的虚机安装了其它软件，导致k8s集群启动不了。

4、删掉重来，用完全拷贝的方式建立虚机。

     一切正常，但是在启动redis-master-controller.yaml时，docker中无法建立容器，

     用kubectl describe pod redis-master命令排查，发现下拉不了镜像。其实这些镜像已经存在于docker中了（搭建单机k8s时，自动pull的）。只是镜像名字前面多加了docker.io/  我修改了redis-master-controller.yaml中镜像的名字，仍然pull失败。奇怪。

5、今天定位了网络问题（见virtualbox虚拟机无法上网），网络搞通后，hello world终于正常运行了。

之前的一些疑问，有答案了

1、随便访问哪个node的ip（比如http://192.168.56.251:30001/,http://192.168.56.252:30001/）(http://192.168.56.250:30001/是不行的)，都可以访问到服务的（proxy自动转的）

2、在内部时，访问真实端口也是可以的。

[root@centm ~]# kubectl get svc
0 }% u' N/ P: l5 ?NAME           CLUSTER-IP       EXTERNAL-IP   PORT(S)    AGE
& P0 T5 V! m1 ^; cfrontend       10.254.218.57    <nodes>       80/TCP     5m. u. d# `+ v+ C4 ^; ]8 F* I0 k
kubernetes     10.254.0.1       <none>        443/TCP    15d
; ~! p/ |# ?+ ?0 `4 predis-master   10.254.142.174   <none>        6379/TCP   8m
/ r3 [  N1 F* k. z+ n' }; u% p' lredis-slave    10.254.201.123   <none>        6379/TCP   6m
& J# p+ z* l! |8 f/ V9 S: [

curl 10.254.218.57:80     可以通。

ping  10.254.218.57 不通

3、node中多了一个127.0.0.1 ，不知道为什么
5 u4 u: A# o6 O2 p9 R

[root@centm ~]# kubectl get nodes4 N, |* E$ t* }- T6 u8 m
NAME        STATUS     AGE0 J2 H; u3 E9 X# H  G6 X8 A
127.0.0.1   NotReady   15d
- s$ C' |* L9 ?4 j% x* ycents1      Ready      1d9 V. {) a  {4 V, o5 E  D
cents2      Ready      1d0 c( p& k# W7 |+ ^: j
[root@centm ~]# ps -ef|grep kube2 h1 z8 O; I+ g
kube       578     1  0 Jan20 ?        00:15:55 /usr/bin/kube-controller-manager --logtostderr=true --v=0 --master=http://127.0.0.1:8080
' O) C3 |5 c& |# n/ o  S0 Tkube       588     1  0 Jan20 ?        00:01:09 /usr/bin/kube-scheduler --logtostderr=true --v=0 --master=http://127.0.0.1:8080
; L& V; Y# e0 \- X& [5 N! [8 Hkube      2079     1  0 Jan20 ?        00:08:11 /usr/bin/kube-apiserver --logtostderr=true --v=0 --etcd-servers=http://127.0.0.1:2379 --insecure-bind-address=0.0.0.0 --allow-privileged=false --service-cluster-ip-range=10.254.0.0/16 --admission-control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ResourceQuota
5 ^9 x+ ]( b1 M8 R; g7 u4、clusterip是一个虚ip，实际是iptables中的几个转发规则。

[root@cents2 ~]# ip a
9 V2 A9 N0 l* c# |6 e1 _2 k. h1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
4 Z: o* M$ O: t& q0 q2 u    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2 o' h  Q) M7 p! k4 @6 g    inet 127.0.0.1/8 scope host lo
+ A- c3 S7 g  P2 x       valid_lft forever preferred_lft forever5 n, @  C8 p2 G1 n3 q; B
    inet6 ::1/128 scope host
6 q) Q6 q7 p# r6 o" u) r2 Q) ]       valid_lft forever preferred_lft forever  D3 ^/ ]3 D( T$ X) V% M9 c6 |5 O
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000: B0 q3 X; m+ m' \3 ^+ a2 H
    link/ether 08:00:27:58:5d:6e brd ff:ff:ff:ff:ff:ff
- }# ^& V% u3 e( ~    inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic enp0s3
3 o# X# F: O- W4 ^$ S' g# ]( R" f       valid_lft 82058sec preferred_lft 82058sec
5 L% v* f7 M; _' D; s, {# v    inet6 fe80::b171:84d0:5173:de63/64 scope link3 A8 h& Y/ ?" }" k- {. f
       valid_lft forever preferred_lft forever
" Z; v" @8 D; R3 B0 `6 V8 X  c1 M3: enp0s8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000: _/ T3 z  ?, X0 @
    link/ether 08:00:27:7a:24:14 brd ff:ff:ff:ff:ff:ff
+ i4 q5 H0 R$ C# r) T    inet 192.168.56.252/24 brd 192.168.56.255 scope global enp0s8
9 ?/ p- S5 e' q# d3 i1 q1 }       valid_lft forever preferred_lft forever
8 f% L( i8 L) I' k+ ~# n    inet6 fe80::a00:27ff:fe7a:2414/64 scope link
: H6 q' \9 M9 z* p2 r- s4 S( ~       valid_lft forever preferred_lft forever, z8 [% P; P" V5 |, [
4: flannel.1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN
) V7 ]8 p- Q. @    link/ether fa:5a:c7:c5:aa:e5 brd ff:ff:ff:ff:ff:ff3 V! H+ U( p+ ^7 L3 ?
    inet 172.16.80.0/16 scope global flannel.11 \& z8 C9 q# b5 N& X
       valid_lft forever preferred_lft forever
+ j  e' K) ]* n9 ^5: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UP" k2 h% C* Q/ L# r6 @( i5 o/ z; j
    link/ether 02:42:72:2f:1f:ae brd ff:ff:ff:ff:ff:ff7 W# {) Q  }4 X6 u6 T8 M4 w) O9 D
    inet 172.16.80.1/24 scope global docker0
: n% C3 m* P, s3 h8 t. i& Z       valid_lft forever preferred_lft forever
: c3 J- O8 C0 b' o0 a' R- f5 |' B8 Q    inet6 fe80::42:72ff:fe2f:1fae/64 scope link: k9 F/ o" [% x& ]. \9 _
       valid_lft forever preferred_lft forever
( H+ y3 D9 G3 b, H+ \7: vethc56c1d4@if6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue master docker0 state UP
: p* k( Z$ w3 q+ |; T# ~    link/ether 92:c8:3d:3f:b9:49 brd ff:ff:ff:ff:ff:ff link-netnsid 0
  F. |- q8 p3 {    inet6 fe80::90c8:3dff:fe3f:b949/64 scope link  f% X+ r8 E" A
       valid_lft forever preferred_lft forever
  B2 ?; Q7 |& y8 s- a& i9: vethf961994@if8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue master docker0 state UP
" C4 L6 r. M/ B: p0 b/ O; V    link/ether d6:be:4b:6e:26:81 brd ff:ff:ff:ff:ff:ff link-netnsid 1( F  T$ t2 C, s( T# A
    inet6 fe80::d4be:4bff:fe6e:2681/64 scope link0 f8 U' y5 h) ]6 f
       valid_lft forever preferred_lft forever1 p2 k  n1 S6 ~  @5 N5 I0 n6 S3 T" H
11: vethe4cd28e@if10: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue master docker0 state UP
9 c( @! @. |& ?5 L0 F, m* K) C    link/ether ee:55:55:df:4e:50 brd ff:ff:ff:ff:ff:ff link-netnsid 2/ m1 S3 L2 ]; @3 t8 w
    inet6 fe80::ec55:55ff:fedf:4e50/64 scope link
+ |  }& B7 X6 t8 t       valid_lft forever preferred_lft forever
9 c8 o$ z5 p/ R- z0 J6 M7 o1 v# F8 x: z- b- d8 z( A
[root@cents2 ~]# iptables-save
/ @/ a$ ?$ S( G- G2 u  ~# R9 L) g9 m# Generated by iptables-save v1.4.21 on Sun Jan 22 00:41:01 2017
: C+ @$ z; \9 @*filter
3 `! ?& b0 Y1 ~* d* k- a, d:INPUT ACCEPT [27:4324]9 A4 w5 m' }, W) u; W
:FORWARD ACCEPT [0:0]5 k% g6 P! Z( [0 D  U2 }8 m
:OUTPUT ACCEPT [25:2821]
: G* k3 @. E. y. E# Z:DOCKER - [0:0]
3 `# w. O' V7 `0 d; x0 J& g& |; E:DOCKER-ISOLATION - [0:0]
6 u; W8 s0 u+ v" E- S, u3 j6 O:KUBE-SERVICES - [0:0]' T3 A5 B0 v" ^# O
-A FORWARD -j DOCKER-ISOLATION
) |. a* b! s" I4 ~) M; w-A FORWARD -o docker0 -j DOCKER) P3 N2 Q" G2 V% c6 ~, }' x
-A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
" e2 G* ]+ ?# y; s7 X) {-A FORWARD -i docker0 ! -o docker0 -j ACCEPT
9 a/ r6 @0 O5 M6 M/ o! y-A FORWARD -i docker0 -o docker0 -j ACCEPT
6 ]. q( C5 ^+ ~: X/ Q* f2 I-A OUTPUT -m comment --comment "kubernetes service portals" -j KUBE-SERVICES/ _/ u& y  C& I$ b0 Q* ^: ~
-A DOCKER-ISOLATION -j RETURN! r. h5 _: @! j% }. {$ e
COMMIT0 w9 [- B: {; X. z* c, C, m1 V
# Completed on Sun Jan 22 00:41:01 2017
5 C8 O# ?7 f" [( G7 B# A5 d" w# Generated by iptables-save v1.4.21 on Sun Jan 22 00:41:01 2017& K0 J3 o; q5 l: P  ?; j" d' U, b  a+ N
*nat
( W4 {! L4 m$ F- c- f+ F# d6 ?:PREROUTING ACCEPT [0:0]  n+ i9 O$ k) i. c& B: F# v
:INPUT ACCEPT [0:0]* V  B: W$ b1 R; L. _3 Z
:OUTPUT ACCEPT [2:119]: t5 x& o! r2 q5 b  m7 r0 X
:POSTROUTING ACCEPT [2:119]
# I* o* n' y, N8 e6 j- h/ D/ R:DOCKER - [0:0]
2 W, Z* L, o) O; ^- R( P/ X$ A& v7 ~:KUBE-MARK-MASQ - [0:0]
- U5 y; Y& f4 `1 A6 U  L. t:KUBE-NODEPORTS - [0:0]6 b7 ~4 u  M, L6 d# c6 b1 T* S
:KUBE-POSTROUTING - [0:0]- i* x+ }6 Y4 K" H5 M$ F! x# J
:KUBE-SEP-63GTHXGNEQIFF6GY - [0:0]$ g! S* M: @0 K$ C% ^
:KUBE-SEP-77PLGVXVTAKNHL2K - [0:0]4 X) c1 q# Z, I/ K
:KUBE-SEP-7R2ESD4YYXMXFEFZ - [0:0]
4 v; v3 l4 j8 p3 d% G:KUBE-SEP-GIMIRAR4ZAKGMA2Q - [0:0]
4 [! o1 I. J( l:KUBE-SEP-LYGBYJFMWSAWPLXU - [0:0]* ?* L) R5 w; c, v4 G  u! S8 H# P
:KUBE-SEP-Y7WMR7EBCL4N3QJX - [0:0]" S/ Y. p2 |( k# l3 J
:KUBE-SEP-ZDWRYP3AMCRYOGNR - [0:0]
. q! @. C! E, r7 S:KUBE-SERVICES - [0:0]
+ e. r+ P0 m8 Y4 t:KUBE-SVC-7GF4BJM3Z6CMNVML - [0:0]1 G/ u" M! V. n: k
:KUBE-SVC-AGR3D4D4FQNH4O33 - [0:0]  ]! F' }* I8 D' v- M
:KUBE-SVC-GYQQTB6TY565JPRW - [0:0]! Z7 }: C7 O& q% g
:KUBE-SVC-NPX46M4PTMTKRN6Y - [0:0]
9 P/ A' q, t, K4 p6 R-A PREROUTING -m comment --comment "kubernetes service portals" -j KUBE-SERVICES# P: s3 U! Q# U3 d7 l  ~- x
-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER2 P) o) _' E% Y3 v# q  E1 `
-A OUTPUT -m comment --comment "kubernetes service portals" -j KUBE-SERVICES; q2 c7 I0 Z2 g0 q0 @. G' A
-A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
6 @& ?  ^2 Z* T-A POSTROUTING -s 172.16.80.0/24 ! -o docker0 -j MASQUERADE
3 l, H7 K$ v+ E  G4 N8 x7 j/ Z-A POSTROUTING -m comment --comment "kubernetes postrouting rules" -j KUBE-POSTROUTING7 x  K$ q4 r$ z3 b) H6 P/ w
-A DOCKER -i docker0 -j RETURN
( F3 t0 C6 u; M* m-A KUBE-MARK-MASQ -j MARK --set-xmark 0x4000/0x4000
# w& Q) X7 ^; G; z9 {# m" k-A KUBE-NODEPORTS -p tcp -m comment --comment "default/frontend:" -m tcp --dport 30001 -j KUBE-MARK-MASQ
" o, \9 a* W: U3 T( g( O-A KUBE-NODEPORTS -p tcp -m comment --comment "default/frontend:" -m tcp --dport 30001 -j KUBE-SVC-GYQQTB6TY565JPRW# D8 c! `/ L# C
-A KUBE-POSTROUTING -m comment --comment "kubernetes service traffic requiring SNAT" -m mark --mark 0x4000/0x4000 -j MASQUERADE! J8 u0 r$ ~8 B
-A KUBE-SEP-63GTHXGNEQIFF6GY -s 172.16.62.4/32 -m comment --comment "default/frontend:" -j KUBE-MARK-MASQ
5 d" `# E, K* ^6 |$ F-A KUBE-SEP-63GTHXGNEQIFF6GY -p tcp -m comment --comment "default/frontend:" -m tcp -j DNAT --to-destination 172.16.62.4:80
2 W8 W; b5 U+ E, p/ o-A KUBE-SEP-77PLGVXVTAKNHL2K -s 172.16.80.3/32 -m comment --comment "default/frontend:" -j KUBE-MARK-MASQ) S( e. t) H2 z$ q9 v: y# g
-A KUBE-SEP-77PLGVXVTAKNHL2K -p tcp -m comment --comment "default/frontend:" -m tcp -j DNAT --to-destination 172.16.80.3:807 Q- T& G7 x1 G9 g# D
-A KUBE-SEP-7R2ESD4YYXMXFEFZ -s 172.16.80.2/32 -m comment --comment "default/redis-slave:" -j KUBE-MARK-MASQ
5 D6 Q+ G( i  [+ _4 |5 @& |-A KUBE-SEP-7R2ESD4YYXMXFEFZ -p tcp -m comment --comment "default/redis-slave:" -m tcp -j DNAT --to-destination 172.16.80.2:6379
! B: ]  x, F( u4 Z; A-A KUBE-SEP-GIMIRAR4ZAKGMA2Q -s 192.168.56.250/32 -m comment --comment "default/kubernetes:https" -j KUBE-MARK-MASQ
2 J- e! O" ]& k( a-A KUBE-SEP-GIMIRAR4ZAKGMA2Q -p tcp -m comment --comment "default/kubernetes:https" -m recent --set --name KUBE-SEP-GIMIRAR4ZAKGMA2Q --mask 255.255.255.255 --rsource -m tcp -j DNAT --to-destination 192.168.56.250:6443
; z! [& R+ N" Q4 g* S-A KUBE-SEP-LYGBYJFMWSAWPLXU -s 172.16.62.3/32 -m comment --comment "default/redis-slave:" -j KUBE-MARK-MASQ1 w2 q! g' {7 z- X$ W
-A KUBE-SEP-LYGBYJFMWSAWPLXU -p tcp -m comment --comment "default/redis-slave:" -m tcp -j DNAT --to-destination 172.16.62.3:63794 X: k# y- k" F" w6 g
-A KUBE-SEP-Y7WMR7EBCL4N3QJX -s 172.16.62.2/32 -m comment --comment "default/redis-master:" -j KUBE-MARK-MASQ
% P) g% j9 u1 P. E( X7 ~+ H-A KUBE-SEP-Y7WMR7EBCL4N3QJX -p tcp -m comment --comment "default/redis-master:" -m tcp -j DNAT --to-destination 172.16.62.2:6379
6 L- |4 C, B2 r0 b0 x* G) Y; {" E-A KUBE-SEP-ZDWRYP3AMCRYOGNR -s 172.16.80.4/32 -m comment --comment "default/frontend:" -j KUBE-MARK-MASQ$ Q# g$ `3 P7 [4 R9 z
-A KUBE-SEP-ZDWRYP3AMCRYOGNR -p tcp -m comment --comment "default/frontend:" -m tcp -j DNAT --to-destination 172.16.80.4:802 N1 `6 e( ^% c; o1 P
-A KUBE-SERVICES -d 10.254.218.57/32 -p tcp -m comment --comment "default/frontend: cluster IP" -m tcp --dport 80 -j KUBE-SVC-GYQQTB6TY565JPRW
' y! @  _- G: o$ Q5 _  I-A KUBE-SERVICES -d 10.254.0.1/32 -p tcp -m comment --comment "default/kubernetes:https cluster IP" -m tcp --dport 443 -j KUBE-SVC-NPX46M4PTMTKRN6Y# T% q8 |" `; M4 l3 R+ n
-A KUBE-SERVICES -d 10.254.142.174/32 -p tcp -m comment --comment "default/redis-master: cluster IP" -m tcp --dport 6379 -j KUBE-SVC-7GF4BJM3Z6CMNVML
; g# G; h0 s9 `+ q7 D9 k) p8 D8 W-A KUBE-SERVICES -d 10.254.201.123/32 -p tcp -m comment --comment "default/redis-slave: cluster IP" -m tcp --dport 6379 -j KUBE-SVC-AGR3D4D4FQNH4O332 `4 @4 r0 e# f- u" h4 V- e
-A KUBE-SERVICES -m comment --comment "kubernetes service nodeports; NOTE: this must be the last rule in this chain" -m addrtype --dst-type LOCAL -j KUBE-NODEPORTS' q# B% `- X, ~4 s
-A KUBE-SVC-7GF4BJM3Z6CMNVML -m comment --comment "default/redis-master:" -j KUBE-SEP-Y7WMR7EBCL4N3QJX- T% N4 x! j. {' q) Q0 k3 C
-A KUBE-SVC-AGR3D4D4FQNH4O33 -m comment --comment "default/redis-slave:" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-LYGBYJFMWSAWPLXU
# Q4 @+ \6 o. G( @6 q; m' C/ P-A KUBE-SVC-AGR3D4D4FQNH4O33 -m comment --comment "default/redis-slave:" -j KUBE-SEP-7R2ESD4YYXMXFEFZ4 C7 i% `) t4 Q/ H  X
-A KUBE-SVC-GYQQTB6TY565JPRW -m comment --comment "default/frontend:" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-63GTHXGNEQIFF6GY
2 ?  l" H0 K0 ^3 N-A KUBE-SVC-GYQQTB6TY565JPRW -m comment --comment "default/frontend:" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-77PLGVXVTAKNHL2K4 p- R7 _4 ?$ O; R' z* R2 P" G
-A KUBE-SVC-GYQQTB6TY565JPRW -m comment --comment "default/frontend:" -j KUBE-SEP-ZDWRYP3AMCRYOGNR
; [% _2 ?( w2 `-A KUBE-SVC-NPX46M4PTMTKRN6Y -m comment --comment "default/kubernetes:https" -m recent --rcheck --seconds 180 --reap --name KUBE-SEP-GIMIRAR4ZAKGMA2Q --mask 255.255.255.255 --rsource -j KUBE-SEP-GIMIRAR4ZAKGMA2Q
( l' N8 y) x+ l, B. Z-A KUBE-SVC-NPX46M4PTMTKRN6Y -m comment --comment "default/kubernetes:https" -j KUBE-SEP-GIMIRAR4ZAKGMA2Q2 @6 U. h/ I+ R4 Q( q& b
COMMIT; O1 J$ W) o1 `9 U
# Completed on Sun Jan 22 00:41:01 2017
7 D% f0 e4 R& `9 Q: m+ A0 v) C' s
; F# m4 x. L" a$ c" g----------------------------------------------------

尝试了本地卷

[root@centm ~]# cat redis-master-controller_with_volume.yaml
0 |" O0 x6 t8 X" ]" GapiVersion: v1
: g" v  b  h8 {; k; d7 Pkind: ReplicationController  0 p; Q4 g% q- M; W
metadata:                              
7 d5 C. h! A" Q$ W  labels:edis-master  
6 f* `: F, k: {0 R    name: redis-master
- g" H0 F& z; S& r0 N# `2 Y6 sspec:
" J+ U1 d& M7 u: S& _  replicas: 1" X3 |3 n" j. m' M& m3 j1 N8 H
  selector:
9 M2 K( t- V) a  G    name: redis-master
/ Z1 h" @0 e; J/ ~" N% N2 v  template:    $ ^6 z! h9 X3 ^# o/ J5 v* _
    metadata:
8 J8 }) p1 t7 |      labels:0 S( ]4 ]. e' J' v& R9 x
        name: redis-master1 T% K& d8 {. E& U7 t
    spec:. s" d; r: f' X0 O' I0 ~
        volumes:, v, }7 U1 \& U( m9 S
        - name: "gf-dir1"' C& v! Y4 M* x% M0 T' f& |
          hostPath:
0 k* K  T( b- G" w5 U, t# x8 m            path: "/tmp", ?7 g6 M7 T9 u5 @: [, V

" B: ]( q3 ]( H# j" p2 K        containers:
% ^& \/ Z1 q  K# F  D! ]: r        - name: master         
4 i- q9 C0 R% E9 K! |          ports:: docker.io/kubeguide/redis-master:latest   " m9 u/ l# z+ Q7 b
          - containerPort : 6379 3 b) G8 v5 X3 b. l7 ^/ d2 m. o
          volumeMounts:2 f% h: J6 `, l! ~$ ~- Q, G
          - name: "gf-dir1"
, [- x* B% U9 a# }3 N' q            mountPath: "/gf1"
回复

举报

admin

1

主题

0

回帖

12

积分

管理员

积分
12
QQ
 楼主| 发表于 2024-7-10 08:53:50 | 显示全部楼层
export PATH=$PATH:/usr/local/bin" u% P( W% Z% B# p9 u5 g/ o
# alias kk="kubectl -n kube-system"3 |% n/ K$ C9 B
# alias kp="kubectl -n kube-public"
: T- w6 E2 M3 ]6 J: ~: G# alias kis="kubectl -n istio-system"$ a0 V" h5 F# j" j0 u; D0 M5 d" i! n% C7 l
# alias ks="kubectl -n kubesphere-system"
) N* H, C$ D8 A  J# alias km="kubectl -n monitoring"0 y' k& k. C3 r& t5 [2 g
# alias kcm="kubectl -n caas-monitoring-system"  Z" d0 i  a- x
# alias kcs="kubectl -n caas-system"! W& A& R4 f3 G5 m8 G
# alias kcl="kubectl -n caas-logging"
; Y0 d' m7 L; U: s# alias kcd="kubectl -n caas-devops"
& ]  ?3 A5 e& N' o# alias kc="kubectl -n caas"
. _% Q2 I1 |% Q( D. y0 g# alias kcp="kubectl -n cpcs"$ `# \9 w2 @' x( i: r
# alias kop="kubectl -n openstack"( F. z: k2 o! y' g2 Y5 m
# alias kcmp="kubectl -n cmp"
1 }" K5 k- N6 c+ O* p+ _1 n1 w0 G  w# alias kks="kubectl -n karmada-system": t7 @7 w  l2 k5 ]4 K" f
# alias kocm="kubectl -n open-cluster-management"
; z1 d3 h9 M$ J9 M6 \# {# alias kocma="kubectl -n open-cluster-management-agent"
  E, R$ Z% ^5 [9 a$ G% c7 h- _# alias kt="kubectl -n test"% g9 n1 @4 y7 z/ H7 x
# alias kv="kubectl -n vela-system"1 D3 I% @7 M% X. r9 l, _
# alias kfs="kubectl -n flux-system". v1 d6 f' i% \# D6 G9 e
# alias kgo="kubectl -n gpu-operator"9 w5 `' f4 H: U! a: ^1 ^
# alias ki="kubectl -n infra", Y) k1 a4 t" [9 v& X
# alias k="kubectl"
5 f) E8 G- [: q! H# alias ctr="ctr --namespace k8s.io"* L  r  m9 A4 Z9 d3 j
# alias nerdctl="nerdctl --namespace k8s.io"
) U2 C5 e' |; w# ps -ef|grep etcd
) _+ q8 r: }) c9 l( C' |' G6 R1 \/ I) z
# ps -ef|grep etcd
. C$ a$ S- z8 C: V, x# journalctl -xu kubelet -f
8 j5 p% Y/ u  ~7 R, [% {# ps -ef|grep etcd
- W6 K- H2 Q: O7 E4 [0 a
3 p& I& ^5 j1 x# n1 F2 r+ L( @
' n7 }$ R/ N8 p& W) h5 v# cd etcd/
1 V6 x; F9 m  M  U# ls5 I2 |1 Y' A% E8 `
# mv /etc/kubernetes/manifests/etcd.yaml /etc/kubernetes/9 R8 b. \( Q' C) Z% z
# ls
6 w' w8 l2 z) D% H% U8 `7 u1 n* R# rm -rf member/
8 B! A2 m0 u5 g- e( N  w$ w$ Q. Z( P# ls
3 X& {; F+ z! T( |/ N2 [) s& i# cd /etc/kubernetes/) K. b" r' Z; P
# ls
& n9 H: ?! j$ U, k- V! K: s# mv etcd.yaml manifests/
* V! u" T; q! S+ O  j: q# ls
/ e- O# Y% [- P' v0 `) }# journalctl -xu kubelet -f$ @' f: F* L3 ~" {$ J/ F% o: g

9 l  Q( N8 B% b' ?: s, N3 b0 z2 }* A- `# A
# ps -ef|grep etcd
. F6 P% K, U2 d; C% w# ls
7 y! b8 k* l, t, m* z# I$ u7 P+ |# cd manifests/! b0 j* L3 f1 x& V2 T4 D6 s
# ls* o  _% D2 M  w7 @) {0 V& l' X! S
# mv * ../" L8 d! _+ T0 b) r1 d* ~
# ls8 i+ z4 _4 Z8 l
# ls
  r! W& L* @+ H- O# F# cd
! {. T. h- j* a3 `# cd /etc/kube3 i* o. B+ M, q* v2 n( x
# cd /etc/kubernetes/, f1 @8 A9 n8 s; i3 D7 N1 o
# ls& Y$ Y9 |1 K4 _% z" F7 d
# mv etcd.yaml kube-apiserver.yaml kube-controller-manager.yaml kube-scheduler.yaml manifests/! y* N6 P2 k0 E) z1 I
# journalctl -xu kubelet -f" `9 x, X: w; g3 `, H7 a6 Y- c' g

0 L. e" a. K$ v9 c' b# ps -ef|grep etcd: x* a. h# \0 y$ {$ k  W+ F5 w
# journalctl -xu kubelet -f|grep etcd% c% B: K" P! d4 Q
# k get po3 j. d' y# U" @; R/ Y
# journalctl -xu kubelet -f|grep etcd
- d. p; r4 j9 {! K3 V# journalctl -xu kubelet -f: j0 v5 y4 X8 m$ p: P7 R% @
# journalctl -xu kubelet -f|grep etcd
( b! u/ ^) c; R# ps -ef|grep etcd# w6 X# [5 ~+ Z% C5 c
# ls
9 C/ u0 ?2 U7 T( u# cat manifests/etcd.yaml/ \1 I8 u$ }* y6 N: n2 h" Q- Z# v3 q

3 W' v# C, C: G* x: U& `9 M8 v. s7 b7 ~5 a* [$ d8 F7 P; k

# k+ _5 E1 t/ s4 [& ?# B1 i/ U# systemctl stop kubelet" P4 h! v4 ?' r1 r6 g
# ls
5 x) O2 p; E* J! F# B1 ]# rm -rf /data/etcd/member/; q) p1 S7 h4 N% W% A/ X$ ?* ~
# ls /data/etcd/
5 I7 E+ z: }9 V# ls
" d& P9 b" G/ ~' S: q) v# systemctl status kubelet( H2 d, c: e# `, l
# systemctl start kubelet
$ B+ U4 c5 Y8 U/ K# ETCDCTL_API=3 etcdctl --cacert=/etc/kubernetes/pki/etcd/ca.crt --cert=/etc/kubernetes/pki/etcd/peer.crt --key=/etc/kubernetes/pki/etcd/peer.key --endpoints=https://10.166.7.5:2379,https://10.166.7.6:2379,https://10.166.7.7:2379 endpoint status --write-out=table
& i. g: Z8 N9 n5 L# ps -ef|grep etcd7 I# H+ A8 e6 `! j% T

5 C: I( X" \! X3 o, w. Q# }# ps -ef|grep etcd* ?' H4 _2 L3 ]8 k1 V* N
# ls /data/etcd/member/1 Z# _8 j( @: i: M1 E" O% r7 N
# ls /data/etcd/member/snap/% b8 o( B% M1 o+ G; M1 v  C
# ls -lhS /data/etcd/member/snap/
/ @) g4 q0 ^" {* k5 ?7 e# ps -ef|grep etcd
- a3 H$ X" `, X0 S# ]* v0 Z! D' V+ e5 |& t5 G$ h
# cat /etc/hosts
8 v+ A% F' v+ J2 w9 L  ~# vi /etc/hosts. S5 ?& L4 \8 ~, T
# kk get po
2 ~6 v# w2 A$ A5 W# kk logs -f etcd-cmp-server02, Y' E2 k! J  B5 [

* ^) q2 g$ N" P$ @) T2 \- `; _# c# ls# q+ b; G! @. x. p- r" G# m- A5 E
# cd manifests/5 c  I' B# [- }2 D" D
# ls: y1 z$ a/ o% t. L! g$ w2 m4 R, h6 S
# mv etcd.yaml ../
1 Y- m2 R" h( p& {2 d. q# cd ../
) [3 h- Y% |- F# q" l: |7 Z" j# ls: R: ]5 |+ t  i* c
# ps -ef|grep etcd0 K3 T4 y/ j$ S2 i- ^
# ls
+ R9 W- _: }" M) D" N# mv etcd.yaml manifests/
4 y5 g- ^5 k4 [4 `1 ~6 K5 _# kk get po
2 u2 i% Z1 E) g7 ]- c0 A# k get po
9 p# u# t+ s8 G2 ~* }# h" }% P: c! q# k get node
" l5 `; z/ ^, a8 |% T# kk get po8 E0 R0 x2 y& Y
# kk logs -f etcd-cmp-server02
) F: S9 ^5 I3 l" Y  U9 A
2 w; I  @$ R1 t# H# cd manifests/& P- N5 S, k) x$ R
# ls
& f7 P1 J9 I- D6 C# mv etcd.yaml ../) G; v2 A; k5 N
# rm -rf /data/etcd/( H6 |/ t  E. a- s0 z6 C
# ls! d8 B' e- w& Z) }" Y3 B1 ]
# cd ../* t- P" ~' ?" K3 k* k
# ls1 E: q8 F: h+ P  C
# mv etcd.yaml manifests/
. n: \/ J) T2 a3 b1 ^4 t% M. F# kk get po
+ E" @, ^6 m" |/ q/ t# kk logs -f etcd-cmp-server02
# p5 w( A; `5 R& p# l- y# kk get po. G% c1 G" T" y% Q1 O3 J
# systemctl restart kubelet
+ x+ G" ?4 U# ^# @7 D' M( o  ?9 d# kk get po
( M2 z( I2 c1 o& v/ |. C9 o' C( q# kk get po
- Z( Y/ v! o1 u5 L3 g# cat /etc/hosts3 k! c1 E* j- z; K
# kk logs -f etcd-cmp-server02
! w* @; \6 p0 r; O# kk logs -f etcd-cmp-server026 `# F. V8 w- [! ]- ^% O
# kk logs -f etcd-cmp-server02
8 L' Z9 b; b9 p: `+ ]# kk logs -f etcd-cmp-server02
! a& E; y6 `* u; _# ls
3 G( ^2 n" V2 Z' d. B! J# cd manifests/
+ S: y9 l3 L* n. p# ls
& v6 K) F. |: t6 T# J  o# vi etcd.yaml
; i+ o  q9 B8 n" n" F# cat etcd.yaml
; [, p: d7 o" A2 `( N& z# vi etcd.yaml 4 ^% |  F. W3 p& s7 Q& N
# ls* w4 f; ?# P* m4 h/ O7 _9 z! f
# mv etcd.yaml ../, e! w& ~8 y; r' m
# ls
+ W( ]# r5 Q/ O2 X- Y: O# cd ../) @' y- o" v. L5 M6 t
# ls
) {4 r# h/ p8 L/ B6 k& z# mv etcd.yaml manifests/
3 R/ J" L/ U4 Q# ls' \2 C2 G$ O7 x% h3 m4 I
# kk get po
( E9 M. ?! k) s5 O9 i/ c# kk get po- X' w, _+ }* Y$ n( I* O
# kk get po9 V* ~5 Y; a, R/ [
# kk get po4 [( ~1 @( L# x" y
# kk get po
1 r* Y% s" R; {& p& Y+ [) w# kk get po
# n3 }3 l9 T: _$ J* q( ?; a# kk get po% ]  u3 n$ i. t7 {
# kk logs -f etcd-cmp-server02
& }+ u- N: d5 r7 _6 u( {! _& ]# ls
( i* R1 o/ n- @6 _+ U# mv manifests/etcd.yaml .
6 `- i) R7 W$ A" R# rm -rf /data/etcd/3 A( k  ?" K1 [/ V3 i9 N
# ls; B, T8 ^( U3 B  @
# mv etcd.yaml manifests/
7 ~+ Z" z4 d, G* B# B: E6 M) m# cd manifests/
- ]( r7 h7 h. B7 T5 h  N0 g# ls$ J( }2 ~3 Q; ]$ n' t2 _9 A; `
# s: D: }2 H* W' G7 @  V* B4 K9 j$ ]
# cd ../; L+ e# F) B, ^) I9 u1 v0 T
# ls4 K; L6 r1 j! I+ V3 b9 d
# kk get po
* E% f) u! B/ ~  ^. [1 u2 _& H& ~9 I) [2 z
# kk get po4 O* i! V6 x1 t/ R: m) D/ q2 d
# kk get po; m  K# c% [% A$ p
# kk get po' h$ y8 u6 `) P# k
# kk logs -f etcd-cmp-server02
/ p& S# g: T8 X5 s8 E% j7 e# kk get po
& V' E# _5 C0 i9 Y& O) }  ^9 V# kk get po9 m2 {% V- v+ m$ Q2 S! |2 o  y
# kk logs -f etcd-cmp-server02+ j1 Q7 v. W& u4 z1 S
# ls2 w) P, N- W, e; S3 G" j7 U7 [
# mv manifests/etcd.yaml .
1 e* F" v# z4 |
: u6 O7 u, h  |8 A# i# kk get po9 G, u( t1 R$ r7 l9 G; w: P
# ls
) Y) F1 g& _6 D1 q; c. g3 L# rm -rf /data/etcd/3 V! d9 L* D% E( L) u0 s9 f! Z: K
# ls
- Z6 h: R, _0 R0 @% ~# mv etcd.yaml manifests/* J* h* f  J& y) D: j
#8 W5 q! }: Z) p/ e! r5 g  h
# kk get po
- `8 I5 k# @$ \! R$ {6 o) n: {: ]# kk logs -f etcd-cmp-server027 e" l% f/ x+ ~2 [% P! T
# ls
1 ~+ E5 V, l! D5 `' w1 o# kk get po
; L* ~7 }% J& @& F8 l/ ?# kk logs -f kube-apiserver-cmp-server02
6 Y, H4 O/ V  {" [/ G8 ]  E' z9 q# \$ |! p* r
# kk get po1 @( ]( r* z& [1 \0 W
# kk logs -f etcd-cmp-server02  U* o3 f! c: h/ r8 ~$ [7 n
# ls
" A, m" A3 X* L% C1 y4 q# cat manifests/etcd.yaml
: b. K9 a& J+ F  ?/ T3 F# ls! T6 y( `- B+ X$ y8 L' E" Q
# ls
. I% E' r6 j3 b+ w* ^7 Z# ls& _7 H) _$ s% Z
# ls
* S" S% ]+ A5 M# ls/ a& T3 @5 L, W0 }4 L# s
# ls# i2 U; B9 B5 \; K) i
# ls. q, n! R- ]3 ~$ h
# ls# N: I/ ]1 p( H7 @7 O2 ~0 F- [, n, q
# kk get po; k) g, ]/ L6 X( C4 i% Y
# kk logs -f etcd-cmp-server02
! y( E4 K" b1 x, ]9 d$ c# kk get po4 U' {- b8 }2 M; S9 U% C3 b

- ]1 H% o4 C! c/ b$ {* V# kk get po& L5 Q0 d) l! m: O9 k
# kk logs -f etcd-cmp-server02) `$ d/ W& l: H  u/ v
# kk logs -f etcd-cmp-server02
2 `1 k# y; J9 Y# kk get po' m6 e) U) A- a8 [7 `) E" @
# k get po/ M% T0 }. |7 G1 b" L
# kk get po. x; {3 f$ R# g* H4 [
# ls4 ]/ J  Y# ~8 V, F
# cd manifests/3 s1 U, F7 ^. _8 s1 g
# ls
9 v1 R$ E9 j& D# kk get po$ \& P6 h9 o& c
# kk logs -f kube-apiserver-cmp-server02
( r4 K0 f3 Y! d4 m# kk get po
/ P" E- d* ?  D3 U; |9 n- r# ls! P" i" n& g! |8 t- j/ Q$ G& W
# mv kube-apiserver.yaml ../1 M8 q8 ?' k/ p+ i" _
# cd ../" l% H5 z* m- w% @# M
# mv kube-apiserver.yaml manifests/; l0 a4 v, E# B1 N
# kk get po2 d( I9 M; C* \; v4 }
# kk get po0 F2 P- g) i. a/ _/ X  q& B
# kk logs -f kube-apiserver-cmp-server020 K; ]0 D" r  k# s, [
# ps -ef|grep etcd
6 O) u0 [: u' K& N, e! R2 s# ss -tunlp|grep 23796 ?% G; p- x; K9 K' v; }, U
# kk logs -f kube-apiserver-cmp-server02; U' s% S6 j0 b: w3 D) f1 }. k
# kk get po' [" Q9 c! y* H# J- c) G  j
# kk get po -owide
) o3 F8 G! W2 T# s
- P& l4 w& q8 E# kk get po
) A3 M/ k2 r4 k9 {& m# ETCDCTL_API=3 etcdctl --cacert=/etc/kubernetes/pki/etcd/ca.crt --cert=/etc/kubernetes/pki/etcd/peer.crt --key=/etc/kubernetes/pki/etcd/peer.key --endpoints=https://10.166.7.5:2379,https://10.166.7.6:2379,https://10.166.7.7:2379 endpoint status --write-out=table
1 [. y0 A% a7 {7 _: @# kk get po
1 k# x# V' a! g5 v9 I- W# kk get po
" e, F, q  _6 r; X: x  r5 m# kk get po
5 Q3 V# R. \% ~: A. N, j, @# kk logs -f kube-apiserver-cmp-server023 g1 P) }+ R$ t% I3 c/ y+ h! T) L
# tennet 127.0.0.1:23790 B& U, s. [0 r6 W1 h, Q
+ ?/ E' \8 J+ U/ P. k
# ls& Q+ h, ^" r6 K/ v
# cd manifests/
' V+ I1 {3 \! e' }! l# ls7 @3 n# a9 @' W4 i- a' b
# cat kube-apiserver.yaml
0 Y) j: d. }; w7 X# kk get po
2 {1 M- W! N, {6 c# ^& M, E/ e# kk get po( g5 b  k0 \; c4 ~" ]

$ c% J' C, @; i8 J3 W' }8 {* t$ L; c# kk get po
' d4 T  n+ D! K9 r, ^. p& [# df -h( K+ g5 i0 }  N. w6 P7 K
# ls" ~2 V7 ^5 T9 |: ^
# cd /7 C- X7 m" r- R6 m& g* L
# cd
3 g; w' `4 t. e1 Z# cd /home/devops/& b0 N( ~& |- g( p  B2 Q
# ls; l, R# f0 M3 l) s# }; w
# cd
2 l0 w; r. V5 w+ S# O# ls
, s  @8 C% g5 [) P' N3 w# du -sh *
6 I- p- H, K( N2 \: ^# cd /
) W2 w7 j. l1 t) `: n* R. F/ h# du -sh *; d- w7 a9 j9 E2 T
# cd data/; p9 @( [  A) {' W
# ls
$ O2 T7 Y' C$ {0 T# du -sh *
/ N9 Q* `! [2 ]4 |1 A- [; q; P6 V0 L; j1 s" F% z
# journalctl -xefu kubelet. p' c3 {  d0 [$ Q; j. Y  I* w0 u
# ;s
# i: ?) C3 z4 y  @4 \! B* ^# /usr/local/bin/nerdctl -n k8s.io tag caas4/keystone-sync-db:latest 10.166.7.5:30443/caas/keystone-sync-db:latest4 Z6 W) f0 ?$ i; `; ~
# /usr/local/bin/nerdctl -n k8s.io push 10.166.7.5:30443/caas/keystone-sync-db:latest
: d3 l* W+ t' ]6 f! x! ?: I1 ~# /usr/local/bin/nerdctl -n k8s.io login 10.166.7.5:304435 K$ b  E# I8 k
# /usr/local/bin/nerdctl -n k8s.io push 10.166.7.5:30443/caas/keystone-sync-db:latest
6 ~$ j+ Z- r; B) ]7 c  Q8 Y# /usr/local/bin/nerdctl -n k8s.io tag caas4/perception 10.166.7.5:30443/caas/perception:latest
2 z2 N& G4 c7 p$ L  c# /usr/local/bin/nerdctl -n k8s.io tag sameersbn/gitlab:13.10.3 10.166.7.5:30443/cmp/gitlab:13.10.32 Y! O, Z3 @/ E
#  /usr/local/bin/nerdctl -n k8s.io push 10.166.7.5:30443/cmp/gitlab:13.10.3) e  ]* \  i' P: X
# /usr/local/bin/nerdctl -n k8s.io tag sameersbn/postgresql:12-20200524 10.166.7.5:30443/cmp/postgresql:12-20200524
7 \/ L, O. P) k1 F8 B. y# /usr/local/bin/nerdctl -n k8s.io tag cmp/redis:5.0.6  10.166.7.5:30443/cmp/redis:5.0.6( D8 f) j, a- Y; O6 i+ h6 Y
# /usr/local/bin/nerdctl -n k8s.io push 10.166.7.5:30443/cmp/redis:5.0.6
# e( a! Z: x7 h  N* Y7 b$ v# /usr/local/bin/nerdctl -n k8s.io tag busybox  10.166.7.5:30443/cmp/busybox:latest
- W# c7 i$ i8 O$ a5 l# /usr/local/bin/nerdctl -n k8s.io push 10.166.7.5:30443/cmp/busybox:latest" F9 P) s( a+ Q( P; [
# kubectl get node --show-labels  E1 p3 p% O  x' W+ h
# journalctl -xefu kubelet
% \9 a7 a& _' Z4 V# journalctl -xefu kubelet! Z/ a, P+ l9 A3 ^
# journalctl -xefu kubelet. b+ o1 o$ c; z, m) V$ e, `; m
# journalctl -xefu kubelet# G- A5 [3 j7 ^# g0 g1 o: T
# kubeadm reset -f: }$ e' Y  E, w
# vi /etc/hosts( Z# n4 N- k  Y- s5 K1 u
# cat /etc/hosts/ x7 o) X6 Z- ]/ g
# systemctl stop firewalld || true
9 ^- I7 G% E) i4 N# systemctl disable firewalld || true
" i& {! k/ {4 I$ E. |; s# setenforce 0
3 ]/ d1 g" I5 h  V# sed -i s/^SELINUX=.*$/SELINUX=disabled/ /etc/selinux/config
6 u4 x9 n2 X7 v3 C/ E5 i" }# modprobe br_netfilter && modprobe nf_conntrack
: y$ J9 e" T- w+ D# cat > /etc/sysctl.d/98-k8s.conf << EOF/ h$ e5 j- H$ S. P" j, t
# net.netfilter.nf_conntrack_tcp_be_liberal = 1$ }( H2 `/ T0 r  z. w% i% G% \
# net.netfilter.nf_conntrack_tcp_loose = 1
3 V5 a3 X1 x  _. U# net.netfilter.nf_conntrack_max = 5242886 e  v, z1 Y3 ~( I
# net.netfilter.nf_conntrack_buckets = 1310725 O$ F1 P& m2 i+ E
# net.netfilter.nf_conntrack_tcp_timeout_established = 21600* |# c$ s- ?2 C( s) q
# net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120: M1 @! U; v) D( c! x4 e+ @
# net.ipv4.neigh.default.gc_thresh1 = 1024
' y* k6 r* u1 ?+ a; u# net.ipv4.neigh.default.gc_thresh2 = 2048
' V" \* u5 x# y1 l7 ^' e# net.ipv4.neigh.default.gc_thresh3 = 4096; Z: Y* E5 f$ w; z) u% j
# vm.max_map_count = 262144
. i7 u, j( U* p3 i# net.ipv4.ip_forward = 1
+ w8 M2 [* g& p/ f1 `0 k# net.ipv4.tcp_timestamps = 1
/ a1 q- G. j% L$ e0 C, R: w: |# net.bridge.bridge-nf-call-ip6tables = 1" d8 L7 n2 v% V! f
# net.bridge.bridge-nf-call-iptables = 1
7 |+ U2 `" l) F7 E# net.ipv6.conf.all.forwarding=1
# r* f3 v: ^7 D- l# fs.file-max=1048576: R! E  o$ |- D  b
# fs.inotify.max_user_instances = 8192
( o) j5 o0 I) @, k4 N! i- ]# fs.inotify.max_user_watches = 524288
* c+ V' ?* G$ x( ?# EOF. d6 R% m- F! q

$ \& ~; \1 u0 C3 q5 H- c# cat > /etc/security/limits.d/98-k8s.conf << EOF# @5 K3 `) U) v- S- V/ c4 T
# * soft nproc 65535; e; _! \+ m/ _7 m
# * hard nproc 65535
' d: o- `; p1 M& X0 c) a  u# * soft nofile 65535
/ F; T  r; G5 P3 U5 f7 `# * hard nofile 65535
7 a( m" d+ V, f# r- I5 W* N# EOF
/ ]+ {# i5 n8 k
' R4 r; P5 G+ O. v1 p# sysctl --system
; ]0 f/ `3 W5 \6 ~6 u# sysctl -p0 U" G# A0 Z- q4 o( @; \
# swapoff -a& `( C* j4 K+ M
# sed -i /swap/d /etc/fstab9 ~; k$ o% n1 P8 {5 E( h- P
# kubeadm join apiserver.cluster.local:6443 --token 25omv5.cqx4gnuhoyh7nwxy --discovery-token-ca-cert-hash sha256:eaf7ee645c5cc0af1782df11c38519b84d643f06d9c6613009047e9b2e275524 % Z4 j# ~! b; K0 y) E7 B
# kubeadm reset -f
- K+ O! t: v+ H, y# kubeadm reset -f, H+ r6 W4 ^" w* z% {& T% ^* u
# kubeadm join apiserver.cluster.local:6443 --token 25omv5.cqx4gnuhoyh7nwxy --discovery-token-ca-cert-hash sha256:eaf7ee645c5cc0af1782df11c38519b84d643f06d9c6613009047e9b2e275524 $ X  ?1 r% W/ @' a0 \. P# }
# /usr/local/bin/nerdctl -n k8s.io images2 q& @0 C+ j8 v  c$ O4 E
# /usr/local/bin/nerdctl -n k8s.io tag rancher/local-path-provisioner:v0.0.24  10.166.7.5:30443/cmp/local-path-provisioner:v0.0.24
' U* p: P3 \/ m* {# /usr/local/bin/nerdctl -n k8s.io push  10.166.7.5:30443/cmp/local-path-provisioner:v0.0.24
1 P: d% b( F7 P& X
, P6 K- K2 h. U8 g1 U) H
+ \9 ^  A' ?" Q1 @# cd local-path-provisioner/
. N0 E6 D* u1 t+ W0 F, k# ls) ]- }- m8 ]! ]8 V, i; G7 h9 }7 s
# du -sh *' k7 Q  r8 D* v' D7 ]' d
# cd pvc-cedd6757-22af-46a3-a863-cdc4a02af016_caas-system_minio/& n4 G% P4 P3 m& E# z. m2 |
# du -sh *
+ j# }, R- @0 w! F# cd mgmt/
& T  w1 v# N6 L- _/ S+ }# ls/ y, k- p$ R* c) _
# cat /etc/kubernetes/kubelet.conf
5 K3 u9 M8 e! D7 d5 v" O1 i8 w* V# cat /etc/kubernetes/kubelet.conf- G: ^2 S8 C( I8 O$ O% [
# cat /etc/kubernetes/controller-manager.conf% c- r7 J7 b  i4 J# P1 L
# cat /etc/kubernetes/kubelet.conf 2 g0 r" D# d  c& a  H& g

# ]! |, Q- b/ a+ \4 a* P1 ^( e+ M$ {" |
# cat /etc/kubernetes/kubelet.conf ( L3 v/ C2 l. b1 U5 g0 L
# cat /var/lib/kubelet/config.yaml 1 F7 b' }% \- e' w( @

! C. {0 Q% \- X" n; r; Z2 k9 k
回复

举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 注册

本版积分规则

返回首页|Archiver|手机版|小黑屋|易陆发现技术论坛 ( 蜀ICP备2026014127号-1 )

GMT+8, 2026-6-12 00:31 , Processed in 0.023948 second(s), 22 queries .

Powered by Discuz! X5.0

© 2001-2026 Discuz! Team.

快速回复 返回顶部 返回列表