浏览此站
联系我们相册切换到窄版 Language

 找回密码
 注册
易陆发现论坛»论坛 › docker社区 › docker社区 › k8s集群
返回列表 发新帖
查看: 4707|回复: 1

k8s集群

[复制链接]
admin

1

主题

0

回帖

12

积分

管理员

积分
12
QQ
发表于 2018-9-19 17:08:18 | 显示全部楼层 |阅读模式

edis和docker这两个词语会自动被修改为首字母大写并链接到知识库，所以在这里先写一遍，后面就不会被改写了。

0、具体操作见 （vmware中搭建k8s），virtulbox也是相同的流程。
# p0 n3 E! t/ B  H0 ^; K

1、学习k8s，读的是这本书《KUBERNETES权威指南  从DOCKET到KURBERNETES实践全接触.pdf》

2、这边书刚开始讲的是在单机上搭建一个k8s的hello world，用的是centos7.

    于是我也在virtulbox中安装了centos7，并成功运行hello world。

3、然后，开始尝试集群了。在网上找了个教程，比较简单，很快就成功了，kubectl get nodes能看到各node了。

    但是，应用跑的不正常，有的节点可以访问，有的节点不可以。而且从不同节点访问，查到的数据不相同，似乎是多个独立的系统。怀疑是iptables中cluster ip的规则有问题。   
- R3 [% _/ z, B0 s; d- ]8 Q& J, b

     接着，集群坏了，k8s的基础服务都启动不了。怀疑是不是因为我创建这些虚机时，用的是链接式拷贝，是不是原始的虚机安装了其它软件，导致k8s集群启动不了。

4、删掉重来，用完全拷贝的方式建立虚机。

     一切正常，但是在启动redis-master-controller.yaml时，docker中无法建立容器，

     用kubectl describe pod redis-master命令排查，发现下拉不了镜像。其实这些镜像已经存在于docker中了（搭建单机k8s时，自动pull的）。只是镜像名字前面多加了docker.io/  我修改了redis-master-controller.yaml中镜像的名字，仍然pull失败。奇怪。

5、今天定位了网络问题（见virtualbox虚拟机无法上网），网络搞通后，hello world终于正常运行了。

之前的一些疑问，有答案了

1、随便访问哪个node的ip（比如http://192.168.56.251:30001/,http://192.168.56.252:30001/）(http://192.168.56.250:30001/是不行的)，都可以访问到服务的（proxy自动转的）

2、在内部时，访问真实端口也是可以的。

[root@centm ~]# kubectl get svc4 I" u1 z* W' @' d% b7 a
NAME           CLUSTER-IP       EXTERNAL-IP   PORT(S)    AGE, x! Q2 Y/ |6 c* t4 J2 \0 D
frontend       10.254.218.57    <nodes>       80/TCP     5m- q+ e2 a$ r) R( V
kubernetes     10.254.0.1       <none>        443/TCP    15d: q4 v% R1 g: ?# M+ f$ @
redis-master   10.254.142.174   <none>        6379/TCP   8m# e- h3 i, L; g$ N
redis-slave    10.254.201.123   <none>        6379/TCP   6m
8 _3 r, X# N8 i

curl 10.254.218.57:80     可以通。

ping  10.254.218.57 不通

3、node中多了一个127.0.0.1 ，不知道为什么& w4 K% i# F. Q/ p+ p

[root@centm ~]# kubectl get nodes
  q4 u& Y  s. R$ y( V# H2 BNAME        STATUS     AGE
# {9 \! D% O, C, M2 Z127.0.0.1   NotReady   15d0 ^# y/ Q1 }( F8 Y
cents1      Ready      1d
: t; t3 m6 _. K; E& z  B4 kcents2      Ready      1d& A3 v* {' v( ?5 ?  `6 ^) i
[root@centm ~]# ps -ef|grep kube
; a6 p2 U0 u) v. I1 ukube       578     1  0 Jan20 ?        00:15:55 /usr/bin/kube-controller-manager --logtostderr=true --v=0 --master=http://127.0.0.1:80802 B) Y( X6 ^2 A8 e* j, l& v
kube       588     1  0 Jan20 ?        00:01:09 /usr/bin/kube-scheduler --logtostderr=true --v=0 --master=http://127.0.0.1:8080" t' @$ h& w7 ]2 f
kube      2079     1  0 Jan20 ?        00:08:11 /usr/bin/kube-apiserver --logtostderr=true --v=0 --etcd-servers=http://127.0.0.1:2379 --insecure-bind-address=0.0.0.0 --allow-privileged=false --service-cluster-ip-range=10.254.0.0/16 --admission-control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ResourceQuota/ g3 T9 c- P& P
4、clusterip是一个虚ip，实际是iptables中的几个转发规则。

[root@cents2 ~]# ip a% V) r( R7 c3 h: i1 g
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
2 c2 V0 Q! D. w! o5 y7 {# I    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
+ m* R! U* n. V, s" l1 g6 _    inet 127.0.0.1/8 scope host lo
+ V- u2 B2 w- D2 |6 S       valid_lft forever preferred_lft forever
& I9 o( K0 J8 b4 t1 D8 V    inet6 ::1/128 scope host8 t8 @) s; L7 i9 d4 x* o2 w9 M
       valid_lft forever preferred_lft forever
* S& z% E/ {9 v, X* ?( @2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000) R" e3 {! R* {6 T
    link/ether 08:00:27:58:5d:6e brd ff:ff:ff:ff:ff:ff- e  [$ w$ s) ~& t( ~9 J' x3 c
    inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic enp0s3
" `& E3 N$ ^/ W+ u9 U# i8 A- E4 |/ W- Y       valid_lft 82058sec preferred_lft 82058sec" c$ a8 n3 T& E+ H& d9 Y$ U& c
    inet6 fe80::b171:84d0:5173:de63/64 scope link/ P9 [& C* c7 B" N* j; b
       valid_lft forever preferred_lft forever
5 K+ w9 b, X0 j9 h" \" ~- s/ F( A! e0 l3: enp0s8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  R, y3 V; @9 W( }( z. y: B( f    link/ether 08:00:27:7a:24:14 brd ff:ff:ff:ff:ff:ff. u7 s6 @2 L# j3 t, e! _/ E
    inet 192.168.56.252/24 brd 192.168.56.255 scope global enp0s8* Y6 {; l1 K: p. j; ~
       valid_lft forever preferred_lft forever  o6 E% l! G8 l4 j% c
    inet6 fe80::a00:27ff:fe7a:2414/64 scope link+ j+ _6 p/ U  v3 _/ q% A4 d7 F
       valid_lft forever preferred_lft forever, J( [  p9 P# V# c- n
4: flannel.1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN
6 _4 ~0 Q2 F& [4 J+ K) r7 {+ K2 z3 O    link/ether fa:5a:c7:c5:aa:e5 brd ff:ff:ff:ff:ff:ff) e! ^8 c. s. M3 Q2 k) U
    inet 172.16.80.0/16 scope global flannel.1" u4 }% @7 r8 P- }# B
       valid_lft forever preferred_lft forever2 D9 V. P0 {- t& `3 R
5: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UP
( G" V0 f& Y! [  m$ d: t    link/ether 02:42:72:2f:1f:ae brd ff:ff:ff:ff:ff:ff) ?1 _6 }$ A& O* ~8 Y& n3 [. j4 B7 i
    inet 172.16.80.1/24 scope global docker0* d+ p- b1 N6 A% t  }' G
       valid_lft forever preferred_lft forever% B& V. a1 O3 W- |
    inet6 fe80::42:72ff:fe2f:1fae/64 scope link, y6 N1 C* j5 _" U
       valid_lft forever preferred_lft forever
" J4 a+ S" l& V5 M7: vethc56c1d4@if6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue master docker0 state UP5 o* z1 S' v3 K) x9 C! N% F" w
    link/ether 92:c8:3d:3f:b9:49 brd ff:ff:ff:ff:ff:ff link-netnsid 05 Q/ E, ]8 l5 G- A
    inet6 fe80::90c8:3dff:fe3f:b949/64 scope link
! m; J/ M8 o  W. M$ k" q  B       valid_lft forever preferred_lft forever
( T% _* O( ?+ ~9 i1 p, ?3 q9: vethf961994@if8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue master docker0 state UP
- X! @9 |" M+ o" v0 m3 {    link/ether d6:be:4b:6e:26:81 brd ff:ff:ff:ff:ff:ff link-netnsid 1, X* l9 Z+ Y. L1 x& |; s
    inet6 fe80::d4be:4bff:fe6e:2681/64 scope link$ j9 i1 d4 }6 p
       valid_lft forever preferred_lft forever) S4 p# V3 S& v0 W" ?
11: vethe4cd28e@if10: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue master docker0 state UP. _) q5 ?9 h7 p* Z8 ]6 K) V. N
    link/ether ee:55:55:df:4e:50 brd ff:ff:ff:ff:ff:ff link-netnsid 23 J1 p. B+ _) s" r3 [
    inet6 fe80::ec55:55ff:fedf:4e50/64 scope link
1 Y5 D3 u4 E  K. Z( b5 Y! {       valid_lft forever preferred_lft forever
) W0 |( W( p  G/ x
9 W, H9 u% W2 Y0 U1 K1 R[root@cents2 ~]# iptables-save: Y# J% U% @7 {& V8 x9 m" f- M
# Generated by iptables-save v1.4.21 on Sun Jan 22 00:41:01 2017/ I6 [2 u5 M6 u! p8 C0 t, e
*filter
* |$ H6 F+ n# t$ w8 y:INPUT ACCEPT [27:4324]& h: W& [5 L/ d# `/ z& L
:FORWARD ACCEPT [0:0]
- J3 i8 `3 ?* t3 z:OUTPUT ACCEPT [25:2821]5 s6 M/ x, E2 K& X: e
:DOCKER - [0:0]; g7 Z4 R* Z" p
:DOCKER-ISOLATION - [0:0]* s! w8 J  x; H7 `+ E
:KUBE-SERVICES - [0:0]
1 I1 o9 {) I. _4 U" c5 l-A FORWARD -j DOCKER-ISOLATION
; Q) v( _7 E( t; |# l- R-A FORWARD -o docker0 -j DOCKER1 u! H9 }6 ^9 @0 w6 g
-A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
0 u* p6 d) H* b7 Q$ L-A FORWARD -i docker0 ! -o docker0 -j ACCEPT+ `  p5 j! _1 d# j
-A FORWARD -i docker0 -o docker0 -j ACCEPT  Q) D( i- @! L; v8 _: z1 J/ H
-A OUTPUT -m comment --comment "kubernetes service portals" -j KUBE-SERVICES
& s! E, m" s' e-A DOCKER-ISOLATION -j RETURN9 B/ J. r$ s1 _' X# \7 ?8 A
COMMIT; r. }+ e* [. \8 j
# Completed on Sun Jan 22 00:41:01 2017
4 @& |3 N( ~/ u+ q2 |# Generated by iptables-save v1.4.21 on Sun Jan 22 00:41:01 2017
9 y1 ?" l) R9 N: X, M4 z( F*nat9 z+ q4 Y; K- }2 B* v+ p( b
:PREROUTING ACCEPT [0:0]
1 |9 e7 C0 r# _- I:INPUT ACCEPT [0:0]
( m/ S: ]* j8 G% ~; U:OUTPUT ACCEPT [2:119]
( a  p0 Y; a. Y1 `  Y:POSTROUTING ACCEPT [2:119]: C2 N. C) z, N7 g
:DOCKER - [0:0]5 D3 @  I' M. w) Y2 s5 _) ?
:KUBE-MARK-MASQ - [0:0]9 d4 l5 H( Y* b2 D2 m$ N
:KUBE-NODEPORTS - [0:0]
) ?- \- L; S6 F! x. U, `:KUBE-POSTROUTING - [0:0]
# M1 _5 i/ q* ?# z! A9 b6 c:KUBE-SEP-63GTHXGNEQIFF6GY - [0:0]
$ a8 y4 q, _- O# N3 z) u:KUBE-SEP-77PLGVXVTAKNHL2K - [0:0]$ y! u" i: h6 `5 l8 _5 @
:KUBE-SEP-7R2ESD4YYXMXFEFZ - [0:0]5 g& ], n+ K5 x5 D
:KUBE-SEP-GIMIRAR4ZAKGMA2Q - [0:0]% h* t& L: a7 J
:KUBE-SEP-LYGBYJFMWSAWPLXU - [0:0]
$ s, ~8 E* f# a: {% t* y" J:KUBE-SEP-Y7WMR7EBCL4N3QJX - [0:0]
$ d5 G4 l. f+ C* ^! C+ T& O:KUBE-SEP-ZDWRYP3AMCRYOGNR - [0:0]
5 d; M0 C- P) L" A$ {4 d" W:KUBE-SERVICES - [0:0]
, z: A1 B1 ^* k+ Y) q, |:KUBE-SVC-7GF4BJM3Z6CMNVML - [0:0]3 k) E/ x" {; J0 u9 b; i/ G
:KUBE-SVC-AGR3D4D4FQNH4O33 - [0:0]4 c# C5 D' a, l% C: c
:KUBE-SVC-GYQQTB6TY565JPRW - [0:0]; G5 v- I/ P( _; a$ W
:KUBE-SVC-NPX46M4PTMTKRN6Y - [0:0]! g5 J' x( y6 q0 O5 @* {
-A PREROUTING -m comment --comment "kubernetes service portals" -j KUBE-SERVICES
5 B# n: o3 s6 x# F# _8 E9 ^-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
/ U; J) C8 _7 i6 ^0 @-A OUTPUT -m comment --comment "kubernetes service portals" -j KUBE-SERVICES
  `* L7 N! q# x8 E% A8 M3 n7 U3 {-A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER3 Y/ l* X( X& l9 ]
-A POSTROUTING -s 172.16.80.0/24 ! -o docker0 -j MASQUERADE* M/ q: \- d# C+ B' ], w8 \
-A POSTROUTING -m comment --comment "kubernetes postrouting rules" -j KUBE-POSTROUTING: \$ @4 o0 }/ G) ^/ \6 H
-A DOCKER -i docker0 -j RETURN
8 ?3 j  z# k9 U-A KUBE-MARK-MASQ -j MARK --set-xmark 0x4000/0x4000
- l& I( u9 h/ y3 V-A KUBE-NODEPORTS -p tcp -m comment --comment "default/frontend:" -m tcp --dport 30001 -j KUBE-MARK-MASQ
* ~# n4 o  _  G' e& f-A KUBE-NODEPORTS -p tcp -m comment --comment "default/frontend:" -m tcp --dport 30001 -j KUBE-SVC-GYQQTB6TY565JPRW) ]; C6 R4 X3 S" u& H
-A KUBE-POSTROUTING -m comment --comment "kubernetes service traffic requiring SNAT" -m mark --mark 0x4000/0x4000 -j MASQUERADE  @& E" B5 o) L( X
-A KUBE-SEP-63GTHXGNEQIFF6GY -s 172.16.62.4/32 -m comment --comment "default/frontend:" -j KUBE-MARK-MASQ
5 f5 ~! Z9 |0 z' W) ]-A KUBE-SEP-63GTHXGNEQIFF6GY -p tcp -m comment --comment "default/frontend:" -m tcp -j DNAT --to-destination 172.16.62.4:80$ x% E. e: u' l0 y2 M+ [4 w
-A KUBE-SEP-77PLGVXVTAKNHL2K -s 172.16.80.3/32 -m comment --comment "default/frontend:" -j KUBE-MARK-MASQ
, O- F* x/ _, J: A6 n2 l0 |-A KUBE-SEP-77PLGVXVTAKNHL2K -p tcp -m comment --comment "default/frontend:" -m tcp -j DNAT --to-destination 172.16.80.3:80
1 d9 `1 J0 b8 e; r/ p9 s! k3 O-A KUBE-SEP-7R2ESD4YYXMXFEFZ -s 172.16.80.2/32 -m comment --comment "default/redis-slave:" -j KUBE-MARK-MASQ
1 k# L# g/ `& e9 H-A KUBE-SEP-7R2ESD4YYXMXFEFZ -p tcp -m comment --comment "default/redis-slave:" -m tcp -j DNAT --to-destination 172.16.80.2:6379
: x, g9 b2 r' S  u; F3 _. ^; P; t-A KUBE-SEP-GIMIRAR4ZAKGMA2Q -s 192.168.56.250/32 -m comment --comment "default/kubernetes:https" -j KUBE-MARK-MASQ; N% I" }) w2 M; L$ e
-A KUBE-SEP-GIMIRAR4ZAKGMA2Q -p tcp -m comment --comment "default/kubernetes:https" -m recent --set --name KUBE-SEP-GIMIRAR4ZAKGMA2Q --mask 255.255.255.255 --rsource -m tcp -j DNAT --to-destination 192.168.56.250:6443
( U9 w- x  D+ {; Z-A KUBE-SEP-LYGBYJFMWSAWPLXU -s 172.16.62.3/32 -m comment --comment "default/redis-slave:" -j KUBE-MARK-MASQ
% T2 w3 [  v2 r2 j! Z-A KUBE-SEP-LYGBYJFMWSAWPLXU -p tcp -m comment --comment "default/redis-slave:" -m tcp -j DNAT --to-destination 172.16.62.3:6379
& n. S7 C! V/ }* `0 f+ ^-A KUBE-SEP-Y7WMR7EBCL4N3QJX -s 172.16.62.2/32 -m comment --comment "default/redis-master:" -j KUBE-MARK-MASQ
  N1 t8 @1 p1 x7 C6 ]& L, ~6 P-A KUBE-SEP-Y7WMR7EBCL4N3QJX -p tcp -m comment --comment "default/redis-master:" -m tcp -j DNAT --to-destination 172.16.62.2:6379
) n& B1 c: D7 ?6 ?7 y) j$ _: B7 ]-A KUBE-SEP-ZDWRYP3AMCRYOGNR -s 172.16.80.4/32 -m comment --comment "default/frontend:" -j KUBE-MARK-MASQ
' H$ z9 K% G& z5 V- U5 C7 W1 @-A KUBE-SEP-ZDWRYP3AMCRYOGNR -p tcp -m comment --comment "default/frontend:" -m tcp -j DNAT --to-destination 172.16.80.4:805 u  ]$ ?/ n0 Y# q" M) z
-A KUBE-SERVICES -d 10.254.218.57/32 -p tcp -m comment --comment "default/frontend: cluster IP" -m tcp --dport 80 -j KUBE-SVC-GYQQTB6TY565JPRW
, n8 v7 r: ]! p-A KUBE-SERVICES -d 10.254.0.1/32 -p tcp -m comment --comment "default/kubernetes:https cluster IP" -m tcp --dport 443 -j KUBE-SVC-NPX46M4PTMTKRN6Y2 ^( o( R: k5 j% M
-A KUBE-SERVICES -d 10.254.142.174/32 -p tcp -m comment --comment "default/redis-master: cluster IP" -m tcp --dport 6379 -j KUBE-SVC-7GF4BJM3Z6CMNVML
# t* k4 v% n8 `# a3 B-A KUBE-SERVICES -d 10.254.201.123/32 -p tcp -m comment --comment "default/redis-slave: cluster IP" -m tcp --dport 6379 -j KUBE-SVC-AGR3D4D4FQNH4O33
* ]# T5 f" H* g( T-A KUBE-SERVICES -m comment --comment "kubernetes service nodeports; NOTE: this must be the last rule in this chain" -m addrtype --dst-type LOCAL -j KUBE-NODEPORTS" m5 I4 Y3 v: G, E7 k% l& G
-A KUBE-SVC-7GF4BJM3Z6CMNVML -m comment --comment "default/redis-master:" -j KUBE-SEP-Y7WMR7EBCL4N3QJX
7 L: _( N4 P6 l' I8 U5 w3 |-A KUBE-SVC-AGR3D4D4FQNH4O33 -m comment --comment "default/redis-slave:" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-LYGBYJFMWSAWPLXU
7 F: u9 s* H  o7 i5 x) C-A KUBE-SVC-AGR3D4D4FQNH4O33 -m comment --comment "default/redis-slave:" -j KUBE-SEP-7R2ESD4YYXMXFEFZ
' H+ [' L& A: p: ]/ v" }-A KUBE-SVC-GYQQTB6TY565JPRW -m comment --comment "default/frontend:" -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-63GTHXGNEQIFF6GY; H( W. u2 H9 L% N- `$ ~
-A KUBE-SVC-GYQQTB6TY565JPRW -m comment --comment "default/frontend:" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-77PLGVXVTAKNHL2K
, _2 C- P$ D5 g/ E2 \; A-A KUBE-SVC-GYQQTB6TY565JPRW -m comment --comment "default/frontend:" -j KUBE-SEP-ZDWRYP3AMCRYOGNR
9 ~. c! R0 A2 P6 G$ k5 R9 |-A KUBE-SVC-NPX46M4PTMTKRN6Y -m comment --comment "default/kubernetes:https" -m recent --rcheck --seconds 180 --reap --name KUBE-SEP-GIMIRAR4ZAKGMA2Q --mask 255.255.255.255 --rsource -j KUBE-SEP-GIMIRAR4ZAKGMA2Q7 w9 x6 [7 J! O7 C" \% N
-A KUBE-SVC-NPX46M4PTMTKRN6Y -m comment --comment "default/kubernetes:https" -j KUBE-SEP-GIMIRAR4ZAKGMA2Q
6 w! T) j+ p3 l) X5 R0 S8 K7 DCOMMIT
0 r" p: b4 @  l" l6 U5 g# Completed on Sun Jan 22 00:41:01 2017. ~4 f2 Z: S' b8 N" Q( a1 i9 }4 ?

2 U+ S% @9 H% r! _/ P. ^/ W----------------------------------------------------

尝试了本地卷

[root@centm ~]# cat redis-master-controller_with_volume.yaml3 M3 g/ Q9 s  U7 B9 U; N# C( d
apiVersion: v19 ~- t" a, Z& A
kind: ReplicationController  : u( m! a' R/ {& k$ q
metadata:                               ) q; S/ v/ w5 T6 ?1 v5 t
  labels:edis-master  3 @9 F# O# P+ {6 A0 N
    name: redis-master
& [  [6 t0 c3 g; Y8 fspec:
  g& a1 x( N2 l* \  [+ e4 d8 k9 {  replicas: 1/ j) ]7 F& {6 P! e" X  r# `
  selector:: ?; S5 \, ]1 o" P" S! h: q8 \
    name: redis-master2 [. m  {% h1 V4 K% t# u$ t' K5 l
  template:   
  @8 Y0 g0 f: v( ]& M  A5 ]- X% ?    metadata:0 A8 Z8 a7 b  o, c: B
      labels:
$ [. \# A6 a' L$ S* O& y% v        name: redis-master
; W# w7 e+ l' W/ U6 K' E    spec:! l$ G# H# D/ o: J9 a8 [+ L0 [, Z
        volumes:  |/ ~( ^5 h" K$ E3 d5 p
        - name: "gf-dir1"; r( y: z4 J9 b) \
          hostPath:
( ^7 p3 N3 r. V4 V' g8 K  r8 J6 o            path: "/tmp"
% k9 J8 z  p$ h; \7 N
4 E  b- _1 d1 C' E# Q        containers:
+ r8 Y) W1 m# N& R5 P        - name: master          % c. Q" Z9 M6 E3 k3 N( T
          ports:: docker.io/kubeguide/redis-master:latest   
/ W) B3 K: ]7 L) z5 v: k5 F          - containerPort : 6379
: M; y! q) C$ E1 X7 L" O, n          volumeMounts:
3 t( I( G. [9 Y6 {          - name: "gf-dir1") ~4 y6 U; v2 u3 o, A
            mountPath: "/gf1"
回复

举报

admin

1

主题

0

回帖

12

积分

管理员

积分
12
QQ
 楼主| 发表于 2024-7-10 08:53:50 | 显示全部楼层
export PATH=$PATH:/usr/local/bin
$ x; I6 r7 B: g) h# alias kk="kubectl -n kube-system"
3 f! H; |9 f1 ~3 v% Q' n3 v# alias kp="kubectl -n kube-public"
' ~9 `! V9 d% Y" y3 U# alias kis="kubectl -n istio-system"
& M! |6 u% z( C9 |# alias ks="kubectl -n kubesphere-system"
3 d5 y0 U; ~( C# alias km="kubectl -n monitoring"
* M: V6 D6 E: z( Z- o# }, \# alias kcm="kubectl -n caas-monitoring-system"
0 C6 P" L3 z7 `* b# alias kcs="kubectl -n caas-system"
; e; t1 t* \  [$ E, R$ B0 A# alias kcl="kubectl -n caas-logging"
* o2 I8 F8 ^5 B1 U2 O1 P( G9 Q. b# alias kcd="kubectl -n caas-devops"1 |) L( n3 L, g" f
# alias kc="kubectl -n caas"5 G" a% S2 L6 |& t0 @! p! [4 V
# alias kcp="kubectl -n cpcs"
5 F& E' y, w1 d) y3 V( y7 K- s# alias kop="kubectl -n openstack"( j$ `* ~$ y+ C+ ?
# alias kcmp="kubectl -n cmp"
/ U( {% F% b8 j# alias kks="kubectl -n karmada-system"
: U* f5 p: {  M- {# alias kocm="kubectl -n open-cluster-management"
8 [( C4 f" s8 t6 S. U# alias kocma="kubectl -n open-cluster-management-agent"; F7 s8 ?& V' L: u
# alias kt="kubectl -n test"  ]/ G, c: S( F; v) I% q& w, m1 w
# alias kv="kubectl -n vela-system"
  Z1 ?' u, @; d3 ^7 J# alias kfs="kubectl -n flux-system", c5 `: s- ^: N3 l
# alias kgo="kubectl -n gpu-operator", A) W% e2 v& Z7 y; O# U
# alias ki="kubectl -n infra"5 r$ N3 Z/ S+ d/ m) ^% e( k
# alias k="kubectl"+ ^( H  |, f  U; [
# alias ctr="ctr --namespace k8s.io"
$ c, N8 \) T1 w# s$ R- {# alias nerdctl="nerdctl --namespace k8s.io"
2 {, n0 q. c3 G1 D& @# ps -ef|grep etcd
. z; a; v; N" i
& f8 @3 ^1 u# T) M, x) [# ps -ef|grep etcd2 p  `6 u% l5 \4 }
# journalctl -xu kubelet -f
$ w9 M7 G0 f4 ]# ps -ef|grep etcd: @- g( G" j/ _& O( R
( \5 o2 w2 W& y5 c7 b8 V- ~7 Z1 g

; t& V7 X0 r  i( Q9 S, c# cd etcd// O& Q5 c; ?0 `( K; _4 u3 `( G9 Q
# ls
% n1 C+ ~/ t6 ?- }( n3 Y8 l; T# mv /etc/kubernetes/manifests/etcd.yaml /etc/kubernetes/
, f8 P: u) {% L6 J. ?( o) ~# ls
& c3 a, T: l/ J6 u1 w7 m  |) O0 }# rm -rf member/! ]2 g) L! n+ P
# ls6 z0 `2 `' p/ R# R, x1 U
# cd /etc/kubernetes/' z3 U0 }4 g  G
# ls
% D; ^5 t8 o% d( f& p, f1 A/ U3 i# mv etcd.yaml manifests/0 V9 T5 G3 ~) i- W, O: b
# ls
3 E( F* u; @/ Z) J8 B# Y5 [# journalctl -xu kubelet -f6 b$ S" ?  K* q) |  T

7 q; Z. j* n% G& v/ J- |! R5 i3 }; z) ?9 b8 E" l( `
# ps -ef|grep etcd
: L2 Y- d+ t" u5 |9 T# ls
% X/ N# P- Y1 u9 G( s& d# _# cd manifests/0 @, U& }2 P$ E& u& e+ X$ t9 z& C9 }
# ls
- [1 s$ p1 I9 G) U+ @- }# mv * ../6 v% q+ }9 L! l# L) a- v8 z, e
# ls6 T" b# S4 \- M
# ls: a0 \5 p* H  i0 d/ ^/ o+ X
# cd
7 y. k1 V1 Z3 h! k/ B. H# cd /etc/kube
3 Z; C. R5 N( K2 ~# cd /etc/kubernetes/
7 a, I# l1 v! P# ls3 B' u% v, i! X, _' M
# mv etcd.yaml kube-apiserver.yaml kube-controller-manager.yaml kube-scheduler.yaml manifests/
- ^% `  {1 U. Q7 n0 B+ d% H+ w3 h# journalctl -xu kubelet -f
* v9 B6 v% d9 B% ~$ q# S: j5 k& P) V5 F' C9 {1 `
# ps -ef|grep etcd8 c- s- V( |- Z: Z: j1 ]& `9 _
# journalctl -xu kubelet -f|grep etcd
  f4 M' T* ?# B# k get po3 n6 B+ G7 j7 Z7 ]) A9 {2 E
# journalctl -xu kubelet -f|grep etcd) u' {" T; M% b3 `" E. z
# journalctl -xu kubelet -f
. l8 M' C; U, n5 X& i# journalctl -xu kubelet -f|grep etcd$ Y& F- O! J/ p& {  k) {
# ps -ef|grep etcd
( q# w* ~4 r, ^! h# ls+ |' V1 M3 e$ {5 Y, }
# cat manifests/etcd.yaml/ p9 M1 C: ^8 I; T  E0 H
' r# U. X/ f2 U0 x. ~- E
9 R% h/ z" N. W5 G- m1 }" y
$ b& v1 R5 P. ~: w: ~
# systemctl stop kubelet* H/ a6 o9 w  _* z
# ls, A. X, B: H) z) B
# rm -rf /data/etcd/member/
7 E, d, p, u$ ~+ m' h+ P# ls /data/etcd/0 ]8 n9 G2 D! F, i5 K. L1 n
# ls/ W; D$ _- j$ Z9 x% Q: N% Y
# systemctl status kubelet2 r, }4 {% G0 Y: u; y  t
# systemctl start kubelet
* Z  U# S$ n' l9 x" m# ETCDCTL_API=3 etcdctl --cacert=/etc/kubernetes/pki/etcd/ca.crt --cert=/etc/kubernetes/pki/etcd/peer.crt --key=/etc/kubernetes/pki/etcd/peer.key --endpoints=https://10.166.7.5:2379,https://10.166.7.6:2379,https://10.166.7.7:2379 endpoint status --write-out=table
) k0 R: V0 u/ F9 s& I. _. R# ps -ef|grep etcd) X2 V- d5 _- L/ m' H

2 n  s7 o3 i1 v' X2 \' G# ps -ef|grep etcd6 j" e( C2 k- L7 Y. Q7 \  G# Z
# ls /data/etcd/member/+ Z& m: A8 ?: h" ?, i% `7 x
# ls /data/etcd/member/snap/
  M( T: v+ b& A3 J1 ~# ls -lhS /data/etcd/member/snap/. R, |- q- q5 O( b
# ps -ef|grep etcd* y0 X8 c4 x0 t# e/ e0 R) u
  z6 U: o& W; V1 x$ o8 F, h% A; c
# cat /etc/hosts
1 H& W3 T; {/ M, D( V# vi /etc/hosts! q" I0 L$ Z8 T' U
# kk get po* W1 [2 d# x7 ?" V; S9 G; Y
# kk logs -f etcd-cmp-server02
* G# P0 j/ j; Q) G7 |: i# X( E) o5 T! K/ ^
# ls, q; e& |5 d, J& n# n2 c
# cd manifests/
. j* M; Q6 `  \0 S4 ~% _5 U# ls0 s. x, O! _0 f+ T
# mv etcd.yaml ../
1 c8 a2 U( j! |! ^# cd ../
( w' J1 C7 l- K* N; v5 _) f# ls
5 s$ j8 A8 ^- W6 z: J# ps -ef|grep etcd' x, z5 P8 \, r1 |+ Y! Y, p. x4 d
# ls1 s3 n( o! n' N6 ]
# mv etcd.yaml manifests/) O$ k0 Z3 z  g# c( w, \! U+ [: p7 v& L
# kk get po
7 H4 c, q" g% K- z2 H: V* ^: D# k get po. [4 r: V: M  d" q' J, x. [
# k get node
% P9 Q# o6 u" |. H* Y  q) y# kk get po
0 W% k1 A, a' U9 P# kk logs -f etcd-cmp-server02
$ c. J7 l3 u) n$ _7 V" b  y; h+ z
( k/ x: j) h6 Y8 {# cd manifests/* l  ^9 A4 \2 O
# ls
  c7 C' \6 t! U( c7 l# mv etcd.yaml ../5 K3 y4 Q' G6 b8 _# F# E2 e  P
# rm -rf /data/etcd/
  }6 q/ U$ L) p3 `' E# ls
. I1 Q9 `- ~0 r# cd ../
5 @7 }& I4 ^* O4 S' w# ls
) g, a3 f' r/ [8 ^# mv etcd.yaml manifests/& M( i& i. H: x/ z2 e
# kk get po
  Y& ?# F1 x3 {5 p4 P- t2 P# kk logs -f etcd-cmp-server02
6 w3 Z/ m" H: ]# kk get po+ ]9 G9 Q2 M8 V8 V+ \
# systemctl restart kubelet
1 p& E' F& }' X) g, U7 l  M# kk get po
( E( b: k! ?$ _# kk get po
- z& D" d3 j* U8 g- i0 R% F# cat /etc/hosts  X7 n  a) M( P) |$ A
# kk logs -f etcd-cmp-server02; g* h" s9 [8 ~3 W' k! n+ U# t
# kk logs -f etcd-cmp-server02+ t% R6 G# X% h2 e
# kk logs -f etcd-cmp-server02& h" `3 D% t9 O0 w9 g) }
# kk logs -f etcd-cmp-server022 N, \- j2 S+ j% e6 l, n
# ls
* g% o% d$ y9 q4 X! K" O, ]# cd manifests/
+ n; u9 u0 K! ^4 u7 V# ls
. B! R  [! n' [3 G. |6 j9 T5 r# vi etcd.yaml
" \' T1 Y& J9 q7 q. a/ ?  a# cat etcd.yaml
2 M& A1 b/ H' z2 C, G. f# vi etcd.yaml
" `) y( y$ J; \& t$ M4 |# ls
% ~+ F, ]7 v6 e; Y+ ~; ~# mv etcd.yaml ../7 x$ ?9 J# Z8 ?% G8 Y
# ls
) ~0 e; D7 W" i# cd ../
3 t" F. s) v) f0 A- _, y# ls
1 Y3 `/ Z! g0 o6 i4 l  \# mv etcd.yaml manifests/- M; e: V9 a9 X9 |8 V/ r
# ls8 x9 h: |& |& K& N' U
# kk get po
" k' G4 N4 }- y7 U7 q# kk get po
1 a  L" ~1 C4 d1 F7 D9 ~# kk get po
4 D5 p4 f' y9 F1 i1 Y0 t* ]# kk get po5 r1 O* |& F$ F. G) }( z. w7 }7 y
# kk get po7 B$ m# \# x; q9 U: o( s" j8 Q' o
# kk get po
7 W% X  y5 `, @# kk get po# ?& p7 g2 W6 J' x2 D1 [* f' V8 Q% i
# kk logs -f etcd-cmp-server024 k* }* n* J. }" R; I" ^2 Z
# ls' V! N* C+ J7 g4 [8 j
# mv manifests/etcd.yaml .8 l) U$ L; |% c- t
# rm -rf /data/etcd/
/ o8 ?# t' N, q# ls
: Q3 X4 q- K0 f# mv etcd.yaml manifests/6 `5 Q+ C' J& ^" t
# cd manifests/
8 o# r& |, f8 u; h) v$ n/ e$ ^# ls  Y' P$ `& @% K* _1 z
# s
9 M/ v, ~9 @5 b% W2 L5 E+ O# cd ../0 m% H1 U* f4 r$ Y) o# S" _
# ls
; F& S5 h5 d# y$ \# kk get po
6 O* q4 G6 h$ O4 t$ c9 E/ |
+ W$ P) B; N5 W7 Z0 u# kk get po* @; b) v0 y2 S
# kk get po
; L, Y& I) u$ I# P# kk get po
  \8 P) K3 u; Y$ m# kk logs -f etcd-cmp-server02
0 ~$ e4 l; M# |+ P% m' d$ f& g7 o# kk get po
( z, h% i/ v7 Q5 J0 n# kk get po6 U1 Y' ^3 z( q& ?9 Z7 q* }
# kk logs -f etcd-cmp-server02
1 k3 `7 `) k& {# ls
3 J6 p6 V' w, r# mv manifests/etcd.yaml .; K1 |* S* @2 S, d0 y- P# i
" h4 m8 R2 c. H/ E% p
# kk get po
: t9 t5 ~3 W- y, |0 J6 ]# ls
5 b" `" X% n8 b7 b- t# rm -rf /data/etcd/* r# j6 k7 K6 @' \
# ls& P" W0 G. S. J1 N) i
# mv etcd.yaml manifests/
8 p$ A. F  h  [! O0 d#
9 |1 @0 s. d1 J  x8 D% @) U: x. E# kk get po
- X5 o) u9 r" X& [/ i1 N# kk logs -f etcd-cmp-server023 x7 k- q2 _4 a/ M  d0 R" h7 S6 i
# ls3 H1 N6 F+ [' v2 ?" I2 n' }( Q
# kk get po
1 f* f1 A- k1 a3 ^" U# kk logs -f kube-apiserver-cmp-server02( z6 H$ Y" v* R  [' s, z

. R6 p+ n4 h! i# kk get po
* z( ?. y+ w$ C$ a9 z  o# kk logs -f etcd-cmp-server020 z7 q( Q. E% }" f1 S/ }
# ls4 v8 L1 z) J5 k' C2 U3 g
# cat manifests/etcd.yaml . |( v0 _; q( w; n+ N
# ls
; P" j9 P' Y. I: \; w; P# ls" X+ k  W0 l& ]& A5 }9 H: P$ i
# ls: g" R& J, ^$ d# ^
# ls
' t. f, g+ s  n4 f/ V9 P# ls& e! z2 T4 p% R& O
# ls
5 N: p# F8 o: ]. A3 L' v# ls/ b3 A+ t+ m! W5 q
# ls
/ S) O" q8 y. V. n# kk get po
6 T1 M7 d1 U; r& k# kk logs -f etcd-cmp-server02
; {2 m  z! Y0 ~# kk get po# l6 {! F! Z8 A
8 q! o$ A& ^' j" F9 ?
# kk get po2 D2 H+ {4 t+ G5 ~- ~" \5 u$ N
# kk logs -f etcd-cmp-server02/ _! G( Q( _# r& d" r7 ]
# kk logs -f etcd-cmp-server02
# f0 x5 Q4 n# d& d2 y# kk get po# Y: t- g5 E9 j/ A3 M; t
# k get po2 d$ S5 @: |' b% O) ?* O6 \. [
# kk get po3 N) i2 b& n" ?& ~
# ls
3 g5 F" u6 U/ U1 Y/ m- L# cd manifests/
. c4 ^. Y' r5 C+ d: @# ls$ T/ ^" r/ d/ B2 V8 I9 b) I
# kk get po% z7 L+ n! L( ~: A/ t. [: h0 N
# kk logs -f kube-apiserver-cmp-server02
2 c; ^! _/ |% Y0 G6 Z  `# kk get po  \* a% k) V& d  l: ]' S
# ls" W* d0 L# p8 b  Q
# mv kube-apiserver.yaml ../' i( O" t8 i3 L, s
# cd ../
9 u5 w) p2 Z3 U9 Y# mv kube-apiserver.yaml manifests/
0 b3 h5 O+ W: ]+ p5 A/ A6 }# kk get po
0 O4 M2 A( L- [4 m4 s: E$ |# kk get po, n) M9 J3 |# H. B
# kk logs -f kube-apiserver-cmp-server02
2 b  {; v) o. ?4 `& f- o% ^. ?# ps -ef|grep etcd
, L8 `: S- s% }, v" K9 E8 f# ss -tunlp|grep 2379" j' @. H1 x2 V
# kk logs -f kube-apiserver-cmp-server02; y# w! ^5 @; f7 I  ]
# kk get po
, r9 i0 I9 r+ h' x5 r! _+ i# kk get po -owide& q: S  Q0 f2 t5 r: S
# s1 v4 Y! I7 b3 ]( G- E' F
# kk get po
) v7 i/ O9 x& P% q% `# ETCDCTL_API=3 etcdctl --cacert=/etc/kubernetes/pki/etcd/ca.crt --cert=/etc/kubernetes/pki/etcd/peer.crt --key=/etc/kubernetes/pki/etcd/peer.key --endpoints=https://10.166.7.5:2379,https://10.166.7.6:2379,https://10.166.7.7:2379 endpoint status --write-out=table
/ h# W; V2 ]# t. C9 k/ n  `/ L# kk get po6 r7 J1 Y6 ]8 R- _; _) j% A: i
# kk get po! j$ ?# S! v/ N: k
# kk get po
/ b8 R) Y! _1 k8 a' {# kk logs -f kube-apiserver-cmp-server02
; T6 v' o/ ]! j+ X( O# tennet 127.0.0.1:2379' x" p" o- b' i! }9 l, r

9 I& d( k- J" o& L; i# h7 T  v# ls5 E# s# E# i  W8 \
# cd manifests/& W2 h( }! W, q' I0 {# ], T) l" h3 X  V% n
# ls
/ f& r7 ]- m' o( T! H# cat kube-apiserver.yaml 1 T* ~9 t1 S, Q. }+ g9 |1 b
# kk get po3 |$ R$ {# J  u( u2 r
# kk get po# a$ R1 O  E% r4 N% [
, z4 q' c& z8 m9 E6 D6 z# t! {; t
# kk get po8 `( g  t* M7 m3 \- L
# df -h
9 A# L. Y2 A! I# l) M0 H( h# ls9 ?5 _# j5 a+ {
# cd /( p: V9 n7 I) z$ {
# cd 9 M8 a( ~$ f, ]/ s* O
# cd /home/devops/; m; K! _% w0 b
# ls' Z  ~- E% ~! X" [( [& U* ]
# cd
( m/ h0 I$ y8 b, X, |: f2 q# ls
' g, ~" X! p1 B5 E/ y# du -sh *! Y0 V. F6 `! |6 d) g! t
# cd /; a  t) d- ]; O* ^+ W
# du -sh *
! O7 n, D+ _- S  |$ k' x6 k1 G# cd data/& s4 v" g, B8 ?" u6 N7 O! R7 O
# ls
2 X5 o+ @$ J6 k: b# du -sh *
3 ~2 C$ u5 Z3 H! b, R# A8 G. O4 V
) U7 ?- v1 ]9 D( ^& m3 x+ ~- o; |# journalctl -xefu kubelet
7 S' l2 n& b; O: z7 _8 d# W# ;s
/ h* c( m+ M( Y0 Z* a1 F# /usr/local/bin/nerdctl -n k8s.io tag caas4/keystone-sync-db:latest 10.166.7.5:30443/caas/keystone-sync-db:latest, K0 U7 h! D+ V/ f
# /usr/local/bin/nerdctl -n k8s.io push 10.166.7.5:30443/caas/keystone-sync-db:latest
9 H) }% G8 H" H' Y# |5 {$ L# /usr/local/bin/nerdctl -n k8s.io login 10.166.7.5:30443
4 H' H+ C/ Y5 N& _: [; l0 }) m# /usr/local/bin/nerdctl -n k8s.io push 10.166.7.5:30443/caas/keystone-sync-db:latest2 F! b* X; C7 p( |% D/ z6 i
# /usr/local/bin/nerdctl -n k8s.io tag caas4/perception 10.166.7.5:30443/caas/perception:latest
- u9 O0 {, y, w$ g# /usr/local/bin/nerdctl -n k8s.io tag sameersbn/gitlab:13.10.3 10.166.7.5:30443/cmp/gitlab:13.10.3
- a, B0 m) o4 K3 _8 j#  /usr/local/bin/nerdctl -n k8s.io push 10.166.7.5:30443/cmp/gitlab:13.10.3
+ f4 y; M) ~0 B8 T# /usr/local/bin/nerdctl -n k8s.io tag sameersbn/postgresql:12-20200524 10.166.7.5:30443/cmp/postgresql:12-20200524! `8 J6 [8 M! o, h1 l0 @
# /usr/local/bin/nerdctl -n k8s.io tag cmp/redis:5.0.6  10.166.7.5:30443/cmp/redis:5.0.6
' o% p: I1 }- |1 l# /usr/local/bin/nerdctl -n k8s.io push 10.166.7.5:30443/cmp/redis:5.0.6% m7 }7 `% e- Z* d
# /usr/local/bin/nerdctl -n k8s.io tag busybox  10.166.7.5:30443/cmp/busybox:latest6 Z' M$ q; W: c/ `# _+ v) e9 ]
# /usr/local/bin/nerdctl -n k8s.io push 10.166.7.5:30443/cmp/busybox:latest" r: s1 P$ u; x
# kubectl get node --show-labels
  D- \. W. \' L& y! n+ v* D1 L/ w" w# journalctl -xefu kubelet
# C+ m0 l( q1 Z' I' _# journalctl -xefu kubelet
6 I/ D; X( N2 C  [  Q  s% S# journalctl -xefu kubelet6 u9 w5 X5 @* G; O2 U5 ?) O
# journalctl -xefu kubelet
- ~. D+ V" D2 Y) Q) p. i# kubeadm reset -f, v0 u8 J1 T6 }" L4 {4 x
# vi /etc/hosts
$ v) U# c/ N* e" S# G+ \" f  t# cat /etc/hosts4 c3 s" a9 }; C3 a" ?
# systemctl stop firewalld || true
& w+ o# F4 N! q" v9 z4 P# systemctl disable firewalld || true
2 H8 i+ ~# w- {! i+ I$ C# setenforce 0
, {" l( t: o8 z, C: m2 J# sed -i s/^SELINUX=.*$/SELINUX=disabled/ /etc/selinux/config
4 S& D+ C6 e5 G: B) V. r. e# modprobe br_netfilter && modprobe nf_conntrack3 N9 ]+ J$ I: Y* H
# cat > /etc/sysctl.d/98-k8s.conf << EOF2 p6 r5 a! S1 p
# net.netfilter.nf_conntrack_tcp_be_liberal = 1* v7 C9 s4 c2 A3 r* }
# net.netfilter.nf_conntrack_tcp_loose = 1
/ w; Y. A' q) e: k. a( f# net.netfilter.nf_conntrack_max = 5242887 C% z7 H# J' `! f' D! t& p5 W
# net.netfilter.nf_conntrack_buckets = 131072
; d" i2 L; Q, B4 l; `, X) J2 J# net.netfilter.nf_conntrack_tcp_timeout_established = 21600
# _0 z- m/ F4 ]7 ]: O# net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120  W3 L# Z; N% y8 i
# net.ipv4.neigh.default.gc_thresh1 = 1024
8 w5 h8 A5 `% u5 W& Z. ^# net.ipv4.neigh.default.gc_thresh2 = 2048
5 X/ z2 y2 R5 G$ X: ^& s# net.ipv4.neigh.default.gc_thresh3 = 40960 ?6 R5 n1 {3 o' I. y" r7 w
# vm.max_map_count = 2621444 H. w* _- W; h$ M2 i! F$ T" V
# net.ipv4.ip_forward = 1, D* u& ~- Z, _8 }# ?% ?" B5 S3 Z
# net.ipv4.tcp_timestamps = 1  u* \0 u. @- S$ ~* h
# net.bridge.bridge-nf-call-ip6tables = 1
0 n. g: R6 V$ w" |9 L& T1 g# net.bridge.bridge-nf-call-iptables = 13 n  u5 Y! n9 g
# net.ipv6.conf.all.forwarding=1( |/ u8 Y6 g) `  e" ]
# fs.file-max=1048576* k. L  z( C3 b6 J( H8 g
# fs.inotify.max_user_instances = 8192
1 |" L3 A; A& w( z# fs.inotify.max_user_watches = 524288
* K* ]" c  D6 U# EOF
% D* O% _2 y9 t0 A4 A0 j; o5 `) \6 \$ R0 O
# cat > /etc/security/limits.d/98-k8s.conf << EOF' E$ I8 W6 `: t  j; d# `
# * soft nproc 65535
" F5 A- a3 z" O/ }3 {  P# * hard nproc 65535
6 S5 v* q% X# ]5 ^! f( r7 Y& a# * soft nofile 65535* T+ J: s' @- j) d3 v& d
# * hard nofile 65535+ |! `; r4 H% p+ f- ^% r6 Q
# EOF
; V3 d" V  d5 y# q- Q
+ n% C( i7 h0 ~# sysctl --system; W. t; f* n& _! d
# sysctl -p
) C% e4 M, e. Q2 a# swapoff -a
# V& i' O6 `' w% L2 z. S' B6 s# sed -i /swap/d /etc/fstab% M' [1 u! d) O5 V" i  f
# kubeadm join apiserver.cluster.local:6443 --token 25omv5.cqx4gnuhoyh7nwxy --discovery-token-ca-cert-hash sha256:eaf7ee645c5cc0af1782df11c38519b84d643f06d9c6613009047e9b2e275524 / |% I3 e  K( `$ g
# kubeadm reset -f
3 d" @, Y( O4 c2 L3 ~# kubeadm reset -f0 o, s3 v4 w/ k) f
# kubeadm join apiserver.cluster.local:6443 --token 25omv5.cqx4gnuhoyh7nwxy --discovery-token-ca-cert-hash sha256:eaf7ee645c5cc0af1782df11c38519b84d643f06d9c6613009047e9b2e275524 ) {: Q* l' e$ v3 @, O
# /usr/local/bin/nerdctl -n k8s.io images
; M4 h- T7 r. W. d3 g  M9 ^# G# /usr/local/bin/nerdctl -n k8s.io tag rancher/local-path-provisioner:v0.0.24  10.166.7.5:30443/cmp/local-path-provisioner:v0.0.24
( T1 ]! l7 [) _9 b5 P! Y# /usr/local/bin/nerdctl -n k8s.io push  10.166.7.5:30443/cmp/local-path-provisioner:v0.0.24
2 J7 W; ]3 n% L: w4 r8 N
/ @' X6 g! _7 H7 U! B9 i! Y( V' A# ~3 |9 E6 p
# cd local-path-provisioner/
- ?5 w& c7 C. B8 v" H# ls
# I% b+ D. ^5 {- d. v/ `1 U# du -sh *, `, ^0 }( b  _* p
# cd pvc-cedd6757-22af-46a3-a863-cdc4a02af016_caas-system_minio/9 K0 d' r1 Q$ f8 _
# du -sh *+ x0 Z$ e1 r  \1 e% ?( Q
# cd mgmt/; G6 [8 R3 `" ^/ W* T" M6 v5 D
# ls
5 N5 V6 N6 I! P+ i# cat /etc/kubernetes/kubelet.conf
$ T& b) O4 `! y& h# cat /etc/kubernetes/kubelet.conf6 {; ^% f% i+ ^
# cat /etc/kubernetes/controller-manager.conf3 X2 l' |/ z( o1 A9 A3 v. H
# cat /etc/kubernetes/kubelet.conf
  @% U4 |  }+ K8 ~) o  `3 i6 ]9 H2 l9 Q) \8 S$ j2 n" x

# M6 q2 i' M/ J- A$ G2 k' |# cat /etc/kubernetes/kubelet.conf 0 A& z/ a' P! y/ \0 b6 }% z
# cat /var/lib/kubelet/config.yaml " Y& Y- Y- @( \4 M

# c2 S! e: L2 R4 ?, u2 c2 m
回复

举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 注册

本版积分规则

返回首页|Archiver|手机版|小黑屋|易陆发现技术论坛 ( 蜀ICP备2026014127号-1 )

GMT+8, 2026-6-12 01:29 , Processed in 0.021028 second(s), 21 queries .

Powered by Discuz! X5.0

© 2001-2026 Discuz! Team.

快速回复 返回顶部 返回列表