kubernetes1.8.4 安装指南 -- 9. calico

在master节点通过kubectl建立calico policy controller

calico-controller.yml

apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:name: calico-kube-controllers
roleRef:apiGroup: rbac.authorization.k8s.iokind: ClusterRolename: calico-kube-controllers
subjects:
- kind: ServiceAccountname: calico-kube-controllersnamespace: kube-system
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:name: calico-kube-controllersnamespace: kube-system
rules:- apiGroups:- ""- extensionsresources:- pods- namespaces- networkpoliciesverbs:- watch- list
---
apiVersion: v1
kind: ServiceAccount
metadata:name: calico-kube-controllersnamespace: kube-system
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:name: calico-policy-controllernamespace: kube-systemlabels:k8s-app: calico-policy
spec:strategy:type: Recreatetemplate:metadata:name: calico-policy-controllernamespace: kube-systemlabels:k8s-app: calico-policyspec:hostNetwork: trueserviceAccountName: calico-kube-controllerscontainers:- name: calico-policy-controllerimage: quay.io/calico/kube-controllers:v1.0.0env:- name: ETCD_ENDPOINTSvalue: "http://10.0.0.210:2379"volumeMounts:- mountPath: /etc/etcd/sslname: etcd-ca-certsreadOnly: truevolumes:- hostPath:path: /etc/etcd/ssltype: DirectoryOrCreatename: etcd-ca-certs

下载calicoctl

wget https://github.com/projectcalico/calicoctl/releases/download/v1.6.2/calicoctl -o /usr/local/bin/calicoctl

chmod +x /usr/local/bin/calicoctl

接下来的操作需要在所有节点进行。

wget https://github.com/projectcalico/cni-plugin/releases/download/v1.11.1/calico -o /opt/cni/bin

wget https://github.com/projectcalico/cni-plugin/releases/download/v1.11.1/calico-ipam -o /opt/cni/bin

chmod +x /opt/cni/bin/calico /opt/cni/bin/calico-ipam

mkdir -p /etc/cni/net.d

在/lib/systemd/system/下面建立文件calico-node.service

[Unit]
Description=calico node
After=docker.service
Requires=docker.service[Service]
User=root
PermissionsStartOnly=true
ExecStart=/usr/bin/docker run --net=host --privileged --name=calico-node \-e ETCD_ENDPOINTS=http://10.0.0.210:2379 \-e NODENAME=${HOSTNAME} \-e IP= \-e NO_DEFAULT_POOLS= \-e AS= \-e CALICO_LIBNETWORK_ENABLED=true \-e IP6= \-e CALICO_NETWORKING_BACKEND=bird \-e FELIX_DEFAULTENDPOINTTOHOSTACTION=ACCEPT \-e FELIX_HEALTHENABLED=true \-e CALICO_IPV4POOL_CIDR=10.244.0.0/16 \-e CALICO_IPV4POOL_IPIP=always \-e IP_AUTODETECTION_METHOD=interface=eth0 \-e IP6_AUTODETECTION_METHOD=interface=eth0 \-v /etc/etcd/ssl:/etc/etcd/ssl \-v /var/run/calico:/var/run/calico \-v /lib/modules:/lib/modules \-v /run/docker/plugins:/run/docker/plugins \-v /var/run/docker.sock:/var/run/docker.sock \-v /var/log/calico:/var/log/calico \quay.io/calico/node:v2.6.3
ExecStop=/usr/bin/docker rm -f calico-node
Restart=on-failure
RestartSec=10[Install]
WantedBy=multi-user.target

在/etc/cni/net.d下面建立文件10-calico.conf

{"name": "calico-k8s-network","cniVersion": "0.1.0","type": "calico","etcd_endpoints": "http://10.0.0.210:2379","log_level": "info","ipam": {"type": "calico-ipam"},"policy": {"type": "k8s"},"kubernetes": {"kubeconfig": "/etc/kubernetes/kubelet.conf"}
}

在所有节点启动calico

systemctl enable calico-node

systemctl start calico-node

在master节点查看calico nodes

在用户主目录创建文件calico-rc

source ~/calico-rc

kubernetes1.8.4 安装指南 -- 9. calico相关推荐

kubernetes1.8.4 安装指南 (基于静态Pod方式安装)
目录 1. 环境说明 http://blog.csdn.net/chenhaifeng2016/article/details/78752726 2. ssh免密登录 http://blog.csdn ...
kubernetes1.8.4 安装指南 -- 11. 安装kubernetes dashboard
接下来安装WebUI Dashboard dashboard的版本兼容性所以接下来安装的是1.8.0版本. 参照文档https://github.com/kubernetes/dashboard/w ...
kubernetes1.8.4 安装指南 -- 10. 测试nginx服务
创建一个简单的nginx服务 kubectl run nginx --image=nginx --port=80 kubectl expose deploy nginx --port=80 --typ ...
kubernetes1.8.4 安装指南 -- 8. 安装Kube DNS
在master节点的/etc/kubernetes/addons/下面建立文件kube-dns.yml apiVersion: v1 kind: ServiceAccount metadata:nam ...
kubernetes1.8.4 安装指南 -- 7. kubernetes node安装
本文开始部署kubernetes node. 在所有node服务器创建目录. mkdir -p /etc/kubernetes/pki 拷贝master节点的ca-key.pem, ca.pem到/e ...
kubernetes1.8.4 安装指南 -- 6. 安装kubernetes master
接下来安装kubernetes master的3个核心组件,分别是apiserver, controller-manager, scheduler. mkdir -p /etc/kubernetes/ ...
kubernetes1.8.4安装指南 -- 5. 证书生成
下载cfssl工具 cd /usr/local/src/ wget https://pkg.cfssl.org/R1.2/cfssl_linux-amd64 -o cfssl wget https:/ ...
kubernetes1.8.4安装指南 -- 3. 安装docker ce
由于采用的是基于静态pod的安装方式,所以需要在所有节点安装docker包括master节点. 安装docker-ce 17.09 yum install yum-utils device-mappe ...
kubernetes1.8.4安装指南 -- 2. ssh免密登录
实现kubernetes master到node的免密登录,以下操作只需要在master运行. 生成密钥对 ssh-keygen 复制ssh公钥到远程主机,这样ssh到远程主机的时候不需要输入密码 s ...

kubernetes1.8.4 安装指南 -- 9. calico

kubernetes1.8.4 安装指南 -- 9. calico相关推荐

最新文章

热门文章