官网地址：https://kubernetes.io/zh-cn/docs/setup/production-environment/tools/kubeadm/install-kubeadm/

安装环境

ubunt24.04（pve/4C/4G/32G）

1、关闭swap分区

1、查看当前swap状态

可以使用 swapon --show或 free -h命令查看当前swap分区的状态

swapon --show
free -h

2、关闭swap分区

临时关闭

sudo swapoff -a

永久关闭

vim /etc/fstab #编辑fstab

添加#注释掉swap行

#/swap.img       none    swap    sw      0       0

如果出现`bash: vim: command not found`，执行`sudo apt install vim`安装vim

开启br_netfilter和bridge-nf-call-iptables

# 设置加载br_netfilter模块
cat <<EOF | sudo tee /etc/modules-load.d/k8s.conf
overlay
br_netfilter
EOF

sudo modprobe overlay
sudo modprobe br_netfilter

# 开启bridge-nf-call-iptables ，设置所需的 sysctl 参数，参数在重新启动后保持不变
cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-iptables  = 1
net.bridge.bridge-nf-call-ip6tables = 1
net.ipv4.ip_forward                 = 1
EOF

# 应用 sysctl 参数而不重新启动
sudo sysctl --system

启用 IPv4 数据包转发

手动启用 IPv4 数据包转发：

# 设置所需的 sysctl 参数，参数在重新启动后保持不变
cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
net.ipv4.ip_forward = 1
EOF

# 应用 sysctl 参数而不重新启动
sudo sysctl --system

使用以下命令验证 net.ipv4.ip_forward 是否设置为 1：

sysctl net.ipv4.ip_forward

2、安装容器运行时

此处使用containerd，https://kubernetes.io/zh-cn/docs/setup/production-environment/container-runtimes/

1、尝试卸载docker

for pkg in docker.io docker-doc docker-compose docker-compose-v2 podman-docker containerd runc; do sudo apt-get remove $pkg; done

2、设置 Docker`apt`存储库

# Add Docker's official GPG key:
sudo apt-get update
sudo apt-get install ca-certificates curl
sudo install -m 0755 -d /etc/apt/keyrings
sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
sudo chmod a+r /etc/apt/keyrings/docker.asc

# Add the repository to Apt sources:
echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu \
  $(. /etc/os-release && echo "${UBUNTU_CODENAME:-$VERSION_CODENAME}") stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
sudo apt-get update

3、安装containerd

sudo apt install containerd.io

使用以下命令验证 containerd运行状态：

sudo systemctl status containerd

4、生成containerd默认配置

sudo containerd config default > /etc/containerd/config.toml

5、更新配置

编辑config.toml文件

vim /etc/containerd/config.toml

修改以下内容

sandbox_image = "registry.k8s.io/pause:3.8" 
----
SystemdCgroup = false
----
[plugins."io.containerd.grpc.v1.cri".registry]
    config_path = "/etc/containerd/certs.d"

sandbox_image = "registry.aliyuncs.com/google_containers/pause:3.10" #阿里云镜像
----
SystemdCgroup = true    #使用systemd来管理 cgroup
----
----
[plugins."io.containerd.grpc.v1.cri".registry]#找到这一行,如果没有config_path添加一个
    config_path = "/etc/containerd/certs.d" #配置镜像加速

mkdir -p /etc/containerd/certs.d/docker.io

cat > /etc/containerd/certs.d/docker.io/hosts.toml << EOF
server = "https://docker.io"
[host."https://dockerproxy.com"]
  capabilities = ["pull", "resolve"]
 
[host."https://docker.m.daocloud.io"]
  capabilities = ["pull", "resolve"]
 
[host.""https://registry.docker-cn.com""]
  capabilities = ["pull", "resolve"]
 
[host."https://registry.docker-cn.com"]
  capabilities = ["pull", "resolve"]
 
[host."http://hub-mirror.c.163.com"]
  capabilities = ["pull", "resolve"]
EOF

更新并重启系统服务

sudo systemctl daemon-reload
sudo systemctl restart containerd

6、安装 kubeadm、kubelet 和 kubectl

更新 apt 包索引并安装使用 Kubernetes apt 仓库所需要的包：

sudo apt-get update
# apt-transport-https 可能是一个虚拟包（dummy package）；如果是的话，你可以跳过安装这个包
sudo apt-get install -y apt-transport-https ca-certificates curl gpg

下载用于 Kubernetes 软件包仓库的公共签名密钥。所有仓库都使用相同的签名密钥，因此你可以忽略URL中的版本：

# 如果 `/etc/apt/keyrings` 目录不存在，则应在 curl 命令之前创建它，请阅读下面的注释。
# sudo mkdir -p -m 755 /etc/apt/keyrings
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg

说明：

在低于 Debian 12 和 Ubuntu 22.04 的发行版本中，/etc/apt/keyrings 默认不存在。应在 curl 命令之前创建它。

添加 Kubernetes apt 仓库。请注意，此仓库仅包含适用于 Kubernetes 1.32 的软件包；对于其他 Kubernetes 次要版本，则需要更改 URL 中的 Kubernetes 次要版本以匹配你所需的次要版本（你还应该检查正在阅读的安装文档是否为你计划安装的 Kubernetes 版本的文档）。
```
# 此操作会覆盖 /etc/apt/sources.list.d/kubernetes.list 中现存的所有配置。
echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.32/deb/ /' | sudo tee /etc/apt/sources.list.d/kubernetes.list
```

更新 apt 包索引，安装 kubelet、kubeadm 和 kubectl，并锁定其版本：

sudo apt-get update
sudo apt-get install -y kubelet kubeadm kubectl
sudo apt-mark hold kubelet kubeadm kubectl

init配置示例

在master节点生成默认配置，并修改配置参数。

kubeadm config print init-defaults > kubeadm-config.yaml

查看生成的文件内容如下

apiVersion: kubeadm.k8s.io/v1beta4
bootstrapTokens:
- groups:
  - system:bootstrappers:kubeadm:default-node-token
  token: abcdef.0123456789abcdef
  ttl: 24h0m0s
  usages:
  - signing
  - authentication
kind: InitConfiguration
localAPIEndpoint:
  advertiseAddress: 1.2.3.4
  bindPort: 6443
nodeRegistration:
  criSocket: unix:///var/run/containerd/containerd.sock
  imagePullPolicy: IfNotPresent
  imagePullSerial: true
  name: node
  taints: null
timeouts:
  controlPlaneComponentHealthCheck: 4m0s
  discovery: 5m0s
  etcdAPICall: 2m0s
  kubeletHealthCheck: 4m0s
  kubernetesAPICall: 1m0s
  tlsBootstrap: 5m0s
  upgradeManifests: 5m0s
---
apiServer: {}
apiVersion: kubeadm.k8s.io/v1beta4
caCertificateValidityPeriod: 87600h0m0s
certificateValidityPeriod: 8760h0m0s
certificatesDir: /etc/kubernetes/pki
clusterName: kubernetes
controllerManager: {}
dns: {}
encryptionAlgorithm: RSA-2048
etcd:
  local:
    dataDir: /var/lib/etcd
imageRepository: registry.k8s.io
kind: ClusterConfiguration
kubernetesVersion: 1.32.0
networking:
  dnsDomain: cluster.local
  serviceSubnet: 10.96.0.0/12
proxy: {}
scheduler: {}
root@k8s-master:~# vim kubeadm-config.yaml 
root@k8s-master:~# cat kubeadm-config.yaml 
apiVersion: kubeadm.k8s.io/v1beta4
bootstrapTokens:
- groups:
  - system:bootstrappers:kubeadm:default-node-token
  token: abcdef.0123456789abcdef
  ttl: 24h0m0s
  usages:
  - signing
  - authentication
kind: InitConfiguration
localAPIEndpoint:
  advertiseAddress: 1.2.3.4
  bindPort: 6443
nodeRegistration:
  criSocket: unix:///var/run/containerd/containerd.sock
  imagePullPolicy: IfNotPresent
  imagePullSerial: true
  name: node
  taints: null
timeouts:
  controlPlaneComponentHealthCheck: 4m0s
  discovery: 5m0s
  etcdAPICall: 2m0s
  kubeletHealthCheck: 4m0s
  kubernetesAPICall: 1m0s
  tlsBootstrap: 5m0s
  upgradeManifests: 5m0s
---
apiServer: {}
apiVersion: kubeadm.k8s.io/v1beta4
caCertificateValidityPeriod: 87600h0m0s
certificateValidityPeriod: 8760h0m0s
certificatesDir: /etc/kubernetes/pki
clusterName: kubernetes
controllerManager: {}
dns: {}
encryptionAlgorithm: RSA-2048
etcd:
  local:
    dataDir: /var/lib/etcd
imageRepository: registry.k8s.io
kind: ClusterConfiguration
kubernetesVersion: 1.32.0
networking:
  dnsDomain: cluster.local
  serviceSubnet: 10.96.0.0/12
proxy: {}
scheduler: {}

localAPIEndpoint:
  advertiseAddress: 1.2.3.4       #此处修改为对应ip
----
imageRepository: registry.k8s.io  #替换为阿里云镜像地址registry.aliyuncs.com/google_containers

localAPIEndpoint:
  advertiseAddress: 192.168.0.85 
----
imageRepository: registry.aliyuncs.com/google_containers

初始化master节点

kubeadm init --config ./kubeadm-config.yaml --upload-certs  --node-name k8s-master

成功时输出如下


Your Kubernetes control-plane has initialized successfully!

To start using your cluster, you need to run the following as a regular user:

  mkdir -p $HOME/.kube
  sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  sudo chown $(id -u):$(id -g) $HOME/.kube/config

Alternatively, if you are the root user, you can run:

  export KUBECONFIG=/etc/kubernetes/admin.conf

You should now deploy a pod network to the cluster.
Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
  https://kubernetes.io/docs/concepts/cluster-administration/addons/

Then you can join any number of worker nodes by running the following on each as root:

kubeadm join 192.168.0.85:6443 --token abcdef.0123456789abcdef \
        --discovery-token-ca-cert-hash sha256:70dbc21c2987670e26de80ef4d2eccb83d8cde4f5d851a003f16045323a19baf

vim /etc/kubernetes/manifests/kube-controller-manager.yaml
#添加
--allocate-node-cidrs=true    #启用控制器管理器自动为节点分配CIDR子网
--cluster-cidr=10.244.0.0/16  #定义整个集群的Pod网络CIDR范围

生成加入集群语句

    kubeadm token create --print-join-command

安装网络插件

## 如果安装之后node的状态都改为ready，即为成功
wget https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml
kubectl apply -f ./kube-flannel.yml
kubectl get nodes

xia

ubunt下使用kubeadm的kubernetes的安装

安装环境

1、关闭swap分区

1、查看当前swap状态

2、关闭swap分区

临时关闭

永久关闭

如果出现`bash: vim: command not found`，执行`sudo apt install vim`安装vim

开启br_netfilter和bridge-nf-call-iptables

启用 IPv4 数据包转发

2、安装容器运行时

此处使用containerd，https://kubernetes.io/zh-cn/docs/setup/production-environment/container-runtimes/

1、尝试卸载docker

2、设置 Docker`apt`存储库

3、安装containerd

4、生成containerd默认配置

5、更新配置

编辑config.toml文件

修改以下内容

更新并重启系统服务

6、安装 kubeadm、kubelet 和 kubectl

说明：

init配置示例

初始化master节点

生成加入集群语句

安装网络插件

xia

安装环境

1、关闭swap分区

1、查看当前swap状态

2、关闭swap分区

临时关闭

永久关闭

如果出现bash: vim: command not found，执行sudo apt install vim安装vim

开启br_netfilter和bridge-nf-call-iptables

启用 IPv4 数据包转发

2、安装容器运行时

此处使用containerd，https://kubernetes.io/zh-cn/docs/setup/production-environment/container-runtimes/

1、尝试卸载docker

2、设置 Dockerapt存储库

3、安装containerd

4、生成containerd默认配置

5、更新配置

编辑config.toml文件

修改以下内容

更新并重启系统服务

6、安装 kubeadm、kubelet 和 kubectl

说明：

init配置示例

初始化master节点

生成加入集群语句

安装网络插件

reugn/go-quartz

xia

如果出现`bash: vim: command not found`，执行`sudo apt install vim`安装vim

2、设置 Docker`apt`存储库