document/TranslateProject
2
0
Fork 0
mirror of https://github.com/LCTT/TranslateProject.git synced 2024-12-26 21:30:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

translated

Browse Source
This commit is contained in:
geekpi 2023-03-27 08:51:22 +08:00
parent 43f46d245d
commit 44b03f1e52
2 changed files with 321 additions and 284 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

284
sources/tech/20230313.3 ⭐️⭐️ How to Install Kubernetes Cluster Using Kubespray.md
View File

@ -1,284 +0,0 @@
[#]: subject: "How to Install Kubernetes Cluster Using Kubespray"
[#]: via: "https://www.linuxtechi.com/install-kubernetes-using-kubespray/"
[#]: author: "Pradeep Kumar https://www.linuxtechi.com/author/pradeep/"
[#]: collector: "lkxed"
[#]: translator: "geekpi"
[#]: reviewer: " "
[#]: publisher: " "
[#]: url: " "
How to Install Kubernetes Cluster Using Kubespray
======
Are you looking for an easy guide on how to install Kubernetes (k8s) using kubespray?
The step-by-step guide on this page will show you how to install Kubernetes Cluster using kubespray on linux systems.
Kubesprayis a free and open-source tool that provide ansible playbooks to deploy and manage Kubernetes clusters. It is designed to simplify the installation process of Kubernetes clusters across multiple nodes, allowing users to deploy and manage a production-ready Kubernetes cluster quickly and easily.
It supports a range of operating systems, including Ubuntu, CentOS, Rocky Linux and Red Hat Enterprise Linux, and it can deploy Kubernetes on a variety of platforms, including bare metal, public cloud, and private cloud.
In this guide, we are using the following lab,
- Ansible Node (Kubespray Node): Minimal installed Ubuntu 22.04 LTS (192.168.1.240)
- 3 Controller Nodes: Minimal Installed Rocky Linux 9 (192.168.1.241/242/243)
- 2 Worker Nodes: Minimal Installed Rocky Linux 9 (192.168.1.244/245)
##### Minimum system requirements for kubespray
- Master Nodes: 1500 MB RAM, 2 CPU and 20 GB free disk space
- Worker Nodes: 1024 MB, 2 CPU, 20 GB free disk space
- Ansible Node: 1024 MB, 1CPU and 20 GB disk space
- Internet connectivity on each node
- Regular with sudo admin rights
Without any further delay, let’s deep dive into the installation steps,
### Step 1) Configure Kubespray Node
Login to your Ubuntu 22.04 system and install ansible. Run the following set of commands,
```
$ sudo apt update
$ sudo apt install git python3 python3-pip -y
$ git clone https://github.com/kubernetes-incubator/kubespray.git
$ cd kubespray
$ pip install -r requirements.txt
```
Verify the ansible version, run
```
$ ansible --version
```
Create the hosts inventory, run below commands and don’t forget to replace IP address that suits to your deployment.
```
$ cp -rfp inventory/sample inventory/mycluster
$ declare -a IPS=(192.168.1.241 192.168.1.241 192.168.1.242 192.168.1.243 192.168.1.244 192.168.1.245)
$ CONFIG_FILE=inventory/mycluster/hosts.yaml python3 contrib/inventory_builder/inventory.py ${IPS[@]}
```
Modify the inventory file, set 3 control nodes and 2 worker nodes
```
$ vi inventory/mycluster/hosts.yaml
```
Save and close the file
Review and modify the following parameters in file “inventory/mycluster/group_vars/k8s_cluster/k8s-cluster.yml”.
```
kube_version: v1.26.2
kube_network_plugin: calico
kube_pods_subnet: 10.233.64.0/18
kube_service_addresses: 10.233.0.0/18
cluster_name: linuxtechi.local
```
To enable addons like kuberenetes dashboard and ingress controller, set the parameters as enabled in the file “inventory/mycluster/group_vars/k8s_cluster/addons.yml”
```
$ vi inventory/mycluster/group_vars/k8s_cluster/addons.yml
-----------
dashboard_enabled: true
ingress_nginx_enabled: true
ingress_nginx_host_network: true
-----------
```
save and exit the file.
### Step 2) Copy SSH-keys from ansible node to all other nodes
First generate the ssh-keys for your local user on your ansible node,
```
$ ssh-keygen
```
Copy the ssh-keys using ssh-copy-id command,
```
$ ssh-copy-id [email protected]
$ ssh-copy-id [email protected]
$ ssh-copy-id [email protected]
$ ssh-copy-id [email protected]
$ ssh-copy-id [email protected]
```
Also Read: How to Setup Passwordless SSH Login in Linux with Keys
Also run the following command on each node.
```
$ echo "sysops ALL=(ALL) NOPASSWD:ALL" | sudo tee /etc/sudoers.d/sysops
```
### Step 3) Disable Firewall and Enable IPV4 forwarding
To disable firewall on all the nodes, run following ansible command from ansible node,
```
$ cd kubespray
$ ansible all -i inventory/mycluster/hosts.yaml -m shell -a "sudo systemctl stop firewalld && sudo systemctl disable firewalld"
```
Run following ansible commands to enable IPv4 forwarding and disable swap on all the nodes,
```
$ ansible all -i inventory/mycluster/hosts.yaml -m shell -a "echo 'net.ipv4.ip_forward=1' | sudo tee -a /etc/sysctl.conf"
$ ansible all -i inventory/mycluster/hosts.yaml -m shell -a "sudo sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab && sudo swapoff -a"
```
### Step 4) Start Kubernetes deployment
Now, we are all set to start Kubernetes cluster deployment, run following ansible playbook from ansible node,
```
$ cd kubespray
$ ansible-playbook -i inventory/mycluster/hosts.yaml --become --become-user=root cluster.yml
```
Now monitor the deployment, it may take 20 to 30 minutes depending on internet speed and hardware resources.
Once the deployment is completed, we will get following output on our screen,
Great, above output confirms that deployment is completed successfully.
### Step 5) Access Kubernetes cluster
Login to first master node, switch to root user, run kubectl commands from there,
```
$ sudo su -
# kubectl get nodes
# kubectl get pods -A
```
Output,
Perfect, output above confirms that all the nodes in the cluster are in ready state and Pods of all the namespace are up and running. This shows that our Kubernetes cluster is deployed successfully.
Let’s try to deploy nginx based deployment and expose it as nodeport, run the following kubectl commands
```
$ kubectl create deployment demo-nginx-kubespray --image=nginx --replicas=2
$ kubectl expose deployment demo-nginx-kubespray --type NodePort --port=80
$ kubectl get  deployments.apps
$ kubectl get pods
$ kubectl get svc demo-nginx-kubespray
```
Output of above commands,
Now try accessing this nginx application using worker’s IP address and node port (30050)
Either use below curl command or web browser to access this application.
```
$ curl 192.168.1.245:30050
```
Or
Perfect, this confirms that application is accessible outside of our cluster.
### Step 6) Kubernetes Dashboard (GUI)
To access the Kubernetes dashboard, let’s first service account and assign admin privileges so that it can access dashboard using token.
Create service account with name ‘admin-user’ in kube-system namespace.
```
$ vi dashboard-adminuser.yml
apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin-user
  namespace: kube-system
```
save and close the file.
```
$ kubectl apply -f dashboard-adminuser.yml
serviceaccount/admin-user created
$
```
Create a cluster role binding,
```
$ vi admin-role-binding.yml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admin-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: admin-user
  namespace: kube-system
```
save and exit the file.
```
$ kubectl apply -f admin-role-binding.yml
clusterrolebinding.rbac.authorization.k8s.io/admin-user created
$
```
Now, create the token for admin-user,
```
$ kubectl -n kube-system  create token admin-user
```
Copy this token and place it somewhere safe because we will use token to login Kubernetes dashboard.
Connect to first master node from your system using following ssh command
```
$ ssh -L8001:localhost:8001 [email protected]
```
Note : Replace IP address that suits to your env.
After login, switch to root user and run ‘kubectl proxy‘ command,
```
$ sudo su -
# kubectl proxy
Starting to serve on 127.0.0.1:8001
```
Open the web browser of your system, set the proxy settings as shown below,
Once you are done with proxy settings, paste the following url in browser,
http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/#/login
Select the login mechanism as Token and paste the token that you have generated above for admin-user and then click on ‘Sign in’
That’s all from this guide, I hope you found it informative. Kindly do post your queries and feedback in below comments section.
--------------------------------------------------------------------------------
via: https://www.linuxtechi.com/install-kubernetes-using-kubespray/
作者：[Pradeep Kumar][a]
选题：[lkxed][b]
译者：[译者ID](https://github.com/译者ID)
校对：[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
[a]: https://www.linuxtechi.com/author/pradeep/
[b]: https://github.com/lkxed/

321
translated/tech/20230313.3 ⭐️⭐️ How to Install Kubernetes Cluster Using Kubespray.md Normal file
View File

@ -0,0 +1,321 @@
[#]: subject: "How to Install Kubernetes Cluster Using Kubespray"
[#]: via: "https://www.linuxtechi.com/install-kubernetes-using-kubespray/"
[#]: author: "Pradeep Kumar https://www.linuxtechi.com/author/pradeep/"
[#]: collector: "lkxed"
[#]: translator: "geekpi"
[#]: reviewer: " "
[#]: publisher: " "
[#]: url: " "
如何使用 Kubespray 安装 Kubernetes 集群
======
你是否正在寻找有关如何使用 kubespray 安装 Kubernetes (k8s) 的简单指南？
此页面上的分步指南将向你展示如何在 Linux 系统上使用 kubespray 安装 Kubernetes 集群。
Kubespray 是一个免费的开源工具，它提供了 ansible playbook 来部署和管理 Kubernetes 集群。它旨在简化跨多个节点的 Kubernetes 集群的安装过程，允许用户快速轻松地部署和管理生产就绪的 Kubernetes 集群。
它支持一系列操作系统，包括 Ubuntu、CentOS、Rocky Linux 和 Red Hat Enterprise Linux，它可以在各种平台上部署 Kubernetes，包括裸机、公共云和私有云。
在本指南中，我们使用以下实验室：
- Ansible 节点（Kubespray 节点）：最小安装的 Ubuntu 22.04 LTS (192.168.1.240)
- 3 个控制器节点：最小安装的 Rocky Linux 9 (192.168.1.241/242/243)
- 2 个工作节点：最小安装的 Rocky Linux 9 (192.168.1.244/245)
##### kubespray 的最低系统要求
- 主节点：1500 MB RAM、2 个 CPU 和 20 GB 可用磁盘空间
- 工作节点：1024 MB、2 个 CPU、20 GB 可用磁盘空间
- Ansible 节点：1024 MB、1 个 CPU 和 20 GB 磁盘空间
- 每个节点上的互联网连接
- 拥有 sudo 管理员权限
事不宜迟，让我们深入了解安装步骤。
### 步骤 1）配置 Kubespray 节点
登录到你的 Ubuntu 22.04 系统并安装 ansible。运行以下一组命令：
```
$ sudo apt update
$ sudo apt install git python3 python3-pip -y
$ git clone https://github.com/kubernetes-incubator/kubespray.git
$ cd kubespray
$ pip install -r requirements.txt
```
验证 ansible 版本，运行：
```
$ ansible --version
```
![][1]
创建主机清单，运行以下命令，不要忘记替换适合你部署的 IP 地址：
```
$ cp -rfp inventory/sample inventory/mycluster
$ declare -a IPS=(192.168.1.241 192.168.1.241 192.168.1.242 192.168.1.243 192.168.1.244 192.168.1.245)
$ CONFIG_FILE=inventory/mycluster/hosts.yaml python3 contrib/inventory_builder/inventory.py ${IPS[@]}
```
修改 inventory 文件，设置 3 个控制节点和 2 个工作节点：
```
$ vi inventory/mycluster/hosts.yaml
```
![][2]
保存并关闭文件。
查看并修改文件 “inventory/mycluster/group_vars/k8s_cluster/k8s-cluster.yml” 中的以下参数：
```
kube_version: v1.26.2
kube_network_plugin: calico
kube_pods_subnet: 10.233.64.0/18
kube_service_addresses: 10.233.0.0/18
cluster_name: linuxtechi.local
```
![][3]
要启用 kuberenetes 仪表板和入口控制器等插件，请在文件 “inventory/mycluster/group_vars/k8s_cluster/addons.yml” 中将参数设置为已启用：
```
$ vi inventory/mycluster/group_vars/k8s_cluster/addons.yml
-----------
dashboard_enabled: true
ingress_nginx_enabled: true
ingress_nginx_host_network: true
-----------
```
保存并退出文件。
### 步骤 2）将 SSH 密钥从 ansible 节点复制到所有其他节点
首先在你的 ansible 节点上为你的本地用户生成 ssh-keys：
```
$ ssh-keygen
```
使用 ssh-copy-id 命令复制 ssh-keys：
```
$ ssh-copy-id [email protected]
$ ssh-copy-id [email protected]
$ ssh-copy-id [email protected]
$ ssh-copy-id [email protected]
$ ssh-copy-id [email protected]
```
还要在每个节点上运行以下命令：
```
$ echo "sysops ALL=(ALL) NOPASSWD:ALL" | sudo tee /etc/sudoers.d/sysops
```
### 步骤 3) 禁用防火墙并启用 IPV4 转发
要在所有节点上禁用防火墙，请从 ansible 节点运行以下 ansible 命令:
```
$ cd kubespray
$ ansible all -i inventory/mycluster/hosts.yaml -m shell -a "sudo systemctl stop firewalld && sudo systemctl disable firewalld"
```
运行以下 ansible 命令以在所有节点上启用 IPv4 转发和禁用交换:
```
$ ansible all -i inventory/mycluster/hosts.yaml -m shell -a "echo 'net.ipv4.ip_forward=1' | sudo tee -a /etc/sysctl.conf"
$ ansible all -i inventory/mycluster/hosts.yaml -m shell -a "sudo sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab && sudo swapoff -a"
```
### 步骤 4）启动 Kubernetes 部署
现在，我们都准备好开始 Kubernetes 集群部署，从 ansible 节点运行下面的 ansible playbook：
```
$ cd kubespray
$ ansible-playbook -i inventory/mycluster/hosts.yaml --become --become-user=root cluster.yml
```
![][4]
现在监控部署，可能需要 20 到 30 分钟，具体取决于互联网速度和硬件资源。
部署完成后，我们将在屏幕上看到以下输出：
![][5]
很好，上面的输出确认部署已成功完成。
### 步骤 5）访问 Kubernetes 集群
登录到第一个主节点，切换到 root 用户，在那里运行 kubectl 命令：
```
$ sudo su -
# kubectl get nodes
# kubectl get pods -A
```
输出：
![][6]
完美，上面的输出确认集群中的所有节点都处于就绪状态，并且所有命名空间的 Pod 都已启动并正在运行。这表明我们的 Kubernetes 集群部署成功。
让我们尝试部署基于 nginx 的部署并将其公开为节点端口，运行以下 kubectl 命令：
```
$ kubectl create deployment demo-nginx-kubespray --image=nginx --replicas=2
$ kubectl expose deployment demo-nginx-kubespray --type NodePort --port=80
$ kubectl get deployments.apps
$ kubectl get pods
$ kubectl get svc demo-nginx-kubespray
```
以上命令的输出：
![][7]
现在尝试使用工作节点的 IP 地址和节点端口 (30050) 访问此 nginx 应用。
使用以下 curl 命令或 Web 浏览器访问此应用。
```
$ curl 192.168.1.245:30050
```
或者
![][8]
完美，这证实了应用可以在我们的集群之外访问。
### 步骤 6）Kubernetes 仪表板（GUI）
要访问 Kubernetes 仪表板，让我们首先创建服务帐户并分配管理员权限，以便它可以使用令牌访问仪表板。
在 kube-system 命名空间中创建名为 “admin-user” 的服务帐户：
```
$ vi dashboard-adminuser.yml
apiVersion: v1
kind: ServiceAccount
metadata:
name: admin-user
namespace: kube-system
```
保存并关闭文件。
```
$ kubectl apply -f dashboard-adminuser.yml
serviceaccount/admin-user created
$
```
创建集群角色绑定：
```
$ vi admin-role-binding.yml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: admin-user
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: admin-user
namespace: kube-system
```
保存并退出文件。
```
$ kubectl apply -f admin-role-binding.yml
clusterrolebinding.rbac.authorization.k8s.io/admin-user created
$
```
现在，为管理员用户创建令牌：
```
$ kubectl -n kube-system create token admin-user
```
![][9]
复制此令牌并将其放在安全的地方，因为我们将使用令牌登录 Kubernetes 仪表板。
使用以下 ssh 命令从你的系统连接到第一个主节点
```
$ ssh -L8001:localhost:8001 [email protected]
```
注意：替换适合你环境的 IP 地址。
登录后，切换到 root 用户并运行 “kubectl proxy” 命令：
```
$ sudo su -
# kubectl proxy
Starting to serve on 127.0.0.1:8001
```
![][10]
打开系统的网络浏览器，如下设置代理：
![][11]
完成代理设置后，将以下网址粘贴到浏览器中：
http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/#/login
![][12]
选择令牌登录并粘贴你在上面为管理员用户生成的令牌，然后单击“登录”。
![][13]
这就是本指南的全部内容，我希望你能从中找到有用的信息。请在下面的评论部分中发表你的疑问和反馈。
--------------------------------------------------------------------------------
via: https://www.linuxtechi.com/install-kubernetes-using-kubespray/
作者：[Pradeep Kumar][a]
选题：[lkxed][b]
译者：[译者ID](https://github.com/译者ID)
校对：[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
[a]: https://www.linuxtechi.com/author/pradeep/
[b]: https://github.com/lkxed/
[1]: https://www.linuxtechi.com/wp-content/uploads/2023/03/Ansible-Version-Kubespray-Ubuntu.png
[2]: https://www.linuxtechi.com/wp-content/uploads/2023/03/K8s-inventory-file-kubespray.png
[3]: https://www.linuxtechi.com/wp-content/uploads/2023/03/Edit-Cluster-yaml-kubespray.gif
[4]: https://www.linuxtechi.com/wp-content/uploads/2023/03/k8s-deployment-ansible-playbook-kubespray-1024x673.png?ezimgfmt=ng:webp/ngcb22
[5]: https://www.linuxtechi.com/wp-content/uploads/2023/03/Kubernetes-deployment-successfull-kubespray-1024x446.png?ezimgfmt=ng:webp/ngcb22
[6]: https://www.linuxtechi.com/wp-content/uploads/2023/03/Kubectl-Commands-k8s-kubespray-1024x856.png?ezimgfmt=ng:webp/ngcb22
[7]: https://www.linuxtechi.com/wp-content/uploads/2023/03/Demo-Nginx-Deployment-Kubespray-kubernetes.png
[8]: https://www.linuxtechi.com/wp-content/uploads/2023/03/Nginx-Default-Page-Kubespray-Demo-Application.png
[9]: https://www.linuxtechi.com/wp-content/uploads/2023/03/create-token-admin-user-k8s-dashboard.png
[10]: https://www.linuxtechi.com/wp-content/uploads/2023/03/Ssh-Tunneling-master-node-kubernetes.png
[11]: https://www.linuxtechi.com/wp-content/uploads/2023/03/Proxy-Settings-Kubenetes-Dashbaord-kubespray.png
[12]: https://www.linuxtechi.com/wp-content/uploads/2023/03/Kubernetes-Dashboard-Login-Page-KubeSpray.png
[13]: https://www.linuxtechi.com/wp-content/uploads/2023/03/Kubernetes-Dashboard-Home-Page-Kubespray.png