devbox
思考机器2
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

超详细~使用shell脚本完成用kubeadm工具对k8s集群的搭建_shell脚本安装k8s

作者：思考机器2 | 2024-01-17 09:30:20

赞

踩

shell脚本安装k8s

目录

1.环境规划

2.my_ssh.sh脚本：

1.修改/etc/hosts文件部分：

2.生成本地ssh公钥部分：

3.复制ssh公钥部分：

4.复制本地的hosts文件部分：

5.完整脚本：

3.my_env.sh脚本：

1.尝试连接主机部分：

2.升级内核部分

3.关闭防火墙,禁止使用selinux部分：

4.配置chrony服务器部分：

5.禁用swap分区等部分：

6.完整脚本：

4.my_k8,.sh脚本：

1.尝试连接主机部分：

2.安装docker部分：

3.安装k8s组件部分：

4.准备集群镜像部分：

5.集群初始化部分：

6.安装网络插件：

7.完整脚本：

1.环境规划

本脚本使用一主多从的场景，脚本创建在manager节点，是对k8s集群的远程操作

节点IP地址操作系统配置
manager192.168.178.52centos7.91G1核
master192.168.178.102centos7.92G2核
node1192.168.178.152centos7.92G2核
node2192.168.178.202centos7.92G2核

2.my_ssh.sh脚本：

工作：完成域名的添加，公钥的创建，公钥的复制

脚本中的ssh_hosts和ssh_networkname数组的第一个元素是主服务器的IP地址或域名

1.修改/etc/hosts文件部分：

  1. address_hosts(){
  2. hosts_num=0
  3. for name in ${ssh_networkname[*]};do
  4. 	hosts_num=$(($hosts_num+`grep -c ''"${name}"'$' /etc/hosts`))
  5. done
  6. # 判断hosts文件中的域名行是否为ssh_hosts的长度
  7. if [ ${hosts_num} -eq ${#ssh_networkname[*]} ];then
  8. 	echo "/etc/hosts已经配置!"
  9. 	return
  10. fi
  11. echo "本地开始修改地址映射"
  12. cat << eof > /etc/hosts
  13. 127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
  14. ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
  15. eof
  16. for ((i=0;i<${#ssh_hosts[*]};i++));do
  17. 	sed -i '$a\'"${ssh_hosts[$i]}"' '"${ssh_networkname[$i]}"'' /etc/hosts
  18. done
  19. }
  20. address_hosts

2.生成本地ssh公钥部分：

  1. create_ssh_pub(){
  2. echo "生成本地ssh公钥"
  3. /usr/bin/expect << eof
  4. # 设置捕获字符串后，期待回复的超时时间
  5. set timeout 30
  6.  
  7. spawn ssh-keygen -t rsa -b 1024
  8.  
  9. ## 开始进连续捕获
  10. expect	{
  11.         ".ssh/id_rsa)"      { send "\n";  exp_continue }
  12.         "Overwrite (y/n)?"  { send "y\n"; exp_continue }
  13.         "no passphrase):"   { send "\n";  exp_continue }
  14.         "passphrase again:" { send "\n";  exp_continue }
  15. }
  16. eof
  17. }
  18. if [ ! -f /root/.ssh/id_rsa.pub ];then
  19. 	create_ssh_pub
  20. fi

3.复制ssh公钥部分：

  1. copy_ssh(){
  2. echo "复制公钥到对应的主机上"
  3. /usr/bin/expect << eof
  4. # 设置捕获字符串后，期待回复的超时时间
  5. set timeout 30
  6.  
  7. spawn ssh-copy-id -i /root/.ssh/id_rsa.pub $1@$2
  8.  
  9. ## 开始进连续捕获
  10. expect	{
  11.         "connecting (yes/no)?" { send "yes\n";  exp_continue }
  12.         "s password:"          { send "${ssh_passwd}\n"; exp_continue }
  13. }
  14. eof
  15. }
  16. for ((j=0;j<${#ssh_networkname[*]};j++));do
  17. 	timeout 5 ssh root@${ssh_networkname[$j]} "echo ${ssh_networkname[$j]}: 'This is success!'"
  18. 	if [ $? -ne 0 ];then
  19. 		echo "复制文件到: ${ssh_networkname[$j]}"
  20. 		copy_ssh root ${ssh_networkname[$j]} > /dev/null
  21. 	fi
  22. 	
  23. done

4.复制本地的hosts文件部分：

scp /etc/hosts root@${ssh_networkname[$j]}:/etc

5.完整脚本：

  1. #! /bin/bash
  2.  
  3. # 控制主机和被控主机的IP数组,第一个元素是控制主机的IP地址
  4. ssh_hosts=(192.168.178.101 192.168.178.151 192.168.178.201)
  5. # 控制主机和被控主机的IP数组,第一个元素是控制主机的域名地址
  6. ssh_networkname=(master node1 node2)
  7. ssh_passwd=110119
  8.  
  9. # 定义修改/etc/hosts文件的方法
  10. address_hosts(){
  11. hosts_num=0
  12. for name in ${ssh_networkname[*]};do
  13. 	hosts_num=$(($hosts_num+`grep -c ''"${name}"'$' /etc/hosts`))
  14. done
  15. # 判断hosts文件中的域名行是否为ssh_hosts的长度
  16. if [ ${hosts_num} -eq ${#ssh_networkname[*]} ];then
  17. 	echo "/etc/hosts已经配置!"
  18. 	return
  19. fi
  20. echo "本地开始修改地址映射"
  21. cat << eof > /etc/hosts
  22. 127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
  23. ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
  24. eof
  25. for ((i=0;i<${#ssh_hosts[*]};i++));do
  26. 	sed -i '$a\'"${ssh_hosts[$i]}"' '"${ssh_networkname[$i]}"'' /etc/hosts
  27. done
  28. }
  29. address_hosts
  30.  
  31. expect -v &> /dev/null
  32. if [ `echo $?` -ne 0 ];then
  33. 	echo "没有expect，安装expect命令"
  34. 	yum install -y expect
  35. fi 
  36.  
  37. create_ssh_pub(){
  38. echo "生成本地ssh公钥"
  39. /usr/bin/expect << eof
  40. # 设置捕获字符串后，期待回复的超时时间
  41. set timeout 30
  42.  
  43. spawn ssh-keygen -t rsa -b 1024
  44.  
  45. ## 开始进连续捕获
  46. expect	{
  47.         ".ssh/id_rsa)"      { send "\n";  exp_continue }
  48.         "Overwrite (y/n)?"  { send "y\n"; exp_continue }
  49.         "no passphrase):"   { send "\n";  exp_continue }
  50.         "passphrase again:" { send "\n";  exp_continue }
  51. }
  52. eof
  53. }
  54. if [ ! -f /root/.ssh/id_rsa.pub ];then
  55. 	create_ssh_pub
  56. fi
  57.  
  58.  
  59. # 定义复制ssh公钥方法
  60. copy_ssh(){
  61. echo "复制公钥到对应的主机上"
  62. /usr/bin/expect << eof
  63. # 设置捕获字符串后，期待回复的超时时间
  64. set timeout 30
  65.  
  66. spawn ssh-copy-id -i /root/.ssh/id_rsa.pub $1@$2
  67.  
  68. ## 开始进连续捕获
  69. expect	{
  70.         "connecting (yes/no)?" { send "yes\n";  exp_continue }
  71.         "s password:"          { send "${ssh_passwd}\n"; exp_continue }
  72. }
  73. eof
  74. }
  75. for ((j=0;j<${#ssh_networkname[*]};j++));do
  76. 	timeout 5 ssh root@${ssh_networkname[$j]} "echo ${ssh_networkname[$j]}: 'This is success!'"
  77. 	if [ $? -ne 0 ];then
  78. 		echo "复制文件到: ${ssh_networkname[$j]}"
  79. 		copy_ssh root ${ssh_networkname[$j]} > /dev/null
  80. 	fi
  81. 	scp /etc/hosts root@${ssh_networkname[$j]}:/etc
  82. done

3.my_env.sh脚本：

工作：完成k8s环境的初始化配置，最终重启主机

1.尝试连接主机部分：

  1. # 尝试连接主机
  2. for name in ${ssh_networkname[*]};do
  3. 	echo "${name} 尝试连接中"
  4. 	if [ "`ssh root@${name} 'pwd'`" != "/root" ];then
  5. 		echo "${name}连接失败"
  6. 		exit
  7. 	fi
  8. done

2.升级内核部分

  1. # 升级内核
  2. for name in ${ssh_networkname[*]};do
  3. 	echo "${name} 升级内核"
  4. 	ssh root@${name} "yum install -y wget &> /dev/null"
  5. 	ssh root@${name} "cd /etc/yum.repos.d && rm -rf *"
  6. 	ssh root@${name} "wget -O ~/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo &> /dev/null"
  7. 	ssh root@${name} "yum clean all &> /dev/null && yum makecache &> /dev/null"
  8. 	ssh root@${name} "yum upgrade -y &> /dev/null"
  9. done

3.关闭防火墙,禁止使用selinux部分：

  1. # 关闭防火墙,禁止使用selinux
  2. for name in ${ssh_networkname[*]};do
  3. 	echo "${name} 禁止防火墙,禁止使用selinux"
  4. 	ssh root@${name} "sed -i 's/SELINUX=.*/SELINUX=disabled/' /etc/selinux/config"
  5. 	ssh root@${name} "systemctl stop firewalld && systemctl disable firewalld &> /dev/null"
  6. 	ssh root@${name} "systemctl stop iptables &> /dev/null && systemctl disable iptables &> /dev/null"
  7. done

4.配置chrony服务器部分：

  1. # 节点开始配置chrony
  2. for name in ${ssh_networkname[*]};do
  3. 	echo "开始配置 ${name}"
  4. 	ssh root@${name} "systemctl restart chronyd"
  5. 	if [ $? -ne 0 ];then
  6. 		echo "${name} 安装chrony"
  7. 		ssh root@${name} "yum install -y chrony &> /dev/null && systemctl restart chronyd"
  8. 		if [ $? -ne 0 ];then
  9. 			echo "安装失败，请排错!"
  10. 		fi
  11. 	fi
  12. 	if [ ${name} == ${ssh_networkname[0]} ];then
  13. 		echo "${name}配置chrony"
  14. 		ssh root@${name} "sed -i '/^server/d' /etc/chrony.conf"
  15. 		ssh root@${name} "sed -i '2a\server ntp.aliyun.com iburst\' /etc/chrony.conf"
  16. 		ssh root@${name} "sed -i 's/#allow 192.168.0.0\/16/allow '"${allows_hosts}"'\/'"${allows_mask}"'/' /etc/chrony.conf"
  17. 		ssh root@${name} "sed -i 's/#local stratum 10/local stratum 10/' /etc/chrony.conf"
  18. 		sleep 2
  19. 		ssh root@${name} "systemctl restart chronyd && systemctl enable chronyd &> /dev/null"
  20. 		sleep 5
  21. 		ssh root@${name} "timedatectl set-ntp true && chronyc sources -v | sed -n '/^\^\*/p'"
  22. 	else
  23. 		echo "${name}配置chrony"
  24. 		ssh root@${name} "sed -i '/^server/d' /etc/chrony.conf;sed -i '2a\server '"${ssh_networkname[0]}"' iburst\' /etc/chrony.conf"
  25. 		ssh root@${name} "systemctl restart chronyd && systemctl enable chronyd &> /dev/null"
  26. 		sleep 5
  27. 		ssh root@${name} "timedatectl set-ntp true && chronyc sources -v | sed -n '/^\^\*/p'"
  28. 	fi
  29. done

5.禁用swap分区等部分：

  1. echo "开始禁用swap分区,修改linux的内核参数"
  2. for name in ${ssh_networkname[*]};do
  3. 	# 开始禁用swap分区
  4. 	ssh root@${name} "sed -i 's/\/dev\/mapper\/centos-swap/#\/dev\/mapper\/centos-swap/' /etc/fstab"
  5. 	
  6. 	# 修改linux的内核参数
  7. 	ssh root@${name} "cat <<eof > /etc/sysctl.d/kubernetes.conf 
  8. net.bridge.bridge-nf-call-ip6tables = 1
  9. net.bridge.bridge-nf-call-iptables = 1
  10. net.ipv4.ip_forward = 1
  11. eof"
  12. 	ssh root@${name} "sysctl -p && modprobe br_netfilter"
  13. done
  14. echo "开始配置ipvs功能"
  15. for name in ${ssh_networkname[*]};do
  16. 	#配置ipvs功能
  17. 	ssh root@${name} "yum install -y ipset ipvsadm &> /dev/null"
  18. 	ssh root@${name} "cat <<eof > /etc/sysconfig/modules/ipvs.modules
  19. #!/bin/bash
  20. modprobe -- ip_vs
  21. modprobe -- ip_vs_rr
  22. modprobe -- ip_vs_wrr
  23. modprobe -- ip_vs_sh
  24. modprobe -- nf_conntrack_ipv4
  25. eof"
  26. 	ssh root@${name} "chmod +x /etc/sysconfig/modules/ipvs.modules && /bin/bash /etc/sysconfig/modules/ipvs.modules"
  27. 	echo "${name} 重启主机"
  28. 	ssh root@${name} "reboot"
  29. done

6.完整脚本：

  1. #! /bin/bash
  2.  
  3. allows_hosts=192.168.178.0
  4. allows_mask=24
  5. ssh_manager=192.168.178.52
  6. ssh_networkname=(master node1 node2)
  7.  
  8. # 尝试连接主机
  9. for name in ${ssh_networkname[*]};do
  10. 	echo "${name} 尝试连接中"
  11. 	if [ "`ssh root@${name} 'pwd'`" != "/root" ];then
  12. 		echo "${name}连接失败"
  13. 		exit
  14. 	fi
  15. done
  16.  
  17. # 升级内核
  18. for name in ${ssh_networkname[*]};do
  19. 	echo "${name} 升级内核"
  20. 	ssh root@${name} "yum install -y wget &> /dev/null"
  21. 	ssh root@${name} "cd /etc/yum.repos.d && rm -rf *"
  22. 	ssh root@${name} "wget -O ~/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo &> /dev/null"
  23. 	ssh root@${name} "yum clean all &> /dev/null && yum makecache &> /dev/null"
  24. 	ssh root@${name} "yum upgrade -y &> /dev/null"
  25. done
  26. # 关闭防火墙,禁止使用selinux
  27. for name in ${ssh_networkname[*]};do
  28. 	echo "${name} 禁止防火墙,禁止使用selinux"
  29. 	ssh root@${name} "sed -i 's/SELINUX=.*/SELINUX=disabled/' /etc/selinux/config"
  30. 	ssh root@${name} "systemctl stop firewalld && systemctl disable firewalld &> /dev/null"
  31. 	ssh root@${name} "systemctl stop iptables &> /dev/null && systemctl disable iptables &> /dev/null"
  32. done
  33.  
  34. # 节点开始配置chrony
  35. for name in ${ssh_networkname[*]};do
  36. 	echo "开始配置 ${name}"
  37. 	ssh root@${name} "systemctl restart chronyd"
  38. 	if [ $? -ne 0 ];then
  39. 		echo "${name} 安装chrony"
  40. 		ssh root@${name} "yum install -y chrony &> /dev/null && systemctl restart chronyd"
  41. 		if [ $? -ne 0 ];then
  42. 			echo "安装失败，请排错!"
  43. 		fi
  44. 	fi
  45. 	if [ ${name} == ${ssh_networkname[0]} ];then
  46. 		echo "${name}配置chrony"
  47. 		ssh root@${name} "sed -i '/^server/d' /etc/chrony.conf"
  48. 		ssh root@${name} "sed -i '2a\server ntp.aliyun.com iburst\' /etc/chrony.conf"
  49. 		ssh root@${name} "sed -i 's/#allow 192.168.0.0\/16/allow '"${allows_hosts}"'\/'"${allows_mask}"'/' /etc/chrony.conf"
  50. 		ssh root@${name} "sed -i 's/#local stratum 10/local stratum 10/' /etc/chrony.conf"
  51. 		sleep 2
  52. 		ssh root@${name} "systemctl restart chronyd && systemctl enable chronyd &> /dev/null"
  53. 		sleep 5
  54. 		ssh root@${name} "timedatectl set-ntp true && chronyc sources -v | sed -n '/^\^\*/p'"
  55. 	else
  56. 		echo "${name}配置chrony"
  57. 		ssh root@${name} "sed -i '/^server/d' /etc/chrony.conf;sed -i '2a\server '"${ssh_networkname[0]}"' iburst\' /etc/chrony.conf"
  58. 		ssh root@${name} "systemctl restart chronyd && systemctl enable chronyd &> /dev/null"
  59. 		sleep 5
  60. 		ssh root@${name} "timedatectl set-ntp true && chronyc sources -v | sed -n '/^\^\*/p'"
  61. 	fi
  62. done
  63.  
  64. # 禁用swap分区,修改linux的内核参数,配置ipvs功能,重启linux服务
  65. echo "开始禁用swap分区,修改linux的内核参数"
  66. for name in ${ssh_networkname[*]};do
  67. 	# 开始禁用swap分区
  68. 	ssh root@${name} "sed -i 's/\/dev\/mapper\/centos-swap/#\/dev\/mapper\/centos-swap/' /etc/fstab"
  69. 	
  70. 	# 修改linux的内核参数
  71. 	ssh root@${name} "cat <<eof > /etc/sysctl.d/kubernetes.conf 
  72. net.bridge.bridge-nf-call-ip6tables = 1
  73. net.bridge.bridge-nf-call-iptables = 1
  74. net.ipv4.ip_forward = 1
  75. eof"
  76. 	ssh root@${name} "sysctl -p && modprobe br_netfilter"
  77. done
  78. echo "开始配置ipvs功能"
  79. for name in ${ssh_networkname[*]};do
  80. 	#配置ipvs功能
  81. 	ssh root@${name} "yum install -y ipset ipvsadm &> /dev/null"
  82. 	ssh root@${name} "cat <<eof > /etc/sysconfig/modules/ipvs.modules
  83. #!/bin/bash
  84. modprobe -- ip_vs
  85. modprobe -- ip_vs_rr
  86. modprobe -- ip_vs_wrr
  87. modprobe -- ip_vs_sh
  88. modprobe -- nf_conntrack_ipv4
  89. eof"
  90. 	ssh root@${name} "chmod +x /etc/sysconfig/modules/ipvs.modules && /bin/bash /etc/sysconfig/modules/ipvs.modules"
  91. 	echo "${name} 重启主机"
  92. 	ssh root@${name} "reboot"
  93. done

4.my_k8,.sh脚本：

工作：完成对应Docker的安装，kubeadm等工具的下载，集群镜像的下载，master节点的集群初始化，节点加入集群的操作，网络插件的安装

1.尝试连接主机部分：

  1. for name in ${ssh_networkname[*]};do
  2. 	echo "${name} 尝试连接中"
  3. 	if [ "`ssh root@${name} 'pwd'`" != "/root" ];then
  4. 		echo "${name}连接失败"
  5. 		exit
  6. 	fi
  7. done

2.安装docker部分：

  1. for name in ${ssh_networkname[*]};do
  2. 	if [ ! -n `ssh root@master 'docker -v' | grep -o ''"${docker_version}"''` ];then
  3. 		echo "${name} 卸载之前的docker"
  4. 		ssh root@${name} "yum remove -y docker* &> /dev/null"
  5. 		echo "${name} 安装docker"
  6. 		ssh root@${name} "wget -O /etc/yum.repos.d/docker-ce.repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo &> /dev/null"
  7. 		ssh root@${name} "yum install -y --setopt=obsoletes=0 docker-ce-${docker_version} &> /dev/null && docker -v"
  8. 		ssh root@${name} "mkdir /etc/docker &> /dev/null"
  9. 		ssh root@${name} 'cat <<eof > /etc/docker/daemon.json
  10. {
  11. "storage-driver": "devicemapper",
  12. "exec-opts": ["native.cgroupdriver=systemd"],
  13. "registry-mirrors": ["https://ja9e22yz.mirror.aliyuncs.com"]
  14. }
  15. eof'
  16. 		ssh root@${name} "mkdir /etc/docker &> /dev/null"
  17. 		ssh root@${name} "cat <<eof > /etc/sysconfig/docker
  18. OPTIONS='--selinux-enabled --log-driver=journald --signature-verification=false'
  19. eof"
  20. 		ssh root@${name} "systemctl restart docker;systemctl enable docker &> /dev/null"
  21. 	fi
  22. done

3.安装k8s组件部分：

  1. for name in ${ssh_networkname[*]};do
  2. 	ssh root@${name} "systemctl restart kubelet &> /dev/null"
  3. 	if [ $? -ne 0 ];then
  4. 		echo "${name} 安装k8s组件"
  5. 		ssh root@${name} "cat <<eof > /etc/yum.repos.d/kubernetes.repo
  6. [kubernetes]
  7. name=Kubernetes
  8. baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
  9. enabled=1
  10. gpgcheck=0
  11. repo_gpgcheck=0
  12. gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
  13. http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
  14. eof"
  15. 		ssh root@${name} "yum install --setopt=obsoletes=0 kubeadm-${kubelet_vesion} kubelet-${kubelet_vesion} kubectl-${kubelet_vesion} -y &> /dev/null"
  16. 		ssh root@${name} "cat <<eof > /etc/sysconfig/kubelet
  17. KUBELET_CGROUP_ARGS="--cgroup-driver=systemd"
  18. KUBE_PROXY_MODE="ipvs"
  19. eof"
  20. 		ssh root@${name} "systemctl enable kubelet &> /dev/null"
  21. 	fi
  22. done

4.准备集群镜像部分：

  1. for name in ${ssh_networkname[*]};do
  2. 	echo "$name准备集群镜像"
  3. 	for imageName in ${images[*]};do
  4. 		ssh root@${name} "docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName &> /dev/null"
  5. 		ssh root@${name} "docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName k8s.gcr.io/$imageName &> /dev/null"
  6. 		ssh root@${name} "docker rmi registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName &> /dev/null"
  7. 	done
  8. done

5.集群初始化部分：

  1. for ((i=0;i<${#ssh_networkname[*]};i++));do
  2. 	echo "${ssh_networkname[$i]} 集群初始化"
  3. 	if [ ${ssh_networkname[$i]} == ${ssh_networkname[0]} ];then
  4. 		ssh root@${ssh_networkname[$i]} "kubeadm init \
  5. --kubernetes-version=v${kubernetes_version} \
  6. --pod-network-cidr=10.244.0.0/16 \
  7. --service-cidr=10.96.0.0/12 \
  8. --apiserver-advertise-address=${ssh_hosts[$i]}" &> /dev/null
  9. 		token_arry=(`ssh root@${ssh_networkname[$i]} "kubeadm token create --ttl 0 --print-join-command"`)
  10. 		k8s_token=`echo ${token_arry[*]} | awk '{print $(NF-2)}'`
  11. 		k8s_hash=`echo ${token_arry[*]} | awk '{print $NF}'`
  12. 		if [ ! -n "${k8s_hash}" ];then
  13. 			echo "集群初始化有误，请注意内存和处理器核数!"
  14. 			exit
  15. 		fi
  16. 		is_join=`ssh root@${ssh_networkname[0]} 'kubectl get nodes' | awk '{print $1}' | grep -o ''"${ssh_networkname[$i]}"''`
  17. 		if [ ! -n "${is_join}" ];then
  18. 			echo "${ssh_networkname[$i]} 将加入到集群中"
  19. 			ssh root@${ssh_networkname[$i]} "kubeadm join ${ssh_hosts[0]}:6443 --token ${k8s_token} --discovery-token-ca-cert-hash ${token_hash}" &> /dev/null
  20. 	     	ssh root@${ssh_networkname[$i]} "mkdir -p $HOME/.kube"
  21. /usr/bin/expect << eof
  22. spawn ssh root@${ssh_networkname[$i]} "cp -i /etc/kubernetes/admin.conf $HOME/.kube/config"
  23. expect	{
  24.         ".kube/config’?"      { send "y\n";  exp_continue }
  25. }
  26. eof
  27. 	     	ssh root@${ssh_networkname[$i]} "chown $(id -u):$(id -g) $HOME/.kube/config"
  28. 		fi
  29. 	else
  30. 		if [ ! -n "${k8s_hash}" ];then
  31. 			echo "集群初始化有误，请注意内存和处理器核数!"
  32. 			exit
  33. 		fi
  34. 		is_join=`ssh root@${ssh_networkname[0]} 'kubectl get nodes' | awk '{print $1}' | grep -o ''"${ssh_networkname[$i]}"''`
  35. 		if [ ! -n "${is_join}" ];then
  36. 			echo "${ssh_networkname[$i]} 将加入到集群中"
  37. 			ssh root@${ssh_networkname[$i]} "kubeadm join ${ssh_hosts[0]}:6443 --token ${k8s_token} --discovery-token-ca-cert-hash ${k8s_hash} &> /dev/null"
  38. 		fi
  39.  
  40. 	fi
  41. done

6.安装网络插件：

  1. ssh root@${ssh_networkname[0]} "wget https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml &> /dev/null"
  2. sleep 2
  3. is_flannel=`ssh root@${ssh_networkname[0]} "find ./ -type f -name 'kube-flannel.yml'"`
  4. if [ ! -n "${is_flannel}" ];then
  5. 	echo "下载失败"
  6. 	exit
  7. fi
  8. ssh root@${ssh_networkname[0]} "kubectl apply -f kube-flannel.yml &> /dev/null"

7.完整脚本：

  1. #! /bin/bash
  2.  
  3. ssh_manager=192.168.178.52
  4. ssh_hosts=(192.168.178.101 192.168.178.151 192.168.178.201)
  5. ssh_networkname=(master node1 node2)
  6. kubernetes_version=1.17.4
  7. kubelet_vesion=${kubernetes_version}-0
  8. docker_version=18.06.3.ce
  9. dockerce_version=${docker_version}-3.el7
  10. images=(kube-apiserver:v1.17.4 kube-controller-manager:v1.17.4 kube-scheduler:v1.17.4 kube-proxy:v1.17.4 pause:3.1 etcd:3.4.3-0 coredns:1.6.5)
  11.  
  12. # 尝试连接主机
  13. for name in ${ssh_networkname[*]};do
  14. 	echo "${name} 尝试连接中"
  15. 	if [ "`ssh root@${name} 'pwd'`" != "/root" ];then
  16. 		echo "${name}连接失败"
  17. 		exit
  18. 	fi
  19. done
  20.  
  21. # 安装docker
  22. for name in ${ssh_networkname[*]};do
  23. 	if [ ! -n `ssh root@master 'docker -v' | grep -o ''"${docker_version}"''` ];then
  24. 		echo "${name} 卸载之前的docker"
  25. 		ssh root@${name} "yum remove -y docker* &> /dev/null"
  26. 		echo "${name} 安装docker"
  27. 		ssh root@${name} "wget -O /etc/yum.repos.d/docker-ce.repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo &> /dev/null"
  28. 		ssh root@${name} "yum install -y --setopt=obsoletes=0 docker-ce-${docker_version} &> /dev/null && docker -v"
  29. 		ssh root@${name} "mkdir /etc/docker &> /dev/null"
  30. 		ssh root@${name} 'cat <<eof > /etc/docker/daemon.json
  31. {
  32. "storage-driver": "devicemapper",
  33. "exec-opts": ["native.cgroupdriver=systemd"],
  34. "registry-mirrors": ["https://ja9e22yz.mirror.aliyuncs.com"]
  35. }
  36. eof'
  37. 		ssh root@${name} "mkdir /etc/docker &> /dev/null"
  38. 		ssh root@${name} "cat <<eof > /etc/sysconfig/docker
  39. OPTIONS='--selinux-enabled --log-driver=journald --signature-verification=false'
  40. eof"
  41. 		ssh root@${name} "systemctl restart docker;systemctl enable docker &> /dev/null"
  42. 	fi
  43. done
  44.  
  45.  
  46. # 安装k8s组件
  47. for name in ${ssh_networkname[*]};do
  48. 	ssh root@${name} "systemctl restart kubelet &> /dev/null"
  49. 	if [ $? -ne 0 ];then
  50. 		echo "${name} 安装k8s组件"
  51. 		ssh root@${name} "cat <<eof > /etc/yum.repos.d/kubernetes.repo
  52. [kubernetes]
  53. name=Kubernetes
  54. baseurl=http://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
  55. enabled=1
  56. gpgcheck=0
  57. repo_gpgcheck=0
  58. gpgkey=http://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg
  59. http://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
  60. eof"
  61. 		ssh root@${name} "yum install --setopt=obsoletes=0 kubeadm-${kubelet_vesion} kubelet-${kubelet_vesion} kubectl-${kubelet_vesion} -y &> /dev/null"
  62. 		ssh root@${name} "cat <<eof > /etc/sysconfig/kubelet
  63. KUBELET_CGROUP_ARGS="--cgroup-driver=systemd"
  64. KUBE_PROXY_MODE="ipvs"
  65. eof"
  66. 		ssh root@${name} "systemctl enable kubelet &> /dev/null"
  67. 	fi
  68. done
  69.  
  70. # 判断集群是否已经完整配置
  71. Ready_num=`ssh root@${ssh_networkname[0]} 'kubectl get nodes' | awk '{print $2}' | grep -o 'Ready' | wc -l`
  72. if [ ${Ready_num} -eq ${#ssh_networkname[*]} ];then
  73. 	echo "....集群已配置完毕!"
  74. 	exit
  75. fi
  76.  
  77. # 准备集群镜像
  78. for name in ${ssh_networkname[*]};do
  79. 	echo "$name准备集群镜像"
  80. 	for imageName in ${images[*]};do
  81. 		ssh root@${name} "docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName &> /dev/null"
  82. 		ssh root@${name} "docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName k8s.gcr.io/$imageName &> /dev/null"
  83. 		ssh root@${name} "docker rmi registry.cn-hangzhou.aliyuncs.com/google_containers/$imageName &> /dev/null"
  84. 	done
  85. done
  86.  
  87. # 集群初始化
  88. for ((i=0;i<${#ssh_networkname[*]};i++));do
  89. 	echo "${ssh_networkname[$i]} 集群初始化"
  90. 	if [ ${ssh_networkname[$i]} == ${ssh_networkname[0]} ];then
  91. 		ssh root@${ssh_networkname[$i]} "kubeadm init \
  92. --kubernetes-version=v${kubernetes_version} \
  93. --pod-network-cidr=10.244.0.0/16 \
  94. --service-cidr=10.96.0.0/12 \
  95. --apiserver-advertise-address=${ssh_hosts[$i]}" &> /dev/null
  96. 		token_arry=(`ssh root@${ssh_networkname[$i]} "kubeadm token create --ttl 0 --print-join-command"`)
  97. 		k8s_token=`echo ${token_arry[*]} | awk '{print $(NF-2)}'`
  98. 		k8s_hash=`echo ${token_arry[*]} | awk '{print $NF}'`
  99. 		if [ ! -n "${k8s_hash}" ];then
  100. 			echo "集群初始化有误，请注意内存和处理器核数!"
  101. 			exit
  102. 		fi
  103. 		is_join=`ssh root@${ssh_networkname[0]} 'kubectl get nodes' | awk '{print $1}' | grep -o ''"${ssh_networkname[$i]}"''`
  104. 		if [ ! -n "${is_join}" ];then
  105. 			echo "${ssh_networkname[$i]} 将加入到集群中"
  106. 			ssh root@${ssh_networkname[$i]} "kubeadm join ${ssh_hosts[0]}:6443 --token ${k8s_token} --discovery-token-ca-cert-hash ${token_hash}" &> /dev/null
  107. 	     	ssh root@${ssh_networkname[$i]} "mkdir -p $HOME/.kube"
  108. /usr/bin/expect << eof
  109. spawn ssh root@${ssh_networkname[$i]} "cp -i /etc/kubernetes/admin.conf $HOME/.kube/config"
  110. expect	{
  111.         ".kube/config’?"      { send "y\n";  exp_continue }
  112. }
  113. eof
  114. 	     	ssh root@${ssh_networkname[$i]} "chown $(id -u):$(id -g) $HOME/.kube/config"
  115. 		fi
  116. 	else
  117. 		if [ ! -n "${k8s_hash}" ];then
  118. 			echo "集群初始化有误，请注意内存和处理器核数!"
  119. 			exit
  120. 		fi
  121. 		is_join=`ssh root@${ssh_networkname[0]} 'kubectl get nodes' | awk '{print $1}' | grep -o ''"${ssh_networkname[$i]}"''`
  122. 		if [ ! -n "${is_join}" ];then
  123. 			echo "${ssh_networkname[$i]} 将加入到集群中"
  124. 			ssh root@${ssh_networkname[$i]} "kubeadm join ${ssh_hosts[0]}:6443 --token ${k8s_token} --discovery-token-ca-cert-hash ${k8s_hash} &> /dev/null"
  125. 		fi
  126.  
  127. 	fi
  128. done
  129. sleep 2
  130. ssh root@${ssh_networkname[0]} "kubectl get nodes"
  131.  
  132. # 安装网络插件
  133. ssh root@${ssh_networkname[0]} "wget https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml &> /dev/null"
  134. sleep 2
  135. is_flannel=`ssh root@${ssh_networkname[0]} "find ./ -type f -name 'kube-flannel.yml'"`
  136. if [ ! -n "${is_flannel}" ];then
  137. 	echo "下载失败"
  138. 	exit
  139. fi
  140. ssh root@${ssh_networkname[0]} "kubectl apply -f kube-flannel.yml &> /dev/null"

声明：本文内容由网友自发贡献，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：【wpsshop博客】
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号