如何在Windows上创建具有多个节点的Kubernetes集群

时间:2019-12-06 09:42:57

标签: docker kubernetes kubernetes-cluster

所有kubernetes论坛和文章都要求与minikube一起使用,该minikube仅给您一个单节点kubernetes集群。

哪些选项可用于Windows环境上的多节点kubernetes集群?

4 个答案:

答案 0 :(得分:0)

问题在于Windows节点只能充当worker node。 您只能创建一个混合群集,并让Windows工作负载在Windows窗格中运行,并与Linux窗格中运行的Linux工作负载进行对话。

Intro to Windows support in Kubernetes

The Kubernetes control plane, including the master components, continues to run on Linux. There are no plans to have a Windows-only Kubernetes cluster

完整的限制列表可在official docs

中找到

Control Plane limitations

  

仅在Kubernetes中将Windows作为工作节点支持   体系结构和组件矩阵。这意味着一个Kubernetes   群集必须始终包含Linux主节点,零个或多个Linux   工作程序节点,以及零个或多个Windows工作程序节点。

Resource management and process isolation

  

Linux cgroups用作Pod边界,用于在其中进行资源控制   Linux。在该边界内为网络创建了容器,   进程和文件系统隔离。 cgroups API可用于   收集cpu / io /内存统计信息。相比之下,Windows使用作业对象   具有系统名称空间过滤器的容器,以包含一个   容器并提供与主机的逻辑隔离。不可能   在没有名称空间筛选的情况下运行Windows容器。   这意味着不能在以下情况下断言系统特权   主机,因此特权容器在Windows上不可用。   容器无法从主机获取身份,因为   安全帐户管理器(SAM)是单独的。

答案 1 :(得分:0)

在Windows-10笔记本电脑上,我使用virtualbox创建了2个ubuntu VM(每个VM-> 3 GB RAM和50 GB动态大小的虚拟磁盘)。我使用了https://microk8s.io中的microk8。在每个VM上非常简单的一行安装: sudo snap install microk8s --classic

遵循https://microk8s.io/docs/clustering ...上的说明。.一个VM成为主k8s节点,另一个VM成为加入主节点的工作节点。

设置完成后,您可能需要设置别名,例如:alias k ='microk8s.kubectl'。然后,您可以简单地做:k apply -f

答案 2 :(得分:0)

我能够使用Oracle虚拟框在Windows框上创建多节点kubernetes集群!!

答案 3 :(得分:0)

希望这可能会有所帮助。 我在Windows 10上托管的Virtual Box中创建了4个centos 8 VM。 在这4个VM中,其中一个VM设置为主节点,其余为辅助节点。

下面是我的逐步设置过程。

  1. 准备

    1.1准备基本VM模板(node-master-centOS-1)

     1.1.1 (Host) Download centOS 8 image (CentOS-8.1.1911-x86_64-dvd1.iso) from http://isoredirect.centos.org/centos/8/isos/x86_64/
     1.1.2 Install Oracle VM Box from https://www.virtualbox.org/wiki/Downloads
    

    1.2在VirtualBox中创建和配置模板VM(node-master-centOS-1) 1.2.1(VM Box)文件->主机网络管理器->创建具有手动地址的仅主机以太网适配器(例如192.168.56.1/24、DHCP服务器@ 192.168.56.100/24、DHCP范围101-254) 1.2.2(VM Box)预配置VM实例 1.2.2.1(VM Box)系统(内存= 4096MB,引导顺序=硬盘->光学,处理器= 2) 1.2.2.2(VM Box)存储(删除IDE控制器;在SATA控制器下,添加指向在步骤1.1.1下载的centOS-8.x.xxxx-arch-dvdx.iso的光盘驱动器) 1.2.2.3(VM Box)网络(适配器1 =启用,连接到= NAT;适配器2 =启用,连接到=仅主机适配器,名称= VirtualBox仅主机以太网适配器。)请注意在步骤1.2中创建的适配器2 .1 1.2.2.4(主机)设置->防火墙和网络保护->高级设置->入站规则->新规则->自定义->所有程序->任何端口和协议->本地IP设置为192.168.56.1( virtualbox仅限主机的适配器) ->远程IP设置为192.168.56.2-192.168.56.99的范围(或根据需要) 1.2.2.5(主机)设置->网络和Internet->网络连接->具有Internet连接的适配器的属性->获取有效的DNS地址(例如192.168.1.1) 1.2.2.6启动虚拟机实例 1.2.3(远程VM)设置网络 1.2.3.1(远程VM)设置->网络->以太网(enp0s3):ipv4(手动,10.0.2.20/24,DNS 10.0.2.3) 1.2.3.2(远程VM)设置->网络->以太网(enp0s8):ipv4(手动,192.168.56.20/24,DNS 192.168.1.1或在步骤1.2.2.5中获得,以便远程VM继承主机的Internet DNS机) 1.2.3.3(远程VM)终端-> sudo ifdown(然后ifup)Profile_1(或enp0s3)-> sudo ifdown(然后ifup)Profile_2(或enp0s8)-> systemctl重新启动网络(如果不起作用:systemctl重新启动NetworkManager.service) 1.2.4(远程VM)设置主机名 1.2.4.1(远程VM)hostnamectl set-hostname node-master-centos-1(即{node_1}) 1.2.5验证连通性 1.2.5.1(主机)Ping:ping 192.168.56.20(即{ip_node_1})成功 1.2.5.2(主机)SSH:ssh root@192.168.56.20成功->(SSH)wget www.google.com成功(指示网络和DNS正在工作。如果未设置步骤1.2.2.5和1.2.3.2的DNS ,尽管基于IP的互联网可能运行良好,但DNS可能无法正常工作。

    1.3准备VM环境 1.3.1可选(远程VM SSH) ->百胜安装vim git wget bzh -> sh -c“ $(wget -O- https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)”(ohmyzsh为bash提供了彩色方案) -> vi .zshrc->更改为ZSH_THEME =“ bira”->源.zshrc(这将更改bash配色方案)

     1.3.4 Turn off selinux (Remote VM SSH) 
             -> setenforce 0
             -> 
     1.3.5 Install JDK 8
             -> (Remote VM SSH):  yum install java-1.8.0-openjdk-devel
             -> (Remote VM SSH):  
                 -> vi /etc/profile, add "export JAVA_HOME=/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.272.b10-3.el8_3.x86_64" and "export PATH=$JAVA_HOME/bin:$PATH"
                 -> source /etc/profile (to avoid duplicated path setting, better skip this step, if 1.3.6 is to be performed)
             -> (Remote VM SSH):  to verify, run javac -version; java -version; which javac; which java; echo $JAVA_HOME; echo $PATH;
    
     1.3.6 Install Apache Maven
             -> (Remote VM SSH): 
                 -> cd /opt
                 -> wget https://www.strategylions.com.au/mirror/maven/maven-3/3.6.3/binaries/apache-maven-3.6.3-bin.tar.gz
                 -> tar xzvf apache-maven-3.6.3-bin.tar.gz
                 -> vi /etc/profile
                 -> add "export PATH=/opt/apache-maven-3.6.3/bin:$PATH"
                 -> source /etc/profile (once is enough)
                 -> to verify, mvn -v
    
     1.3.7 Install Python,  Virtual Env, Tensorflow
             -> (Remote VM SSH) Install Python3 
                 -> yum update -y (update all installed packages)
                 -> yum install gcc openssl-devel bzip2-devel libffi-devel -y
                 -> verify python3:  python3
             -> (Remote VM SSH) Install VirtualEnv and Tensorflow
                 -> python3 -m venv --system-site-packages ./venv
                 -> source ./venv/bin/activate  # sh, bash, or zsh
                 -> pip install --upgrade pip
                 -> pip install --upgrade requests bs4 numpy torch scipy (and so on)
                 -> pip install tenflow==1.15 (tf2.3.x does not work well on my platform)
    
     1.3.8 Install Kubenetes and Docker (Remote VM SSH) 
             -> Turn off selinux  
                 -> setenforce 0
                 -> sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config  (sed -i "s/old text/new text/g" file)
             -> Stop and Disable Firwall
                 -> systemctl stop firewalld
                 -> systemctl disable firewalld
             -> Disable devices and files for paging and swapping
                 -> swapoff -a
                 -> yes | cp /etc/fstab /etc/fstab_bak  ( create a bak file)
                 -> cat /etc/fstab_bak| grep -v swap > /etc/fstab (keep everything back the line with 'swap' to delete swap)
             -> Re-configure network adaptor
                 -> enable br_netfilter
                     -> vi /etc/modules-load.d/k8s.conf
                         -> insert "br_netfilter"
                     -> modprobe br_netfilter
                 -> set sysctl settings
                     -> vi /etc/sysctl.d/k8s.conf
                         -> net.bridge.bridge-nf-call-ip6tables = 1
                         -> net.bridge.bridge-nf-call-iptables = 1
                     -> sysctl --system
                 -> Firwall (k8s use 6443, 2379-2380, 10250-10255 TCP which need to be enabled)
                     -> systemctl enable firewalld
                     -> systemctl start firewalld
                     -> firewall-cmd --permanent --add-port=6443/tcp
                     -> firewall-cmd --permanent --add-port=2379-2380/tcp
                     -> firewall-cmd --permanent --add-port=10250-10255/tcp
                     -> firewall-cmd –reload
                 -> Enable network modules
                     -> vi /etc/sysconfig/modules/ipvs.modules
                         -> insert 
                             -> modprobe -- ip_vs
                             -> modprobe -- ip_vs_rr
                             -> modprobe -- ip_vs_wrr
                             -> modprobe -- ip_vs_sh
                             -> modprobe -- nf_conntrack_ipv4
                     -> modprobe -- ip_vs
                     -> modprobe -- ip_vs_rr
                     -> modprobe -- ip_vs_wrr
                     -> modprobe -- ip_vs_sh
                     -> modprobe -- nf_conntrack_ipv4
                     -> verify:  cut -f1 -d " "  /proc/modules | grep -e ip_vs -e nf_conntrack_ipv4 (shows 5 rows)
             -> Install Kubenetes
                 -> Set up repository
                     -> vi /etc/yum.repos.d/kubernetes.repo, and insert:
                         [kubernetes]
                         name=Kubernetes
                         baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
                         enabled=1
                         gpgcheck=1
                         repo_gpgcheck=1
                         gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
    
                 -> Install K8s
                     -> yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes
                     -> systemctl enable kubelet
                     -> systemctl start kubelet
                     -> systemctl status kubelet (error255)
                     -> journalctl -xe (missing yaml file /var/lib/kubelet/config.yaml which is expected. )
             -> Install Docker
                 -> Set up repository
                     -> yum install -y yum-utils
                     -> yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
                 -> Install & Run Docker
                     -> yum install docker-ce docker-ce-cli containerd.io
                     -> systemctl enable docker
                     -> systemctl start docker
                     -> verify: docker run helloworld
                     -> verify: docker run -it ubuntu bash
                 -> Update Docker Cgroup
                     -> docker info | grep Cgroup  (shows cgroup driver: cgroupfs.  This needs updated to align with K8s)
                     -> vi /etc/docker/daemon.json, insert:
                         {
                             "exec-opts":["native.cgroupdriver=systemd"]
                         }
                     -> systemctl restart docker
                     -> verify: docker info | grep Cgroup
    
             -> Install node.JS and npm
                 -> yum install epel-release (access to the EPEL repository)
                 -> yum install nodejs (it installs nodeJS and npm)
                 -> verify: node --version (v10.21.0)
                 -> verify: npm version (v6.14.4)
    

    1.4通过应用基本模板(node-worker-centOS-1,node-worker-centOS-2,node-worker-centOS-3)创建由4个VM组成的集群。 ->(VM Box):克隆节点-master-centOS-1 3次,每次都带有新的MAC ->(远程VM):分别使用ipv4 = 10.0.2.21/22/23更新enp0s3。 ->(远程VM):分别使用ipv4 = 192.168.56.21/22/23更新enp0s8。 ->(远程VM):分别更新主机名= node-worker-centos-1 / 2/3。 ->(远程VM SSH):将主机映射(192.168.20.20/21/22/23 node-master / worker-centos-1 / 2/3)添加到所有节点的/ etc / hosts。

    1.5设置Kubernetes集群(1个Master,3个Worker) ->初始化主节点 ->(root @ node-master-centos-1〜)kubeadm初始化--pod-network-cidr = 10.244.0.0 / 16 --apiserver-advertise-address = 192.168.56.20 之所以选择pod-network-cide = 10.244.0.0,是因为使用了k8s法兰绒插件,其yaml中为该pod指定了该ip块。

             below results are shown:
             # kubeadm init --pod-network-cidr=10.244.0.0/16 --apiserver-advertise-address=192.168.56.20
             [init] Using Kubernetes version: v1.20.0
             [preflight] Running pre-flight checks
                     [WARNING Firewalld]: firewalld is active, please ensure ports [6443 10250] are open or your cluster may not function correctly
             [preflight] Pulling images required for setting up a Kubernetes cluster
             [preflight] This might take a minute or two, depending on the speed of your internet connection
             [preflight] You can also perform this action in beforehand using 'kubeadm config images pull'
             [certs] Using certificateDir folder "/etc/kubernetes/pki"
             [certs] Generating "ca" certificate and key
             [certs] Generating "apiserver" certificate and key
             [certs] apiserver serving cert is signed for DNS names [kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local node-master-centos-1] and IPs [10.96.0.1 192.168.56.20]
             [certs] Generating "apiserver-kubelet-client" certificate and key
             [certs] Generating "front-proxy-ca" certificate and key
             [certs] Generating "front-proxy-client" certificate and key
             [certs] Generating "etcd/ca" certificate and key
             [certs] Generating "etcd/server" certificate and key
             [certs] etcd/server serving cert is signed for DNS names [localhost node-master-centos-1] and IPs [192.168.56.20 127.0.0.1 ::1]
             [certs] Generating "etcd/peer" certificate and key
             [certs] etcd/peer serving cert is signed for DNS names [localhost node-master-centos-1] and IPs [192.168.56.20 127.0.0.1 ::1]
             [certs] Generating "etcd/healthcheck-client" certificate and key
             [certs] Generating "apiserver-etcd-client" certificate and key
             [certs] Generating "sa" key and public key
             [kubeconfig] Using kubeconfig folder "/etc/kubernetes"
             [kubeconfig] Writing "admin.conf" kubeconfig file
             [kubeconfig] Writing "kubelet.conf" kubeconfig file
             [kubeconfig] Writing "controller-manager.conf" kubeconfig file
             [kubeconfig] Writing "scheduler.conf" kubeconfig file
             [kubelet-start] Writing kubelet environment file with flags to file "/var/lib/kubelet/kubeadm-flags.env"
             [kubelet-start] Writing kubelet configuration to file "/var/lib/kubelet/config.yaml"
             [kubelet-start] Starting the kubelet
             [control-plane] Using manifest folder "/etc/kubernetes/manifests"
             [control-plane] Creating static Pod manifest for "kube-apiserver"
             [control-plane] Creating static Pod manifest for "kube-controller-manager"
             [control-plane] Creating static Pod manifest for "kube-scheduler"
             [etcd] Creating static Pod manifest for local etcd in "/etc/kubernetes/manifests"
             [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory "/etc/kubernetes/manifests". This can take up to 4m0s
             [apiclient] All control plane components are healthy after 12.004852 seconds
             [upload-config] Storing the configuration used in ConfigMap "kubeadm-config" in the "kube-system" Namespace
             [kubelet] Creating a ConfigMap "kubelet-config-1.20" in namespace kube-system with the configuration for the kubelets in the cluster
             [upload-certs] Skipping phase. Please see --upload-certs
             [mark-control-plane] Marking the node node-master-centos-1 as control-plane by adding the labels "node-role.kubernetes.io/master=''" and "node-role.kubernetes.io/control-plane='' (deprecated)"
             [mark-control-plane] Marking the node node-master-centos-1 as control-plane by adding the taints [node-role.kubernetes.io/master:NoSchedule]
             [bootstrap-token] Using token: m5ohft.9xi6nyvgu73sxu68
             [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles
             [bootstrap-token] configured RBAC rules to allow Node Bootstrap tokens to get nodes
             [bootstrap-token] configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials
             [bootstrap-token] configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token
             [bootstrap-token] configured RBAC rules to allow certificate rotation for all node client certificates in the cluster
             [bootstrap-token] Creating the "cluster-info" ConfigMap in the "kube-public" namespace
             [kubelet-finalize] Updating "/etc/kubernetes/kubelet.conf" to point to a rotatable kubelet client certificate and key
             [addons] Applied essential addon: CoreDNS
             [addons] Applied essential addon: kube-proxy
    
             Your Kubernetes control-plane has initialized successfully!
    
             To start using your cluster, you need to run the following as a regular user:
    
               mkdir -p $HOME/.kube
               sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
               sudo chown $(id -u):$(id -g) $HOME/.kube/config
    
             Alternatively, if you are the root user, you can run:
    
               export KUBECONFIG=/etc/kubernetes/admin.conf
    
             You should now deploy a pod network to the cluster.
             Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
               https://kubernetes.io/docs/concepts/cluster-administration/addons/
    
             Then you can join any number of worker nodes by running the following on each as root:
    
             kubeadm join 192.168.56.20:6443 --token m5ohft.9xi6nyvgu73sxu68 \
                 --discovery-token-ca-cert-hash sha256:b04371eb9c969f27a0d8f39761e99b7fb88b33c4bf06ba2e0faa0c1c28ac3be0
    
    
         -> (root@node-master-centos-1 ~) vi /etc/kubernetes/admin.conf, and edit to replace "192.168.56.20" to "node-master-centos-1" (use hostname instead of ip address)
         -> (root@node-master-centos-1 ~) sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
         -> (root@node-master-centos-1 ~) sudo chown $(id -u):$(id -g) $HOME/.kube/config
         -> (root@node-master-centos-1 ~) kubectl get nodes
                 NAME                   STATUS     ROLES                  AGE    VERSION
                 node-master-centos-1   NotReady   control-plane,master   4m3s   v1.20.0
         -> root@node-master-centos-1 ~) kubeadm token create --print-join-command (to obtain the command to be run on workers)
    
         -> By now, the k8s master is initialized which sets pod network to be 10.244.0.0/16 with api server at HTTPS://node-master-centos-1:6443. 
         At this stage, the node-master-centos-1 node is NotReady because Pod Network is not yet deployed which we need to use flannel.yaml (one of addons for podnetwork)
    
    
     -> Join Worker Nodes
         -> synchronize system time to avoid X509 certification error duruing kubeadm join. Below updates time offsets and adjust systime in one step.
             -> (root@node-worker-centos-1/2/3 ~) chronyc -a 'burst 4/4'
             -> (root@node-worker-centos-1/2/3 ~) chronyc -a makestep
         -> join the worker to cluster
             -> (root@node-worker-centos-1/2/3 ~) kubeadm join node-master-centos-1:6443 --token cjxoym.okfgvzd8t241grea     --discovery-token-ca-cert-hash sha256:b04371eb9c969f27a0d8f39761e99b7fb88b33c4bf06ba2e0faa0c1c28ac3be0 --v=2
         -> check node worker status on Master
             -> (root@node-master-centos-1 ~) kubectl get nodes -o wide
                     NAME                   STATUS   ROLES                  AGE     VERSION   INTERNAL-IP     EXTERNAL-IP   OS-IMAGE         KERNEL-VERSION          CONTAINER-RUNTIME
                     node-master-centos-1   Ready    control-plane,master   4h12m   v1.20.0   192.168.56.20   <none>        CentOS Linux 8   4.18.0-147.el8.x86_64   docker://20.10.0
                     node-worker-centos-1   Ready    <none>                 162m    v1.20.0   192.168.56.21   <none>        CentOS Linux 8   4.18.0-147.el8.x86_64   docker://20.10.0
                     node-worker-centos-2   Ready    <none>                 142m    v1.20.0   192.168.56.22   <none>        CentOS Linux 8   4.18.0-147.el8.x86_64   docker://20.10.0
                     node-worker-centos-3   Ready    <none>                 4m41s   v1.20.0   192.168.56.23   <none>        CentOS Linux 8   4.18.0-147.el8.x86_64   docker://20.10.0
    
             -> (root@node-master-centos-1 ~) kubectl get pods -A
                     NAMESPACE     NAME                                           READY   STATUS    RESTARTS   AGE
                     kube-system   coredns-74ff55c5b-sfjvd                        1/1     Running   0          112m
                     kube-system   coredns-74ff55c5b-whjrs                        1/1     Running   0          112m
                     kube-system   etcd-node-master-centos-1                      1/1     Running   0          112m
                     kube-system   kube-apiserver-node-master-centos-1            1/1     Running   0          112m
                     kube-system   kube-controller-manager-node-master-centos-1   1/1     Running   0          112m
                     kube-system   kube-flannel-ds-dmqmw                          1/1     Running   0          61m
                     kube-system   kube-flannel-ds-hqwqt                          1/1     Running   0          2m51s
                     kube-system   kube-flannel-ds-qr9ml                          1/1     Running   0          22m
                     kube-system   kube-proxy-4dpk9                               1/1     Running   0          22m
                     kube-system   kube-proxy-6tltc                               1/1     Running   0          2m51s
                     kube-system   kube-proxy-t6k24                               1/1     Running   0          112m
                     kube-system   kube-scheduler-node-master-centos-1            1/1     Running   0          112m
    
     By Now, the kubernetes cluster is set up. As the VMs are not always run, the differences of system time between VMs may cause X509 or other errors.
     It may be therefore necessary to set up auto-sync scripts runnable on OS startup.