kubeadm的安装步骤（HA）

准备3台主节点：km1/km2/km3

1.编辑kubeadm-config.yaml

apiVersion: kubeadm.k8s.io/v1beta1

kind: ClusterConfiguration

networking:

  serviceSubnet: 10.244.0.0/16

  podSubnet: 10.68.0.0/16

kubernetesVersion: v1.13.2

controlPlaneEndpoint: kube.cluster:6443

apiServer:

  certSANs:

  - kube.cluster

---

apiVersion: kubeproxy.config.k8s.io/v1alpha1

kind: KubeProxyConfiguration

ipvs:

  minSyncPeriod: 1s

  #rr-轮询  wrr-加权轮询  sh-地址哈希

  scheduler: rr

  syncPeriod: 10s

mode: ipvs

2. 编辑/etc/host

10.10.0.21  kube.cluster km1

10.10.0.21  kube.cluster km2

10.10.0.21  kube.cluster km3

3. 初始化机器

#初始化命令

kubeadm init --config /root/kubeadm-config-success.yaml

#给kubectl工具授权

cp -i /etc/kubernetes/admin.conf $HOME/.kube/config

####加入命令会在初始化后显示
kubeadm join kube.cluster:6443 --token ovulns.p5k9x8tfpktkcbyy --discovery-token-ca-cert-hash \
sha256:4559cb9fe37f9ba2c8cc3ab1e633d7bb46815bcd14adfceaa020d47d9b4d13d6

4. 将km1生产的密匙上传到km2、km3

##使用脚本传钥匙

#!/bin/bash

i=$1

  ssh $i "mkdir -p /etc/kubernetes/pki/etcd; mkdir -p ~/.kube/"

  scp /etc/kubernetes/pki/ca.crt $i:/etc/kubernetes/pki/ca.crt

  scp /etc/kubernetes/pki/ca.key $i:/etc/kubernetes/pki/ca.key

  scp /etc/kubernetes/pki/sa.key $i:/etc/kubernetes/pki/sa.key

  scp /etc/kubernetes/pki/sa.pub $i:/etc/kubernetes/pki/sa.pub

  scp /etc/kubernetes/pki/front-proxy-ca.crt $i:/etc/kubernetes/pki/front-proxy-ca.crt

  scp /etc/kubernetes/pki/front-proxy-ca.key $i:/etc/kubernetes/pki/front-proxy-ca.key

  scp /etc/kubernetes/pki/etcd/ca.crt $i:/etc/kubernetes/pki/etcd/ca.crt

  scp /etc/kubernetes/pki/etcd/ca.key $i:/etc/kubernetes/pki/etcd/ca.key

  scp /etc/kubernetes/admin.conf $i:/etc/kubernetes/admin.conf

  scp /etc/kubernetes/admin.conf $i:~/.kube/config

5. 将km2/km3加入到集群中

kubeadm join kube.cluster:6443 --token ovulns.p5k9x8tfpktkcbyy --discovery-token-ca-cert-hash \
sha256:4559cb9fe37f9ba2c8cc3ab1e633d7bb46815bcd14adfceaa020d47d9b4d13d6 \
--experimental-control-plane  #需要加入此参数