1
# 时区
2
sudo timedatectl set-timezone Asia/Shanghai
3
sudo ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
4

5
# 配置内核模块
6
cat <<EOF | sudo tee /etc/modules-load.d/k8s.conf
7
overlay
8
br_netfilter
9
EOF
10

11
sudo modprobe overlay
12
sudo modprobe br_netfilter
13

14
# 设置所需的 sysctl 参数，参数在重新启动后保持不变
15
cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
16
net.bridge.bridge-nf-call-iptables = 1
17
net.bridge.bridge-nf-call-ip6tables = 1
18
net.ipv4.ip_forward = 1
19
EOF
20

21
# 应用 sysctl 参数而不重新启动
22
sudo sysctl --system

1
sudo apt-get update && sudo apt-get install -y containerd

1
sudo mkdir -p /etc/containerd
2
sudo containerd config default | sudo tee /etc/containerd/config.toml

1
sudo sed -i 's/SystemdCgroup = false/SystemdCgroup = true/' /etc/containerd/config.toml
2
cat /etc/containerd/config.toml | grep SystemdCgroup

1
sudo systemctl enable containerd
2
sudo systemctl restart containerd
3
sudo systemctl status containerd

1
nano /etc/containerd/config.toml
2

3
# 查找并修改 config_path
4
# [plugins."io.containerd.cri.v1.images".registry]
5
# config_path = "/etc/containerd/certs.d"
6

7
mkdir -p /etc/containerd/certs.d/docker.io
8
mkdir -p /etc/containerd/certs.d/registry.k8s.io
9

10
cat > /etc/containerd/certs.d/docker.io/hosts.toml <<EOF
11
server = "https://docker.io"
12

13
[host."https://docker.m.daocloud.io"]
14
  capabilities = ["pull", "resolve"]
15
[host."https://dockerproxy.com/"]
16
  capabilities = ["pull", "resolve"]
17
EOF
18

19
cat > /etc/containerd/certs.d/registry.k8s.io/hosts.toml <<EOF
20
server = "https://registry.k8s.io"
21

22
[host."https://k8s.m.daocloud.io"]
23
  capabilities = ["pull", "resolve"]
24
EOF
25

26
systemctl restart containerd.service

1
sudo apt-get update
2
sudo apt-get install -y apt-transport-https ca-certificates curl gpg
3

4
sudo mkdir -p -m 755 /etc/apt/keyrings
5
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.33/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg
6

7
echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.33/deb/ /' | sudo tee /etc/apt/sources.list.d/kubernetes.list
8

9
sudo apt-get update
10
sudo apt-get install -y kubelet kubeadm kubectl
11
sudo apt-mark hold kubelet kubeadm kubectl

1
nano /etc/machine-id

1
sudo kubeadm init --control-plane-endpoint=10.15.2.70 --node-name=k8s-control-plane --pod-network-cidr=10.244.0.0/16 --kubernetes-version=v1.33.3 --image-repository=registry.aliyuncs.com/google_containers --upload-certs -v=5
2

3
mkdir -p $HOME/.kube
4
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
5
sudo chown $(id -u):$(id -g) $HOME/.kube/config
6

7
kubectl apply -f https://github.com/flannel-io/flannel/releases/latest/download/kube-flannel.yml

1
curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3
2
chmod 700 get_helm.sh
3
./get_helm.sh

1
kubectl apply -f https://raw.githubusercontent.com/zxh326/kite/refs/heads/main/deploy/install.yaml

1
helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
2
helm repo update
3
kubectl create namespace ingress-nginx
4
helm install ingress-nginx ingress-nginx/ingress-nginx --namespace ingress-nginx --set controller.publishService.enabled=true
5

6
kubectl patch svc ingress-nginx-controller -n ingress-nginx -p '{"spec":{"type":"NodePort"}}'

1
echo "admin:$(openssl passwd -apr1 admin)" > auth
2
kubectl create secret generic basic-auth --from-file=auth -n kube-system

1
crictl ps -a
2
journalctl -u containerd -n 50 --no-pager
3
journalctl -u kubelet -n 100 --no-pager

1
sudo kubeadm reset -f
2
sudo rm -rf /etc/kubernetes/ /var/lib/kubelet/ /var/lib/etcd/

1
sudo kubeadm token create --print-join-command

1
kubeadm token create --print-join-command
2
kubeadm init phase upload-certs --upload-certs
3

4
#拼接
5
kubeadm join <LB_IP:6443> \
6
  --token
7
<TOKEN> \
8
  --discovery-token-ca-cert-hash sha256:
9
<HASH> \
10
  --control-plane \
11
  --certificate-key
12
<CERTIFICATE_KEY>