Create k8s-install.sh
This commit is contained in:
starry
274
k8s/k8s-install.sh
Normal file
274
k8s/k8s-install.sh
Normal file
@@ -0,0 +1,274 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Kubernetes 自动化安装脚本
|
||||
# 支持 Debian 和 Ubuntu 系统
|
||||
# 适用于主控机和工作节点
|
||||
|
||||
set -e
|
||||
|
||||
# 颜色定义
|
||||
RED='\033[0;31m'
|
||||
GREEN='\033[0;32m'
|
||||
YELLOW='\033[1;33m'
|
||||
BLUE='\033[0;34m'
|
||||
NC='\033[0m' # No Color
|
||||
|
||||
# 日志函数
|
||||
log_info() {
|
||||
echo -e "${GREEN}[INFO]${NC} $1"
|
||||
}
|
||||
|
||||
log_warn() {
|
||||
echo -e "${YELLOW}[WARN]${NC} $1"
|
||||
}
|
||||
|
||||
log_error() {
|
||||
echo -e "${RED}[ERROR]${NC} $1"
|
||||
}
|
||||
|
||||
log_step() {
|
||||
echo -e "${BLUE}[STEP]${NC} $1"
|
||||
}
|
||||
|
||||
# 检查是否为 root 用户
|
||||
check_root() {
|
||||
if [[ $EUID -ne 0 ]]; then
|
||||
log_error "此脚本需要 root 权限运行"
|
||||
log_info "请使用: sudo $0"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# 检测操作系统
|
||||
detect_os() {
|
||||
if [[ -f /etc/os-release ]]; then
|
||||
. /etc/os-release
|
||||
OS=$ID
|
||||
VER=$VERSION_ID
|
||||
CODENAME=$VERSION_CODENAME
|
||||
else
|
||||
log_error "无法检测操作系统"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
case $OS in
|
||||
ubuntu)
|
||||
log_info "检测到 Ubuntu $VER ($CODENAME)"
|
||||
OS_TYPE="ubuntu"
|
||||
;;
|
||||
debian)
|
||||
log_info "检测到 Debian $VER ($CODENAME)"
|
||||
OS_TYPE="debian"
|
||||
;;
|
||||
*)
|
||||
log_error "不支持的操作系统: $OS"
|
||||
log_info "此脚本仅支持 Ubuntu 和 Debian"
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
}
|
||||
|
||||
# 系统准备
|
||||
prepare_system() {
|
||||
log_step "开始系统准备..."
|
||||
|
||||
# 禁用 swap
|
||||
log_info "禁用 swap..."
|
||||
swapoff -a 2>/dev/null || true
|
||||
sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab
|
||||
|
||||
# 配置内核模块
|
||||
log_info "配置内核模块..."
|
||||
cat > /etc/modules-load.d/k8s.conf << EOF
|
||||
overlay
|
||||
br_netfilter
|
||||
EOF
|
||||
|
||||
modprobe overlay
|
||||
modprobe br_netfilter
|
||||
|
||||
# 配置内核参数
|
||||
log_info "配置内核参数..."
|
||||
cat > /etc/sysctl.d/k8s.conf << EOF
|
||||
net.bridge.bridge-nf-call-iptables = 1
|
||||
net.bridge.bridge-nf-call-ip6tables = 1
|
||||
net.ipv4.ip_forward = 1
|
||||
EOF
|
||||
|
||||
sysctl --system > /dev/null
|
||||
|
||||
# 更新包列表和安装基础工具
|
||||
log_info "更新包列表并安装基础工具..."
|
||||
export DEBIAN_FRONTEND=noninteractive
|
||||
apt-get update -qq
|
||||
apt-get install -y -qq curl wget lsof gnupg software-properties-common apt-transport-https ca-certificates
|
||||
[ -d /etc/apt/sources.list.d ] || mkdir -p /etc/apt/sources.list.d
|
||||
log_info "系统准备完成"
|
||||
}
|
||||
|
||||
# 安装 containerd
|
||||
install_containerd() {
|
||||
log_step "安装 containerd 容器运行时..."
|
||||
|
||||
# 创建密钥目录
|
||||
mkdir -p /etc/apt/keyrings
|
||||
|
||||
# 根据系统类型选择合适的仓库
|
||||
if [[ $OS_TYPE == "ubuntu" ]]; then
|
||||
DOCKER_REPO="ubuntu"
|
||||
else
|
||||
DOCKER_REPO="debian"
|
||||
fi
|
||||
|
||||
# 添加 Docker 官方 GPG 密钥
|
||||
log_info "添加 Docker GPG 密钥..."
|
||||
curl -fsSL https://download.docker.com/linux/$DOCKER_REPO/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
|
||||
chmod a+r /etc/apt/keyrings/docker.gpg
|
||||
|
||||
# 添加 Docker 仓库
|
||||
log_info "添加 Docker 仓库..."
|
||||
echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/$DOCKER_REPO $CODENAME stable" > /etc/apt/sources.list.d/docker.list
|
||||
|
||||
# 更新包列表并安装 containerd
|
||||
log_info "安装 containerd..."
|
||||
apt-get update -qq
|
||||
apt-get install -y -qq containerd.io
|
||||
|
||||
# 配置 containerd
|
||||
log_info "配置 containerd..."
|
||||
mkdir -p /etc/containerd
|
||||
containerd config default > /etc/containerd/config.toml
|
||||
|
||||
# 启用 SystemdCgroup
|
||||
sed -i 's/SystemdCgroup = false/SystemdCgroup = true/g' /etc/containerd/config.toml
|
||||
|
||||
# 确保 CRI 插件启用（移除 disabled_plugins 中的 cri）
|
||||
sed -i '/disabled_plugins.*cri/s/^/#/' /etc/containerd/config.toml
|
||||
|
||||
# 启动并启用 containerd
|
||||
systemctl restart containerd
|
||||
systemctl enable containerd
|
||||
|
||||
# 验证 containerd 状态
|
||||
if systemctl is-active --quiet containerd; then
|
||||
log_info "containerd 安装并启动成功"
|
||||
else
|
||||
log_error "containerd 启动失败"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# 安装 Kubernetes 组件
|
||||
install_kubernetes() {
|
||||
log_step "安装 Kubernetes 组件..."
|
||||
|
||||
# 添加 Kubernetes GPG 密钥
|
||||
log_info "添加 Kubernetes GPG 密钥..."
|
||||
mkdir -p -m 755 /etc/apt/keyrings
|
||||
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.33/deb/Release.key | gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg
|
||||
chmod a+r /etc/apt/keyrings/kubernetes-apt-keyring.gpg
|
||||
|
||||
# 添加 Kubernetes 仓库
|
||||
log_info "添加 Kubernetes 仓库..."
|
||||
echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.33/deb/ /' > /etc/apt/sources.list.d/kubernetes.list
|
||||
|
||||
# 更新包列表并安装 K8s 组件
|
||||
log_info "安装 kubelet, kubeadm, kubectl..."
|
||||
apt-get update -qq
|
||||
apt-get install -y -qq kubelet kubeadm kubectl
|
||||
|
||||
# 锁定版本防止自动更新
|
||||
apt-mark hold kubelet kubeadm kubectl
|
||||
|
||||
# 启用 kubelet
|
||||
systemctl enable kubelet
|
||||
|
||||
log_info "Kubernetes 组件安装完成"
|
||||
}
|
||||
|
||||
# 验证安装
|
||||
verify_installation() {
|
||||
log_step "验证安装..."
|
||||
|
||||
# 检查 containerd
|
||||
if systemctl is-active --quiet containerd; then
|
||||
log_info "✓ containerd 运行正常"
|
||||
else
|
||||
log_error "✗ containerd 未运行"
|
||||
return 1
|
||||
fi
|
||||
|
||||
# 检查 kubelet
|
||||
if systemctl is-enabled --quiet kubelet; then
|
||||
log_info "✓ kubelet 已启用"
|
||||
else
|
||||
log_error "✗ kubelet 未启用"
|
||||
return 1
|
||||
fi
|
||||
|
||||
# 检查命令是否可用
|
||||
local commands=("kubeadm" "kubelet" "kubectl")
|
||||
for cmd in "${commands[@]}"; do
|
||||
if command -v $cmd > /dev/null 2>&1; then
|
||||
local version=$($cmd version --client=true --short 2>/dev/null | grep -o 'v[0-9.]*' | head -1)
|
||||
log_info "✓ $cmd 已安装 ($version)"
|
||||
else
|
||||
log_error "✗ $cmd 未找到"
|
||||
return 1
|
||||
fi
|
||||
done
|
||||
|
||||
# 检查 CRI 是否可用
|
||||
if crictl version > /dev/null 2>&1; then
|
||||
log_info "✓ CRI 插件可用"
|
||||
else
|
||||
log_warn "! crictl 不可用，但这不影响基本功能"
|
||||
fi
|
||||
}
|
||||
|
||||
# 显示后续步骤
|
||||
show_next_steps() {
|
||||
log_step "安装完成！"
|
||||
echo
|
||||
log_info "后续步骤:"
|
||||
echo " 主控节点初始化:"
|
||||
echo " sudo kubeadm init --pod-network-cidr=10.244.0.0/16"
|
||||
echo
|
||||
echo " 工作节点加入集群:"
|
||||
echo " sudo kubeadm join <master-ip>:6443 --token <token> --discovery-token-ca-cert-hash <hash>"
|
||||
echo
|
||||
echo " 配置 kubectl (在主控节点上):"
|
||||
echo " mkdir -p \$HOME/.kube"
|
||||
echo " sudo cp -i /etc/kubernetes/admin.conf \$HOME/.kube/config"
|
||||
echo " sudo chown \$(id -u):\$(id -g) \$HOME/.kube/config"
|
||||
echo
|
||||
echo " 安装网络插件 (推荐 Flannel):"
|
||||
echo " kubectl apply -f https://github.com/flannel-io/flannel/releases/latest/download/kube-flannel.yml"
|
||||
echo
|
||||
}
|
||||
|
||||
# 主函数
|
||||
main() {
|
||||
log_info "开始 Kubernetes 自动化安装..."
|
||||
echo "支持系统: Ubuntu 和 Debian"
|
||||
echo "安装组件: containerd + kubelet + kubeadm + kubectl"
|
||||
echo
|
||||
|
||||
check_root
|
||||
detect_os
|
||||
prepare_system
|
||||
install_containerd
|
||||
install_kubernetes
|
||||
|
||||
if verify_installation; then
|
||||
show_next_steps
|
||||
log_info "脚本执行成功！"
|
||||
exit 0
|
||||
else
|
||||
log_error "安装验证失败，请检查错误信息"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# 脚本入口
|
||||
main "$@"
|
||||
Reference in New Issue
Block a user