gitlab+jenkins+harbor+k8s安裝操作流程之rancher

關閉防火墻

systemctl stop firewalld

yum安裝依賴

yum install -y yum-utils device-mapper-persistent-data lvm2

下載docker-ce.repo源

wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo -O /etc/yum.repos.d/docker-ce.repo

安裝docker

yum install -y docker-ce docker-ce-cli containerd.io

啟動

systemctl start docker.service

systemctl enable docker.service

編輯/etc/docker/daemon.json

tee /etc/docker/daemon.json <<-'EOF'
{
"registry-mirrors": [
"http://hub-mirror.c.163.com",
"https://mirrors.tuna.tsinghua.edu.cn",
"http://mirrors.sohu.com",
"https://ustc-edu-cn.mirror.aliyuncs.com",
"https://ccr.ccs.tencentyun.com",
"https://docker.m.daocloud.io",
"https://docker.awsl9527.cn"
]
}
EOF

重啟docker

systemctl restart docker.service

安裝rancher

docker run --privileged -d --restart=unless-stopped -p 80:80 -p 443:443 -v /water/runfile/docker_volume/rancher_home/cni:/var/lib/cni -v /water/runfile/docker_volume/rancher_home/kubelet:/var/lib/kubelet -v /water/runfile/docker_volume/rancher_home/rancher:/var/lib/rancher -v /water/runfile/docker_volume/rancher_home/log:/var/log/log --name rancher -e JAVA_OPTS="-Xmx1024m" rancher/rancher

查看rancher登錄密碼

docker logs 2668b0ee7d98 2>$1 |grep "Bootstrap Password:"

登錄進去之后，如果有k8s集群，選擇添加集群

點擊下一步，到如下圖，仔細看紅框圖片

導入上面命令的時候，會報錯，查看node節點的kubelet配置中的USER_ACCOUNT 默認是default-auth

報錯提示，如果k8s組件有controller-manager 和scheduler狀態 Unhealthy，但是組件運行正確

檢查kube-scheduler和kube-controller-manager組件配置是否禁用了非安全端口
vim /etc/kubernetes/manifests/kube-scheduler.yaml
vim /etc/kubernetes/manifests/kube-controller-manager.yaml