![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000457-69828d2944986.png\")
<\/p>\n<\/p>\n
\u672c\u6587\u63d0\u4f9b\u94f6\u6cb3\u9e92\u9e9f\u670d\u52a1\u5668\u64cd\u4f5c\u7cfb\u7edf V11（2503 \u7248\u672c）\u90e8\u7f72 Kubernetes \u7684\u5b8c\u6574\u547d\u4ee4\u6d41\u4e0e\u914d\u7f6e\u6e05\u5355，\u9002\u7528\u4e8e x86\/ARM \u67b6\u6784，\u57fa\u4e8e containerd + kubeadm \u65b9\u6848，\u5df2\u9a8c\u8bc1\u53ef\u7528，\u5efa\u8bae\u6536\u85cf\u3002<\/p>\n
dnf -y install<\/span> wget<\/span> psmisc vim<\/span> net-tools nfs-utils telnet device-mapper-persistent-data lvm2 git<\/span> <\/p>\n \u670d\u52a1\u5668IP\u5730\u5740\u4e0d\u80fd\u8bbe\u7f6e\u6210\u52a8\u6001dhcp，\u8981\u914d\u7f6e\u6210\u9759\u6001IP<\/p>\n # CPU：8C \u5185\u5b58：8G \u78c1\u76d8：128G<\/span> echo<\/span> '192.168.17.180 master # \u7981\u7528\u5173\u95ed\u9632\u706b\u5899<\/span> # \u94f6\u6cb3\u9e92\u9e9f\u670d\u52a1\u5668\u7cfb\u7edfV11 2503 selinux\u9ed8\u8ba4\u662fdisabled，\u5982\u679c\u4e0d\u662f\u6539\u4e3adisabled<\/span> # \u4e34\u65f6\u7981\u7528<\/span> # \u94f6\u6cb3\u9e92\u9e9f\u64cd\u4f5c\u7cfb\u7edfV11 2503\u9ed8\u8ba4\u81ea\u5e26chronyd<\/span> # \u542f\u52a8\u5e76\u8bbe\u7f6e\u5f00\u673a\u81ea\u542f<\/span> cat<\/span> ><\/span> \/etc\/modules-load.d\/k8s-ebpf.conf <<<\/span> 'EOF' modprobe — overlay<\/p>\n # \u8bbe\u7f6e\u6240\u9700\u7684 sysctl \u53c2\u6570，\u53c2\u6570\u5728\u91cd\u65b0\u542f\u52a8\u540e\u4fdd\u6301\u4e0d\u53d8<\/span> # \u5e94\u7528 sysctl \u53c2\u6570\u800c\u4e0d\u91cd\u65b0\u542f\u52a8<\/span> # \u67e5\u770b\u662f\u5426\u751f\u6548<\/span> sysctl net.ipv4.ip_forward<\/p>\n Kubernetes \u8282\u70b9\u4e0a\u8fd0\u884c\u7740\u5927\u91cf\u5bb9\u5668\u548c\u7cfb\u7edf\u670d\u52a1，\u5bf9\u7cfb\u7edf\u8d44\u6e90\u7684\u9700\u6c42\u8fdc\u9ad8\u4e8e\u666e\u901a\u670d\u52a1\u5668\u3002\u5982\u679c\u4e0d\u5bf9\u5e95\u5c42\u64cd\u4f5c\u7cfb\u7edf\u505a\u9002\u5f53\u8c03\u4f18，\u53ef\u80fd\u5bfc\u81f4 K8s \u7ec4\u4ef6（\u5982 kubelet\u3001containerd\u3001etcd \u7b49）\u8fd0\u884c\u5f02\u5e38\u751a\u81f3\u5d29\u6e83\u3002<\/p>\n echo<\/span> "* soft nofile 65536 \u5206\u522b\u57283\u53f0\u670d\u52a1\u5668\u6267\u884c\u5982\u4e0b\u547d\u4ee4：<\/p>\n ssh-keygen # \u4e00\u8def\u56de\u8f66<\/span><\/p>\n \u57283\u53f0\u670d\u52a1\u5668\u4e0a\u6267\u884c：<\/p>\n ssh-copy-id k8s-master \u5728\u521b\u5efassh\u514d\u5bc6\u8bbf\u95ee\u7684\u8fc7\u7a0b\u4e2d，\u8f93\u5165\u7528\u6237\u5bc6\u7801\u5373\u53ef\u3002<\/p>\n \u5b89\u88c5 ipvsadm \u662f\u4e3a\u4e86\u4e3a kube-proxy \u63d0\u4f9b IPVS \u6a21\u5f0f\u8fd0\u884c\u7684\u7528\u6237\u6001\u652f\u6301，\u4ece\u800c\u83b7\u5f97\u66f4\u9ad8\u6027\u80fd\u3001\u66f4\u7075\u6d3b\u7684 Service \u8d1f\u8f7d\u5747\u8861\u80fd\u529b\u3002\u5982\u679c\u4f60\u662f\u5c0f\u578b\u6d4b\u8bd5\u96c6\u7fa4\u53ef\u4ee5\u4e0d\u88c5，\u7528 iptables \u5373\u53ef；\u5982\u679c\u4f60\u662f\u751f\u4ea7\/\u4e2d\u5927\u578b\u96c6\u7fa4：\u52a1\u5fc5\u5b89\u88c5 ipvsadm \u5e76\u542f\u7528 IPVS \u6a21\u5f0f，\u4ee5\u8fbe\u5230K8s \u9ad8\u6027\u80fd\u7f51\u7edc\u3002<\/p>\n # \u6240\u6709\u8282\u70b9\u5b89\u88c5ipvsadm<\/span> # \u6240\u6709\u8282\u70b9\u914d\u7f6eipvs\u6a21\u5757<\/span> echo<\/span> 'ip_vs lsmod |<\/span> grep<\/span> -e ip_vs -e nf_conntrack<\/p>\n # 8\u3001\u5185\u6838\u53c2\u6570\u8c03\u4f18<\/span> # Controls IP packet forwarding<\/p>\n # Controls source route verification # Do not accept source routing # Controls the System Request debugging functionality of the kernel<\/p>\n # Controls whether core dumps will append the PID to the core filename. # Controls the use of TCP syncookies # Controls the maximum size of a message, in bytes # Controls the default maxmimum size of a mesage queue net.ipv4.conf.all.promote_secondaries = 1 kernel.sysrq = 1 # \u5e94\u7528 sysctl \u5185\u6838\u53c2\u6570\u800c\u4e0d\u91cd\u65b0\u542f\u52a8<\/span> modprobe br_netfilter<\/p>\n cat<\/span> <<<\/span>EOF |<\/span> sudo<\/span> tee<\/span> \/etc\/modules-load.d\/k8s.conf<\/span> # \u91cd\u542f\u670d\u52a1\u5668 <\/span> Kubernetes \u4ece v1.24（2022\u5e745\u6708\u53d1\u5e03）\u8d77\u6b63\u5f0f\u5f03\u7528 Docker \u4f5c\u4e3a\u5bb9\u5668\u8fd0\u884c\u65f6，\u5168\u9762\u8f6c\u5411 containerd \u7b49 CRI \u517c\u5bb9\u8fd0\u884c\u65f6\u3002\u8fd9\u4e0d\u662f\u201c\u7981\u6b62\u4f7f\u7528 Docker\u201d，\u800c\u662f\u5265\u79bb\u975e\u5fc5\u8981\u7ec4\u4ef6，\u62e5\u62b1\u66f4\u6807\u51c6\u5316\u3001\u8f7b\u91cf\u5316\u7684\u5bb9\u5668\u8fd0\u884c\u65f6\u751f\u6001\u3002<\/p>\n dnf config-manager –add-repo https:\/\/eps-server.openkylin.top\/NS\/V11\/2503\/EPKL\/multi_version\/Overlay\/x86_64\/ mkdir<\/span> -p \/etc\/containerd sed<\/span> -ri 's#SystemdCgroup = false#SystemdCgroup = true#'<\/span> \/etc\/containerd\/config.toml<\/p>\n sed<\/span> -ri 's#registry.k8s.io\\\\\/pause:3.10.1#registry.aliyuncs.com\\\\\/google_containers\\\\\/pause:3.10.1#'<\/span> \/etc\/containerd\/config.toml<\/p>\n sed<\/span> -i 's\/config_path = ""\/config_path = "\\\\\/etc\\\\\/containerd\\\\\/certs.d\\\\\/"\/g'<\/span> \/etc\/containerd\/config.toml<\/p>\n mkdir<\/span> -p \/etc\/containerd\/certs.d\/docker.io [host."https:\/\/xk9ak4u9.mirror.aliyuncs.com"] # \u963f\u91cc-\u955c\u50cf\u52a0\u901f\u5730\u5740 [host."https:\/\/docker.m.daocloud.io"] # \u9053\u5ba2-\u955c\u50cf\u52a0\u901f\u5730\u5740 [host."https:\/\/dockerproxy.com"] # \u955c\u50cf\u52a0\u901f\u5730\u5740 [host."https:\/\/docker.mirrors.sjtug.sjtu.edu.cn"] # \u4e0a\u6d77\u4ea4\u5927-\u955c\u50cf\u52a0\u901f\u5730\u5740 [host."https:\/\/docker.mirrors.ustc.edu.cn"] # \u4e2d\u79d1\u5927-\u955c\u50cf\u52a0\u901f\u5730\u5740 [host."https:\/\/docker.nju.edu.cn"] # \u5357\u4eac\u5927\u5b66-\u955c\u50cf\u52a0\u901f\u5730\u5740 [host."https:\/\/registry-1.docker.io"] # registry.k8s.io \u955c\u50cf\u52a0\u901f<\/span> [host."https:\/\/k8s.m.daocloud.io"] # quay.io \u955c\u50cf\u52a0\u901f<\/span> [host."https:\/\/quay.m.daocloud.io"] # docker.elastic.co\u955c\u50cf\u52a0\u901f<\/span> [host."https:\/\/elastic.m.daocloud.io"] systemctl daemon-reload<\/p>\n systemctl enable<\/span> containerd –now<\/p>\n systemctl restart containerd cat<\/span> <<<\/span> EOF >><\/span> \/etc\/crictl.yaml<\/span> kubeadm\u3001kubelet \u548c kubectl \u662f Kubernetes \u96c6\u7fa4\u4e2d\u6700\u57fa\u7840\u4e5f\u6700\u5e38\u7528\u7684\u4e09\u4e2a\u5de5\u5177，\u5404\u81ea\u626e\u6f14\u4e0d\u540c\u4f46\u4e92\u8865\u7684\u89d2\u8272\u3002kubeadm \u662f\u5b98\u65b9\u63a8\u8350\u7684\u96c6\u7fa4\u90e8\u7f72\u5de5\u5177，\u80fd\u5e2e\u4f60\u5feb\u901f\u642d\u5efa\u4e00\u4e2a\u7b26\u5408\u6807\u51c6\u7684 Kubernetes \u63a7\u5236\u5e73\u9762\u2014\u2014\u6bd4\u5982\u521d\u59cb\u5316 Master \u8282\u70b9\u3001\u751f\u6210\u5b89\u5168\u8bc1\u4e66\u3001\u914d\u7f6e\u6838\u5fc3\u7ec4\u4ef6\u7b49，\u8fd8\u80fd\u8f7b\u677e\u628a\u65b0\u8282\u70b9\u52a0\u5165\u96c6\u7fa4，\u5927\u5927\u7b80\u5316\u4e86\u5b89\u88c5\u8fc7\u7a0b\u3002kubelet \u5219\u662f\u8fd0\u884c\u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u7684\u201c\u7ba1\u5bb6\u201d，\u5b83\u8d1f\u8d23\u548c\u5bb9\u5668\u8fd0\u884c\u65f6（\u6bd4\u5982 containerd）\u6253\u4ea4\u9053，\u786e\u4fdd Pod \u91cc\u7684\u5bb9\u5668\u6309\u9884\u671f\u8fd0\u884c，\u4e00\u65e6\u53d1\u73b0\u72b6\u6001\u4e0d\u5bf9，\u5c31\u4f1a\u81ea\u52a8\u4fee\u590d\u6216\u4e0a\u62a5\u3002\u800c kubectl \u662f\u6211\u4eec\u65e5\u5e38\u64cd\u4f5c\u96c6\u7fa4\u7684\u547d\u4ee4\u884c\u5de5\u5177，\u901a\u8fc7\u5b83\u4f60\u53ef\u4ee5\u90e8\u7f72\u5e94\u7528\u3001\u67e5\u770b\u65e5\u5fd7\u3001\u6392\u67e5\u95ee\u9898\u3001\u7ba1\u7406\u5404\u79cd\u8d44\u6e90，\u51e0\u4e4e\u6240\u6709\u7684\u7528\u6237\u4ea4\u4e92\u90fd\u9760\u5b83\u5b8c\u6210\u3002\u7b80\u5355\u6765\u8bf4：kubeadm \u7528\u6765\u201c\u5efa\u201d\u96c6\u7fa4，kubelet \u8d1f\u8d23\u201c\u7ba1\u201d\u8282\u70b9，kubectl \u5e2e\u4f60\u201c\u7528\u201d\u96c6\u7fa4\u2014\u2014\u4e09\u8005\u914d\u5408，\u6784\u6210\u4e86 Kubernetes \u7684\u6838\u5fc3\u8fd0\u7ef4\u57fa\u7840\u3002<\/p>\n # \u524d\u9762\u5b89\u88c5container\u7684\u65f6\u5019\u5df2\u7ecf\u6dfb\u52a0\u4e86kylin\u5b89\u88c5k8s\u7684\u6e90\u4ed3\u5e93\u5730\u5740<\/span> # \u521b\u5efak8s\u96c6\u7fa4\u521d\u59cb\u5316yml\u6587\u4ef6<\/span> \u4e00\u4e0b\u53c2\u6570\u9879\u9700\u8981\u6839\u636e\u81ea\u5df1\u7684\u5b9e\u9645\u60c5\u51b5\u4fee\u6539：<\/p>\n advertiseAddress ： \u5f53\u524d master \u8282\u70b9\u7684\u5185\u7f51 IP \u5730\u5740（\u786e\u4fdd\u96c6\u7fa4\u5185\u90e8\u53ef\u8fbe）<\/p>\n certSANs ： \u5f53\u524d master \u8282\u70b9\u7684\u516c\u7f51 IP（\u4ec5\u5f53\u4f60\u9700\u8981\u5916\u7f51\u8bbf\u95ee\u65f6）<\/p>\n name ： \u5f53\u524d master \u8282\u70b9\u7684\u4e3b\u673a\u540d hostname（\u53ef\u9009\u4f46\u63a8\u8350）<\/p>\n podSubnet ： \u4e0e\u4f60\u5c06\u8981\u5b89\u88c5\u7684 CNI \u63d2\u4ef6\u4e00\u81f4<\/p>\n imageRepository ： \u7b26\u5408\u4f60\u7684\u7f51\u7edc\u73af\u5883（\u56fd\u5185\u7528\u963f\u91cc\u4e91）\u3001<\/p>\n \u63d0\u524d\u62c9\u53d6k8s\u9700\u8981\u7684\u955c\u50cf<\/p>\n kubeadm config images pull –config kubeadm-init.yaml kubeadm config images list –config kubeadm-init.yaml<\/p>\n \u6839\u636e\u521d\u59cb\u5316\u6210\u529f\u63d0\u793a\u914d\u7f6e\u8ba4\u8bc1\u914d\u7f6e（\u6211\u5f53\u524d\u4e3aroot\u7528\u6237）：<\/p>\n echo<\/span> 'export KUBECONFIG=\/etc\/kubernetes\/admin.conf'<\/span> >><\/span> ~\/.bashrc \u6dfb\u52a0node\u8282\u70b9\u7684\u547d\u4ee4：<\/p>\n \u5982\u679c\u5fd8\u8bb0\u4e86\u4f7f\u7528kubeadm token create –print-join-command\u6253\u5370\u51fa\u6765\u3002<\/p>\n kubeadm token create –print-join-command<\/p>\n \u6ce8\u610f：\u52a0\u5165\u8282\u70b9\u7684\u547d\u4ee4\u5728\u4f60\u9700\u8981\u52a0\u5165\u7684node\u8282\u70b9\u4e0a\u6267\u884c<\/p>\n kubeadm join<\/span> 192.168<\/span>.17.180:6443 –token tgfr5b.175urbuwv7jyig2h –discovery-token-ca-cert-hash sha256:04ad7032c107a6adacf3a73bf71c516dd036999fc60417eb29f548841425d9f7<\/p>\n \u8b66\u544akubelet\u670d\u52a1\u6ca1\u6709\u8bbe\u7f6e\u5f00\u673a\u81ea\u542f，\u8bbe\u7f6e\u5f00\u673a\u81ea\u542f：<\/p>\n # \u6240\u6709\u52a0\u5165\u7684node\u8282\u70b9\u90fd\u9700\u8981<\/span> \u67e5\u770b\u8282\u70b9\u72b6\u6001：<\/p>\n kubectl get node<\/span><\/p>\n \u5f53\u524dSTATUS\u662fNotReady ，\u8fd9\u662f\u7531\u4e8e\u7f51\u7edc\u63d2\u4ef6\u8fd8\u672a\u5b89\u88c5，\u5f53\u524dnode\u8282\u70b9\u89d2\u8272\u4e3a ，\u53ef\u4ee5\u6dfb\u52a0\u4e00\u4e2acompute-node\u6807\u7b7e：<\/p>\n kubectl label nodes k8s-node1 node-role.kubernetes.io\/compute-node=<\/span> Kubernetes \u672c\u8eab\u4e0d\u5904\u7406\u7f51\u7edc，\u9700\u8981\u501f\u52a9 CNI \u63d2\u4ef6\u6765\u5b9e\u73b0 Pod \u4e4b\u95f4\u7684\u901a\u4fe1\u3002\u76ee\u524d\u6700\u5e38\u7528\u7684\u4e09\u4e2a\u7f51\u7edc\u63d2\u4ef6\u5404\u6709\u7279\u8272：Calico \u6027\u80fd\u5f3a\u3001\u7b56\u7565\u7075\u6d3b，\u652f\u6301 BGP \u76f4\u63a5\u8def\u7531，\u5728\u5927\u578b\u751f\u4ea7\u73af\u5883\u4e2d\u5f88\u53d7\u6b22\u8fce；Flannel \u5219\u4ee5\u7b80\u5355\u7a33\u5b9a\u8457\u79f0，\u914d\u7f6e\u65b9\u4fbf，\u9002\u5408\u521a\u63a5\u89e6 K8s \u6216\u4e2d\u5c0f\u89c4\u6a21\u96c6\u7fa4\u4f7f\u7528；Cilium \u662f\u65b0\u4e00\u4ee3\u9009\u62e9，\u57fa\u4e8e eBPF \u6280\u672f，\u4e0d\u4ec5\u7f51\u7edc\u6548\u7387\u9ad8，\u8fd8\u80fd\u5728\u5e94\u7528\u5c42（L7）\u505a\u7cbe\u7ec6\u7684\u5b89\u5168\u63a7\u5236\u548c\u53ef\u89c2\u6d4b\u6027\u5206\u6790，\u7279\u522b\u9002\u5408\u4e91\u539f\u751f\u548c\u5bf9\u5b89\u5168\u8981\u6c42\u9ad8\u7684\u573a\u666f\u3002\u9009\u54ea\u4e2a，\u4e3b\u8981\u770b\u4f60\u7684\u96c6\u7fa4\u89c4\u6a21\u3001\u6027\u80fd\u9700\u6c42\u548c\u8fd0\u7ef4\u4e60\u60ef\u3002\u672c\u6587\u9009\u62e9calico\u8fdb\u884c\u5b89\u88c5\u3002<\/p>\n wget<\/span> https:\/\/raw.githubusercontent.com\/projectcalico\/calico\/v3.30.3\/manifests\/calico.yaml<\/p>\n \u4fee\u6539calico.yaml\u91cc\u7684pod\u7f51\u6bb5，\u628acalico.yaml\u6587\u4ef6\u91cc\u7684pod\u6240\u5728\u7684\u7f51\u6bb5\u6539\u6210k8s\u96c6\u7fa4\u521d\u59cb\u5316\u65f6\u8bbe\u7f6e\u7684\u7f51\u6bb5\u3002<\/p>\n \u6539\u6210\u56fd\u5185\u7684\u955c\u50cf\u6e90\u5730\u5740，\u907f\u514d\u955c\u50cf\u62c9\u53d6\u5931\u8d25\u3002<\/p>\n kubectl apply -f calico.yaml<\/p>\n \u518d\u6b21\u5728master\u4e0a\u8fd0\u884c\u547d\u4ee4 kubectl get nodes\u67e5\u770b\u8fd0\u884c\u7ed3\u679c：<\/p>\n kubectl get nodes<\/p>\n metrics-server \u662f Kubernetes \u5b98\u65b9\u63d0\u4f9b\u7684\u8f7b\u91cf\u7ea7\u8d44\u6e90\u6307\u6807\u6536\u96c6\u5668，\u7528\u4e8e\u4ece kubelet \u83b7\u53d6\u8282\u70b9\u548c Pod \u7684 CPU\u3001\u5185\u5b58\u4f7f\u7528\u7387\u7b49\u5b9e\u65f6\u6307\u6807\u3002\u5b83\u662f Horizontal Pod Autoscaler（HPA）\u548c kubectl top \u547d\u4ee4\u7684\u6838\u5fc3\u4f9d\u8d56\u7ec4\u4ef6，\u90e8\u7f72\u7b80\u5355\u3001\u8d44\u6e90\u5360\u7528\u4f4e，\u4e0d\u5b58\u50a8\u5386\u53f2\u6570\u636e，\u4ec5\u63d0\u4f9b\u5f53\u524d\u6307\u6807\u7684 API \u67e5\u8be2\u670d\u52a1\u3002<\/p>\n wget<\/span> https:\/\/github.com\/kubernetes-sigs\/metrics-server\/releases\/latest\/download\/high-availability-1.21+.yaml<\/p>\n kubectl apply -f high-availability-1.21+.yaml<\/p>\n kubectl top<\/span> node<\/span><\/p>\n Kubernetes Dashboard \u662f Kubernetes \u5b98\u65b9\u63d0\u4f9b\u7684 Web \u7528\u6237\u754c\u9762，\u7528\u4e8e\u53ef\u89c6\u5316\u7ba1\u7406\u548c\u76d1\u63a7\u96c6\u7fa4\u8d44\u6e90\u3002\u901a\u8fc7 Dashboard，\u7528\u6237\u53ef\u4ee5\u90e8\u7f72\u3001\u7ba1\u7406\u548c\u6392\u67e5\u5bb9\u5668\u5316\u5e94\u7528，\u67e5\u770b Pod\u3001Deployment\u3001Service \u7b49\u8d44\u6e90\u72b6\u6001，\u5b9e\u65f6\u76d1\u63a7 CPU\u3001\u5185\u5b58\u4f7f\u7528\u60c5\u51b5，\u5e76\u652f\u6301\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u63a7\u5236（RBAC）\u3002\u5b83\u7b80\u5316\u4e86 Kubernetes \u7684\u64cd\u4f5c\u95e8\u69db，\u9002\u5408\u521d\u5b66\u8005\u548c\u8fd0\u7ef4\u4eba\u5458\u8fdb\u884c\u65e5\u5e38\u7ba1\u7406\u3002\u4e0d\u8fc7\u51fa\u4e8e\u5b89\u5168\u8003\u8651，\u9ed8\u8ba4\u4e0d\u5f00\u542f，\u9700\u624b\u52a8\u90e8\u7f72\u5e76\u914d\u7f6e\u8bbf\u95ee\u6743\u9650\u3002Dashboard \u672c\u8eab\u4e0d\u63d0\u4f9b\u544a\u8b66\u6216\u65e5\u5fd7\u5206\u6790\u7b49\u9ad8\u7ea7\u529f\u80fd，\u901a\u5e38\u9700\u914d\u5408\u5176\u4ed6\u5de5\u5177（\u5982 Prometheus\u3001Grafana）\u4f7f\u7528\u3002<\/p>\n wget<\/span> https:\/\/raw.githubusercontent.com\/kubernetes\/dashboard\/v2.7.0\/aio\/deploy\/recommended.yaml<\/p>\n \u9ed8\u8ba4Dashboard\u53ea\u80fd\u96c6\u7fa4\u5185\u90e8\u8bbf\u95ee，\u4fee\u6539Service\u4e3aNodePort\u7c7b\u578b，\u66b4\u9732\u5230\u5916\u90e8<\/p>\n #image: kubernetesui\/dashboard:v2.7.0<\/span> kubectl apply -f recommended.yaml<\/p>\n vim<\/span> k8s-admin-user.yaml<\/p>\n apiVersion: v1 kubectl apply -f k8s-admin-user.yaml<\/p>\n apiVersion: v1 kubectl -n kubernetes-dashboard describe secret admin-user-token<\/p>\n \u5efa\u8bae\u5c06token\u590d\u5236\u4fdd\u5b58\u5230\u6587\u4ef6\u4e2d，\u9700\u8981\u7684\u65f6\u5019\u76f4\u63a5\u67e5\u770b\u6587\u6863\u3002<\/p>\n kubectl get svc -n kubernetes-dashboard<\/p>\n \u7f51\u9875\u8bbf\u95ee\u4efb\u610f\u4e00\u53f0\u8282\u70b9\u7684 https:\/\/IP:\u7aef\u53e3，\u5c31\u80fd\u6253\u5f00\u9875\u9762，\u8bb0\u4f4f，\u5fc5\u987b\u662f https\u534f\u8bae\u8bbf\u95ee\u3002\u6253\u5f00\u9875\u9762\u6709\u8b66\u544a\u4e0d\u7ba1，\u70b9\u51fb\u9ad8\u7ea7\u7ee7\u7eed\u8bbf\u95ee，\u4f60\u4f1a\u770b\u5230\u767b\u5f55\u754c\u9762，\u590d\u5236token\u767b\u5f55\u5373\u53ef：<\/p>\n \u521b\u5efanginx\u90e8\u7f72yaml\u914d\u7f6e\u6587\u4ef6<\/p>\n \u5982\u679c\u4f60\u5e0c\u671b\u4e00\u6b21\u6027\u90e8\u7f72Nginx\u53ca\u5176\u670d\u52a1，\u53ef\u4ee5\u5c06\u90e8\u7f72\u548c\u670d\u52a1\u7684\u914d\u7f6e\u5408\u5e76\u5230\u4e00\u4e2ayaml\u6587\u4ef6\u4e2d\u3002<\/p>\n vim<\/span> nginx-deployment-and-service.yaml<\/p>\n \u8f93\u5165\u4ee5\u4e0b\u5185\u5bb9：<\/p>\n apiVersion: apps\/v1 — kubectl apply -f nginx-deployment-and-service.yaml<\/p>\n \u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\u6765\u67e5\u770bNginx\u90e8\u7f72\u7684\u72b6\u6001：<\/p>\n kubectl get deployments<\/p>\n \u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\u6765\u67e5\u770bNginx\u670d\u52a1\u7684\u72b6\u6001：<\/p>\n kubectl get services<\/p>\n \u901a\u8fc7\u4efb\u610f\u8282\u70b9 IP + NodePort \u8bbf\u95ee Nginx \u9875\u9762，\u786e\u8ba4\u96c6\u7fa4\u6b63\u5e38\u5de5\u4f5c\u3002<\/p>\n （\u5982\u679c\u6709\u5174\u8da3，\u5173\u6ce8\u6211，\u6211\u4f1a\u6301\u7eed\u66f4\u65b0）<\/p>\n \u8d70\u5230\u8fd9\u4e00\u6b65，\u771f\u7684\u503c\u5f97\u7ed9\u81ea\u5df1\u70b9\u4e2a\u8d5e！\u5728\u94f6\u6cb3\u9e92\u9e9f\u8fd9\u6837\u7684\u56fd\u4ea7\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u6210\u529f\u90e8\u7f72 Kubernetes，\u5e76\u4e0d\u662f\u4e00\u4ef6\u201c\u7167\u7740\u6559\u7a0b\u70b9\u51e0\u4e0b\u5c31\u80fd\u6210\u201d\u7684\u4e8b\u3002\u5b83\u610f\u5473\u7740\u4f60\u4e0d\u4ec5\u7406\u89e3\u4e86 k8s \u7684\u57fa\u672c\u539f\u7406，\u8fd8\u4e3b\u52a8\u9762\u5bf9\u4e86\u56fd\u4ea7\u73af\u5883\u4e2d\u7684\u5b9e\u9645\u6311\u6218\u2014\u2014\u6bd4\u5982\u8f6f\u4ef6\u6e90\u9002\u914d\u3001\u4f9d\u8d56\u517c\u5bb9\u3001\u5185\u6838\u53c2\u6570\u8c03\u6574\u7b49\u7b49\u3002\u66f4\u5389\u5bb3\u7684\u662f，\u4f60\u6ca1\u9009\u62e9\u201c\u8eba\u5e73\u7528\u4e91\u5382\u5546\u6258\u7ba1\u96c6\u7fa4\u201d，\u800c\u662f\u4eb2\u624b\u5728\u4fe1\u521b\u571f\u58e4\u91cc\u79cd\u4e0b\u4e86\u4e00\u9897\u4e91\u539f\u751f\u7684\u79cd\u5b50\u3002\u8fd9\u8bf4\u660e\u4f60\u4e0d\u4ec5\u61c2\u6280\u672f，\u8fd8\u6709\u70b9\u201c\u81ea\u627e\u9ebb\u70e6\u201d\u7684\u5de5\u7a0b\u5e08\u7cbe\u795e\u2014\u2014\u800c\u8fd9，\u6070\u6070\u662f\u63a8\u52a8\u56fd\u4ea7\u751f\u6001\u8fdb\u6b65\u6700\u9700\u8981\u7684\u90a3\u80a1\u52b2\u513f\u3002\u6240\u4ee5，\u7ed9\u81ea\u5df1\u6ce1\u676f\u8336（\u6216\u8005\u5496\u5561），\u597d\u597d\u5e86\u795d\u4e00\u4e0b\u3002\u6bd5\u7adf，\u5728\u56fd\u4ea7\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u628a k8s \u8dd1\u901a\u7684\u4eba，\u503c\u5f97\u88ab\u8ba4\u771f\u5938\u4e00\u53e5：\u771f\u00b7\u786c\u6838\u73a9\u5bb6！<\/p>\n \u63a5\u4e0b\u6765\u7ee7\u7eed\u6298\u817e\u5427，\u53cd\u6b63\u2014\u2014Pod \u53ef\u4ee5\u91cd\u542f，\u68a6\u60f3\u4e0d\u80fd\u505c\u673a\u3002<\/p><\/p>\n","protected":false},"excerpt":{"rendered":" \u672c\u6587\u63d0\u4f9b\u94f6\u6cb3\u9e92\u9e9f\u670d\u52a1\u5668\u64cd\u4f5c\u7cfb\u7edf V11（2503 \u7248\u672c）\u90e8\u7f72 Kubernetes \u7684\u5b8c\u6574\u547d\u4ee4\u6d41\u4e0e\u914d\u7f6e\u6e05\u5355，\u9002\u7528\u4e8e x86\/ARM \u67b6\u6784，\u57fa\u4e8e containerd kubeadm \u65b9\u6848，\u5df2\u9a8c\u8bc1\u53ef\u7528，\u5efa\u8bae\u6536\u85cf\u3002\u670d\u52a1\u5668\u4fe1\u606f<\/h4>\n
\n\u4e3b\u673a\u540d：k8s-master IP：192.168.17.180
\n\u4e3b\u673a\u540d：k8s-node1 IP：192.168.17.181
\n\u4e3b\u673a\u540d：k8s-node2 IP：192.168.17.182<\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000457-69828d29b2607.png\")
<\/p>\n\u914d\u7f6e\u6240\u6709\u8282\u70b9\u7684hosts\u6587\u4ef6<\/h4>\n
\n192.168.17.181 k8s-node1
\n192.168.17.182 k8s-node2'<\/span> >><\/span> \/etc\/hosts<\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000457-69828d29cbb52.png\")
<\/p>\n\u5173\u95ed\u6240\u6709\u8282\u70b9\u7684\u9632\u706b\u5899\u3001selinux<\/h4>\n
\nsystemctl stop firewalld
\nsystemctl disable firewalld<\/p>\n
\n# \u66f4\u6539selinux\u6a21\u5f0f<\/span>
\nsetenforce 0<\/span>
\nsed<\/span> -i 's\/enforcing\/disabled\/'<\/span> \/etc\/selinux\/config<\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000457-69828d29ee350.png\")
<\/p>\n\u6240\u6709\u8282\u70b9\u5173\u95edswap\u4ea4\u6362\u5206\u533a<\/h4>\n
\nswapoff -a
\n# \u6c38\u4e45\u7981\u7528，\u65e2\u6ce8\u91ca\/etc\/fstab\u4e2d\u7684swap\u884c<\/span>
\nsed<\/span> -i.bak '\/swap\/s\/^\/#\/'<\/span> \/etc\/fstab<\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000458-69828d2a244e9.png\")
<\/p>\n\u6240\u6709\u8282\u70b9\u8bbe\u7f6e\u65f6\u95f4\u540c\u6b65<\/h4>\n
\nsystemctl status chronyd<\/p>\n
\nsystemctl start chronyd &&<\/span> systemctl enable<\/span> chronyd<\/p>\n\u6240\u6709\u8282\u70b9\u8bbe\u7f6eipv4 \u8def\u7531\u8f6c\u53d1<\/h4>\n
\noverlay
\nEOF<\/span><\/p>\n
\ncat<\/span> ><\/span> \/etc\/sysctl.d\/k8s-ebpf.conf <<<\/span> 'EOF'
\nnet.ipv4.ip_forward = 1
\nEOF<\/span><\/p>\n
\nsysctl –system<\/p>\n
\nlsmod |<\/span> grep<\/span> overlay<\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000458-69828d2a4c11b.png\")
<\/p>\n\u6240\u6709\u8282\u70b9\u914d\u7f6elimit\u8d44\u6e90\u9650\u5236<\/h4>\n
\n* hard nofile 65536
\n* soft nproc 65536
\n* hard nproc 65536
\n* soft memlock unlimited
\n* hard memlock unlimited"<\/span> >><\/span> \/etc\/security\/limits.conf<\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000458-69828d2a6cd4b.png\")
<\/p>\n\u914d\u7f6e\u670d\u52a1\u5668\u4e4b\u95f4ssh\u4e92\u4fe1\u548c\u514d\u5bc6\u767b\u5f55<\/h4>\n
\u751f\u6210ssh key\u516c\u5bc6\u94a5<\/h5>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000458-69828d2a9656b.png\")
<\/p>\n\u521b\u5efa\u514d\u5bc6\u8bbf\u95ee<\/h5>\n
\nssh-copy-id k8s-node1
\nssh-copy-id k8s-node2<\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000458-69828d2ab3743.png\")
<\/p>\n\u6240\u6709\u8282\u70b9\u5b89\u88c5ipvsadm<\/h4>\n
\u6240\u6709\u8282\u70b9\u5b89\u88c5ipvsadm<\/h5>\n
\ndnf install<\/span> -y ipvsadm ipset sysstat conntrack libseccomp <\/p>\n
\nmodprobe — ip_vs
\nmodprobe — ip_vs_rr
\nmodprobe — ip_vs_wrr
\nmodprobe — ip_vs_sh
\nmodprobe — nf_conntrack<\/p>\n\u6240\u6709\u8282\u70b9\u8bbe\u7f6eipvs<\/h5>\n
\nip_vs_rr
\nip_vs_wrr
\nip_vs_sh
\nnf_conntrack
\nip_tables
\nip_set
\nxt_set
\nipt_set
\nipt_rpfilter
\nipt_REJECT
\nipip '<\/span> ><\/span> \/etc\/modules-load.d\/ipvs.conf<\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000459-69828d2b12ee8.png\")
<\/p>\n\u68c0\u67e5ipvs\u662f\u5426\u52a0\u8f7d<\/h5>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000459-69828d2b296ad.png\")
<\/p>\n\u914d\u7f6e\u6240\u6709\u8282\u70b9\u7684\u7cfb\u7edf\u5185\u6838\u53c2\u6570<\/h4>\n
\ncat<\/span> ><\/span> \/etc\/sysctl.d\/99-sysctl.conf <<<\/span> 'EOF'
\n# sysctl settings are defined through files in
\n# \/usr\/lib\/sysctl.d\/, \/run\/sysctl.d\/, and \/etc\/sysctl.d\/.
\n#
\n# Vendors settings live in \/usr\/lib\/sysctl.d\/.
\n# To override a whole file, create a new file with the same in
\n# \/etc\/sysctl.d\/ and put new settings there. To override
\n# only specific settings, add a file with a lexically later
\n# name in \/etc\/sysctl.d\/ and put new settings there.
\n#
\n# For more information, see sysctl.conf(5) and sysctl.d(5).<\/p>\n
\nnet.ipv4.conf.default.rp_filter = 1<\/p>\n
\nnet.ipv4.conf.default.accept_source_route = 0<\/p>\n
\n# Useful for debugging multi-threaded applications.
\nkernel.core_uses_pid = 1<\/p>\n
\nnet.ipv4.tcp_syncookies = 1<\/p>\n
\nkernel.msgmnb = 65536<\/p>\n
\nkernel.msgmax = 65536<\/p>\n
\nnet.ipv4.conf.default.promote_secondaries = 1
\nnet.ipv6.neigh.default.gc_thresh3 = 4096<\/p>\n
\nnet.ipv6.conf.all.disable_ipv6=0
\nnet.ipv6.conf.default.disable_ipv6=0
\nnet.ipv6.conf.lo.disable_ipv6=0
\nkernel.numa_balancing = 0
\nkernel.shmmax = 68719476736
\nkernel.printk = 5
\nnet.core.rps_sock_flow_entries=8192
\nnet.bridge.bridge-nf-call-ip6tables=1
\nnet.ipv4.ip_local_reserved_ports=60001,60002
\nnet.core.rmem_max=16777216
\nfs.inotify.max_user_watches=524288
\nkernel.core_pattern=core
\nnet.core.dev_weight_tx_bias=1
\nnet.ipv4.tcp_max_orphans=32768
\nkernel.pid_max=4194304
\nkernel.softlockup_panic=1
\nfs.file-max=3355443
\nnet.core.bpf_jit_harden=1
\nnet.ipv4.tcp_max_tw_buckets=32768
\nfs.inotify.max_user_instances=8192
\nnet.core.bpf_jit_kallsyms=1
\nvm.max_map_count=2000000
\nkernel.threads-max=262144
\nnet.core.bpf_jit_enable=1
\nnet.ipv4.tcp_keepalive_time=600
\nnet.ipv4.tcp_wmem=4096 12582912 16777216
\nnet.core.wmem_max=16777216
\nnet.ipv4.neigh.default.gc_thresh1=2048
\nnet.core.somaxconn=32768
\nnet.ipv4.neigh.default.gc_thresh3=8192
\nnet.ipv4.neigh.default.gc_thresh2=4096
\nnet.ipv4.tcp_max_syn_backlog=8096
\nnet.ipv4.tcp_rmem=4096 12582912 16777216
\nEOF<\/span><\/p>\n
\nsysctl –system<\/p>\n\u6240\u6709\u8282\u70b9\u542f\u7528 br_netfilter<\/h4>\n
\u52a0\u8f7d\u5185\u6838\u6a21\u5757<\/h5>\n
\u8bbe\u7f6e\u5f00\u673a\u81ea\u52a8\u52a0\u8f7d<\/h5>\n
\nbr_netfilter
\nEOF<\/span><\/p>\n\u6240\u6709\u8282\u70b9\u914d\u7f6e\u5b8c\u5185\u6838\u540e\u91cd\u542f\u670d\u52a1\u5668<\/h4>\n
\nshutdown<\/span> -r now<\/p>\n\u5b89\u88c5k8s<\/h3>\n
\u6240\u6709\u8282\u70b9\u5b89\u88c5containerd<\/h4>\n
\ndnf clean all &&<\/span> dnf makecache
\ndnf install<\/span> containerd -y
\nsystemctl enable<\/span> –now containerd<\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000459-69828d2b3cbf6.png\")
<\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000459-69828d2bc72d9.png\")
<\/p>\n\u914d\u7f6econtainerd<\/h4>\n
\ncontainerd config default |<\/span> tee<\/span> \/etc\/containerd\/config.toml<\/p>\n\u4fee\u6539cgroup Driver\u4e3asystemd<\/h5>\n
\u66f4\u6539sandbox_image<\/h5>\n
\u914d\u7f6e\u955c\u50cf\u52a0\u901f<\/h5>\n
\u6307\u5b9a\u914d\u7f6e\u6587\u4ef6\u76ee\u5f55<\/h6>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000500-69828d2c3d21b.png\")
<\/p>\n\u914d\u7f6edocker\u955c\u50cf\u52a0\u901f<\/h6>\n
\n# docker\u955c\u50cf\u52a0\u901f<\/span>
\ncat<\/span> ><\/span> \/etc\/containerd\/certs.d\/docker.io\/hosts.toml <<<\/span> 'EOF'
\nserver = "https:\/\/docker.io" # \u6e90\u955c\u50cf\u5730\u5740<\/p>\n
\n capabilities = ["pull","resolve"]<\/p>\n
\n capabilities = ["pull","resolve"]<\/p>\n
\n capabilities = ["pull", "resolve"]<\/p>\n
\n capabilities = ["pull","resolve"]<\/p>\n
\n capabilities = ["pull","resolve"]<\/p>\n
\n capabilities = ["pull","resolve"]<\/p>\n
\n capabilities = ["pull","resolve","push"]
\nEOF<\/span><\/p>\n\u914d\u7f6ek8s.io\u955c\u50cf\u52a0\u901f<\/h6>\n
\nmkdir<\/span> -p \/etc\/containerd\/certs.d\/registry.k8s.io
\ncat<\/span> ><\/span> \/etc\/containerd\/certs.d\/registry.k8s.io\/hosts.toml <<<\/span> 'EOF'
\nserver = "https:\/\/registry.k8s.io"<\/p>\n
\n capabilities = ["pull", "resolve", "push"]
\nEOF<\/span><\/p>\n\u914d\u7f6equay.io\u955c\u50cf\u52a0\u901f<\/h6>\n
\nmkdir<\/span> -p \/etc\/containerd\/certs.d\/quay.io
\ncat<\/span> ><\/span> \/etc\/containerd\/certs.d\/quay.io\/hosts.toml <<<\/span> 'EOF'
\nserver = "https:\/\/quay.io"<\/p>\n
\n capabilities = ["pull", "resolve", "push"]
\nEOF<\/span><\/p>\n\u914d\u7f6edocker.elastic.io\u955c\u50cf\u52a0\u901f<\/h6>\n
\nmkdir<\/span> -p \/etc\/containerd\/certs.d\/docker.elastic.co
\ntee<\/span> \/etc\/containerd\/certs.d\/docker.elastic.co\/hosts.toml <<<\/span> 'EOF'
\nserver = "https:\/\/docker.elastic.co"<\/p>\n
\n capabilities = ["pull", "resolve", "push"]
\nEOF<\/span><\/p>\n\u91cd\u542fcontainerd\u751f\u6548\u914d\u7f6e<\/h6>\n
\nsystemctl status containerd<\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000500-69828d2c50e81.png\")
<\/p>\n\u8bbe\u7f6ecrictl<\/h5>\n
\nruntime-endpoint: unix:\/\/\/var\/run\/containerd\/containerd.sock
\nimage-endpoint: unix:\/\/\/var\/run\/containerd\/containerd.sock
\ntimeout: 10
\ndebug: false
\nEOF<\/span><\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000500-69828d2cb387b.png\")
<\/p>\n\u6240\u6709\u8282\u70b9\u90e8\u7f72\u5b89\u88c5 kubeadm, kubelet, kubectl\u76f8\u5173\u7ec4\u4ef6<\/h4>\n
\n# \u6dfb\u52a0\u94f6\u6cb3\u9e92\u9e9fV11\u670d\u52a1\u5668\u7cfb\u7edfk8s\u5b89\u88c5\u6e90\u4ed3\u5e93\u5730\u5740<\/span>
\ndnf config-manager –add-repo https:\/\/eps-server.openkylin.top\/NS\/V11\/2503\/EPKL\/multi_version\/Overlay\/x86_64\/
\n# \u5b89\u88c5k8s\u53ca\u5176\u7ec4\u4ef6<\/span>
\ndnf install<\/span> -y kubernetes*
\n# \u67e5\u770bk8s\u76f8\u5173\u7684\u8f6f\u4ef6\u5305<\/span>
\n yum list |<\/span> grep<\/span> kubernetes<\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000500-69828d2cce3e1.png\")
<\/p>\n\u521d\u59cb\u5316 k8s \u96c6\u7fa4（master\u8282\u70b9\u6267\u884c）<\/h4>\n
\u751f\u6210k8s\u96c6\u7fa4\u521d\u59cb\u5316yaml\u6587\u4ef6<\/h5>\n
\nmkdir<\/span> -p ~\/kubeadm_init &&<\/span> cd<\/span> ~\/kubeadm_init
\ncat<\/span> ><\/span> ~\/kubeadm_init\/kubeadm-init.yaml <<<\/span> EOF
\napiVersion: kubeadm.k8s.io\/v1beta4
\nbootstrapTokens:
\n– groups:
\n – system:bootstrappers:kubeadm:default-node-token
\n token: abcdef.0123456789abcdef
\n ttl: 24h0m0s
\n usages:
\n – signing
\n – authentication
\nkind: InitConfiguration
\nlocalAPIEndpoint:
\n advertiseAddress: 192.168.17.180
\n bindPort: 6443
\nnodeRegistration:
\n criSocket: unix:\/\/\/var\/run\/containerd\/containerd.sock
\n imagePullPolicy: IfNotPresent
\n imagePullSerial: true
\n name: k8s-master
\n taints: []
\n—
\napiServer:
\n certSANs:
\n – 170.34.88.9
\n#apiServer: {}
\napiVersion: kubeadm.k8s.io\/v1beta4
\ncaCertificateValidityPeriod: 87600h0m0s
\ncertificateValidityPeriod: 87600h0m0s
\ncertificatesDir: \/etc\/kubernetes\/pki
\nclusterName: kubernetes
\ncontrollerManager: {}
\ndns: {}
\nencryptionAlgorithm: RSA-2048
\netcd:
\n local:
\n dataDir: \/var\/lib\/etcd
\nimageRepository: registry.aliyuncs.com\/google_containers
\nkind: ClusterConfiguration
\nkubernetesVersion: v1.34.1
\nnetworking:
\n dnsDomain: cluster.local
\n podSubnet: 10.244.0.0\/16
\n serviceSubnet: 10.96.0.0\/12
\nscheduler: {}
\n—
\napiVersion: kubelet.config.k8s.io\/v1beta1
\nkind: KubeletConfiguration
\ncgroupDriver: systemd
\nEOF<\/span><\/p>\n\u521d\u59cb\u5316k8s\u96c6\u7fa4<\/h5>\n
\n# \u67e5\u770b\u955c\u50cf<\/span>
\ncrictl images<\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000501-69828d2d3bca7.png\")
<\/p>\n![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000501-69828d2d5dd1d.png\")
<\/p>\n
\nsource<\/span> ~\/.bashrc<\/p>\n\u5c06node\u8282\u70b9\u6dfb\u52a0\u5230\u96c6\u7fa4<\/h4>\n
![\"\"](\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/02\/20260204000502-69828d2e00f49.png\")
<\/p>\n![\"\"](\"2026-02-04yyebzixg0c3.png\")
<\/p>\n![\"\"](\"2026-02-04bepdw3f50xa.png\")
<\/p>\n
\nsystemctl enable<\/span> kubelet.service<\/p>\n![\"\"](\"2026-02-041hl0kimzkd3.png\")
<\/p>\n
\nkubectl label nodes k8s-node2 node-role.kubernetes.io\/compute-node=<\/span><\/p>\n![\"\"](\"2026-02-04wtk35amw0nj.png\")
<\/p>\n\u5b89\u88c5calico\u7f51\u7edc\u63d2\u4ef6(\u53ea\u5728master\u8282\u70b9\u5b89\u88c5)<\/h4>\n
\u4e0b\u8f7dcalico.yaml\u6587\u4ef6<\/h5>\n
![\"\"](\"2026-02-04lbqax4ip5pn.png\")
<\/p>\n\u4fee\u6539pod\u7f51\u6bb5<\/h5>\n
![\"\"](\"2026-02-041hckcbz5xah.png\")
<\/p>\n\u4fee\u6539\u955c\u50cf\u6e90\u5730\u5740<\/h5>\n
![\"\"](\"2026-02-041sv1sju0td1.png\")
<\/p>\n\u5b89\u88c5calico\u7f51\u7edc<\/h5>\n
![\"\"](\"2026-02-04dyqnxdey3ee.png\")
<\/p>\n\u9a8c\u8bc1k8s\u96c6\u7fa4\u72b6\u6001<\/h5>\n
![\"\"](\"2026-02-04lodkzrksgh0.png\")
<\/p>\nmetrics-server\u5b89\u88c5<\/h4>\n
metrics-server&k8s\u517c\u5bb9\u8868<\/h5>\n
![\"\"](\"2026-02-04qnultbcddfy.png\")
<\/p>\n\u4e0b\u8f7dmetrics-server\u7684yaml\u6587\u4ef6<\/h5>\n
\u4fee\u6539\u5bb9\u5668\u8fd0\u884c\u65f6\u53c2\u6570\u548c\u955c\u50cf\u5730\u5740<\/h5>\n
![\"\"](\"2026-02-04xrpywog2xtt.png\")
<\/p>\n\u5b89\u88c5metrics-server<\/h5>\n
![\"\"](\"2026-02-04yivssutaj02.png\")
<\/p>\nmetrics-server\u9a8c\u8bc1\u6d4b\u8bd5<\/h5>\n
![\"\"](\"2026-02-04axhdcs4vcxw.png\")
<\/p>\n\u5b89\u88c5k8s\u4eea\u8868\u76d8Kubernetes DashboardKubernetes Dashboar<\/h3>\n
\u4e0b\u8f7d\u5b89\u88c5yaml\u914d\u7f6e\u6587\u4ef6<\/h4>\n
![\"\"](\"2026-02-04qrihdrltwkw.png\")
<\/p>\n\u4fee\u6539\u670d\u52a1\u7aef\u53e3\u7c7b\u578b<\/h4>\n
![\"\"](\"2026-02-04hz31tespobm.png\")
<\/p>\n\u4fee\u6539\u4e3a\u56fd\u5185\u955c\u50cf\u6e90\u5730\u5740<\/h4>\n
\n image: registry.cn-hangzhou.aliyuncs.com\/google_containers\/dashboard:v2.7.0
\n imagePullPolicy: Always
\n #image: kubernetesui\/metrics-scraper:v1.0.8<\/span>
\n image: registry.cn-hangzhou.aliyuncs.com\/google_containers\/metrics-scraper:v1.0.8<\/p>\n![\"\"](\"2026-02-04tb2ubd2k3ja.png\")
<\/p>\n![\"\"](\"2026-02-04olil5wy3k3n.png\")
<\/p>\n\u5b89\u88c5kubernetes-dashboard<\/h4>\n
![\"\"](\"2026-02-04anxczumrws1.png\")
<\/p>\n\u521b\u5efakubernetes-dashboard\u8d26\u6237<\/h4>\n
\nkind: ServiceAccount
\nmetadata:
\n name: admin-user
\n namespace: kubernetes-dashboard
\n—
\napiVersion: rbac.authorization.k8s.io\/v1
\nkind: ClusterRoleBinding
\nmetadata:
\n name: admin-user
\nroleRef:
\n apiGroup: rbac.authorization.k8s.io
\n kind: ClusterRole
\n name: cluster-admin
\nsubjects:
\n – kind: ServiceAccount
\n name: admin-user
\n namespace: kubernetes-dashboard<\/p>\n![\"\"](\"2026-02-04rdkzgpj4jzl.png\")
<\/p>\n\u521b\u5efa\u8d26\u6237\u767b\u5f55\u5bc6\u94a5<\/h4>\n
\nkind: Secret
\nmetadata:
\n name: admin-user-token
\n namespace: kubernetes-dashboard
\n annotations:
\n kubernetes.io\/service-account.name: admin-user
\ntype: kubernetes.io\/service-account-token<\/p>\n![\"\"](\"2026-02-04zts0folwj5z.png\")
<\/p>\n\u67e5\u770btoken<\/h4>\n
![\"\"](\"2026-02-04ydmzb2erfrm.png\")
<\/p>\n\u67e5\u770bkubenetes-dashboard\u66b4\u9732\u51fa\u6765\u7684\u8bbf\u95ee\u7aef\u53e3<\/h4>\n
![\"\"](\"2026-02-044fboslq11xi.png\")
<\/p>\n\u8bbf\u95eekubernetes-dashboard<\/h4>\n
![\"\"](\"2026-02-04b3g3ncsj0jp.png\")
<\/p>\n![\"\"](\"2026-02-04lnjksd2akrm.png\")
<\/p>\n\u9a8c\u8bc1\u96c6\u7fa4\u529f\u80fd（\u53ef\u9009）<\/h3>\n
\u90e8\u7f72\u4e00\u4e2a\u6d4b\u8bd5 Nginx \u5e94\u7528<\/h4>\n
\nkind: Deployment
\nmetadata:
\n name: nginx-deployment
\n labels:
\n app: nginx
\nspec:
\n replicas: 3<\/span>
\n selector:
\n matchLabels:
\n app: nginx
\n template:
\n metadata:
\n labels:
\n app: nginx
\n spec:
\n containers:
\n – name: nginx
\n image: nginx:latest
\n ports:
\n – containerPort: 80<\/span><\/p>\n
\napiVersion: v1
\nkind: Service
\nmetadata:
\n name: nginx-service
\nspec:
\n selector:
\n app: nginx
\n ports:
\n – protocol: TCP
\n port: 80<\/span>
\n targetPort: 80<\/span>
\n type: LoadBalancer<\/p>\n\u90e8\u7f72nginx<\/h4>\n
![\"\"](\"2026-02-04jfghhiuu0lh.png\")
<\/p>\n\u68c0\u67e5\u90e8\u7f72\u548c\u670d\u52a1\u72b6\u6001<\/h4>\n
![\"\"](\"2026-02-04gncxteka2ia.png\")
<\/p>\n![\"\"](\"2026-02-04duhqwmjaymj.png\")
<\/p>\n\u8bbf\u95eenginx<\/h4>\n
![\"\"](\"2026-02-04ov1yysvw1cr.png\")
<\/p>\n\u540e\u7eed\u5efa\u8bae<\/h3>\n
\n
\u5199\u5728\u6700\u540e<\/h3>\n
\n\u73af\u5883\u8bf4\u660e
\n\u7cfb\u7edf&\u8f6f\u4ef6\u7248\u672c
\n\u7cfb\u7edf\u7248\u672c：Kylin-Server-V11-2503-Release-General-20250715-x86_64-2025-07-2<\/p>\n","protected":false},"author":2,"featured_media":71670,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[120,322,97,873,618,44,981],"topic":[],"class_list":["post-71690","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-kubernetes","tag-kylin","tag-97","tag-873","tag-618","tag-44","tag-981"],"yoast_head":"\n