记录——kubeadm集群node节点加入

1. node节点关闭防火墙安全机制，映射等

2. 查看master的docker版本并安装与其相同版本。

docker version

列出docker版本

yum list docker-ce --showduplicates|sort -r

加速器配置

cat << EOF >> /etc/docker/daemon.json  { "registry-mirrors": ["https://q6e6fnms.mirror.aliyuncs.com"] } EOF
systemctl restart docke

3. 拉取组件
可在其他node查看镜像组件名称及标签。

docker images
REPOSITORY                                                        TAG                 IMAGE ID            CREATED             SIZE
registry.aliyuncs.com/google_containers/kube-proxy                v1.15.0             d235b23c3570        23 months ago       82.4MB
registry.aliyuncs.com/google_containers/kube-apiserver            v1.15.0             201c7a840312        23 months ago       207MB
registry.aliyuncs.com/google_containers/kube-controller-manager   v1.15.0             8328bb49b652        23 months ago       159MB
registry.aliyuncs.com/google_containers/kube-scheduler            v1.15.0             2d3813851e87        23 months ago       81.1MB
quay.io/coreos/flannel                                            v0.11.0-amd64       ff281650a721        2 years ago         52.6MB
registry.aliyuncs.com/google_containers/coredns                   1.3.1               eb516548c180        2 years ago         40.3MB
registry.aliyuncs.com/google_containers/pause                     3.1                 da86e6ba6ca1        3 years ago         742kB
registry.aliyuncs.com/google_containers/etcd                      3.3.10              2c4adeb21b4f        2 years ago         258MB

默认是从k8s.gcr.io拉取镜像的，因为地址在国外，所以拉取不下来，可以为镜像打标签。
只需要吧阿里云的名字换成k8s.gcr.io即可

如：docker tag registry.aliyuncs.com/google_containers/pause:3.1 k8s.gcr.io/pause:3.1

4. 安装kubelet、kubeadm

cat <<EOF > /etc/yum.repos.d/kubernetes.repo [kubernetes] name=Kubernetes baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64 enabled=1 gpgcheck=1 repo_gpgcheck=1 gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg EOF

需要与其他节点版本一致，其他节点为1.15

kubelet --version
Kubernetes v1.15.0

新node执行

yum install -y kubelet-1.15.0-0 kubeadm-1.15.0 kubectl-1.15.0
systemctl daemon-reload && systemctl enable kubelet && systemctl restart kubelet

5. master获取加入集群命令

kubeadm token create --print-join-command

回显

kubeadm join 192.168.100.110:6443 --token 0foltd.hk8asl73ovd6x0x7     --discovery-token-ca-cert-hash sha256:908dcdd4e76018da88d150d2fe442fbad20b13931e9c1dbe5b3f5d984e0ce35c

6. node加入集群
   执行master回显命令即可

kubeadm join 192.168.100.110:6443 --token 0foltd.hk8asl73ovd6x0x7     --discovery-token-ca-cert-hash sha256:908dcdd4e76018da88d150d2fe442fbad20b13931e9c1dbe5b3f5d984e0ce35c

7. 在master 查看新加入的节点

kubectl get nodes
NAME     STATUS   ROLES    AGE   VERSION
master   Ready    master   8d    v1.15.0
node1    Ready    <none>   8d    v1.15.0
node2    Ready    <none>   8d    v1.15.0
node3    Ready    <none>   45m   v1.15.0

问题

如果出现node状态为“Notready”，可以使用如下命令查看组件情况。

kubectl get pods -n kube-system

进一步排查

kubectl describe pods -n “加上名字”