下面按**“在 Debian 上卸载并重新安装 Kubernetes(k8s)”**来说明,适用于 kubeadm 方式 安装的集群(最常见)。
如果你是用 k3s / microk8s / 云厂商托管,方式不同,可告诉我。
sudo kubeadm reset -f
sudo systemctl stop kubelet
sudo systemctl disable kubelet
sudo apt-get purge -y kubeadm kubectl kubelet kubernetes-cni
sudo apt-get autoremove -y
sudo rm -rf \
/etc/kubernetes \
/var/lib/kubelet \
/var/lib/etcd \
/var/lib/kubelet \
~/.kube \
/opt/cni/bin \
/etc/cni/net.d
sudo iptables -F
sudo iptables -t nat -F
sudo ip link delete cni0
sudo ip link delete flannel.1
如果你要完全重装,建议也重装容器运行时:
sudo apt-get purge -y docker.io docker-ce
sudo rm -rf /var/lib/docker
sudo apt-get purge -y containerd
sudo rm -rf /var/lib/containerd
sudo swapoff -a
sudo sed -i '/ swap / s/^/#/' /etc/fstab
sudo modprobe br_netfilter
echo "br_netfilter" | sudo tee /etc/modules-load.d/br_netfilter.conf
cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward = 1
EOF
sudo sysctl --system
sudo apt-get update
sudo apt-get install -y containerd
初始化 containerd:
sudo mkdir -p /etc/containerd
containerd config default | sudo tee /etc/containerd/config.toml
sudo systemctl restart containerd
sudo systemctl enable containerd
sudo apt-get install -y apt-transport-https ca-certificates curl
curl -fsSL https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo gpg --dearmor -o /usr/share/keyrings/kubernetes.gpg
echo "deb [signed-by=/usr/share/keyrings/kubernetes.gpg] https://apt.kubernetes.io/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.list
sudo apt-get update
sudo apt-get install -y kubelet kubeadm kubectl
sudo apt-mark hold kubelet kubeadm kubectl
sudo kubeadm init --pod-network-cidr=10.244.0.0/16
初始化完成后:
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config
kubectl apply -f https://raw.githubusercontent.com/flannel-io/flannel/master/Documentation/kube-flannel.yml
在 Master 初始化时会有类似:
kubeadm join 192.168.x.x:6443 --token xxx --discovery-token-ca-cert-hash sha256:xxx
如果 token 失效:
kubeadm token create --print-join-command
如果你告诉我:
我可以给你精确命令。