下面给你一份在 Debian(11/12 常见版本)上安装 Kubernetes(kubeadm 方式)的标准流程,适合生产/学习环境。
sudo swapoff -a
sudo sed -i '/swap/d' /etc/fstab
sudo hostnamectl set-hostname master
# 或 node1、node2
cat <<EOF | sudo tee /etc/hosts
192.168.1.10 master
192.168.1.11 node1
EOF
sudo apt update
sudo apt install -y curl gnupg2 software-properties-common
sudo apt install -y containerd
sudo mkdir -p /etc/containerd
containerd config default | sudo tee /etc/containerd/config.toml
编辑:
sudo nano /etc/containerd/config.toml
修改:
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options]
SystemdCgroup = true
sudo systemctl restart containerd
sudo systemctl enable containerd
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.29/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg
echo "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.29/deb/ /" | sudo tee /etc/apt/sources.list.d/kubernetes.list
可替换
v1.29为你需要的版本
sudo apt update
sudo apt install -y kubelet kubeadm kubectl
sudo apt-mark hold kubelet kubeadm kubectl
⚠️ 只在 master 执行
sudo kubeadm init \
--pod-network-cidr=10.244.0.0/16
初始化成功后,会输出类似:
kubeadm join 192.168.1.10:6443 --token xxx --discovery-token-ca-cert-hash sha256:xxx
mkdir -p $HOME/.kube
sudo cp /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config
测试:
kubectl get nodes
kubectl apply -f https://docs.projectcalico.org/manifests/calico.yaml
或 Flannel:
kubectl apply -f https://github.com/flannel-io/flannel/releases/latest/download/kube-flannel.yml
在 node 节点执行 master 输出的 join 命令:
sudo kubeadm join 192.168.1.10:6443 --token xxx \
--discovery-token-ca-cert-hash sha256:xxx
kubectl get nodes
kubectl get pods -A
kubectl taint nodes --all node-role.kubernetes.io/control-plane-
journalctl -u kubelet -f
系统准备
→ 安装 containerd
→ 安装 kubeadm/kubelet/kubectl
→ kubeadm init
→ 安装 CNI
→ 加入 node
→ 验证集群
如果你需要:
可以直接告诉我,我可以给你定制版本 ✅