가상서버 환경

쿠버네티스 설치구성

상연기술 2025. 3. 15. 08:48

1. 패키지 최신 업데이트

sudo apt update && sudo apt upgrade -y

 

2. 필요한 패키지 사전설치
sudo apt install -y apt-transport-https ca-certificates curl gnupg lsb-release

 

3. SWAP 사용안함

sudo swapoff -a

 

4. 쿠버네티스 key값 다운로드

sudo curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.28/deb/Release.key \

         | sudo gpg --dearmor -o /usr/share/keyrings/kubernetes-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.28/deb/ /" \

         | sudo tee /etc/apt/sources.list.d/kubernetes.list
sudo apt update

 

5. containerd 설치
sudo apt install -y containerd

 

6. containerd 설정

sudo mkdir -p /etc/containerd
containerd config default | sudo tee /etc/containerd/config.toml >/dev/null
sudo sed -i 's/SystemdCgroup = false/SystemdCgroup = true/' /etc/containerd/config.toml
grep SystemdCgroup /etc/containerd/config.toml
sudo systemctl restart containerd
sudo systemctl enable containerd

 

7. kubelet kubeadm kubectl 설치
sudo apt update
sudo apt install -y kubelet kubeadm kubectl
sudo apt-mark hold kubelet kubeadm kubectl

 

8. 쿠버네티스 설정
cat <<EOF | sudo tee /etc/modules-load.d/k8s.conf
overlay
br_netfilter
EOF
sudo modprobe overlay
sudo modprobe br_netfilter

cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward = 1
EOF
sudo sysctl --system

sudo tee /etc/crictl.yaml <<EOF
runtime-endpoint: unix:///run/containerd/containerd.sock
image-endpoint: unix:///run/containerd/containerd.sock
timeout: 2
debug: false
EOF

rebooting 하기

 

9. 쿠버네티스 초기화
sudo kubeadm init --apiserver-advertise-address=192.20.20.10 --pod-network-cidr=192.168.0.0/16 --v=5

##### 아래 출력된 내용을 워커노드에 실행 #######


Your Kubernetes control-plane has initialized successfully!
To start using your cluster, you need to run the following as a regular user:

 

mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config

Alternatively, if you are the root user, you can run:

export KUBECONFIG=/etc/kubernetes/admin.conf

You should now deploy a pod network to the cluster.
Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
https://kubernetes.io/docs/concepts/cluster-administration/addons/

Then you can join any number of worker nodes by running the following on each as root:

kubeadm join 192.20.20.10:6443 --token jk3ak8.vksa2d6h4kfye4ee \
--discovery-token-ca-cert-hash sha256:c125aa030b953bdc2408ad2b4df564707f2a6325122715536cdd510977769203

##############################

 

10. 쿠버네티스 네트워크 설치
kubectl apply -f https://raw.githubusercontent.com/projectcalico/calico/v3.26.0/manifests/calico.yaml

(kubectl cluster-info 결과에 10.0.2.15 가 있었음. 이건 외부로 나가는 NAT용 인걸로 알고 잇음)