ZH-trans: Update install-kubeadm.md (#11955)
* fix typo of install-kubeadm.md fix typo of install-kubeadm.md * Update install-kubeadm.md
This commit is contained in:
committed by
Kubernetes Prow Robot
parent
91508218cd
commit
0cf8861a49
@@ -18,7 +18,10 @@ weight: 20
|
||||
For information how to create a cluster with kubeadm once you have performed this installation process,
|
||||
see the [Using kubeadm to Create a Cluster](/docs/setup/independent/create-cluster-kubeadm/) page.
|
||||
-->
|
||||
<img src="https://raw.githubusercontent.com/cncf/artwork/master/kubernetes/certified-kubernetes/versionless/color/certified-kubernetes-color.png" align="right" width="150px">本文会告诉您如何安装 `kubeadm` 工具。完成本文提到的安装步骤后,您可以阅读 [使用 kubeadm 来创建集群](/docs/setup/independent/create-cluster-kubeadm/) 了解如何使用 kubeadm 来创建集群。
|
||||
<img src="https://raw.githubusercontent.com/cncf/artwork/master/kubernetes/certified-kubernetes/versionless/color/certified-kubernetes-color.png" align="right" width="150px">
|
||||
本文会告诉您如何安装 `kubeadm` 工具。
|
||||
完成本文提到的安装步骤后,您可以阅读[使用 kubeadm 来创建集群](/docs/setup/independent/create-cluster-kubeadm/),
|
||||
了解如何使用 kubeadm 来创建集群。
|
||||
|
||||
{{% /capture %}}
|
||||
|
||||
@@ -51,9 +54,9 @@ see the [Using kubeadm to Create a Cluster](/docs/setup/independent/create-clust
|
||||
* 每台机器 2 GB 或更多的 RAM (如果少于这个数字将会影响您应用的运行内存)
|
||||
* 2 CPU 核心或更多
|
||||
* 集群中的所有机器的网络彼此均能相互连接(公网和内网都可以)
|
||||
* 节点之中不可以有重复的主机名,MAC 地址,product_uuid。更多详细信息请参见[这里](#verify-the-mac-address-and-product-uuid-are-unique-for-every-node) 。
|
||||
* 开启主机上的一些特定端口. 更多详细信息请参见[这里](#check-required-ports)。
|
||||
* 禁用 Swap 交换分区。为了保证 kubelet 正确运行,您 **必须** 禁用交换分区。
|
||||
* 节点之中不可以有重复的主机名、MAC 地址或 product_uuid。请参见[这里](#verify-the-mac-address-and-product-uuid-are-unique-for-every-node)了解更多细节。
|
||||
* 开启主机上的一些特定端口。请参见[这里](#check-required-ports)了解更多细节。
|
||||
* 禁用 Swap 交换分区。为了保证 kubelet 正确运行,您**必须**禁用交换分区。
|
||||
|
||||
{{% /capture %}}
|
||||
|
||||
@@ -62,14 +65,16 @@ see the [Using kubeadm to Create a Cluster](/docs/setup/independent/create-clust
|
||||
<!--
|
||||
## Verify the MAC address and product_uuid are unique for every node
|
||||
-->
|
||||
|
||||
## 确保每个节点上 MAC 地址和 product_uuid 的唯一性。
|
||||
|
||||
<!--
|
||||
* You can get the MAC address of the network interfaces using the command `ip link` or `ifconfig -a`
|
||||
* The product_uuid can be checked by using the command `sudo cat /sys/class/dmi/id/product_uuid`
|
||||
-->
|
||||
* 您可以使用下列命令获取网络接口的 MAC 地址:`ip link` 或是 `ifconfig -a`
|
||||
* 下列命令可以用来获取 product_uuid `sudo cat /sys/class/dmi/id/product_uuid`
|
||||
|
||||
* 您可以使用命令 `ip link` 或 `ifconfig -a` 来获取网络接口的 MAC 地址
|
||||
* 用来获取 product_uuid 的命令是 `sudo cat /sys/class/dmi/id/product_uuid`
|
||||
|
||||
<!--
|
||||
It is very likely that hardware devices will have unique addresses, although some virtual machines may have
|
||||
@@ -77,7 +82,9 @@ identical values. Kubernetes uses these values to uniquely identify the nodes in
|
||||
If these values are not unique to each node, the installation process
|
||||
may [fail](https://github.com/kubernetes/kubeadm/issues/31).
|
||||
-->
|
||||
一般来讲,硬件设备会拥有独一无二的地址,但是有些虚拟机可能会雷同。Kubernetes 使用这些值来唯一确定集群中的节点。如果这些值在集群中不唯一,可能会导致安装[失败](https://github.com/kubernetes/kubeadm/issues/31)。
|
||||
|
||||
一般来讲,硬件设备会拥有独一无二的地址,但是有些虚拟机可能会雷同。Kubernetes 使用这些值来唯一确定集群中的节点。
|
||||
如果这些值在集群中不唯一,可能会导致安装[失败](https://github.com/kubernetes/kubeadm/issues/31)。
|
||||
|
||||
<!--
|
||||
## Check network adapters
|
||||
@@ -89,6 +96,7 @@ may [fail](https://github.com/kubernetes/kubeadm/issues/31).
|
||||
If you have more than one network adapter, and your Kubernetes components are not reachable on the default
|
||||
route, we recommend you add IP route(s) so Kubernetes cluster addresses go via the appropriate adapter.
|
||||
-->
|
||||
|
||||
如果您有一个以上的网络适配器,同时您的 Kubernetes 组件通过默认路由不可达,我们建议您预先添加 IP 路由规则,这样 Kubernetes 集群就可以通过对应的适配器完成连接。
|
||||
|
||||
<!--
|
||||
@@ -101,7 +109,9 @@ route, we recommend you add IP route(s) so Kubernetes cluster addresses go via t
|
||||
### Master node(s)
|
||||
| Protocol | Direction | Port Range | Purpose | Used By |
|
||||
-->
|
||||
|
||||
### Master 节点
|
||||
|
||||
| 规则 | 方向 | 端口范围 | 作用 | 使用者 |
|
||||
|----------|-----------|------------|-------------------------|---------------------------|
|
||||
| TCP | Inbound | 6443* | Kubernetes API server | All |
|
||||
@@ -109,10 +119,12 @@ route, we recommend you add IP route(s) so Kubernetes cluster addresses go via t
|
||||
| TCP | Inbound | 10250 | Kubelet API | Self, Control plane |
|
||||
| TCP | Inbound | 10251 | kube-scheduler | Self |
|
||||
| TCP | Inbound | 10252 | kube-controller-manager | Self |
|
||||
|
||||
<!--
|
||||
### Worker node(s)
|
||||
| Protocol | Direction | Port Range | Purpose | Used By |
|
||||
-->
|
||||
|
||||
### Worker 节点
|
||||
|
||||
| 规则 | 方向 | 端口范围 | 作用 | 使用者 |
|
||||
@@ -122,19 +134,23 @@ route, we recommend you add IP route(s) so Kubernetes cluster addresses go via t
|
||||
<!--
|
||||
** Default port range for [NodePort Services](/docs/concepts/services-networking/service/).
|
||||
-->
|
||||
** [NodePort 服务](/docs/concepts/services-networking/service/) 的默认端口范围。
|
||||
|
||||
** [NodePort 服务](/docs/concepts/services-networking/service/)的默认端口范围。
|
||||
|
||||
<!--
|
||||
Any port numbers marked with * are overridable, so you will need to ensure any
|
||||
custom ports you provide are also open.
|
||||
-->
|
||||
使用 * 标记的任意端口号都有可能被覆盖,所以您需要保证您的自定义端口的状态是开放的。
|
||||
|
||||
使用 * 标记的任意端口号都有可能被覆盖,所以您需要保证所提供的自定义端口的是开放的。
|
||||
|
||||
<!--
|
||||
Although etcd ports are included in master nodes, you can also host your own
|
||||
etcd cluster externally or on custom ports.
|
||||
-->
|
||||
|
||||
虽然 master 节点已经包含了 etcd 的端口,您也可以使用自定义的外部 etcd 集群,或是指定自定义端口。
|
||||
|
||||
<!--
|
||||
The pod network plugin you use (see below) may also require certain ports to be
|
||||
open. Since this differs with each pod network plugin, please see the
|
||||
@@ -150,7 +166,9 @@ Since v1.6.0, Kubernetes has enabled the use of CRI, Container Runtime Interface
|
||||
The container runtime used by default is Docker, which is enabled through the built-in
|
||||
`dockershim` CRI implementation inside of the `kubelet`.
|
||||
-->
|
||||
从 v1.6.0 起,Kubernetes 开始允许使用 CRI,容器运行时接口。默认的容器运行时是 Docker,这是由 `kubelet` 内置的 CRI 实现: `dockershim` 开启的。
|
||||
|
||||
从 v1.6.0 起,Kubernetes 开始默认允许使用 CRI(容器运行时接口)。
|
||||
默认的容器运行时是 Docker,这是由 `kubelet` 内置的 CRI 实现 `dockershim` 开启的。
|
||||
|
||||
<!--
|
||||
Other CRI-based runtimes include:
|
||||
@@ -160,6 +178,7 @@ Other CRI-based runtimes include:
|
||||
- [frakti](https://github.com/kubernetes/frakti)
|
||||
- [rkt](https://github.com/kubernetes-incubator/rktlet)
|
||||
-->
|
||||
|
||||
其他的容器运行时有:
|
||||
|
||||
- [containerd](https://github.com/containerd/cri) (containerd 的内置 CRI 插件)
|
||||
@@ -170,30 +189,27 @@ Other CRI-based runtimes include:
|
||||
<!--
|
||||
Refer to the [CRI installation instructions](/docs/setup/cri) for more information.
|
||||
-->
|
||||
参考 [CRI 安装指南](/docs/setup/cri) 获取更多信息。
|
||||
参考 [CRI 安装指南](/docs/setup/cri)获取更多信息。
|
||||
|
||||
<!--
|
||||
## Installing kubeadm, kubelet and kubectl
|
||||
-->
|
||||
## 安装 kubeadm, kubelet 和 kubectl
|
||||
## 安装 kubeadm、kubelet 和 kubectl
|
||||
|
||||
<!--
|
||||
You will install these packages on all of your machines:
|
||||
|
||||
* `kubeadm`: the command to bootstrap the cluster.
|
||||
|
||||
* `kubelet`: the component that runs on all of the machines in your cluster
|
||||
and does things like starting pods and containers.
|
||||
|
||||
* `kubectl`: the command line util to talk to your cluster.
|
||||
-->
|
||||
您需要在每台机器上都安装以下的软件包:
|
||||
您需要在每台机器上安装以下的软件包:
|
||||
|
||||
* `kubeadm`: 用来初始化集群的指令。
|
||||
* `kubeadm`:用来初始化集群的指令。
|
||||
|
||||
* `kubelet`: 在集群中的每个节点上用来启动 pod 和 container 等。
|
||||
* `kubelet`:在集群中的每个节点上用来启动 pod 和容器等。
|
||||
|
||||
* `kubectl`: 用来与集群通信的命令行工具。
|
||||
* `kubectl`:用来与集群通信的命令行工具。
|
||||
|
||||
<!--
|
||||
kubeadm **will not** install or manage `kubelet` or `kubectl` for you, so you will
|
||||
@@ -204,7 +220,10 @@ kubelet and the control plane is supported, but the kubelet version may never ex
|
||||
server version. For example, kubelets running 1.7.0 should be fully compatible with a 1.8.0 API server,
|
||||
but not vice versa.
|
||||
-->
|
||||
kubeadm **不能** 帮您安装或管理 `kubelet` 或 `kubectl` ,所以您得保证它们满足通过 kubeadm 安装的 Kubernetes 控制层对版本的要求。如果版本没有满足要求,就有可能导致一些难以想到的错误或问题。然而控制层与 kubelet 间的 _小版本号_ 不一致无伤大雅,不过请记住 kubelet 的版本不可以超过 API server 的版本。例如 1.8.0 的 API server 可以适配 1.7.0 的 kubelet,反之则不可以。
|
||||
kubeadm **不能**帮您安装或管理 `kubelet` 或 `kubectl`,所以您得保证它们满足通过 kubeadm 安装的 Kubernetes 控制面对版本的要求。
|
||||
如果版本没有满足要求,就有可能导致一些难以想到的错误或问题。
|
||||
控制面与 kubelet 间的_小版本号_不一致无伤大雅,不过请记住 kubelet 的版本不可以超过 API 服务器的版本。
|
||||
例如 1.7.0 版本的 kubelet 可以兼容 1.8.0 版本的 API 服务器,反之则不可以。
|
||||
|
||||
<!--
|
||||
{{< warning >}}
|
||||
@@ -214,7 +233,7 @@ This is because kubeadm and Kubernetes require
|
||||
{{</ warning >}}
|
||||
-->
|
||||
{{< warning >}}
|
||||
这些指南不包括所有系统升级时使用的 Kubernetes 程序包。这是因为 kubeadm 和 Kubernetes 需要 [升级时的特别注意事项](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade-1-11/).
|
||||
这些指南不包括系统升级时使用的所有 Kubernetes 程序包。这是因为 kubeadm 和 Kubernetes 需要[特殊的升级注意事项](/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade-1-11/)。
|
||||
{{</ warning >}}
|
||||
|
||||
<!--
|
||||
@@ -222,7 +241,7 @@ For more information on version skews, please read our
|
||||
[version skew policy](/docs/setup/independent/create-cluster-kubeadm/#version-skew-policy).
|
||||
-->
|
||||
|
||||
更多关于版本冲突的信息,请参阅 [版本冲突政策](/docs/setup/independent/create-cluster-kubeadm/#version-skew-policy)。
|
||||
更多关于版本冲突的信息,请参阅[版本冲突政策](/docs/setup/independent/create-cluster-kubeadm/#version-skew-policy)。
|
||||
|
||||
{{< tabs name="k8s_install" >}}
|
||||
{{% tab name="Ubuntu, Debian or HypriotOS" %}}
|
||||
@@ -243,6 +262,7 @@ apt-mark hold kubelet kubeadm kubectl
|
||||
|
||||
{{% /tab %}}
|
||||
{{% tab name="CentOS, RHEL or Fedora" %}}
|
||||
|
||||
```bash
|
||||
cat <<EOF > /etc/yum.repos.d/kubernetes.repo
|
||||
[kubernetes]
|
||||
@@ -291,7 +311,7 @@ systemctl enable kubelet && systemctl start kubelet
|
||||
<!--
|
||||
Install CNI plugins (required for most pod network):
|
||||
-->
|
||||
安装 CNI 插件(大多数 pod network 都需要):
|
||||
安装 CNI 插件(大多数 pod 网络都需要):
|
||||
|
||||
```bash
|
||||
CNI_VERSION="v0.6.0"
|
||||
@@ -302,7 +322,7 @@ curl -L "https://github.com/containernetworking/plugins/releases/download/${CNI_
|
||||
<!--
|
||||
Install crictl (required for kubeadm / Kubelet Container Runtime Interface (CRI))
|
||||
-->
|
||||
安装 crictl (kubeadm / Kubelet 的容器运行时接口 (CRI) 要求)
|
||||
安装 crictl (kubeadm/Kubelet 的容器运行时接口 (CRI) 要求)
|
||||
|
||||
```bash
|
||||
CRICTL_VERSION="v1.11.1"
|
||||
@@ -313,7 +333,7 @@ curl -L "https://github.com/kubernetes-incubator/cri-tools/releases/download/${C
|
||||
<!--
|
||||
Install `kubeadm`, `kubelet`, `kubectl` and add a `kubelet` systemd service: -->
|
||||
|
||||
安装 `kubeadm`, `kubelet`, `kubectl` 并且添加一个 `kubelet` systemd 服务:
|
||||
安装 `kubeadm`、`kubelet` 和 `kubectl` 并且添加一个 `kubelet` systemd 服务:
|
||||
|
||||
```bash
|
||||
RELEASE="$(curl -sSL https://dl.k8s.io/release/stable.txt)"
|
||||
@@ -354,7 +374,7 @@ kubelet 现在每隔几秒就会重启,因为它陷入了一个等待 kubeadm
|
||||
When using Docker, kubeadm will automatically detect the cgroup driver for the kubelet
|
||||
and set it in the `/var/lib/kubelet/kubeadm-flags.env` file during runtime.
|
||||
-->
|
||||
使用 Docker 时,kubeadm 会自动为其检测 cgroup 驱动在运行时对 `/var/lib/kubelet/kubeadm-flags.env` 文件进行配置。
|
||||
使用 Docker 时,kubeadm 会自动为其检测 cgroup 驱动并在运行时对 `/var/lib/kubelet/kubeadm-flags.env` 文件进行配置。
|
||||
<!--
|
||||
If you are using a different CRI, you have to modify the file
|
||||
`/etc/default/kubelet` with your `cgroup-driver` value, like so:
|
||||
@@ -375,7 +395,7 @@ user defined arguments for the kubelet.
|
||||
Please mind, that you **only** have to do that if the cgroup driver of your CRI
|
||||
is not `cgroupfs`, because that is the default value in the kubelet already.
|
||||
-->
|
||||
请注意,您**只**需要在您的 cgroup driver 不是 `cgroupfs` 时这么做,因为 `cgroupfs` 已经是 kubelet 的默认值了。
|
||||
请注意,您**只**需要在您的 cgroup 驱动程序不是 `cgroupfs` 时这么做,因为 `cgroupfs` 是 kubelet 的默认值。
|
||||
|
||||
<!--
|
||||
Restarting the kubelet is required:
|
||||
@@ -395,7 +415,8 @@ systemctl restart kubelet
|
||||
<!--
|
||||
If you are running into difficulties with kubeadm, please consult our [troubleshooting docs](/docs/setup/independent/troubleshooting-kubeadm/).
|
||||
-->
|
||||
如果您在使用 kubeadm 时候遇到问题,请查看我们的 [疑难解答文档](/docs/setup/independent/troubleshooting-kubeadm/)。
|
||||
如果您在使用 kubeadm 时候遇到问题,请查看我们的[疑难解答文档](/docs/setup/independent/troubleshooting-kubeadm/)。
|
||||
|
||||
{{% capture whatsnext %}}
|
||||
<!--
|
||||
* [Using kubeadm to Create a Cluster](/docs/setup/independent/create-cluster-kubeadm/)
|
||||
|
||||
Reference in New Issue
Block a user