Merge pull request #3 from paradeum-team/jyliu

add docs/部署keepalived+haproxy高可用k8s1.22.2.md

ansible.hosts.ha.publicnetwork.tpl

@@ -37,7 +37,7 @@ registry_domain=docker.io
 registry_repo="{{registry_domain}}"
 kubeadm_registry_repo="registry.cn-hangzhou.aliyuncs.com"
 coredns_image_repo="{{registry_repo}}/coredns"
-coredns_image_tag="1.8.4"
+coredns_image_tag="1.8.0"
 flannel_image_repo="quay.io"
 flannel_image_tag="v0.14.0"
 

ansible.hosts.ha.tpl

@@ -37,7 +37,7 @@ registry_domain=docker.io
 registry_repo="{{registry_domain}}"
 kubeadm_registry_repo="registry.cn-hangzhou.aliyuncs.com"
 coredns_image_repo="{{registry_repo}}/coredns"
-coredns_image_tag="1.8.4"
+coredns_image_tag="1.8.0"
 flannel_image_repo="quay.io"
 flannel_image_tag="v0.14.0"
 

ansible.hosts.tpl

@@ -37,7 +37,7 @@ registry_domain=registry.hisun.netwarps.com
 registry_repo="{{registry_domain}}" 
 kubeadm_registry_repo="registry.cn-hangzhou.aliyuncs.com"
 coredns_image_repo="docker.io/coredns"
-coredns_image_tag="1.8.4"
+coredns_image_tag="1.8.0"
 flannel_image_repo="quay.io"
 flannel_image_tag="v0.14.0"
 

docs/部署keepalived+haproxy高可用k8s1.22.2.md

@@ -0,0 +1,137 @@
+# 部署keepalived+haproxy高可用k8s1.22.2
+
+## 主机规划
+
+IP|主机名或用途
+-----|-----
+172.16.92.250|VIP
+172.16.188.11|master1.solarfs.k8s
+172.16.94.181|master2.solarfs.k8s
+172.16.241.26|master3.solarfs.k8s
+172.16.13.77|logging1.solarfs.k8s
+172.16.36.25|logging2.solarfs.k8s
+172.16.115.194|logging3.solarfs.k8s
+
+信息|备注
+-----|-----
+系统版本|CentoOS 8.3
+Docker 版本|20.10
+K8s 版本|1.22.2
+Pod 网段|10.128.0.0/16
+Service 网段|10.96.0.0/12
+
+## 下载 ansible-k8s
+
+登录 master1 主机
+
+```
+yum install -y git ansible
+mkdir -p /data
+cd /data
+git clone https://github.com/paradeum-team/ansible-k8s.git
+```
+
+## 修改 ansible 配置
+
+```
+cd /data/ansible-k8s/
+cp ansible.hosts.ha.vip.tpl ansible.hosts.tmp
+```
+
+
+修改 `ansible.hosts.tmp` 如下
+
+```
+[k8sCluster:children]
+masters
+nodes
+install
+new_nodes
+
+# Set variables common for all k8s-cluster hosts
+[k8sCluster:vars]
+# SSH user, this user should allow ssh based auth without requiring a password
+ansible_ssh_user=root
+#ansible_ssh_pass=xxxxxx
+ansible_port=22
+
+# If ansible_ssh_user is not root, ansible_become must be set to true
+ansible_become=false
+
+# 是否更新操作系统及内核
+is_system_update=True
+
+# 默认节点不是公网节点
+public_network_node = False
+
+# 是否开启 flannel
+flannel_enable=True
+
+# k8s 版本
+k8s_version=1.22.2
+# 定义外部镜像仓库
+registry_domain=registry.hisun.netwarps.com
+registry_repo="{{registry_domain}}"
+kubeadm_registry_repo="registry.hisun.netwarps.com"
+coredns_image_repo="{{registry_repo}}/coredns"
+coredns_image_tag="1.8.6"
+flannel_image_repo="{{registry_repo}}"
+flannel_image_tag="v0.14.0"
+
+# subnet
+service_subnet=10.96.0.0/12
+pod_subnet=10.128.0.0/16
+
+# api server
+master_vip="172.16.92.250"
+master_vip_advertise_address="172.16.92.250"
+node_domain=solarfs.k8s
+install_domain=install.{{node_domain}}
+api_server_domain="api-server.{{node_domain}}"
+api_server_src_port="6443"
+api_server_port="8443"
+haproxy_image="{{registry_repo}}/library/haproxy:2.1.4"
+# keepalived
+keepalived_haproxy_enabled=True
+keepalived_image="{{registry_repo}}/osixia/keepalived:2.0.17"
+# keepalived router id , 不同集群 id 不同
+keepalived_router_id=250
+keepalived_auth_pass=solarfs{{keepalived_router_id}}
+
+# helm
+helm_binary_md5=e4500993ba21e5e6bdfbc084b4342025
+helm_binary_url=https://pnode.solarfs.io/dn/file/{{helm_binary_md5}}/helm-v3.6.0-linux-amd64.tar.gz
+
+[install]
+master1.solarfs.k8s
+
+[masters]
+master1.solarfs.k8s ansible_host=172.16.188.11
+master2.solarfs.k8s ansible_host=172.16.94.181
+master3.solarfs.k8s ansible_host=172.16.241.26
+
+[nodes]
+logging1.solarfs.k8s ansible_host=172.16.13.77
+logging2.solarfs.k8s ansible_host=172.16.36.25
+logging3.solarfs.k8s ansible_host=172.16.115.194
+
+```
+
+## 配置master1免密登录自己和其它主机
+
+略
+
+## 安装 k8s
+
+所有主机初始化, 初始化完成后所有主机会重启
+
+```
+./base_init.sh
+```
+
+登录 master1 主机，安装 k8s
+
+```
+./install_k8s.sh
+```
+