ืืขืื! ืืืึทื ื ืึธืืขื ืืื ืกืขืจืืื, ืืื ืืื ืืขืืืึธืคึผืก ืืื ืกืืจืฃ. ืื DevOps ืึธืคึผืืืืืื ื ืืื ืกืืจืฃ ืืืื ื ืื ืืืืื ืฆื ืคืึทืจืืืืื ืื ืืขืจืึทืงืฉืึทื ืฆืืืืฉื ืกืคึผืขืฉืึทืืึทืกืฅ ืืื ืืืกืฉืืืืขื ืึทืจืืขื ืคึผืจืึทืกืขืกืึทื, ืึธืืขืจ ืืืื ืฆื ืึทืงืืืืืื ืคืึธืจืฉืื ื ืืื ืื ืกืืจืืืขื ื ืงืจืึทื ื ืืขืงื ืึทืืึทืืืฉืื ืืืืืข ืืื ืืืื ืืืืืขื ืข ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ ืืื ืืื ืืขืจ ืงืื ื ืก ืื ืคืจืึทืกืืจืึทืงืืฉืขืจ.
ืื ืืขืจ ืืื ืืืขื ืจืขืื ืึท ืืืกื ืืืขืื ืื ืขื ืืขืจืื ืืขื ืืื ืื ืืขืื ืึธืืึธืืืข ืึธื ืืืืื ืคึฟืึทืจ ืงืึทื ืืืื ืขืจื ืืืึธืก ืืืจ ืืึธืื ืืขืคึผืืึธื ืืขืจื ืืฉืขืช ืืขืจื ืขื ืื ืคืึทืจืฉืคึผืจืืืืื ื CentOS 8 ืืื ืืืขืื ืืืึธืก ืขืก ืืื CRI-O ืืื ืืื ืฆื ืืขืฉืืืื ื ืฉืืขืื ืึท ืขืงืกืขืงืืืึทืืืข ืกืืืืืืข ืคึฟืึทืจ Kubernetes.
ืคืืจืืืืก ืืื ืืึธืงืขืจ ื ืื ืึทืจืืึทื ืืขืจืขืื ื ืืื CentOS 8?
ื ืึธื ืื ืกืืึธืืื ื ืื ืืขืฆืืข ืืืืคึผื ืจืืืืกืื ืจืขื 8 ืึธืืขืจ CentOS 8 ืืขื ืงืขื ื ืืฉื ืืขืืคึฟื ืึธืืขืจ ืืึทืืขืจืงื: ืื ืืืกืืจืืืืืฉืึทื ื ืืื ืืึทืึทืืืขืจ ืจืืคึผืึทืืึทืืึธืจืื ืึทื ืืืึทืืื ื ืืฉื ืื ืึทืคึผืืึทืงืืืฉืึทื ืืึธืงืงืขืจ, ืืืึธืก ืืืืขืึธืืึธืืืฉ ืืื ืคืึทื ืืงืฉืึทื ืึทืื ืคืึทืจืืืึทืื ืคึผืึทืงืึทืืืฉืึทื ืคึผืึธืืืึทื, ืืืืืึทื (ืคืึธืจืฉืืขืื ืืื ืื ืคืึทืจืฉืคึผืจืืืืื ื ืืืจื ืคืขืืืงืืึทื) ืืื CRI-O. ืืึธืก ืืื ืจืขืื ืฆื ืืขืจ ืคึผืจืึทืงืืืฉ ืืืคึผืืึทืืขื ืืืืฉืึทื ืคืื ืกืืึทื ืืึทืจืืก ืืขืืืขืืึธืคึผืขื, ืฆืืืืฉื ืื ืืขืจืข, ืืืจื Red Hat ืืื ืึท ืืืื ืคืื ืื Open Container Initiative (OCI) ืคึผืจืืืขืงื.
ืืขืจ ืฆืื ืคืื OCI, ืืืึธืก ืืื ืืืื ืคืื ืื ืืื ืืงืก ืืืืงืืคึผืขืืืข, ืืื ืฆื ืฉืึทืคึฟื ืึธืคึฟื ืื ืืึทืกืืจื ืกืืึทื ืืึทืจืืก ืคึฟืึทืจ ืงืึทื ืืืื ืขืจ ืคึฟืึธืจืืึทืืืจืื ืืขื ืืื ืจืื ืืืืขืก ืืืึธืก ืกืึธืืืืข ืขืืืขืืข ืคึผืจืึธืืืขืืก ืืื ืึทืืึธื. ืขืจืฉืืขืจ, ืืื ืืึธืื ื ืืฉื ืกืืืกืขืจ ืื ืคืืืึธืกืึธืคืืข ืคืื โโืืื ืืงืก (ืืืฉื, ืืื ืืขื ืืืื ืึทื ืืขืืขืจ ืคึผืจืึธืืจืึทื ืืึธื ืืืจืืคืืจื ืืืื ืงืึทืืฃ, ืืื ืืึธืงืงืขืจ ืืื ืึท ืืื ืคืื ืึทืืข-ืืื-ืืืื ืคืึทืจืืื ืื). ืฆืืืืืื ืก, ืืื ืงืขื ืขืืืืื ืืจื ืึทืืข ืืืืืกืืื ื ืืืคืืฉืึทื ืกืื ืืื ืื ืืืืืืืืืจื ืืึธืงืงืขืจ. ืืจืืื ืก, ืืื ืืืึธืื ืืืื ืืึธืจ ืงืึทืืคึผืึทืืึทืืึทื ืืื ืื ืืขืฉืขืคื ืจืขืงืืืืจืขืืขื ืฅ ืคืื ืืืืื ื ืืขืฉืขืคื ืคึผืืึทืืคืึธืจืืก ืคึฟืึทืจ ืืืคึผืืืืื ื, ืึธื ืคืืจืื ื ืืื ืกืขืจืืืื ื ืงืึทื ืืืื ืขืจืืืื ืึทืคึผืืึทืงืืืฉืึทื ื (ืืืฉื, Red Hat OpenShift).
ืืืืืืืืฉืึทื ื ืืึธืงืงืขืจ ืืื ืื ืึทืืืืึทื ืืืืืฉืื ืคืื ืื ื ืืึทืข ืืืืืืืืืจื ืืึธืื ืฉืืื ืืืกืงืจืืืื ืืื ืขืืืขืืข ืืขืืึทื ืืื , ืืื ืึท ืืืืืืื ืืึทืฉืจืืึทืืื ื ืคืื ืื ืืื ืฆืข ืืืืืืืืืจื ืึธื ืืืืื ืืขืคึฟืื ื ืืื ืื OCI ืคึผืจืืืขืงื ืืื ืืืึทื ืึทืจืงืึทืืขืงืืฉืขืจืึทื ืคึฟืขืึดืงืืืื ืงืขื ืขื ืืืื ืืขืคึฟืื ืขื ืืื ืืขืจ ืืึทืึทืืืขืจ ืืึทืงืืืืขื ืืืืฉืึทื ืืื ืึทืจืืืงืืขื ืคืื Red Hat ืืื (ื ืื ืึท ืฉืืขืื ืืื Red Hat ืืืึธื) ืืื ืืื ืืจืื-ืคึผืึทืจืืื .
ืขืก ืืื ืืืืืืืง ืฆื ืืึธื ืืืึธืก ืคืึทื ืืงืฉืึทื ืึทืืืื ืื ืงืึทืืคึผืึธืื ืึทื ืฅ ืคืื ืื ืคืืจืืขืืืืื ืึธื ืืืืื ืืึธืื:
- ืคึผืึธืืืึทื - ืืืจืขืงื ืื ืืขืจืึทืงืฉืึทื ืืื ืงืึทื ืืืื ืขืจื ืืื ืืืื ืกืืึธืจืืืืฉ ืืืจื ืื runC ืคึผืจืึธืฆืขืก;
- ืืืืืึทื - ืคึฟืึทืจืืึทืืืื ื ืืื ืืคึผืืึธืึทืืื ื ืืืืืขืจ ืฆื ืื ืจืขืืืกืืจื;
- CRI-O - ืึทื ืขืงืกืขืงืืืึทืืืข ืกืืืืืืข ืคึฟืึทืจ ืงืึทื ืืืื ืขืจ ืึธืจืงืขืกืืจืึทืืืึธื ืกืืกืืขืืขื (ืืืฉื, Kubernetes).
ืืื ืืจืึทืืื ืึทื ืฆื ืคึฟืึทืจืฉืืืื ืื ืึทืืืขืืืื ืข ืกืืขืืข ืคืื โโืื ืืขืจืึทืงืฉืึทื ืฆืืืืฉื ืื ืงืึทืืคึผืึธืื ืึทื ืฅ ืคืื ืื ืึธื ืืืืื, ืขืก ืืื ืงืขืืืึทืืง ืฆื ืฆืืฉืืขืื ืึท ืงืฉืจ ืืืึทืืจืึทืืข ืืึธ Kubernetes c runC ืืื ื ืืืขืจืืง-ืืืจืื ืืืืืจืขืจืื ื ืืฆื CRI-O:
CRI-O ะธ Kubernetes ืึทืืืืจ ืฆื ืืขืจ ืืขืืืืงืขืจ ืืขืืืื ื ืืื ืฉืืืฆื ืฆืืงื (ืื ืงืึทืืคึผืึทืืึทืืืืึทืื ืืึทืืจืืฅ ืืื ืืืืขืจ ืคึผืฉืื: ืืืืคึผื ืืืขืจืกืืขืก Kubernetes ะธ CRI-O ืฆืื ืืืคืคืึทืื), ืืื ืืึธืก, ืืขื ืืืขื ืืื ืืฉืืื ืื ืคืึธืงืืก ืืืืฃ ืืึทื ืฅ ืืื ืคืืืฉืืขื ืืืง ืืขืกืืื ื ืคืื ืื ืึธืคึผืขืจืึทืฆืืข ืคืื โโืืขื ืึธื ืืืืื ืืืจื ืืขืืืขืืึธืคึผืขืจืก, ืืื ืืื ืื ืื ืจืขืื ืฆื ืืขืจืืืึทืจืื ืื ืืึทืงืกืืืื ืึทืืฉืืืืึทืืึทื ืคืขืกืืงืืึทื ืืื ืึธืคึผืขืจืึทืฆืืข ืืื ืืขืจ ืงืืื ื ืืฆื ืกืื ืขืจืืึธืื (ืจืขืืึทืืืื ืืืืื ืึทืก ืืื ืืืื ืืืืืืืืืง ืืึธ CRI-O ืงืึทืืคึผืขืจื ืืื ืืึธืงืงืขืจ ืจืขืื ืฆื ืึท ืฆืื-ืคืึทื ืืงืฉืึทื ืึทื ืืึทืืจืขื ืขืฆืื ื ืคืื ืคืึทื ืืงืฉืึทื ืึทืืืื).
ืืืขื ืื ืกืืึธืืื ื Kubernetes "ืจืขืื ืืืขื" ืืืขื (ืืืื ืฆื OCI, ืคืื ืืืืฃ) ื ืืฆื CRI-O ืืืืฃ CentOS 8 ืื ืจ ืืื ื ืื ื ืืขืืจืืค ื ืขืืืขื ืข ืงืืฒื ืข ืฉืฐืขืจืืงืฒืื , ืฐืขืื ืข ืื ืจ ืืื ื ืืืข ืจ ืืขืจืคืืื . ืืื ืืืขื ืืืื ืฆืืคืจืืื ืฆื ืืืืื ืืื ืืืจ ืื ืกืืจืึทืงืฉืึทื ื ืคึฟืึทืจ ืื ืกืืึทืืืจืื ื ืืื ืงืึทื ืคืืืืขืจืืืฉืึทื, ืืืึธืก ืืื ืืึทื ืฅ ืืืขื ื ืขืืขื ืืืขืื 10 ืืื ืื.
ืืื ืฆื ืฆืขืืืืงืืขื Kubernetes ืืืืฃ CentOS 8 ื ืืฆื ืื CRI-O ืคืจืืืืืืขืจืง
ืคึผืจืืจืขืงืืืึทืืึทืฅ: ืืืึทืืืึทื ืคืื ืืคึผืืืช ืืืื ืืึทืืขืืึธืก (2 ืงืึธืจืขืก, 4 ืืืืืืืื ืืึทืจืึทื, ืืคึผืืืช 15 ืืืืืืืื ืกืืึธืจืืืืฉ) ืืื ืืื ืกืืึทืืืจื CentOS 8 (ืื "ืกืขืจืืืขืจ" ืืึทื ืืึธื ืืืจืื ื ืคึผืจืึธืคืื ืืื ืจืขืงืึทืืขื ืืื), ืืื ืืขืืื ื ืืื ืืืื ืกื ืคึฟืึทืจ ืขืก ืืื ืื ืืืืข ืื ืก (ืืื ืึท ืืขืฆืืข ืจืืืึธืจื, ืืืจ ืงืขื ืขื ืืึทืงืืืขื ืืืจื ืืื ืึท ืคึผืึธืืืฆืืข ืืื /etc/hosts). ืืื ืืึธื ื ืื ืคืึทืจืืขืกื .
ืืืจ ืืืจืืคืืจื ืึทืืข ืึทืคึผืขืจืืืฉืึทื ื ืืืืฃ ืืขืจ ืืึทืืขืืึธืก ืืื ืืขืจ ืืืึธืจืฆื ืืึทื ืืฆืขืจ, ืืืื ืึธืคึผืืขืืื.
- ืืื ืืขืจ ืขืจืฉืืขืจ ืฉืจืื, ืืืจ ืืืขืื ืงืึทื ืคืืืืขืจ ืื ืึทืก, ืื ืกืืึทืืืจื ืืื ืงืึทื ืคืืืืขืจ ืคึผืจืืืืืึทื ืขืจื ืืืคึผืขื ืืึทื ืกืื ืคึฟืึทืจ CRI-O.
- ืืึธืืืจ ืืขืจืืืึทื ืืืงื ืื ืึทืก:
dnf -y update
- ืืขืจื ืึธื ืืืจ ืืึทืจืคึฟื ืฆื ืงืึทื ืคืืืืขืจ ืื ืคืืืจืืืึทื ืืื SELinux. ืืึธ ืึทืืฅ ืืขืคึผืขื ืืก ืืืืฃ ืื ืกืืืืืืข ืืื ืืืึธืก ืืื ืืืขืจ ืืึทืืขืืึธืก ืึธืืขืจ ืืื ืืช ืืืขื ืึทืจืืขืื. ืืืจ ืงืขื ืขื ืึธืืขืจ ืฉืืขืื ืึทืจืืืฃ ืึท ืคืืืจืืืึทื ืืืื ืื ืจืขืงืึทืืึทื ืืืืฉืึทื ื ืคืื , ืึธืืขืจ, ืืืื ืืืจ ืืขื ื ืืืืฃ ืึท ืืจืึทืกืืื ื ืขืฅ ืึธืืขืจ ื ืืฆื ืึท ืืจืื-ืคึผืึทืจืืื ืคืืืจืืืึทื, ืืืืฉื ืื ืคืขืืืงืืึทื ืืึธื ืข ืฆื ืืจืึทืกืืื ืึธืืขืจ ืงืขืจ ืึทืืืขืง ืื ืคืืืจืืืึทื:
firewall-cmd --set-default-zone trusted firewall-cmd --reloadืฆื ืงืขืจ ืึทืืืขืง ืื ืคืืืจืืืึทื ืืืจ ืงืขื ืขื ื ืืฆื ืื ืคืืืืขื ืืข ืืึทืคึฟืขื:
systemctl disable --now firewalldSELinux ืืึทืจืฃ ืืืื ืืืืกืืขืืจืืื ืึทืืืขืง ืึธืืขืจ ืกืืืืืฉื ืฆื "ืคึผืขืจืืืกืืื" ืืึธืืข:
setenforce 0 sed -i 's/^SELINUX=enforcing$/SELINUX=permissive/' /etc/selinux/config
- ืืึธืื ืื ื ืืืืืง ืงืขืจื ืืึทืืืฉืืื ืืื ืคึผืึทืงืึทืืืฉืึทื, ืงืึทื ืคืืืืขืจ ืื ืึธืืึทืืึทืืืง ืืึธืืืื ื ืคืื ืื "br_netfilter" ืืึธืืืืข ืืื ืกืืกืืขื ืกืืึทืจืืึทืคึผ:
modprobe overlay modprobe br_netfilter echo "br_netfilter" >> /etc/modules-load.d/br_netfilter.conf dnf -y install iproute-tc
- ืฆื ืึทืงืืึทืืืืื ืคึผืึทืงืึทื ืคืึธืจืืืขืจืืื ื ืืื ืจืืืืืง ืคืึทืจืงืขืจ ืคึผืจืึทืกืขืกืื ื, ืืืจ ืืึทืื ืื ืฆืื ืขืืขื ืกืขืืืื ืืก:
cat > /etc/sysctl.d/99-kubernetes-cri.conf <<EOF net.bridge.bridge-nf-call-iptables = 1 net.ipv4.ip_forward = 1 net.bridge.bridge-nf-call-ip6tables = 1 EOFืฆืืืืืื ืื ืกืขืืืื ืืก:
sysctl --system
- ืฉืืขืื ืื ืคืืจืืื ืื ืืืขืจืกืืข CRI-O (ืืืืคึผื ืืืขืจืกืืข CRI-O, ืืื ืฉืืื ืืขืจืืื ื, ืืืืึทืื ืื ืคืืจืืื ืื ืืืขืจืกืืข Kubernetes), ืืื ื ืื ืืขืฆืืข ืกืืึทืืื ืืืขืจืกืืข Kubernetes ืืืฆื 1.18:
export REQUIRED_VERSION=1.18ืืืื ืื ื ืืืืืง ืจืืคึผืึทืืึทืืึธืจืื:
dnf -y install 'dnf-command(copr)' dnf -y copr enable rhcontainerbot/container-selinux curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/CentOS_8/devel:kubic:libcontainers:stable.repo curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:$REQUIRED_VERSION.repo https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable:cri-o:$REQUIRED_VERSION/CentOS_8/devel:kubic:libcontainers:stable:cri-o:$REQUIRED_VERSION.repo
- ืืืฆื ืืืจ ืงืขื ืขื ืื ืกืืึทืืืจื CRI-O:
dnf -y install cri-oืืึทืฆืึธืื ืืคืืขืจืงืืึทืืงืืึทื ืฆื ืืขืจ ืขืจืฉืืขืจ ื ืืึทื ืก ืืืึธืก ืืืจ ืืจืขืคื ืืขืฉืึทืก ืื ืื ืกืืึทืืืจืื ื ืคึผืจืึธืฆืขืก: ืืืจ ืืึทืจืคึฟื ืฆื ืจืขืืึทืืืจื ืื ืงืึทื ืคืืืืขืจืืืฉืึทื CRI-O ืืืืืขืจ ืืืจ ืึธื ืืืืื ืื ืืื ืกื, ืืื ื ืื ืคืืจืืื ืื ืงืึทื ืืึธื ืงืึธืืคึผืึธื ืขื ื ืืื ืึท ืึทื ืืขืจืฉ ืึธืจื ืืื ืื ืกืคึผืขืกืึทืคืืื ืืืื ืขืจ:
sed -i 's//usr/libexec/crio/conmon//usr/bin/conmon/' /etc/crio/crio.confืืืฆื ืืืจ ืงืขื ืขื ืึทืงืืึทืืืืื ืืื ืึธื ืืืืื ืื ืืืืืึทื CRI-O:
systemctl enable --now crioืืืจ ืงืขื ืขื ืงืึธื ืืจืึธืืืจื ืื ืืขืืึธื ืกืืึทืืืก:
systemctl status crio
- ืืึธืืืจ ืืขืจืืืึทื ืืืงื ืื ืึทืก:
- ืืึทื ืืึธื ืืืจืื ื ืืื ืึทืงืืึทืืืืืฉืึทื Kubernetes.
- ืืึธืืืจ ืืืืื ืื ืคืืจืืื ืื ืจืืคึผืึทืืึทืืึธืจื:
cat <<EOF > /etc/yum.repos.d/kubernetes.repo [kubernetes] name=Kubernetes baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-$basearch enabled=1 gpgcheck=1 repo_gpgcheck=1 gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg exclude=kubelet kubeadm kubectl EOFืืืฆื ืืืจ ืงืขื ืขื ืื ืกืืึทืืืจื Kubernetes (ืืืขืจืกืืข 1.18, ืืื ืืขืจืืื ื ืืืืื):
dnf install -y kubelet-1.18* kubeadm-1.18* kubectl-1.18* --disableexcludes=kubernetes
- ืื ืจืืข ืืืืืืืง ื ืืึทื ืก: ืืื ื ืืืจ ืืึธื ื ืื ื ืืฆื ืึท ืืืืืึทื ืืึธืงืงืขืจ, ืึธืืขืจ ืืืจ ื ืืฆื ืื ืืืืืึทื CRI-O, ืืืืืขืจ ืงืึทืืขืจ ืืื ืื ืืืืึทืืืืืืฉืึทื Kubernetes ืืืจ ืืึทืจืคึฟื ืฆื ืืึทืื ืื ืฆืื ืขืืขื ืกืขืืืื ืืก ืืื ืื ืงืึทื ืคืืืืขืจืืืฉืึทื ืืขืงืข /var/lib/kubelet/config.yaml, ื ืึธื ืขืจืฉืืขืจ ืืืฉืืคื ืืขื ืืขืืืืื ืืืขืืืืืึทืืขืจ:
mkdir /var/lib/kubelet cat <<EOF > /var/lib/kubelet/config.yaml apiVersion: kubelet.config.k8s.io/v1beta1 kind: KubeletConfiguration cgroupDriver: systemd EOF
- ืื ืืจืื ืืืืืืืง ืคืื ื ืึทื ืืืจ ืืจืขืคื ืืขืฉืึทืก ืื ืกืืึทืืืจืื ื: ืืจืึธืฅ ืืขืจ ืคืึทืงื ืึทื ืืืจ ืืึธืื ืื ืืขืืืืื ืื ืฉืึธืคืขืจ ืืขื ืืฆื cgroup, ืืื ืืืึทื ืงืึทื ืคืืืืขืจืืืฉืึทื ืืืจื ืื ืึทืจืืืืขื ืื ืืืจืืืขืืื ืืขื ืงืืืขืืขื ืืื ืึทืืืืืืืื (ืืื ืืื ืืคืืจืืฉ ืกืืืืืื ืืื ืื ืืึทืงืืืืขื ืืืืฉืึทื), ืืืจ ืืึทืจืคึฟื ืฆื ืืืืื ืึทืจืืืืขื ืื ืฆื ืืขืจ ืืขืงืข, ืึทื ืืขืจืฉ ืืื ืืืขืจ ืงื ืืื ืืืขื ื ืืฉื ืื ืืฉืึทืืืื:
cat /dev/null > /etc/sysconfig/kubelet cat <<EOF > /etc/sysconfig/kubelet KUBELET_EXTRA_ARGS=--container-runtime=remote --cgroup-driver=systemd --container-runtime-endpoint='unix:///var/run/crio/crio.sock' EOF
- ืืืฆื ืืืจ ืงืขื ืขื ืึทืงืืึทืืืืื ืื ืืืืืึทื ืงืืืขืืขื:
sudo systemctl enable --now kubeletืฆื ืงืึทืกืืึทืืืื ืงืึธื ืืจืึธื-ืึทืขืจืึธืคึผืึธืจื ืึธืืขืจ ืึทืจืืขืืขืจ ื ืึธืืื ืืื ืืื ืื, ืืืจ ืงืขื ืขื ื ืืฆื .
- ืืึธืืืจ ืืืืื ืื ืคืืจืืื ืื ืจืืคึผืึทืืึทืืึธืจื:
- ืขืก ืืื ืฆืืื ืฆื ืื ืืฉืึทืืืื ืืื ืืืขืจ ืงื ืืื.
- ืฆื ืื ืืฉืึทืืืื ืืขื ืงื ืืื, ืืืืคื ืื ืืึทืคึฟืขื:
kubeadm init --pod-network-cidr=10.244.0.0/16ืืืื ืืืืขืจ ืฆื ืฉืจืืึทืื ืื ืืึทืคึฟืขื ืฆื ืคืึทืจืืื ืื ืื ืงื ืืื "ืงืืืขืึทืื ืคืึทืจืืื ืื ...", ืืืึธืก ืืืจ ืืขื ื ืืขืืขืื ืฆื ื ืืฆื ืืื ืื ืกืืฃ ืคืื ืื ืจืขืืืืืึทื, ืึธืืขืจ ืืคึผืืืช ืื ืกืคึผืขืกืืคืืขื ืืึธืงืขื ืก.
- ืืึธืืืจ ืื ืกืืึทืืืจื ืื ืคึผืืืืื (CNI) ืคึฟืึทืจ ืื ืคึผืึธื ื ืขืฅ. ืืื ืจืขืงืึธืืขื ืืืจื ื ืืฆื ืงืึทืืืงืึธ. ืขืคืฉืขืจ ืืขืจ ืคืึธืืงืก ืคืืึทื ืึทื ืืื ืงืึทืืคึผืึทืืึทืืืืึทืื ืืฉืื ืืื ื ืคืืึทืืืขืก, ืื ืืื ืงืึทืืืงืึธ - ืื ืืืืื CNI ืืืคึผืืึทืืขื ืืืืฉืึทื ืจืขืงืึทืืขื ืืื ืืื ืืึธืจ ืืขืกืืขื ืืืจื ืื ืคึผืจืืืขืงื Kubernetes:
kubectl --kubeconfig /etc/kubernetes/admin.conf apply -f https://docs.projectcalico.org/v3.15/manifests/calico.yaml
- ืฆื ืคืึทืจืืื ืื ืึท ืึทืจืืขืืขืจ ื ืึธืืข ืฆื ืืื ืืืขืจ ืงื ืืื, ืืืจ ืืึทืจืคึฟื ืฆื ืงืึทื ืคืืืืขืจ ืขืก ืืืื ืื ืกืืจืึทืงืฉืึทื ื 1 ืืื 2, ืึธืืขืจ ื ืืฆื , ืืื ืืืืคื ืื ืืึทืคึฟืขื ืคึฟืื ืื "kubeadm init ..." ืจืขืืืืืึทื ืืืึธืก ืืืจ ืืขืฉืจืืื ืืื ืื ืคืจืืขืจืืืงืข ืฉืจืื:
kubeadm join $CONTROL_PLANE_ADDRESS:6443 --token $TOKEN --discovery-token-ca-cert-hash $TOKEN_HASH
- ืืึธืืืจ ืงืึธื ืืจืึธืืืจื ืึทื ืืื ืืืขืจ ืงื ืืื ืืื ืื ืืืืึทืืืืื ืืื ืกืืึทืจืืขื ืืจืืขืื:
kubectl --kubeconfig=/etc/kubernetes/admin.conf get pods -A
ืืจืืื! ืืืจ ืงืขื ืขื ืฉืืื ืืึทืืขืืึธืก ืคึผืืืืึธืืื ืืืืฃ ืืืื K8s ืงื ืืื.
- ืฆื ืื ืืฉืึทืืืื ืืขื ืงื ืืื, ืืืืคื ืื ืืึทืคึฟืขื:
ืืืึธืก ืึทืืืืืฅ ืืื ืื ืคืึธืจืืืก
ืืื ืืึธืคึฟื ืึทื ืื ืื ืกืืจืึทืงืฉืึทื ื ืืืืื ืืขืืึธืืคึฟื ืืืจ ืฉืคึผืึธืจื ืขืืืขืืข ืฆืืื ืืื ื ืขืจืืืขืก.
ืื ืึทืืืงืึทื ืคืื ืคึผืจืึทืกืขืกืึทื ืืืึธืก ืคืึทืื ืืื ืื ืืื ืืืกืืจืืข ืึธืคื ืืขืคึผืขื ืืก ืืืืฃ ืืื ืืื ืืขื ืขื ืื ืืขื ืืืขื ืืืจื ืื ืคืึทืจื ืขื ืคืื ืกืืฃ ื ืืฆืขืจืก ืืื ืืขืืืขืืึธืคึผืขืจืก ืคืื ืื ืืขืจืข ืืืืืืืืืจื ืืื ืื ืงืึธืจืึทืกืคึผืึทื ืืื ื ื ืืฉืข. ืขืก ืืื ื ืึธื ื ืืฉื ืืึธืจ ืงืืึธืจ ืืืึธืก ืื OCI ืื ืืฉืึทืืืืื ืืืขื ืคืืจื ืฆื ืืื ืึท ืืืกื ืืึธืจื, ืึธืืขืจ ืืืจ ืืืขืื ืืืึทื ืืื ืคืึทืจืืขื ืืื. ืืืจ ืงืขื ืขื ืืืืื ืืืื ืืืื ืื ื ืจืขืื ืืืฆื ืืื ืื ืืึทืืขืจืงืื ืืขื.
ืืืื ืืืืืืขืจ ืืื!
ืืขืจ ืึทืจืืืงื ืืื ืืจืืืก ืืึทื ืง ืฆื ืื ืคืืืืขื ืืข ืืงืืจืื:
- ืึธืคึผืืืืืื ื ืืืขืื ืงืึทื ืืืื ืขืจ ืจืื ืืืืข
- CRI-O ืคึผืจืืืขืงื ืืืืฃ ืืขืจ ืืื ืืขืจื ืขืฅ
- Red Hat ืืืึธื ืึทืจืืืงืืขื: , ืืื ืคืืืข ืื ืืขืจืข
ืืงืืจ: www.habr.com