# 在ansible-client上操作$ IP=(172.30.33.89 172.30.33.90 172.30.33.91 172.30.33.92 172.30.33.93 172.30.33.94)$ for i in ${IP[*]}; do scp -r kubespray_images_v1.6.7 $i:~/; done# 对所有要部署的节点操作$ IMAGES=$(ls -l ~/kubespray_images_v1.6.7|awk -F‘ ‘ ‘{ print $9 }‘)$ for x in ${images[*]}; do docker load -i kubespray_images_v1.6.7/$x; done

$ git clone https://github.com/kubernetes-incubator/kubespray.git

# 定义集群IP$ IP=(172.30.33.89 172.30.33.90 172.30.33.91 172.30.33.92 172.30.33.93 172.30.33.94)# 利用kubespray自带的python脚本生成配置$ CONFIG_FILE=~/kubespray/inventory/inventory.cfg python3 ~/kubespray/contrib/inventory_builder/inventory.py ${ IP[*] }

node1 ???ansible_user=root ansible_host=172.30.33.90 ip=172.30.33.90node2 ???ansible_user=root ansible_host=172.30.33.91 ip=172.30.33.91node3 ???ansible_user=root ansible_host=172.30.33.92 ip=172.30.33.92node4 ???ansible_user=root ansible_host=172.30.33.93 ip=172.30.33.93node5 ???ansible_user=root ansible_host=172.30.33.94 ip=172.30.33.94[kube-master]node1node2node3[kube-node]node1node2node3node4node5[etcd]node1node2node3[k8s-cluster:children]kube-nodekube-master[calico-rr]

vim ~/kubespray/roles/docker/tasks/main.yml# - name: ensure docker repository public key is installed# ?action: "{ { docker_repo_key_info.pkg_key } }"# ?args:# ???id: "{ {item} }"# ???keyserver: "{ {docker_repo_key_info.keyserver} }"# ???state: present# ?register: keyserver_task_result# ?until: keyserver_task_result|succeeded# ?retries: 4# ?delay: "{ { retry_stagger | random + 3 } }"# ?with_items: "{ { docker_repo_key_info.repo_keys } }"# ?when: not (ansible_os_family in ["CoreOS", "Container Linux by CoreOS"] or is_atomic)# - name: ensure docker repository is enabled# ?action: "{ { docker_repo_info.pkg_repo } }"# ?args:# ???repo: "{ {item} }"# ???state: present# ?with_items: "{ { docker_repo_info.repos } }"# ?when: not (ansible_os_family in ["CoreOS", "Container Linux by CoreOS"] or is_atomic) and (docker_repo_info.repos|length > 0)# - name: Configure docker repository on RedHat/CentOS# ?template:# ???src: "rh_docker.repo.j2"# ???dest: "/etc/yum.repos.d/docker.repo"# ?when: ansible_distribution in ["CentOS","RedHat"] and not is_atomic# - name: ensure docker packages are installed# ?action: "{ { docker_package_info.pkg_mgr } }"# ?args:# ???pkg: "{ {item.name} }"# ???force: "{ {item.force|default(omit)} }"# ???state: present# ?register: docker_task_result# ?until: docker_task_result|succeeded# ?retries: 4# ?delay: "{ { retry_stagger | random + 3 } }"# ?with_items: "{ { docker_package_info.pkgs } }"# ?notify: restart docker# ?when: not (ansible_os_family in ["CoreOS", "Container Linux by CoreOS"] or is_atomic) and (docker_package_info.pkgs|length > 0)# 如果你是自己安装的docker,记得将这段注释掉,除非你觉得template中的docker.service你能用#- name: Set docker systemd config# ?include: systemd.yml

vim ~/kubespray/roles/kubernetes-apps/efk/kibana/templates/kibana-deployment.yml.j2# ?????????- name: "KIBANA_BASE_URL"# ???????????value: "{ { kibana_base_url } }"

vim ~/kubespray/roles/download/defaults/main.ymletcd_version: v3.1.10calico_node_version: "v2.4.1"kubedns_version: 1.14.4calico_policy_version: "v0.7.0"

# 如果你的docker.service中没有MountFlags则不需要这一步# 注释掉/usr/lib/systemd/system/docker.service 中的MountFlags=slave

$ ansible-playbook -i ~/kubespray/inventory/inventory.cfg cluster.yml -b -v --private-key=~/.ssh/id_rsa