安全开发基础篇-数据溢出

k3s

RKE1

RKE2

网络要求

RKE2架构

RKE2安装

配置 cali 和 flannel 的网卡不被 NetworkManager 管理

hostnamectl set-hostname k8s-master-1 && bash
mkdir -p /etc/NetworkManager/conf.d
cat <<EOF > /etc/NetworkManager/conf.d/rke2-canal.conf
[keyfile]
unmanaged-devices=interface-name:cali*;interface-name:flannel*
EOF
systemctl daemon-reload
systemctl restart NetworkManager

1.下载二进制文件安装

curl -sfL https://get.rke2.io | sh -
#国内源curl -sfL http://rancher-mirror.rancher.cn/rke2/install.sh | INSTALL_RKE2_MIRROR=cn INSTALL_RKE2_TYPE="server" sh -
systemctl enable rke2-server.service
systemctl start rke2-server.service

配置PATH和kubeconfig文件

echo "export PATH=$PATH:/var/lib/rancher/rke2/bin" >> /etc/profile && source /etc/profile
mkdir ~/.kube && cp /etc/rancher/rke2/rke2.yaml ~/.kube/config
ln -s /var/lib/rancher/rke2/agent/etc/crictl.yaml /etc/crictl.yaml
crictl ps

2.卸载

#停止
/usr/bin/rke2-killall.sh

#卸载
/usr/bin/rke2-uninstall.sh

至此单节点安装完毕如需加入节点继续看下文

注册agent服务器

配置 cali 和 flannel 的网卡不被 NetworkManager 管理

hostnamectl set-hostname k8s-worker-1 && bash
mkdir -p /etc/NetworkManager/conf.d
cat <<EOF > /etc/NetworkManager/conf.d/rke2-canal.conf
[keyfile]
unmanaged-devices=interface-name:cali*;interface-name:flannel*
EOF
systemctl daemon-reload
systemctl restart NetworkManager

1.安装agent

curl -sfL https://get.rke2.io | INSTALL_RKE2_TYPE="agent" sh -
#国内源curl -sfL https://rancher-mirror.rancher.cn/rke2/install.sh | INSTALL_RKE2_MIRROR=cn INSTALL_RKE2_TYPE="agent" sh -
systemctl enable rke2-agent.service
mkdir -p /etc/rancher/rke2/
vim /etc/rancher/rke2/config.yaml
#编辑文件
server: https://<server>:9345
token: <token from server node>
#启动agent
systemctl start rke2-agent.service
journalctl -u rke2-agent -f

2.卸载

#停止
/usr/bin/rke2-killall.sh

#卸载
/usr/bin/rke2-uninstall.sh

至此加入节点也ok