kubeadm部署metrics-server
需求：生產環境是kubeadm部署的v1.22.2版本的k8s，統計資源時發現這套環境沒有部署metrics-server這個服務，今天來部署一下
1、在github社區找到這個項目并下載
root@jumpserver-cmcc:~# wget https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yaml#github下載下來的yaml里面的鏡像地址是谷歌的，需要替換成阿里的，這里我用的是我自己的阿里云鏡像倉庫地址
root@jumpserver-cmcc:~# sed -i s#registry.k8s.io/metrics-server/metrics-server:v0.7.1#registry.cn-hangzhou.aliyuncs.com/qinge/metrics-server:v0.6.0#g components.yaml
root@jumpserver-cmcc:~# cat components.yaml |grep imageimage: registry.cn-hangzhou.aliyuncs.com/qinge/metrics-server:v0.6.0imagePullPolicy: IfNotPresent
2、部署服務
root@jumpserver-cmcc:~# kubectl apply -f components.yaml
root@master01:~# kubectl get pod -n kube-system
NAME READY STATUS RESTARTS AGE
calico-kube-controllers-56d97d6bc-5vfwf 1/1 Running 23 (25m ago) 12d
calico-node-5rtg9 1/1 Running 15 (25m ago) 12d
calico-node-c6bkp 1/1 Running 19 (25m ago) 12d
calico-node-fprwx 1/1 Running 11 (25m ago) 12d
calico-node-qqpkl 1/1 Running 18 (3h9m ago) 12d
calico-typha-c6d6b4cf7-vbtnn 1/1 Running 19 (3h9m ago) 12d
coredns-7b5944fdcf-rgq5p 1/1 Running 13 (25m ago) 12d
coredns-7b5944fdcf-ztkdc 1/1 Running 13 (25m ago) 12d
etcd-master01 1/1 Running 21 (3h9m ago) 12d
kube-apiserver-master01 1/1 Running 21 (3h9m ago) 12d
kube-controller-manager-master01 1/1 Running 21 (3h9m ago) 12d
kube-proxy-67x4b 1/1 Running 19 (3h9m ago) 12d
kube-proxy-bn4wj 1/1 Running 15 (25m ago) 12d
kube-proxy-slxx7 1/1 Running 15 (25m ago) 12d
kube-proxy-t2r58 1/1 Running 11 (25m ago) 12d
kube-scheduler-master01 1/1 Running 21 (3h9m ago) 12d
kube-state-metrics-5c45cbb87d-wbczr 0/1 Running 8 (25s ago) 4m2s
3、pod中的服務一直起不來
3.1查看pod起不來的原因
root@jumpserver-cmcc:~# kubectl logs -f metrics-server-b798ffd7f-7pjx9 -n kube-system
報錯如下：很明顯是證書有問題
3.2解決方案
apiVersion: apps/v1
kind: Deployment
metadata:labels:k8s-app: metrics-servername: metrics-servernamespace: kube-system
spec:selector:matchLabels:k8s-app: metrics-serverstrategy:rollingUpdate:maxUnavailable: 0template:metadata:labels:k8s-app: metrics-serverspec:containers:- args:- --cert-dir=/tmp- --secure-port=10250 #將端口改成10250- --kubelet-insecure-tls #添加這行，跳過證書的認證- --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname- --kubelet-use-node-status-port- --metric-resolution=15s#在重新部署一下，服務起來了root@jumpserver-cmcc:~# kubectl get pod -n kube-system
NAME READY STATUS RESTARTS AGE
cilium-6fp4z 1/1 Running 0 350d
cilium-cjtp5 1/1 Running 0 350d
cilium-fkmhk 1/1 Running 0 350d
cilium-g7fvc 1/1 Running 0 350d
cilium-lztjd 1/1 Running 0 137d
cilium-operator-69c994665d-rhbvg 1/1 Running 1 (350d ago) 350d
cilium-t4thg 1/1 Running 0 350d
cilium-tvfq4 1/1 Running 0 137d
coredns-7bdbbf6bf5-qcm5g 1/1 Running 0 350d
coredns-7bdbbf6bf5-v2khw 1/1 Running 0 350d
etcd-kcs01master01 1/1 Running 2 350d
etcd-kcs01master02 1/1 Running 0 350d
etcd-kcs01master03 1/1 Running 0 350d
kube-apiserver-kcs01master01 1/1 Running 2 350d
kube-apiserver-kcs01master02 1/1 Running 0 350d
kube-apiserver-kcs01master03 1/1 Running 1 (350d ago) 350d
kube-controller-manager-kcs01master01 1/1 Running 3 (350d ago) 350d
kube-controller-manager-kcs01master02 1/1 Running 0 350d
kube-controller-manager-kcs01master03 1/1 Running 0 350d
kube-proxy-5hbqp 1/1 Running 0 350d
kube-proxy-dqg2l 1/1 Running 0 137d
kube-proxy-pqmnf 1/1 Running 0 350d
kube-proxy-sg8rr 1/1 Running 0 350d
kube-proxy-vghd7 1/1 Running 0 137d
kube-proxy-w46pw 1/1 Running 0 350d
kube-proxy-w977k 1/1 Running 0 350d
kube-scheduler-kcs01master01 1/1 Running 3 (350d ago) 350d
kube-scheduler-kcs01master02 1/1 Running 0 350d
kube-scheduler-kcs01master03 1/1 Running 0 350d
metrics-server-b798ffd7f-7pjx9 1/1 Running 0 21m#如果是二進制部署的在kube-apiserver的啟動文件添加這參數--kubelet-insecure-tls
# vim /etc/systemd/system/kube-apiserver.service
[Service]
Environment="KUBE_API_ARGS=--kubelet-insecure-tls"
