Install Kubernetes (WORK IN PROGRESS)

  1. sudo apt-get update
  2. sudo apt-get install -y apt-transport-https ca-certificates curl
  3. curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.29/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg
  4. echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.29/deb/ /' | sudo tee /etc/apt/sources.list.d/kubernetes.list
  5. sudo apt-get update
  6. sudo apt-get install -y kubelet kubeadm kubectl
  7. sudo apt-mark hold kubelet kubeadm kubectl
cat <<EOF | sudo tee /etc/modules-load.d/k8s.conf
overlay
br_netfilter
EOF
  1. sudo modprobe overlay
  2. sudo modprobe br_netfilter
cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-iptables  = 1
net.bridge.bridge-nf-call-ip6tables = 1
net.ipv4.ip_forward                 = 1
EOF
  1. sudo sysctl --system
  2. sudo apt-get update
  3. sudo apt-get install ca-certificates curl gnupg
  4. curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
  5. sudo chmod a+r /etc/apt/keyrings/docker.gpg
echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \
  $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
  1. sudo apt-get update
  2. sudo apt-get install containerd.io
  3. sudo containerd config default | sudo tee /etc/containerd/config.toml
  4. Check “cri” not in disabled_plugins in /etc/containerd/config.toml
  5. In /etc/containerd/config.toml, section “[plugins.”io.containerd.grpc.v1.cri”]” ensure sandbox_image is “registry.k8s.io/pause:3.9”
  6. In /etc/containerd/config.toml, section “[plugins.”io.containerd.grpc.v1.cri”.containerd.runtimes.runc.options]” ensure SystemdCgroup is “true”
  7. Add “cgroup_memory=1 cgroup_enable=memory” to end of /boot/cmdline.txt
  8. sudo systemctl disable dphys-swapfile
  9. Reboot

New Cluster

  1. sudo kubeadm init --pod-network-cidr=10.244.0.0/16
  2. mkdir -p $HOME/.kube
  3. sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  4. sudo chown $(id -u):$(id -g) $HOME/.kube/config
  5. kubectl apply -f https://github.com/flannel-io/flannel/releases/latest/download/kube-flannel.yml

Join Cluster

  1. On master node, kubeadm token create to get token
  2. If hash needed, on master node,
openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | \
   openssl dgst -sha256 -hex | sed 's/^.* //'
  1. On new node, sudo kubeadm join --token <token> <control-plane-host>:<control-plane-port> --discovery-token-ca-cert-hash sha256:<hash>