kubernetes 설정 - 5 (워커노드 설정)

 

-설정 순서 
-> OS 준비
:sudo swapoff -a
sudo sed -i '/ swap / s/^/#/' /etc/fstab
-> 방화벽 설정 (클라우드 가상머신인 경우 보안규칙 설정)
: 10205 TCP 
  3000-32767 TCP
-> 도커 또는 containerd 설치 
: sudo apt update
sudo apt install -y containerd
sudo mkdir -p /etc/containerd
sudo containerd config default | sudo tee /etc/containerd/config.toml
sudo systemctl restart containerd
sudo systemctl enable containerd
-> OverlayFS 설정 
: sudo modprobe overlay
sudo modprobe br_netfilter
sudo tee /etc/sysctl.d/kubernetes.conf <<EOF
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward = 1
EOF
sudo sysctl --system
-> kubeadm / kublet / kubectl  설치 
: sudo apt update
sudo apt install -y apt-transport-https ca-certificates curl
curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.30/deb/Release.key | gpg --dearmor | sudo tee /usr/share/keyrings/kubernetes-keyring.gpg > /dev/null

echo "deb [signed-by=/usr/share/keyrings/kubernetes-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.30/deb/ /" | sudo tee /etc/apt/sources.list.d/kubernetes.list

sudo apt update
sudo apt install -y kubelet kubeadm kubectl
sudo apt-mark hold kubelet kubeadm kubectl
-> Control Plane에서 join 명령 확인 (이미 있으면 kubeadm token list 명령어로 확인)
: kubeadm token create --print-join-command
-> worder node에서 join 실행 
: sudo kubeadm join 10.0.0.52:6443 --token <TOKEN> --discovery-token-ca-cert-hash sha256:<HASH>