#头条创作挑战赛##程序员##妙笔生花创作挑战#

kubersphere官?参考地址： https://kubesphere.com.cn/

https://kubesphere.io/zh/docs/v3.4/quick-start/minimal-kubesphere-on-k8s/

下载核??件（master节点下操作，我本地下载?/home/k8dir下）

wget https://github.com/kubesphere/ksinstaller/releases/download/v3.1.1/kubesphere-installer.yaml

wget https://github.com/kubesphere/ksinstaller/releases/download/v3.1.1/cluster-configuration.yaml

修改?件cluster-configuration.yaml

• 本地实操未修改的?件内容（可在kubesphere部署后，通过?定义资源CRD--》cluster-configuration脚本来修改）
• 根据项?需要修改?件，可修改处?下（仅展示需要修改的地方）

etcd:
   monitoring: true # Enable or disable etcd monitoring dashboard installation. You have to create a Secret for etcd before you enable it.
   endpointIps: 192.168.1.8 # etcd cluster EndpointIps. It can be a bunch of IPs here.
common:
   redis:
      enabled: true
   openldap:
      enabled: true
   minioVolumeSize: 20Gi # Minio PVC size.
   
 alerting: # (CPU: 0.1 Core, Memory: 100 MiB) It enables users to customize alerting policies to send messages to receivers in time with different time intervals and alerting levels to choose from.
   enabled: true # Enable or disable the KubeSphere Alerting System.
   # thanosruler:
   # replicas: 1
   # resources: {}
 auditing: # Provide a security-relevant chronological set of records，recording the sequence of activities happening on the platform, initiated by different tenants.
   enabled: true # Enable or disable the KubeSphere Auditing Log System.
 devops: # (CPU: 0.47 Core, Memory: 8.6 G) Provide an out-ofthe-box CI/CD system based on Jenkins, and automated workflow tools including Source-to-Image & Binary-to-Image.
    enabled: true # Enable or disable the KubeSphere DevOps System.
    jenkinsMemoryLim: 2Gi # Jenkins memory limit.
    jenkinsMemoryReq: 1500Mi # Jenkins memory request.
    jenkinsVolumeSize: 8Gi # Jenkins volume size.

执?安装（我本地在/home/k8dir下）

• 安装指令：

kubectl apply -f kubesphere-installer.yaml ## ?概等待3分钟，完成pod的安装

# 通过以下命令查看安装情况(kubesphere-system下的ks-installer)
kubectl get pod -A

# 待上?命令完成pod安装后，再执?下?命令
kubectl apply -f cluster-configuration.yaml

• 卸载指令：

kubectl delete -f cluster-configuration.yaml
kubectl delete -f kubesphere-installer.yaml

查看安装进度

1. 查看安装进度指令

kubectl logs -n kubesphere-system $(kubectl get pod -n kubesphere-system -l 'app in (ks-install, ks-installer)' -o jsonpath='{.items[0].metadata.name}') -f

2. 安装完成后，解决找不到证书的问题（建议上述进度安装成功后，就执行该操作）

kubectl -n kubesphere-monitoring-system create secret generic kube-etcd-client-certs --from-file=etcd-client-ca.crt=/etc/kubernetes/pki/etcd/ca.crt --from-file=etcd-client.crt=/etc/kubernetes/pki/apiserver-etcd-client.crt --from-file=etcd-client.key=/etc/kubernetes/pki/apiserver-etcd-client.key

url：http://192.168.1.8:30880

默认账号/密码：admin/P@88w0rd

安装成功

通过界?配置cluster-configuration

其他安装操作命令

#删除指定命名空间下的所有pod
kubectl delete pods --all -n 命名空间

#删除命名空间(删除k8s指定命名空间及其所有pod)
kubectl delete ns 命名空间

#删除安装的yaml
kubectl delete -f xx.yaml

#删除命名空间的某个pod
kubectl delete pod pod名称 -n 命名空间 --force --grace-period=0

kubectl delete pod xxx --force --grace-period=0

问题及解决方案

1. 问题1：Error from server (Forbidden): error when creating \"STDIN\": secrets\"qingcloud\" is forbidden: unable to create new content in namespace kubesphere-logging-system because it is being terminated

2. 问题2：删除处于Terminating状态的pv

3. 问题3：[ERROR FileContent--proc-sys-net-bridge-bridge-nf-call-iptables]:/proc/sys/net/bridge/bridge-nf-cal

安装helm

1. 什么是helm

Helm是K8S中包管理?具，包管理器类似于我们在 Ubuntu 中使?的apt、Centos中使?的yum?样，能快速查找、下载和安装软件包， 能够将?组K8S资源打包统?管理, 是查找、共享和使?为Kubernetes构建的软件的最佳?式。

具体介绍和安装使?参?之前博?： Kubernetes包管理?具Helm简介及使?

2. 下载helm

前往github上下载最新的V3版本的helm

https://github.com/helm/helm/releases

下载tar.gz?件

3. 安装helm