Ubuntu 24.04.2部署k8s V1.36.0集群

Ubuntu 24.04.2安装k8s 1.36.0

软件版本：
ubuntu24.04.2,
kubeadm v1.36.0
kubernetes v1.36.0
containerd v2.0.2
cilium version v1.19.1

机器 地址 系统
node1 192.168.2.21 Ubuntu 24.04.2 LTS master
node2 192.168.2.22 Ubuntu 24.04.2 LTS node
node3 192.168.2.23 Ubuntu 24.04.2 LTS node
node4 192.168.2.24 Ubuntu 24.04.2 LTS node

第一步、基础设置
所有机器均需要操作
关闭swap

sed -ri 's/^([^#].*swap.*)$/#\1/' /etc/fstab && grep swap /etc/fstab && swapoff -a && free -h

#关闭防火墙

ufw disable

设置时区

timedatectl set-timezone Asia/Shanghai systemctl restart systemd-timesyncd.service

开启ipv4转发

cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf # Kubernetes & Cilium 必需参数 net.ipv4.ip_forward = 1 net.bridge.bridge-nf-call-iptables = 1 net.bridge.bridge-nf-call-ip6tables = 1 # 可选：调优内核参数（如连接跟踪表大小） net.netfilter.nf_conntrack_max = 1048576 EOF

应用配置（等效于 sysctl -p /etc/sysctl.d/k8s.conf）

sysctl --system

查看

sysctl net.ipv4.ip_forward

配置hostname以及hosts

cat >> /etc/hosts << EOF 192.168.2.21 ops-test-021 192.168.2.22 ops-test-022 192.168.2.23 ops-test-023 192.168.2.24 ops-test-024 192.168.2.25 ops-test-025 192.168.2.36 ops-test-26 EOF

第二步：安装containerd
所有节点均需操作
2.1 下载和配置containerd
从 https://github.com/containerd/containerd/releases 下载

wget https://github.com/containerd/containerd/releases/download/v2.2.3/containerd-2.2.3-linux-amd64.tar.gz tar xvf containerd-2.2.3-linux-amd64.tar.gz mv bin/* /usr/local/bin/ mkdir -p /etc/containerd && containerd config default > /etc/containerd/config.toml

安装组件

apt install runc

修改配置

sed -i "s#registry.k8s.io/pause:3.10.1#registry.aliyuncs.com/google_containers/pause:3.10.2#g" /etc/containerd/config.toml #添加SystemdCgroup = true参数 sed -i "/ShimCgroup = ''/a \ SystemdCgroup = true" /etc/containerd/config.toml

#安装containerd.service官网提供的

cat > /usr/lib/systemd/system/containerd.service <<EOF [Unit] Description=containerd container runtime Documentation=https://containerd.io After=network.target dbus.service [Service] ExecStartPre=-/sbin/modprobe overlay ExecStart=/usr/local/bin/containerd Type=notify Delegate=yes KillMode=process Restart=always RestartSec=5 LimitNPROC=infinity LimitCORE=infinity TasksMax=infinity OOMScoreAdjust=-999 [Install] WantedBy=multi-user.target EOF

设置开机启动，启动服务

systemctl daemon-reload systemctl enable --now containerd systemctl status containerd.service

2.2 安装crictl
选用V1.35.0版本，兼容的新版还没有更新

CRICTL_VERSION=v1.35.0 wget https://github.com/kubernetes-sigs/cri-tools/releases/download/$CRICTL_VERSION/crictl-$CRICTL_VERSION-linux-amd64.tar.gz tar zxvf crictl-$CRICTL_VERSION-linux-amd64.tar.gz -C /usr/local/bin

2.3 配置私有Harbor镜像仓库

修改配置
大概在52行开始

vim +52 /etc/containerd/config.toml 51 [plugins.'io.containerd.cri.v1.images'.registry] 52 config_path = '/etc/containerd/certs.d' #修改该行的配置信息

重新启动containerd

第三步：安装K8S组件

# 更新源 sudo apt update && sudo apt upgrade -y # 安装工具 apt install -y apt-transport-https ca-certificates curl gpg # 创建目录，有的版本有，看情况创建 mkdir -p -m 755 /etc/apt/keyrings # 下载秘钥 curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.36/deb/Release.key | \ sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg && \ sudo chmod 644 /etc/apt/keyrings/kubernetes-apt-keyring.gpg # 添加软件源1.36 echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.36/deb/ /' | sudo tee /etc/apt/sources.list.d/kubernetes.list

更新，安装软件，防止更新

apt update && \ apt install kubelet kubectl kubeadm && \ apt-mark hold kubelet kubeadm kubectl

#设置开机自启

systemctl enable --now kubelet

查看版本

kubeadm version root@ops-test-021:~# kubeadm version kubeadm version: &version.Info{Major:"1", Minor:"36", EmulationMajor:"", EmulationMinor:"", MinCompatibilityMajor:"", MinCompatibilityMinor:"", GitVersion:"v1.36.0", GitCommit:"ecf6decece6a6de25a57aad9ba90b6ce580f6f78", GitTreeState:"clean", BuildDate:"2026-04-22T13:54:03Z", GoVersion:"go1.26.2", Compiler:"gc", Platform:"linux/amd64"}

第四步：初始化集群
4.1 下载相关镜像
先下载阿里云镜像，node1节点即可，即master节点

sudo kubeadm config images pull \ --image-repository=registry.aliyuncs.com/google_containers \ --kubernetes-version=v1.36.0 \ --cri-socket=unix:///run/containerd/containerd.sock root@ops-test-021:~# sudo kubeadm config images pull \ --image-repository=registry.aliyuncs.com/google_containers \ --kubernetes-version=v1.36.0 \ --cri-socket=unix:///run/containerd/containerd.sock