Master node installation
19 January 2025 10:02
root@master:~#
root@master:~# kubectl get pod -A
NAMESPACE NAME READY STATUS RESTARTS AGE
kube-system coredns-55cb58b774-czwd9 0/1 Pending 0 24m
kube-system coredns-55cb58b774-wjwq7 0/1 Pending 0 24m
kube-system etcd-master 1/1 Running 0 24m
kube-system kube-apiserver-master 1/1 Running 0 24m
kube-system kube-controller-manager-master 1/1 Running 2 24m
kube-system kube-proxy-zcncf 1/1 Running 0 24m
kube-system kube-scheduler-master 1/1 Running 2 24m
root@master:~#
root@master:~#
root@master:~#
root@master:~# kubectl get nodes
NAME STATUS ROLES AGE VERSION
master NotReady control-plane 31m v1.30.9
root@master:~#
root@master:~#
root@master:~# ls /etc/kubernetes/pki/
apiserver.crt apiserver.key ca.crt front-proxy-ca.crt front-proxy-client.key
apiserver-etcd-client.crt apiserver-kubelet-client.crt ca.key front-proxy-ca.key sa.key
apiserver-etcd-client.key apiserver-kubelet-client.key etcd front-proxy-client.crt sa.pub
root@master:~#
root@master:~# kubeadm get token
unknown command "get" for "kubeadm"
To see the stack trace of this error execute with --v=5 or higher
root@master:~#
root@master:~# kubeadm token list
TOKEN TTL EXPIRES USAGES DESCRIPTION
EXTRA GROUPS
80gjkz.1353h1u66sc1d1m2 23h 2025-01-20T03:59:36Z authentication,signing The default
bootstrap token generated by 'kubeadm init '. system:bootstrappers:kubeadm:default-node-
token
root@master:~#
root@master:~# kubeadm token delete 80gjkz.1353h1u66sc1d1m2
bootstrap token "80gjkz" deleted
root@master:~#
root@master:~# kubeadm token create
d6njo7.zde81muaaurgjd37
root@master:~#
root@master:~#
root@master:~#
root@master:~#
root@master:~# kubeadm token create --print-join-command
kubeadm join 192.168.22.100:6443 --token xfqwhd.3a2tnjmg4u5x2vks --discovery-token-ca-cert-
hash sha256:9e3f582ac2fd8263a1ed7d4397f83a4e29bc7 29143e71a20d920af8394764138
root@master:~#
root@master:~#
root@master:~# kubectl get nodes
NAME STATUS ROLES AGE VERSION
master NotReady control-plane 43m v1.30.9
worker1 NotReady <none> 78s v1.30.9
CKA exam Page 1
worker1 NotReady <none> 78s v1.30.9
root@master:~# curl
https://raw.githubusercontent.com/projectcalico/calico/v3.29.1/manifests/calico.yaml -O
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 315k 100 315k 0 0 481k 0 --:--:-- --:--:-- --:--:-- 481k
root@master:~#
root@master:~# ls
calico.yaml
root@master:~# kubectl create -f calico.yaml
poddisruptionbudget.policy/calico-kube-controllers created
serviceaccount/calico-kube-controllers created
serviceaccount/calico-node created
serviceaccount/calico-cni-plugin created
configmap/calico-config created
customresourcedefinition.apiextensions.k8s.io/bgpconfigurations.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/bgpfilters.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/bgppeers.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/blockaffinities.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/caliconodestatuses.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/clusterinformations.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/felixconfigurations.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/globalnetworkpolicies.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/globalnetworksets.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/hostendpoints.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/ipamblocks.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/ipamconfigs.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/ipamhandles.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/ippools.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/ipreservations.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/kubecontrollersconfigurations.crd.projectcalico.org
created
customresourcedefinition.apiextensions.k8s.io/networkpolicies.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/networksets.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/tiers.crd.projectcalico.org created
customresourcedefinition.apiextensions.k8s.io/adminnetworkpolicies.policy.networking.k8s.io
created
clusterrole.rbac.authorization.k8s.io/calico-kube-controllers created
clusterrole.rbac.authorization.k8s.io/calico-node created
clusterrole.rbac.authorization.k8s.io/calico-cni-plugin created
clusterrolebinding.rbac.authorization.k8s.io/calico-kube-controllers created
clusterrolebinding.rbac.authorization.k8s.io/calico-node created
clusterrolebinding.rbac.authorization.k8s.io/calico-cni-plugin created
daemonset.apps/calico-node created
deployment.apps/calico-kube-controllers created
root@master:~#
root@master:~#
root@master:~#
root@master:~#
root@master:~# kubectl get pod -A
NAMESPACE NAME READY STATUS RESTARTS AGE
kube-system calico-kube-controllers-7967d66c69-bkrxn 0/1 Pending 0 20s
kube-system calico-node-7rc5c 0/1 Init:0/3 0 20s
kube-system calico-node-bk98r 0/1 Init:0/3 0 20s
kube-system coredns-55cb58b774-czwd9 0/1 Pending 0 56m
kube-system coredns-55cb58b774-wjwq7 0/1 Pending 0 56m
kube-system etcd-master 1/1 Running 0 56m
kube-system kube-apiserver-master 1/1 Running 0 56m
CKA exam Page 2
kube-system kube-apiserver-master 1/1 Running 0 56m
kube-system kube-controller-manager-master 1/1 Running 2 56m
kube-system kube-proxy-fw9w5 1/1 Running 0 13m
kube-system kube-proxy-zcncf 1/1 Running 0 56m
kube-system kube-scheduler-master 1/1 Running 2 56m
root@master:~#
root@master:~# kubectl get ippool -o yaml
apiVersion: v1
items: []
kind: List
metadata:
resourceVersion: ""
root@master:~#
root@master:~# kubectl get ippool -o yaml
root@master:~# kubectl get ippool -o yaml
apiVersion: v1
items:
- apiVersion: crd.projectcalico.org/v1
kind: IPPool
metadata:
annotations:
projectcalico.org/metadata: '{"creationTimestamp":"2025-01-19T04:57:14Z"}'
creationTimestamp: "2025-01-19T04:57:14Z"
generation: 1
name: default-ipv4-ippool
resourceVersion: "5188"
uid: 614a5232-8ff5-4ff0-b96d-257f1d1c4c76
spec:
allowedUses:
- Workload
- Tunnel
blockSize: 26
cidr: 172.16.0.0/16
ipipMode: Always
natOutgoing: true
nodeSelector: all()
vxlanMode: Never
kind: List
metadata:
resourceVersion: ""
root@master:~#
root@master:~# kubectl get nodes
NAME STATUS ROLES AGE VERSION
master Ready control-plane 58m v1.30.9
worker1 Ready <none> 15m v1.30.9
root@master:~#
root@master:~#
root@master:~#
root@master:~#
root@master:~#
root@master:~#
root@master:~# kubectl get pod -A
NAMESPACE NAME READY STATUS RESTARTS AGE
kube-system calico-kube-controllers-7967d66c69-bkrxn 1/1 Running 0 2m35s
kube-system calico-node-7rc5c 1/1 Running 0 2m35s
kube-system calico-node-bk98r 1/1 Running 0 2m35s
kube-system coredns-55cb58b774-czwd9 1/1 Running 0 58m
kube-system coredns-55cb58b774-wjwq7 1/1 Running 0 58m
CKA exam Page 3
kube-system coredns-55cb58b774-wjwq7 1/1 Running 0 58m
kube-system etcd-master 1/1 Running 0 58m
kube-system kube-apiserver-master 1/1 Running 0 58m
kube-system kube-controller-manager-master 1/1 Running 2 58m
kube-system kube-proxy-fw9w5 1/1 Running 0 16m
kube-system kube-proxy-zcncf 1/1 Running 0 58m
kube-system kube-scheduler-master 1/1 Running 2 58m
root@master:~#
root@master:~# kubectl get pod -A -o wide
NAMESPACE NAME READY STATUS RESTARTS AGE IP NODE
NOMINATED NODE READINESS GATES
kube-system calico-kube-controllers-7967d66c69-bkrxn 1/1 Running 0 3m44s
172.16.235.130 work er1 <none> <none>
kube-system calico-node-7rc5c 1/1 Running 0 3m44s 192.168.74.131 mast
er <none> <none>
kube-system calico-node-bk98r 1/1 Running 0 3m44s 192.168.74.155 work
er1 <none> <none>
kube-system coredns-55cb58b774-czwd9 1/1 Running 0 59m 172.16.235.129
work er1 <none> <none>
kube-system coredns-55cb58b774-wjwq7 1/1 Running 0 59m 172.16.235.131
work er1 <none> <none>
kube-system etcd-master 1/1 Running 0 59m 192.168.74.131 mast
er <none> <none>
kube-system kube-apiserver-master 1/1 Running 0 59m 192.168.74.131
mast er <none> <none>
kube-system kube-controller-manager-master 1/1 Running 2 59m 192.168.74.131
mast er <none> <none>
kube-system kube-proxy-fw9w5 1/1 Running 0 17m 192.168.74.155 work
er1 <none> <none>
kube-system kube-proxy-zcncf 1/1 Running 0 59m 192.168.74.131 mast
er <none> <none>
kube-system kube-scheduler-master 1/1 Running 2 59m 192.168.74.131
mast er <none> <none>
root@master:~#
root@master:~# kubectl get pod -A -o wide
NAMESPACE NAME READY STATUS RESTARTS AGE IP NODE
NOMINATED NODE READINES
kube-system calico-kube-controllers-7967d66c69-bkrxn 1/1 Running 0 4m
172.16.235.130 worker1 <none> <none>
kube-system calico-node-7rc5c 1/1 Running 0 4m 192.168.74.131 master
<none> <none>
kube-system calico-node-bk98r 1/1 Running 0 4m 192.168.74.155 worker1
<none> <none>
kube-system coredns-55cb58b774-czwd9 1/1 Running 0 59m 172.16.235.129
worker1 <none> <none>
kube-system coredns-55cb58b774-wjwq7 1/1 Running 0 59m 172.16.235.131
worker1 <none> <none>
kube-system etcd-master 1/1 Running 0 60m 192.168.74.131 master
<none> <none>
kube-system kube-apiserver-master 1/1 Running 0 60m 192.168.74.131
master <none> <none>
kube-system kube-controller-manager-master 1/1 Running 2 60m 192.168.74.131
master <none> <none>
kube-system kube-proxy-fw9w5 1/1 Running 0 17m 192.168.74.155
worker1 <none> <none>
kube-system kube-proxy-zcncf 1/1 Running 0 59m 192.168.74.131 master
<none> <none>
kube-system kube-scheduler-master 1/1 Running 2 60m 192.168.74.131
CKA exam Page 4
kube-system kube-scheduler-master 1/1 Running 2 60m 192.168.74.131
master <none> <none>
root@master:~# history
1 clear
2 ip a s
3 cd /etc/netplan/
4 ls
5 cat 50-cloud-init.yaml
6 ls
7 vim 99_config.yaml
8 ip a s
9 vim 99_config.yaml
10 cd
11 netplan apply
12 clear
13 ip a s
14 cd 0
15 cd -
16 ls
17 cat 99_config.yaml
18 cd
19 ping 192.168.22.101
20 clear
21 kubectl
22 clear
23 getenforce
24 swapon -s
25 swapoff -a
26 vi /etc/fstab
27 KUBERNETES_VERSION=v1.30
28 CRIO_VERSION=v1.30
29 clear
30 curl -fsSL https://pkgs.k8s.io/core:/stable:/$KUBERNETES_VERSION/deb/Release.key | gpg --
dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg
31 echo "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg]
https://pkgs.k8s.io/core:/stable:/$KUBERNETES_VERSION/deb/ /" | tee
/etc/apt/sources.list.d/kubernetes.list
32 curl -fsSL https://pkgs.k8s.io/addons:/cri-o:/stable:/$CRIO_VERSION/deb/Release.key |
gpg --dearmor -o /etc/apt/keyrings/cri-o-apt-keyring.gpg
33 echo "deb [signed-by=/etc/apt/keyrings/cri-o-apt-keyring.gpg] https://pkgs.k8s.io/addons:/cri-
o:/stable:/$CRIO_VERSION/deb/ /" | tee /etc/apt/sources.list.d/cri-o.list
34 apt-get update
35 apt-get install -y cri-o kubelet kubeadm kubectl
36 clear
37 kubeadm init --help
38 kubeadm init --apiserver-advertise-address=192.168.22.1
39 systemctl start cri-o kubelet
40 systemctl enable cri-o
41 systemctl enable crio
42 systemctl start crio
43 systemctl start kubelet
44 systemctl enable kubelet
45 kubeadm init --apiserver-advertise-address=192.168.22.1
46 cat /proc/sys/net/ipv4/ip_forward
47 modprobe br_netfilter
48 sysctl -w net.ipv4.ip_forward=1
49 cat /proc/sys/net/ipv4/ip_forward
50 kubeadm init --apiserver-advertise-address=192.168.22.1
CKA exam Page 5
50 kubeadm init --apiserver-advertise-address=192.168.22.1
51*
52 crictl ps
53 crictl ps -a
54 crictl logs edba49121d7a8
55 cer
56 ifco
57 ip a s
58 kubeadm reset -f
59 kubeadm init --apiserver-advertise-address=192.168.22.1
60 kubeadm reset -f
61 kubeadm init --apiserver-advertise-address=192.168.22.100
62 clear
63 crictl ps
64 ls -l /etc/kubernetes/admin.conf
65 kubectl get nodes
66 apt install net-tools -y
67 netstat -tunlp
68 kubectl get nodes
69 kubectl get nodes --kubeconfig=/etc/kubernetes/admin.conf
70 kubectl get nodes
71 kubectl get nodes
72 mkdir .kube
73 cp /etc/kubernetes/admin.conf .kube/config
74 kubectl get nodes
75 kubectl get pod -A
76 env
77 kubectl get nodes
78 kubectl get componentstatus
79 kubectl describe node master
80 clear
81 systemctl status crio
82 systemctl status kubelet
83 systemctl status -l kubelet
84 l
85 systemctl status -l kubelet
86 clear
87 kubectl get pod -A
88 kubectl get nodes
89 ls /etc/kubernetes/pki/
90 kubeadm get token
91 kubeadm token list
92 kubeadm token delete 80gjkz.1353h1u66sc1d1m2
93 kubeadm token create
94 kubeadm token create --print-join-command
95 kubectl get nodes
96 curl https://raw.githubusercontent.com/projectcalico/calico/v3.29.1/manifests/calico.yaml -O
97 ls
98 kubectl create -f calico.yaml
99 kubectl get pod -A
100 kubectl get ippool -o yaml
101 kubectl get nodes
102 kubectl get pod -A
103 kubectl get pod -A -o wide
104 history
root@master:~#
CKA exam Page 6