Kubernetes: Kubernetes 工具

# 查看集群版本 1.37
root@master01:~# kubectl  get node
NAME                  STATUS   ROLES           AGE   VERSION
node01.jasper.org     Ready    worker          45h   v1.37.0
# 检查集群的代理模式。 nftables
root@master01:~# curl 127.0.0.1:10249/proxyMode
nftables

# 2026.8 不再支持 ipvs ，所以不需要特殊处理
curl -L -o metallb-native.yaml \
     https://raw.githubusercontent.com/metallb/metallb/v0.16.1/config/manifests/metallb-native.yaml

## 或挂镜像下载
curl -L -o metallb-native.yaml \
     https://ghfast.top/https://raw.githubusercontent.com/metallb/metallb/v0.16.1/config/manifests/metallb-native.yaml

# 查看镜像版本
grep -E '^\s+image:' metallb-native.yaml

# 应用
kubectl apply -f metallb-native.yaml

# speaker 是 DaemonSet + hostNetwork: true
kubectl -n metallb-system get pod -o wid

# 网络信息
## node
root@master01:~# kubectl get nodes -o wide
NAME                  STATUS   ROLES           AGE   VERSION   INTERNAL-IP      EXTERNAL-IP   OS-IMAGE             KERNEL-VERSION             CONTAINER-RUNTIME
master01.jasper.org   Ready    control-plane   21h   v1.37.0   10.103.236.201   <none>        Ubuntu 26.04.1 LTS   7.0.0-31-generic (arm64)   containerd://2.3.5
master02.jasper.org   Ready    control-plane   20h   v1.37.0   10.103.236.202   <none>        Ubuntu 26.04.1 LTS   7.0.0-31-generic (arm64)   containerd://2.3.5
master03.jasper.org   Ready    control-plane   20h   v1.37.0   10.103.236.203   <none>        Ubuntu 26.04.1 LTS   7.0.0-31-generic (arm64)   containerd://2.3.5
node01.jasper.org     Ready    worker          46h   v1.37.0   10.103.236.204   <none>        Ubuntu 26.04.1 LTS   7.0.0-31-generic (arm64)   containerd://2.3.5
node02.jasper.org     Ready    worker          46h   v1.37.0   10.103.236.205   <none>        Ubuntu 26.04.1 LTS   7.0.0-31-generic (arm64)   containerd://2.3.5
node03.jasper.org     Ready    worker          22h   v1.37.0   10.103.236.206   <none>        Ubuntu 26.04.1 LTS   7.0.0-31-generic (arm64)   containerd://2.3.5

## service cidr
root@master01:~# grep -oE '\-\-service-cluster-ip-range=[^ ]*' /lib/systemd/system/kube-apiserver.service
--service-cluster-ip-range=192.168.0.0/16
## pod cidr
root@master01:~# kubectl get ippool -o custom-columns=NAME:.metadata.name,CIDR:.spec.cidr
NAME                  CIDR
default-ipv4-ippool   172.16.0.0/12
root@master01:~# kubectl get ippools.crd.projectcalico.org -o yaml | grep cidr
    cidr: 172.16.0.0/12

# manifest 不含任何配置，装完两个组件会空转。先确认节点网段：
kubectl get nodes -o wide
ip -4 addr show | grep 10.103.236 # 掩码确认

# 找空闲地址
interface=enp2s0
for i in $(seq 240 250); do
  arping -c 2 -w 1 -I $interface 10.103.236.$i >/dev/null 2>&1 \
    && echo "10.103.236.$i 已被占用"
done

# 定义分配给负载均衡器服务的 IP
# 挑一段同网段、不在 DHCP 池里的空闲 IP
# 如节点在 10.103.236.0/24 段，就从这里划出闲置 ip
cat >ippool.yaml << EOF
apiVersion: metallb.io/v1beta1
kind: IPAddressPool
metadata:
  name: default-pool
  namespace: metallb-system
spec:
  addresses:
  - 10.103.236.240-10.103.236.250
---
#二层转发功能
apiVersion: metallb.io/v1beta1
kind: L2Advertisement
metadata:
  name: default-l2
  namespace: metallb-system
spec:
  ipAddressPools:
  - default-pool
EOF

kubectl apply -f ippool.yaml

# 查看
root@master01:~# kubectl  -n metallb-system  get ipaddresspool
NAME           AUTO ASSIGN   AVOID BUGGY IPS   ADDRESSES
default-pool   true          false             ["10.103.236.240-10.103.236.250"]

root@master01:~# kubectl  -n metallb-system  get ippools
NAME                  AGE
default-ipv4-ippool   41h
root@master01:~# kubectl  -n metallb-system  get l2advertisements
NAME         IPADDRESSPOOLS     IPADDRESSPOOL SELECTORS   INTERFACES
default-l2   ["default-pool"]

cat > n.yaml <<EOF
apiVersion: v1
kind: Service
metadata:
  labels:
    app: nginx
  name: nginx
  namespace: default
spec:
  ports:
  - name: 80-80
    port: 80
    protocol: TCP
    targetPort: 80
  selector:
    app: nginx
  type: LoadBalancer
EOF
  
kubectl  apply -f n.yaml


root@master01:~# kubectl  get svc
NAME         TYPE           CLUSTER-IP       EXTERNAL-IP      PORT(S)        AGE
kubernetes   ClusterIP      192.168.0.1      <none>           443/TCP        2d2h
nginx        LoadBalancer   192.168.21.226   10.103.236.240   80:30963/TCP   4s

#选择好，安装
curl https://kurl.sh/latest | sudo bash