离线安装 Kubernetes 和 KubeSphere

apiVersion: kubekey.kubesphere.io/v1
kind: Config
spec:
  cni:
    calico_version: v3.28.2
    cilium_version: 1.15.4
    hybridnet_version: 0.6.8
    kubeovn_version: 1.13.0
    multus:
      image:
        tag: v4.3.0
  cri:
    container_manager: containerd
    containerd_version: v1.7.6
    crictl_version: v1.32.0
    cridockerd_version: v0.3.1
    docker_version: 24.0.7
    runc_version: v1.1.7
    sandbox_image:
      tag: "3.8"
  dns:
    dns_cache_image:
      tag: 1.24.0
    dns_image:
      tag: v1.11.1
  etcd:
    etcd_version: v3.5.11
  image_manifests:
  - docker.io/kubesphere/k8s-dns-node-cache:1.24.0
  - docker.io/openebs/provisioner-localpv:4.2.0
  - docker.io/openebs/linux-utils:4.2.0
  - docker.io/kubesphere/coredns:v1.11.1
  - docker.io/kubesphere/kube-apiserver:v1.32.6
  - docker.io/kubesphere/kube-controller-manager:v1.32.6
  - docker.io/kubesphere/kube-proxy:v1.32.6
  - docker.io/kubesphere/kube-scheduler:v1.32.6
  - docker.io/kubesphere/pause:3.8
  - registry.cn-beijing.aliyuncs.com/kse/ks-apiserver:v4.2.0-community
  - registry.cn-beijing.aliyuncs.com/kse/ks-console:v4.2.0-community
  - registry.cn-beijing.aliyuncs.com/kse/ks-controller-manager:v4.2.0-community
  - registry.cn-beijing.aliyuncs.com/kubesphereio/kubectl:v1.33.1
  image_registry:
    docker_registry_version: 2.8.3
    dockercompose_version: v2.20.3
    harbor_version: v2.10.1
    keepalived_version: 2.0.20
  Kubernetes:
    helm_version: v3.14.3
    kube_version: v1.32.6
  storage_class:
    local:
      linux_utils_image:
        tag: 4.2.0
      provisioner_image:
        tag: 4.2.0
    nfs_provisioner_version: 4.2.0

cat >> config.yaml << 'EOF'
  cri:
    registry:
      auths:
        - repo: <镜像仓库地址> # 拉取镜像时需访问的镜像仓库，如 docker.io
          username: <镜像仓库账号> # 如 docker.io 的登录账户
          password: <镜像仓库密码> # 如 docker.io 的登录密码
EOF

vi inventory_init_registry.yaml

kind: Inventory
metadata:
  name: default
spec:
  hosts:
    harbor:
      # 此处输入的是安装 harbor 的节点的 ssh 登录信息
      # kubekey 会远程连接到该主机并安装 harbor
      internal_ipv4: <镜像仓库节点 IP 地址>
      connector:
        host: <镜像仓库节点 ssh 连接 IP >
        port: <镜像仓库节点 ssh 连接端口> # 默认 22
        user: <镜像仓库节点 ssh 连接用户> # 默认 root
        password: <镜像仓库节点 ssh 连接密码>
  groups:
      image_registry:
        hosts:
         - harbor
  vars:
    image_registry:
      type: harbor
      auth:
        # 此处输入您预期的镜像仓库域名和默认账号
        # 自动创建的 harbor 会使用该域名地址，同时将设置的账号密码作为默认账号密码
        registry: <预期的镜像仓库域名地址>
        username: admin
        password: <预期的镜像仓库 admin 密码>
        # kk 部署 harbor 镜像仓库默认使用的是自签名证书。如果您已经申请并持有可信的 SSL 证书，可通过可信证书运行 harbor
        #cert_file: <可信服务证书路径>
        #key_file: <服务证书 key 路径>
    localDNS:
     - /etc/hosts

./kk init registry -i inventory_init_registry.yaml --workdir $(pwd)/prepare --set binary_dir=$(pwd)/kubekey/kubekey

[Playbook default/init-registry-j2khj] finish. total: 88,success: 88,ignored: 0,failed: 0

vi inventory_sync_image.yaml

kind: Inventory
metadata:
  name: default
spec:
  vars:
    image_registry:
      auth:
        # 确保您提供的镜像仓库账号密码拥有创建项目和推送镜像的权限
        registry: <您的镜像仓库地址>
        username: <您的镜像仓库账号>
        password: <您的镜像仓库密码>
    localDNS:
     - /etc/hosts

./kk artifact images -i inventory_sync_image.yaml --workdir $(pwd)/prepare --set binary_dir=$(pwd)/kubekey/kubekey,download.download_image=false

[Playbook default/artifact-images-fkgmw] finish. total: 15,success: 15,ignored: 0,failed: 0