localectl set-locale LANG=en_US.utf8
reboot

[root@okd-master ~]# sysctl net.ipv4.ip_forward=1
net.ipv4.ip_forward = 1
[root@okd-master ~]# echo 'net.ipv4.ip_forward=1' >> /etc/sysctl.conf

systemctl stop firewalld.service
systemctl disable firewalld.service
yum install iptables-services
/sbin/iptables -I INPUT -p tcp --dport 8443 -j ACCEPT
service iptables save
systemctl restart iptables.service 
systemctl enable iptables.service

yum install -y wget git ntp net-tools bind-utils iptables-services bridge-utils bash-completion kexec-tools sos psacct nfs-utils yum-utils docker NetworkManager

cat /etc/docker/daemon.json
{
"registry-mirrors": ["https://docker.mirrors.ustc.edu.cn"]
}
systemctl daemon-reload
systemctl enable docker
systemctl restart docker
systemctl is-active docker

mkdir /etc/yum.repos.d/bak
mv /etc/yum.repos.d/*.repo /etc/yum.repos.d/bak/
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo

wget https://buildlogs.centos.org/centos/7/paas/x86_64/openshift-origin311/ansible-2.6.5-1.el7.noarch.rpm
rpm -ivh ansible-2.6.5-1.el7.noarch.rpm 

cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.0.125 okd-master
192.168.0.126 okd-node1
192.168.0.127 okd-node2
192.168.0.128 okd-node3

hostnamectl set-hostname okd-master

ssh-keygen
ssh-copy-id -i .ssh/id_rsa.pub root@okd-master
ssh-copy-id -i .ssh/id_rsa.pub root@okd-node1
ssh-copy-id -i .ssh/id_rsa.pub root@okd-node2
ssh-copy-id -i .ssh/id_rsa.pub root@okd-node3

[root@okd-master ~]# cat okd.hosts  | grep -v '^#'
[OSEv3:children]
masters
nodes
etcd

[OSEv3:vars]
ansible_ssh_user=root
openshift_deployment_type=origin
openshift_image_tag=v3.11
ansible_become=true

openshift_master_identity_providers=[{'name': 'htpasswd_auth', 'login': 'true', 'challenge': 'true', 'kind': 'HTPasswdPasswordIdentityProvider'}]
openshift_disable_check=memory_availability,disk_availability,docker_image_availability

os_sdn_network_plugin_name=redhat/openshift-ovs-multitenant

openshift_hosted_router_replicas=1
openshift_hosted_registry_replicas=1
openshift_master_cluster_hostname=okd-master
openshift_master_cluster_public_hostname=okd-master
openshift_master_default_subdomain=okd-master

openshift_master_cluster_method=native
openshift_public_ip=192.168.0.125

ansible_service_broker_install=false
openshift_enable_service_catalog=false
template_service_broker_install=false
openshift_logging_install_logging=false

openshift_docker_options="--log-driver json-file --log-opt max-size=1M --log-opt max-file=3"

[masters]
okd-master

[etcd]
okd-master

[nodes]
okd-master openshift_node_group_name='node-config-master'
okd-node1 openshift_node_group_name='node-config-compute'
okd-node1 openshift_node_group_name='node-config-infra'
okd-node2 openshift_node_group_name='node-config-compute'
okd-node2 openshift_node_group_name='node-config-infra'
okd-node3 openshift_node_group_name='node-config-compute'
okd-node3 openshift_node_group_name='node-config-infra'

[root@okd-master ~]# ansible -i okd.hosts  nodes --user=root -m copy -a 'src=/etc/hosts dest=/etc/hosts'

git clone -b release-3.11 https://github.com/openshift/openshift-ansible.git

cp okd.hosts /etc/ansible/hosts
ansible-playbook openshift-ansible/playbooks/prerequisites.yml

[root@okd-master ~]# cat /etc/yum.repos.d/CentOS-OpenShift-Origin311.repo 
[centos-openshift-origin311]
name=CentOS OpenShift Origin

# 这里改成阿里云的源
baseurl=https://mirrors.aliyun.com/centos/7/paas/x86_64/openshift-origin311/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-PaaS

[centos-openshift-origin311-testing]
name=CentOS OpenShift Origin Testing
baseurl=https://buildlogs.centos.org/centos/7/paas/x86_64/openshift-origin311/
enabled=0
gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-PaaS

[centos-openshift-origin311-debuginfo]
name=CentOS OpenShift Origin DebugInfo
baseurl=https://debuginfo.centos.org/centos/7/paas/x86_64/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-PaaS

[centos-openshift-origin311-source]
name=CentOS OpenShift Origin Source
baseurl=https://vault.centos.org/centos/7/paas/Source/openshift-origin311/
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-PaaS

[root@okd-master ~]# ansible-playbook openshift-ansible/playbooks/deploy_cluster.yml
……………省略部分输出………………
PLAY RECAP *******************************************************************************************************************
localhost                  : ok=11   changed=0    unreachable=0    failed=0   
okd-master                 : ok=542  changed=202  unreachable=0    failed=0   
okd-node1                  : ok=124  changed=37   unreachable=0    failed=0   
okd-node2                  : ok=124  changed=37   unreachable=0    failed=0   
okd-node3                  : ok=124  changed=37   unreachable=0    failed=0   

INSTALLER STATUS *********************************************************************************************************************
Initialization               : Complete (0:00:35)
Health Check                 : Complete (0:00:09)
Node Bootstrap Preparation   : Complete (0:04:47)
etcd Install                 : Complete (0:01:06)
Master Install               : Complete (0:05:38)
Master Additional Install    : Complete (0:00:54)
Node Join                    : Complete (0:01:17)
Hosted Install               : Complete (0:01:13)
Cluster Monitoring Operator  : Complete (0:09:03)
Web Console Install          : Complete (0:01:43)
Console Install              : Complete (0:01:48)
#没有failed表示安装成功
#如需重新安装，先卸载（重装不卸载会重复启动相同功能的组件）
#ansible-playbook ~/openshift-ansible/playbooks/adhoc/uninstall.yml
#安装后查看集群节点
#[root@okd-master ~]# oc get nodes

[root@okd-master ~]# htpasswd -cb /etc/origin/master/htpasswd admin okd123456
Adding password for user admin
[root@okd-master ~]# oc adm policy add-cluster-role-to-user cluster-admin admin
Warning: User 'admin' not found
cluster role "cluster-admin" added: "admin"

#在浏览器中访问：
# https://okd-master:8443/     admin   okd123456