安装：

yum install libnl3-devel ipset-devel
yum install -y gcc openssl-devel popt-devel
yum install -y keepalived

查找keepalived配置文件：

rpm -ql keepalived
find / -name keepalived
rpm -qa keepalived

查keepalived日志：

tail -f /var/log/messages
journalctl -u keepalived

查看防火墙开放端口：

firewall-cmd --list-ports

配置防火墙放开keepalived：

firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
firewall-cmd --direct --permanent --add-rule ipv4 filter OUTPUT 0 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
firewall-cmd --reload

放开k8s常用端口：

firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=22/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=7472/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=123/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=2379/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=2380/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=16443/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=1080/tcp --permanent
firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --protocol vrrp -j ACCEPT
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=6443/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=10250-10252/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=30000-32767/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=179/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=5473/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=4789/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=6789/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=3300/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=8080/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=6800-6850/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=443/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=5236/tcp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=4789/udp --permanent
firewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-port=9283/tcp --permanent
firewall-cmd --reload

keepalived配置文件内容：

vrrp_strict一定要注释掉！！！否则严格检查会使其报错

[root@m-1 ~]# cat /etc/keepalived/keepalived.conf
! Configuration File for keepalived
global_defs {
   notification_email {
     acassen@firewall.loc
     failover@firewall.loc
     sysadmin@firewall.loc
   }
   notification_email_from Alexandre.Cassen@firewall.loc
   smtp_server 192.168.200.1
   smtp_connect_timeout 30
   router_id LVS_DEVEL
   vrrp_skip_check_adv_addr
   #vrrp_strict
   vrrp_garp_interval 0
   vrrp_gna_interval 0
}

vrrp_instance VI_1 {
    state BACKUP
    interface eth0
    virtual_router_id 51
    priority 90
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        192.168.0.18
    }
}

报错一：

都是严格检查惹的祸，将其关闭就可以了！

现象：

Apr 07 10:02:33 m-2 Keepalived_vrrp[6689]: Unable to load ipset library - libipset.so.11: cannot open shared object file: No such file …irectory

解决：

yum install libnl3-devel ipset-devel