Pod资源清单配置基础(使用yaml格式定义pod)
作者：尹正杰
版权声明：原创作品，谢绝转载！否则将追究法律责任。
一.资源对象管理方式
kubectl的命令可分为三类:
陈述式命令(Imperative Commands)
陈述式对象配置(Imperative Object Configuration)
声明式对象配置(Declarative Object Configuration)
第一种方式即此前用到的run,expose,delete和get等命令，它们直接作用于kubernetes系统上的活动对象，简单易用,但不是支持代码复用，修改复审及审计日志等功能，这些功能的实现通常要依赖于资源配置文件中，这些文件也被称为资源清单。
1>.陈述式命令创建名称空间案例(执行命令的方式缺点就是每次都得去敲,复用性极差,因此它相比陈述式，声明式对象配置压根就没有复用性)
[[email protected] ~]# kubectl get namespace #查看名称空间 NAME STATUS AGE default Active 9h kube-node-lease Active 9h kube-public Active 9h kube-system Active 9h [[email protected] ~]# [[email protected] ~]# kubectl get ns #也是查看名称空间，只不过这里是简写形式而已 NAME STATUS AGE default Active 9h kube-node-lease Active 9h kube-public Active 9h kube-system Active 9h [[email protected] ~]# [[email protected] ~]# kubectl create namespace operation #创建一个叫做"operation"的名称空间 namespace/operation created [[email protected] ~]# [[email protected] ~]# kubectl create ns development namespace/development created [[email protected] ~]# [[email protected] ~]# kubectl create ns testing namespace/testing created [[email protected] ~]# [[email protected] ~]# kubectl get ns NAME STATUS AGE default Active 9h development Active 38s kube-node-lease Active 9h kube-public Active 9h kube-system Active 9h operation Active 65s testing Active 3s [[email protected] ~]# [[email protected] ~]#
2>.陈述式对象配置创建名称空间案例(重复创建时会报错,生产环境不推荐使用)
[[email protected] ~]# mkdir -pv /yinzhengjie/data/k8s/manifests/basic mkdir: created directory ‘/yinzhengjie/data’ mkdir: created directory ‘/yinzhengjie/data/k8s’ mkdir: created directory ‘/yinzhengjie/data/k8s/manifests’ mkdir: created directory ‘/yinzhengjie/data/k8s/manifests/basic’ [[email protected] ~]# [[email protected] ~]# cd /yinzhengjie/data/k8s/manifests/basic/ [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# vim develop-ns.yaml [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# cat develop-ns.yaml apiVersion: v1 kind: Namespace metadata: name: develop [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# kubectl get ns NAME STATUS AGE default Active 17h kube-node-lease Active 17h kube-public Active 17h kube-system Active 17h [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# ll total 4 -rw-r--r-- 1 root root 59 Feb 5 12:53 develop-ns.yaml [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# kubectl create -f develop-ns.yaml #使用陈述式对象配置创建名称空间 namespace/develop created [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# ll total 4 -rw-r--r-- 1 root root 59 Feb 5 12:53 develop-ns.yaml [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# kubectl get ns NAME STATUS AGE default Active 17h develop Active 8s kube-node-lease Active 17h kube-public Active 17h kube-system Active 17h [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# kubectl create -f develop-ns.yaml #由于咱们定义的"develop"名称空间已经存在，因此给咱们抛出异常 Error from server (AlreadyExists): error when creating "develop-ns.yaml": namespaces "develop" already exists [[email protected] /yinzhengjie/data/k8s/manifests/basic]#
3>.声明式对象配置创建名称空间案例(重复创建时并不会报错)
[[email protected] /yinzhengjie/data/k8s/manifests/basic]# cp develop-ns.yaml production-ns.yaml [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# vim production-ns.yaml [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# cat production-ns.yaml apiVersion: v1 kind: Namespace metadata: name: production [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# ll total 8 -rw-r--r-- 1 root root 59 Feb 5 12:53 develop-ns.yaml -rw-r--r-- 1 root root 62 Feb 5 12:55 production-ns.yaml [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# kubectl get ns NAME STATUS AGE default Active 17h develop Active 2m26s kube-node-lease Active 17h kube-public Active 17h kube-system Active 17h [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# kubectl get namespace NAME STATUS AGE default Active 17h develop Active 2m35s kube-node-lease Active 17h kube-public Active 17h kube-system Active 17h [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# kubectl apply -f production-ns.yaml #使用声明式对象配置创建名称空间 namespace/production created [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# kubectl get namespace NAME STATUS AGE default Active 17h develop Active 2m57s kube-node-lease Active 17h kube-public Active 17h kube-system Active 17h production Active 2s [[email protected] /yinzhengjie/data/k8s/manifests/basic]# [[email protected] /yinzhengjie/data/k8s/manifests/basic]# kubectl apply -f production-ns.yaml #重复创建同一个名称空间时并不会报错，而是友好的提示咱们没有发生任何改变。 namespace/production unchanged [[email protected] /yinzhengjie/data/k8s/manifests/basic]#
二.使用声明式对象配置创建pod(在一个pod中创建一个容器)
查看官方的参数参考文档: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.17/#pod-v1-core
1>.使用"--export"选项将一个容器的创建作为模板导出(注意，该参数已经被废弃了，生产环境中尽量避免使用它，推荐大家使用Helm去管理)
[[email protected] ~]# kubectl get pods NAME READY STATUS RESTARTS AGE mynginx-677d85dbd5-gkdb6 1/1 Running 0 5h12m mynginx-677d85dbd5-vk5p5 1/1 Running 0 5h39m [[email protected] ~]# [[email protected] ~]# kubectl get pods mynginx-677d85dbd5-gkdb6 -o yaml --export > /yinzhengjie/data/k8s/manifests/basic/pod-demo.yaml Flag --export has been deprecated, This flag is deprecated and will be removed in future. [[email protected] ~]# [[email protected] ~]#
[[email protected] ~]# cat /yinzhengjie/data/k8s/manifests/basic/pod-demo.yaml apiVersion: v1 kind: Pod metadata: creationTimestamp: null generateName: mynginx-677d85dbd5- labels: app: mynginx pod-template-hash: 677d85dbd5 ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: mynginx-677d85dbd5 uid: c5ff8e76-768b-4673-8df3-b5d3246a929d selfLink: /api/v1/namespaces/default/pods/mynginx-677d85dbd5-gkdb6 spec: containers: - image: nginx:1.14-alpine imagePullPolicy: IfNotPresent name: nginx resources: {} terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: default-token-4jpjf readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: node201.yinzhengjie.org.cn priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: default-token-4jpjf secret: defaultMode: 420 secretName: default-token-4jpjf status: phase: Pending qosClass: BestEffort [[email protected] ~]#
2>.修改上一步生成的模板，只保留必要的参数
[[email protected] ~]# vim /yinzhengjie/data/k8s/manifests/basic/pod-demo.yaml [[email protected] ~]# [[email protected] ~]# cat /yinzhengjie/data/k8s/manifests/basic/pod-demo.yaml apiVersion: v1 kind: Pod metadata: creationTimestamp: null name: pod-demo namespace: develop spec: containers: - image: nginx:1.14-alpine imagePullPolicy: IfNotPresent name: nginx resources: {} dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: node203.yinzhengjie.org.cn priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: {} [[email protected] ~]# [[email protected] ~]#
[[email protected] ~]# cat /yinzhengjie/data/k8s/manifests/basic/pod01-demo.yaml apiVersion: v1 kind: Pod metadata: creationTimestamp: null name: pod01-demo namespace: develop spec: containers: - image: nginx:1.14-alpine imagePullPolicy: IfNotPresent name: nginx resources: {} dnsPolicy: ClusterFirst enableServiceLinks: true priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: {} [[email protected] ~]#
3>.使用声明式对象配置创建pod
[[email protected] ~]# kubectl get pods -o wide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES mynginx-677d85dbd5-gkdb6 1/1 Running 0 5h23m 10.244.1.3 node201.yinzhengjie.org.cnmynginx-677d85dbd5-vk5p5 1/1 Running 0 5h51m 10.244.2.2 node202.yinzhengjie.org.cn [[email protected] ~]# [[email protected] ~]# kubectl apply -f /yinzhengjie/data/k8s/manifests/basic/pod-demo.yaml #使用声明式对象配置创建pod pod/pod-demo created [[email protected] ~]# [[email protected] ~]# kubectl apply -f /yinzhengjie/data/k8s/manifests/basic/pod01-demo.yaml #同上 pod/pod01-demo configured [[email protected] ~]# [[email protected] ~]# kubectl get pods -o wide #注意，此处我没有指定名称空间，因此我们查看的默认就是"default"这个名称空间哟~ NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES mynginx-677d85dbd5-gkdb6 1/1 Running 0 5h34m 10.244.1.3 node201.yinzhengjie.org.cn mynginx-677d85dbd5-vk5p5 1/1 Running 0 6h2m 10.244.2.2 node202.yinzhengjie.org.cn [[email protected] ~]# [[email protected] ~]# kubectl get pods -n develop -o wide #综上所述，如果我们想要查看创建的pod,应该去相应的名称空间去查看，很显然，我们在"develop"这个名称空间查看到了。 NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES pod-demo 1/1 Running 0 13m 10.244.3.4 node203.yinzhengjie.org.cn pod01-demo 1/1 Running 0 5m56s 10.244.3.5 node203.yinzhengjie.org.cn [[email protected] ~]#
三.使用声明式对象配置创建pod(在一个pod中创建2个容器)
1>.通过命令行查看pod这个资源如何定义的帮助文档
[[email protected] ~]# kubectl explain pods KIND: Pod VERSION: v1 DESCRIPTION: Pod is a collection of containers that can run on a host. This resource is created by clients and scheduled onto hosts. FIELDS: apiVersion <string> APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources kind <string> Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds metadata
[[email protected] ~]# kubectl explain pods.apiVersion KIND: Pod VERSION: v1 FIELD: apiVersion <string> DESCRIPTION: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources [[email protected] ~]#
[[email protected] ~]# kubectl explain pods.kind KIND: Pod VERSION: v1 FIELD: kind <string> DESCRIPTION: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds [[email protected] ~]#
[[email protected] ~]# kubectl explain pods.metadata KIND: Pod VERSION: v1 RESOURCE: metadata
[[email protected] ~]# kubectl explain pods.spec KIND: Pod VERSION: v1 RESOURCE: spec
[[email protected] ~]# kubectl explain pods.status KIND: Pod VERSION: v1 RESOURCE: status
[[email protected] ~]# kubectl explain pods.spec.containers KIND: Pod VERSION: v1 RESOURCE: containers <[]Object> DESCRIPTION: List of containers belonging to the pod. Containers cannot currently be added or removed. There must be at least one container in a Pod. Cannot be updated. A single application container that you want to run within a pod. FIELDS: args <[]string> Arguments to the entrypoint. The docker image's CMD is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell command <[]string> Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME) are expanded using the container's environment. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell env <[]Object> List of environment variables to set in the container. Cannot be updated. envFrom <[]Object> List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. image <string> Docker image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets. imagePullPolicy <string> Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images lifecycle
[[email protected] ~]# kubectl explain pods.spec.containers.env KIND: Pod VERSION: v1 RESOURCE: env <[]Object> DESCRIPTION: List of environment variables to set in the container. Cannot be updated. EnvVar represents an environment variable present in a Container. FIELDS: name <string> -required- Name of the environment variable. Must be a C_IDENTIFIER. value <string> Variable references $(VAR_NAME) are expanded using the previous defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. The $(VAR_NAME) syntax can be escaped with a double $$, ie: $$(VAR_NAME). Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "". valueFrom
[[email protected] ~]# kubectl explain pods.spec.containers.env.name KIND: Pod VERSION: v1 FIELD: name <string> DESCRIPTION: Name of the environment variable. Must be a C_IDENTIFIER. [[email protected] ~]#
[[email protected] ~]# kubectl explain pods.spec.containers.env.valueFrom KIND: Pod VERSION: v1 RESOURCE: valueFrom
2>.自定义yaml文件创建两个容器
[[email protected] ~]# vim /yinzhengjie/data/k8s/manifests/basic/pod02-demo.yaml [[email protected] ~]# [[email protected] ~]# cat /yinzhengjie/data/k8s/manifests/basic/pod02-demo.yaml apiVersion: v1 kind: Pod metadata: name: pod02-demo namespace: production spec: containers: - name: mynginx image: nginx:1.14-alpine - name: mybox image: busybox:latest imagePullPolicy: IfNotPresent command: ["/bin/sh","-c","sleep 86400"] [[email protected] ~]#
3>.使用声明式对象配置创建pod
[[email protected] ~]# kubectl get pods -n production No resources found in production namespace. [[email protected] ~]# [[email protected] ~]# kubectl apply -f /yinzhengjie/data/k8s/manifests/basic/pod02-demo.yaml pod/pod02-demo created [[email protected] ~]# [[email protected] ~]# kubectl get pods -n production #很明显，任务被调度到一台服务器后，需要一个创建过程(要先下载镜像文件),此时状态为"ContainerCreating" NAME READY STATUS RESTARTS AGE pod02-demo 0/2 ContainerCreating 0 3s [[email protected] ~]# [[email protected] ~]# [[email protected] ~]# kubectl get pods -n production NAME READY STATUS RESTARTS AGE pod02-demo 2/2 Running 0 19s [[email protected] ~]# [[email protected] ~]# kubectl get pods -n production -o wide #POD创建成功后状态为"Running",注意"READY"那一列是2个容器哟，我们上面定义了一个mynginx,另一个叫mybox NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES pod02-demo 2/2 Running 0 4m32s 10.244.1.4 node201.yinzhengjie.org.cn[[email protected] ~]# [[email protected] ~]#
[[email protected] ~]# kubectl get pods -n production -o yaml apiVersion: v1 items: - apiVersion: v1 kind: Pod metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"v1","kind":"Pod","metadata":{"annotations":{},"name":"pod02-demo","namespace":"production"},"spec":{"containers":[{"image":"nginx:1.14-alpine","name":"mynginx"},{"command":["/bin/sh","-c","sleep 86400"],"image":"busybox:latest","imagePullPolicy":" IfNotPresent","name":"mybox"}]}} creationTimestamp: "2020-02-05T06:28:49Z" name: pod02-demo namespace: production resourceVersion: "95129" selfLink: /api/v1/namespaces/production/pods/pod02-demo uid: fe72e30f-dee5-4d8a-a7f2-aafd976b747e spec: containers: - image: nginx:1.14-alpine imagePullPolicy: IfNotPresent name: mynginx resources: {} terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: default-token-rcm5g readOnly: true - command: - /bin/sh - -c - sleep 86400 image: busybox:latest imagePullPolicy: IfNotPresent name: mybox resources: {} terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: default-token-rcm5g readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: node201.yinzhengjie.org.cn priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: default serviceAccountName: default terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: default-token-rcm5g secret: defaultMode: 420 secretName: default-token-rcm5g status: conditions: - lastProbeTime: null lastTransitionTime: "2020-02-05T06:28:49Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2020-02-05T06:28:54Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2020-02-05T06:28:54Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2020-02-05T06:28:49Z" status: "True" type: PodScheduled containerStatuses: - containerID: docker://28282d6f41623874032ec415293fbfcbe2876458b331cbce80637c3050707eee image: busybox:latest imageID: docker-pullable://busybox@sha256:6915be4043561d64e0ab0f8f098dc2ac48e077fe23f488ac24b665166898115a lastState: {} name: mybox ready: true restartCount: 0 started: true state: running: startedAt: "2020-02-05T06:28:54Z" - containerID: docker://e1d847b3484f38825a5442c4e8cfaefa3f4e6be0a3d5508b920e79d4128cda29 image: nginx:1.14-alpine imageID: docker-pullable://nginx@sha256:485b610fefec7ff6c463ced9623314a04ed67e3945b9c08d7e53a47f6d108dc7 lastState: {} name: mynginx ready: true restartCount: 0 started: true state: running: startedAt: "2020-02-05T06:28:50Z" hostIP: 172.200.1.201 phase: Running podIP: 10.244.1.4 podIPs: - ip: 10.244.1.4 qosClass: BestEffort startTime: "2020-02-05T06:28:49Z" kind: List metadata: resourceVersion: "" selfLink: "" [[email protected] ~]#
4>.连接名为"pod02-demo"的其中的一个"mybox"容器，访问该pod中的另外一个容器"mynginx"(因为它们公用同一个网络空间，所以可以通过回环地址访问哟~)
@master200.yinzhengjie.org.cn ~]# kubectl get pods -n production -o wide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES pod02-demo 2/2 Running 0 11m 10.244.1.4 node201.yinzhengjie.org.cn[[email protected] ~]# [[email protected] ~]# kubectl exec pod02-demo -c mybox -n production -it -- /bin/sh / # / # ifconfig eth0 Link encap:Ethernet HWaddr 36:88:5B:4A:79:AD inet addr:10.244.1.4 Bcast:0.0.0.0 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1450 Metric:1 RX packets:1 errors:0 dropped:0 overruns:0 frame:0 TX packets:1 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:42 (42.0 B) TX bytes:42 (42.0 B) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) / # / # netstat -ntl Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN / # / # ps aux PID USER TIME COMMAND 1 root 0:00 sleep 86400 6 root 0:00 /bin/sh 13 root 0:00 ps aux / # / # wget -O - -q 127.0.0.1 <head> Welcome to nginx! head>Welcome to nginx!
If you see this page, the nginx web server is successfully installed and working. Further configuration is required.
For online documentation and support please refer to "http://nginx.org/">nginx.org.
Commercial support is available at "http://nginx.com/">nginx.com.Thank you for using nginx.
/ #
[[email protected] ~]# kubectl get pods -n production NAME READY STATUS RESTARTS AGE pod02-demo 2/2 Running 0 15m [[email protected] ~]# [[email protected] ~]# kubectl exec pod02-demo -c mynginx -n production -it -- /bin/sh / # / # ifconfig eth0 Link encap:Ethernet HWaddr 36:88:5B:4A:79:AD inet addr:10.244.1.4 Bcast:0.0.0.0 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1450 Metric:1 RX packets:1 errors:0 dropped:0 overruns:0 frame:0 TX packets:1 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:42 (42.0 B) TX bytes:42 (42.0 B) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:11 errors:0 dropped:0 overruns:0 frame:0 TX packets:11 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:1381 (1.3 KiB) TX bytes:1381 (1.3 KiB) / # / # netstat -ntl Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN / # / # ps aux PID USER TIME COMMAND 1 root 0:00 nginx: master process nginx -g daemon off; 6 nginx 0:00 nginx: worker process 7 root 0:00 /bin/sh 14 root 0:00 ps aux / # / #
5>.连接名为"pod02-demo"的其中的一个"mynginx"容器，查看日志信息
[[email protected] ~]# kubectl get pods -n production -o wide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES pod02-demo 2/2 Running 0 28m 10.244.1.4 node201.yinzhengjie.org.cn[[email protected] ~]# [[email protected] ~]# kubectl logs pod02-demo -c mynginx -n production 127.0.0.1 - - [05/Feb/2020:06:43:11 +0000] "GET / HTTP/1.1" 200 612 "-" "Wget" "-" [[email protected] ~]# [[email protected] ~]#
四.配置pod直接使用宿主机网络方案一(hostNetwork)
1>.编写pod的yaml文件并创建pod
[[email protected] ~]# vim /yinzhengjie/data/k8s/manifests/basic/host-pod.yaml [[email protected] ~]# [[email protected] ~]# cat /yinzhengjie/data/k8s/manifests/basic/host-pod.yaml apiVersion: v1 kind: Pod metadata: name: mypod namespace: default spec: containers: - name: mynginx image: nginx:1.14-alpine hostNetwork: true [[email protected] ~]#
[[email protected] ~]# kubectl get pods -o wide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES mynginx-677d85dbd5-gkdb6 1/1 Running 0 6h58m 10.244.1.3 node201.yinzhengjie.org.cnmynginx-677d85dbd5-vk5p5 1/1 Running 0 7h26m 10.244.2.2 node202.yinzhengjie.org.cn [[email protected] ~]# [[email protected] ~]# [[email protected] ~]# kubectl apply -f /yinzhengjie/data/k8s/manifests/basic/host-pod.yaml pod/mypod created [[email protected] ~]# [[email protected] ~]# kubectl get pods -o wide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES mynginx-677d85dbd5-gkdb6 1/1 Running 0 6h58m 10.244.1.3 node201.yinzhengjie.org.cn mynginx-677d85dbd5-vk5p5 1/1 Running 0 7h26m 10.244.2.2 node202.yinzhengjie.org.cn mypod 1/1 Running 0 2s 172.200.1.202 node202.yinzhengjie.org.cn [[email protected] ~]#
2>. 浏览器访问宿主机的IP地址并查看日志
[[email protected] ~]# kubectl get pods -o wide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES mynginx-677d85dbd5-gkdb6 1/1 Running 0 6h58m 10.244.1.3 node201.yinzhengjie.org.cnmynginx-677d85dbd5-vk5p5 1/1 Running 0 7h26m 10.244.2.2 node202.yinzhengjie.org.cn mypod 1/1 Running 0 2s 172.200.1.202 node202.yinzhengjie.org.cn [[email protected] ~]# [[email protected] ~]# kubectl logs mypod #注意，当我们的pod中只有一个容器时，我们无需使用"-c"参数指定容器名称哟~ 172.200.0.1 - - [05/Feb/2020:07:11:26 +0000] "GET / HTTP/1.1" 200 612 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-" 172.200.0.1 - - [05/Feb/2020:07:11:26 +0000] "GET /favicon.ico HTTP/1.1" 404 571 "http://172.200.1.202/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-" 2020/02/05 07:11:26 [error] 6#6: *1 open() "/usr/share/nginx/html/favicon.ico" failed (2: No such file or directory), client: 172.200.0.1, server: localhost, request: "GET /favicon.ico HTTP/1.1", host: "172.200.1.202", referrer: "http://172.200.1.202/" [[email protected] ~]#
3>.使用yaml文件删除pod
[[email protected] ~]# kubectl get pods -o wide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES mynginx-677d85dbd5-gkdb6 1/1 Running 0 7h10m 10.244.1.3 node201.yinzhengjie.org.cnmynginx-677d85dbd5-vk5p5 1/1 Running 0 7h38m 10.244.2.2 node202.yinzhengjie.org.cn mypod 1/1 Running 0 11m 172.200.1.202 node202.yinzhengjie.org.cn [[email protected] ~]# [[email protected] ~]# [[email protected] ~]# kubectl delete -f /yinzhengjie/data/k8s/manifests/basic/host-pod.yaml pod "mypod" deleted [[email protected] ~]# [[email protected] ~]# kubectl get pods -o wide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES mynginx-677d85dbd5-gkdb6 1/1 Running 0 7h11m 10.244.1.3 node201.yinzhengjie.org.cn mynginx-677d85dbd5-vk5p5 1/1 Running 0 7h39m 10.244.2.2 node202.yinzhengjie.org.cn [[email protected] ~]# [[email protected] ~]#
五.配置pod直接使用宿主机网络端口方案二(hostPort)
1>.编写pod的yaml文件
[[email protected] ~]# vim /yinzhengjie/data/k8s/manifests/basic/host-pod.yaml [[email protected] ~]# [[email protected] ~]# cat /yinzhengjie/data/k8s/manifests/basic/host-pod.yaml apiVersion: v1 kind: Pod metadata: name: mypod namespace: default spec: containers: - name: mynginx image: nginx:1.14-alpine ports: - protocol: TCP containerPort: 80 name: http hostPort: 8080 [[email protected] ~]#
2>.使用声明式对象配置创建pod
[[email protected] ~]# kubectl get pods -o wide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES mynginx-677d85dbd5-gkdb6 1/1 Running 0 7h20m 10.244.1.3 node201.yinzhengjie.org.cnmynginx-677d85dbd5-vk5p5 1/1 Running 0 7h48m 10.244.2.2 node202.yinzhengjie.org.cn [[email protected] ~]# [[email protected] ~]# [[email protected] ~]# kubectl apply -f /yinzhengjie/data/k8s/manifests/basic/host-pod.yaml pod/mypod created [[email protected] ~]# [[email protected] ~]# kubectl get pods -o wide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES mynginx-677d85dbd5-gkdb6 1/1 Running 0 7h20m 10.244.1.3 node201.yinzhengjie.org.cn mynginx-677d85dbd5-vk5p5 1/1 Running 0 7h48m 10.244.2.2 node202.yinzhengjie.org.cn mypod 1/1 Running 0 2s 10.244.2.3 node202.yinzhengjie.org.cn [[email protected] ~]#
3>.浏览器访问宿主机的IP地址并查看日志
[[email protected] ~]# kubectl get pods -o wide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES mynginx-677d85dbd5-gkdb6 1/1 Running 0 7h20m 10.244.1.3 node201.yinzhengjie.org.cnmynginx-677d85dbd5-vk5p5 1/1 Running 0 7h48m 10.244.2.2 node202.yinzhengjie.org.cn mypod 1/1 Running 0 2s 10.244.2.3 node202.yinzhengjie.org.cn [[email protected] ~]# [[email protected] ~]# kubectl logs mypod 172.200.0.1 - - [05/Feb/2020:07:34:23 +0000] "GET / HTTP/1.1" 200 612 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-" 2020/02/05 07:34:23 [error] 6#6: *1 open() "/usr/share/nginx/html/favicon.ico" failed (2: No such file or directory), client: 172.200.0.1, server: localhost, request: "GET /favicon.ico HTTP/1.1", host: "172.200.1.202:8080", referrer: "http://172.200.1.202:8080/" 172.200.0.1 - - [05/Feb/2020:07:34:23 +0000] "GET /favicon.ico HTTP/1.1" 404 571 "http://172.200.1.202:8080/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" "-" [[email protected] ~]# [[email protected] ~]#
