OpenFaaS梳理之一：部署
关于《OpenFaaS梳理》系列
《OpenFaaS梳理》系列是最近在做的一个项目需要用到openfaas，该项目基本的实现是通过利用openfaas将Python基础镜像结合用户自定义的Python脚本，并通过发布服务和调度任务等方式，实现将一个个机器学习任务隔离在不同的容器服务中执行，实现现场人员机器学习任务的利用。本系列从最基础的部署开始，希望通过对之前开发中的细节和实现的回顾，浅入深逐渐熟悉OpenFaaS的高级功能，并将整个研发的思路过程做一次回顾。
环境信息
整个实战系列用到的OpenFaaS都是部署在Kubernetes环境下，因此请小伙伴自行提前准备好Kubernetes环境；
我这里由于是开发环境，因此并未部署Kubernetes集群，而是在单机上部署的Kubernetes；
下面给出整个系列涉及到的环境和软件的版本信息，仅供参考：
- 操作系统：Linux version 3.10.0-1160.el7.x86_64(CentOS-7-x86_64-DVD-2009)
- Kubernetes：1.21.2
- OpenFaaS gateway：0.21.1
- OpenFaaS faas-netes：0.14.1
部署
接下来下载faas-netes的源码，使用其中的kubernetes资源配置文件进行部署；
1. 安装git命令
yum install -y git
2. 下载源码
git clone https://github.com/openfaas/faas-netes
3. 进入下载的文件夹
cd faas-netes4. 创建namespace
[root@localhost openfaas]# kubectl apply -f namespaces.yml
namespace/openfaas created
namespace/openfaas-fn created5. 设置登录web控制台的账号和密码，设置账号密码
[root@localhost openfaas]# kubectl -n openfaas create secret generic basic-auth \
> --from-literal=basic-auth-user=admin \
> --from-literal=basic-auth-password=openfaas
secret/basic-auth created
6. 部署
[root@localhost openfaas]# kubectl apply -f ./yaml
configmap/alertmanager-config created
deployment.apps/alertmanager created
service/alertmanager created
deployment.apps/basic-auth-plugin created
service/basic-auth-plugin created
deployment.apps/cron-connector created
serviceaccount/openfaas-controller created
role.rbac.authorization.k8s.io/openfaas-controller created
role.rbac.authorization.k8s.io/openfaas-profiles created
rolebinding.rbac.authorization.k8s.io/openfaas-controller created
rolebinding.rbac.authorization.k8s.io/openfaas-profiles created
deployment.apps/gateway created
service/gateway-external created
service/gateway created
namespace/openfaas unchanged
namespace/openfaas-fn unchanged
deployment.apps/nats created
service/nats created
customresourcedefinition.apiextensions.k8s.io/profiles.openfaas.com created
configmap/prometheus-config created
deployment.apps/prometheus created
serviceaccount/openfaas-prometheus created
role.rbac.authorization.k8s.io/openfaas-prometheus created
role.rbac.authorization.k8s.io/openfaas-prometheus-fn created
rolebinding.rbac.authorization.k8s.io/openfaas-prometheus created
rolebinding.rbac.authorization.k8s.io/openfaas-prometheus-fn created
service/prometheus created
deployment.apps/queue-worker created7. 等待镜像下载、pod创建、启动等操作完成：
[root@localhost ~]# kubectl get pod -n openfaas
NAME READY STATUS RESTARTS AGE
alertmanager-c7d4dd89b-gr6sf 1/1 Running 1 62m
basic-auth-plugin-86d54f7c5f-rcht6 1/1 Running 1 62m
cron-connector-b747cb4b9-g6lrs 1/1 Running 1 53m
gateway-557854c544-swfb8 2/2 Running 4 62m
nats-76844df8b4-ts5zd 1/1 Running 1 62m
prometheus-5498dc8757-gvfch 1/1 Running 1 62m
queue-worker-5bb684c788-jcslt 1/1 Running 2 62m
至此，部署完成，接下来验证环境是否可用 。
验证
1. 当前K8S宿主机IP地址是192.168.79.139，因此浏览器访问192.168.79.139:31112，如下图，会弹出账号密码输入窗口，账号admin，密码是openfaas：
2. 登录成功：
部署和配置命令行工具
我们可以通过命令行工具远程访问openfaas，其安装也简单：
生产环境中一般需要将faas-cli安装到应用服务器上，开发环境也需要，我本地将其安装到了windowds下。
1. Linux下安装
- 拉取faas-cli
curl -sL https://cli.openfaas.com | sh
- 执行如下命令完成配置，将OPENFAAS_URL写入环境变量中，192.168.133.187是K8S宿主机IP：
echo export OPENFAAS_URL=192.168.79.131:31112 >> ~/.bashrc
- 执行source ~/.bashrc让前面的配置立即生效；
source ~/.bashrc- 执行以下命令，用账号密码登录：
faas-cli login -u admin -p openfaas
2.windows下安装
- 从官网离线下载faas-cli客户端
faas-cli
将安装路径添加到环境变量path中
将OPENFAAS_URL写入环境变量中
验证faas-cli是否可执行
xudb@LAPTOP-VKV71JIE MINGW64 /e/xuexi/works/openfaas/bin
$ faas-cli
___ _____ ____
/ _ \ _ __ ___ _ __ | ___|_ _ __ _/ ___|
| | | | '_ \ / _ \ '_ \| |_ / _` |/ _` \___ \
| |_| | |_) | __/ | | | _| (_| | (_| |___) |
\___/| .__/ \___|_| |_|_| \__,_|\__,_|____/
|_|
Manage your OpenFaaS functions from the command line
Usage:
faas-cli [flags]
faas-cli [command]
Available Commands:
auth Obtain a token for your OpenFaaS gateway
build Builds OpenFaaS function containers
cloud OpenFaaS Cloud commands
completion Generates shell auto completion
deploy Deploy OpenFaaS functions
describe Describe an OpenFaaS function
generate Generate Kubernetes CRD YAML file
help Help about any command
invoke Invoke an OpenFaaS function
list List OpenFaaS functions
login Log in to OpenFaaS gateway
logout Log out from OpenFaaS gateway
logs Fetch logs for a functions
namespaces List OpenFaaS namespaces
new Create a new template in the current folder with the name given as name
publish Builds and pushes multi-arch OpenFaaS container images
push Push OpenFaaS functions to remote registry (Docker Hub)
registry-login Generate and save the registry authentication file
remove Remove deployed OpenFaaS functions
secret OpenFaaS secret commands
store OpenFaaS store commands
template OpenFaaS template store and pull commands
up Builds, pushes and deploys OpenFaaS function containers
version Display the clients version information
Flags:
--filter string Wildcard to match with function names in YAML file
-h, --help help for faas-cli
--regex string Regex to match with function names in YAML file
-f, --yaml string Path to YAML file describing function(s)
Use "faas-cli [command] --help" for more information about a command.然后再bash下用账号密码登录：
$ faas-cli login -u admin -p openfaas
WARNING! Using --password is insecure, consider using: cat ~/faas_pass.txt | faas-cli login -u user --password-stdin
Calling the OpenFaaS server to validate the credentials...
WARNING! You are not using an encrypted connection to the gateway, consider using HTTPS.
credentials saved for admin http://192.168.79.139:31112
登录成功，可以执行客户端命令了，list命令的结果如下
$ faas-cli list
Function Invocations Replicas
至此，openfaas的安装部署和客户端的安装介绍完毕。