Kubernetes is Google's Open source container cluster management system. It is built on Docker technology and provides a whole set of functions, such as resource scheduling, deployment operation, service discovery, expansion and contraction capacity, for containerized applications, which can be regarded as Mini-paas platform based on container technology. The purpose of this article is to comb the architectu
Here the ETCD cluster is multiplexed with the 3 nodes that we tested, 3 node to install and start, note to modify the configuration file1, TLS certification file distribution: ETCD cluster authentication, in addition to the native, distributed to other node nodesSCP ca.pem KUBERNETES-KEY.PEM Kubernetes.pem [email protected]10.10. 90.106:/etc/kubernetes/SSLSCP ca.pem KUB
Deployment BookInfo Sample program detailed procedures and procedures (based on kubernetes cluster +istio v1.0)Deploying the BookInfo sample programThe sample application is included in the Samples directory of the downloaded Istio installation package.BookInfo ApplicationsDeploy a sample application that consists of four separate microservices to demonstrate a variety of istio features. This app mimics a category in the online bookstore, displaying i
The content of this section:
Traefik Introduction
Two services deployed for testing
Role Based Access Control configuration (Kubernetes 1.6+ only)
Deploying Traefik
Deploying Ingress
Deploying the Traefik UI
Access test
Health Check
I. Introduction of TraefikTraefik is a front-end load balancer with good support for orchestration tools such as MicroServices architecture, especially
are many components involved: Mesos (c + +), Marathon (Scala), Mesos-dns (Golang), and so on. It's not easy to find developers who are familiar with so many languages.
All schedulers do not have a good abstraction for microservices, just like the abstraction of Pod,service,namespace. These are easy to implement, but not yet implemented.
Kubernetes Advantages
Design a fairly sophisticated
Kubernetes is Google's Open source container cluster management system. It is built on Docker technology and provides a whole set of functions, such as resource scheduling, deployment operation, service discovery, expansion and contraction capacity, for containerized applications, which can be regarded as Mini-paas platform based on container technology. The purpose of this article is to comb the architectu
": [ { "C": "CN", "ST": "Beijing", "L": "Beijing", " O ":" K8s ", " OU ":" System " } ]}eofTips: CNThat is, Common name,kube-apiserver extracts the field from the certificate as the requested user name; OThat is, Organization,kube-apiserver extracts the field from the certificate as the group to which the requesting user belongs;Generate the CA certificate with CFSSL and issue the certificate:Cfssl GENCERT-INITCA Ca-csr.json | Cfssljson-bare CA2.2 Creating a Api
-grained management of spark applications, improves resiliency, and integrates seamlessly with logging and monitoring solutions. The community is also exploring advanced use cases, such as managing streaming workloads and leveraging service grids such as Istio.To try it on your kubernetes cluster, simply download the official Apache Spark 2.3 release binaries. For example, here we describe a simple spark ap
offers two types of probes, readiness probes and liveness probes.The readiness probe is used to confirm whether the container is acceptable for flow.The liveness probe is used to confirm that the container is healthy, or that it needs to be restarted.These configurations can be easily appended to the deployment yaml, and can be customized with time-outs, retry attempts, delay times, and so on. To learn more about how to use them, please read this article [2].8. Label all ThingsLabeling is one o
The content of this section:
Service Discovery and load balancing
Ingress Combat
First, service discovery and load balancingIn the previous installation deployment Kubernetes cluster, it was simple to demonstrate that pod and Service,kubernetes implemented
first, the core concept
1, Node
node as a working node in a cluster, running a real application, the smallest unit of Kubernetes managed on node is pod. Node runs kubernetes kubelet, Kube-proxy service processes that are responsible for pod creation, start-up, monitoring, restart, destruction, and load balancing of software patterns.
Node contains information:
Kubernetes has developed a Elasticsearch add-on to enable log management of the cluster. This is a combination of Elasticsearch, FLUENTD and Kibana. Elasticsearch is a search engine that is responsible for storing logs and providing query interfaces; Fluentd is responsible for collecting logs from Kubernetes and sending Elasticsearch;kibana a Web GUI that users can browse and search for stored in Logs in th
-manager.confConfigure default contextKubectl config use-context system:[email protected]--kubeconfig=controller-manager.confAfter the controller-manager.conf file is generated, the file is distributed to the/etc/kubernetes directory of each Master node.Controller-manager.conf k8s-master03:/etc/kubernetes/Create the Kube-controller-manager systemd service startup
:// 10.0.1.4:2379systemctl enable etcdsystemctl start Etcd4 Configuring KubernetesIn the/etc/kubernetes directory, there are 4 configuration files:Apiserver and config two configuration files need to be configured. Controller-manager and Scheduler do not need to be configured.To configure the apiserver, you need to specify the ETCD address, the port of the Api-server, the address that provides the service,
CIDR block on 167 is 172.17.4.13/24.168 is 172.17.14.0/24, and the IP addresses of the docker containers created later are in the two network segments respectively.Then execute
Flanneld>/usr/local/kubernete_test/logs/flanneld. log 2> 1 Run the following command on each machine:
Mk-docker-opts.sh-ISource/run/flannel/subnet. envRm/var/run/docker. pidIfconfig docker0 $ {FLANNEL_SUBNET}Restart docker
Service docker restartIn this way, the network of con
, responsible for the implementation of a variety of controllers, mainly:
Endpoint-controller: Periodically correlate the service and POD (the association information is maintained by the endpoint object), ensuring that service-to-pod mappings are always up-to-date.
Replication-controller: Periodically correlate replicationcontroller and pods to ensure that the number of copies Replication
OverviewCoredns is so notorious because it was introduced from kubernetes1.9 as the default DNS for Kubernetes internal service discovery. There is no doubt that Kubernetes is one of Coredns's backend, so we speak Coredns, starting with Kubernetes as the back end.Many of Coredns's features are mentioned on the web and
/kubernetes/ Bootstrap.kubeconfig--kubeconfig=/etc/kubernetes/kubelet.kubeconfig--cert-dir=/etc/kubernetes/ssl-- Cluster-domain=cluster.local--hairpin-mode Promiscuous-bridge--serialize-image-pulls=false"EOFDescription: The IP address inside the node is the IP address, the other nodes corresponding to the good, note that Kubelet_api_server has been in 1.8 when th
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.