google kubernetes

In a cluster with TLS enabled, each time the cluster interacts with identity authentication, using Kubeconfig (i.e., certificates) and token two authentication methods is the simplest and most common authentication method.Take Kubectl as an example to introduce the configuration of Kubeconfig. Kubectl is just a go-written executable program that can be used by any node in the cluster as long as the appropriate Kubeconfig is configured for Kubectl. Kubectl Default is to find files with file names

Kubernetes+docker the cloud platform in CentOS7 installation on the system 1. Run VIRTUALBOX5. 2. Install the CENTOS7 system.Note: Select the basic server typeThe installation process is slightly. 3. Modify the computer IP and computer name.1) Nmtui1.Modify Host Name:NMCLI General hostname slave1.smartmap.com2.Modify Network ConnectionsNMCLI Connection Edit ENP0S3Nmcli> Goto IPv4Nmcli ipv4> Set Method manualNMCLI ipv4> Set Addresses 192.168.1.203/16N

Deploying Heketi and Glusterfs in Kubernetes[TOC]1. PrefaceIn Kubernetes, using the Glusterfs file system, the procedure is usually:Create brick--> Create volume--> Create pv--> create pvc-->pod mount PVCIf you are creating more than one PV, you need to manually repeat these interlocking steps, Heketi can resolve these duplication problems.Heketi is used to manage the life cycle of the glusterfs volume and

By default, Kubernetes has a certificate validity period of 1 years when initializing a cluster. Manually generating certificates can avoid this problem. Pull git code git clone https://github.com/fandaye/k8s-tls.git CD k8s-tls/2. Edit the configuration file ' Apiserver.json ' file in the Hosts section, add the corresponding Kubernetes master node hostname and IP address to ', ' number interv

Reference article:1. Kubernetes Learning Resources1, "Kubernetes and cloud-native application" series of kubernetes system architecture and design concept2, [Docker Professional introduction website Dockerinfo] (Dockerinfo-docker container Technology tutorial, docker information dissemination and service platform)3, [Docker Professional introduction website Docko

Summary Project Background (XX Bank customer): The private cloud on the k8s to run like MySQL in the state of the database services, performance and latency are relatively sensitive, not like the web bias application of stateless delay performance almost acceptable. But the network performance and delay is poor based on overlay mode, and the network architecture is more complex. And banks need to be simple and controllable for IP network management. Sr-iov is based on hardware implementation of

0. Preface Overall architecture directory: ASP. NET core distributed project-Directory k8s Schema Catalog: Kubernetes (K8S) cluster deployment (K8S Enterprise Docker container cluster Management) series catalog 1. Deploy Master Components The components of the master server are: Kube-apiserver, Kube-controller-manager, Kube-scheduler So you need to download k8s master,:github.com/kubernetes/

to the build image. In addition, OPS will want this OpenStack lifecycle management system to span bare metal, IaaS, and even PAAs.What Atomic, Docker, Kubernetes bringIf you have an OpenStack service lifecycle management scenario, the following benefits can be created: Isolated, lightweight, portable, detachable The service relationship of the running state is easy to describe Easy to run, easy to update Manage service life

Article from: Listen to the Cloud blogAs our business continues to grow, our number of applications has exploded. With the growth of application explosion, the difficulty of management is increased. How to quickly complete the expansion while the business explosion is growing is a big challenge. The advent of Docker happened to solve our problem. With Docker, we can quickly complete the expansion and contraction, and the configuration is uniform and error-prone.In the Docker cluster management s

Kubernetes about the service exposure is mainly through the Nodeport way, through the binding minion host of a port, then the pod request forwarding and load balancing, but this way the defect is The service may have many, if each is bound to a node host port, the host needs to open the perimeter of a heap of ports to make services calls, management confusion Cannot apply firewall rules required by many companies The ideal way is thr

footprint.3. Log in hub.docker.com using the Docker login command4. Push the local image to hub.docker.com using a command such as Docker push Chenxizhang/mvcapp, which may take a certain amount of time, depending on your network configurationIf all goes well, you can see the following resultsNote: If you are creating your own Docker warehouse, you can learn about the Azure Container Registry service. (https://azure.microsoft.com/zh-cn/services/container-registry/), do not unfold here.Create

The next one is to deploy and expand the Kubernetes cluster based on rancher7. Configuring Redis with ConfigmapHttps://github.com/kubernetes/kubernetes.github.io/blob/master/docs/user-guide/configmap/redis/redis-configRedis-configMaxMemory 2MB Maxmemory-policy Allkeys-lru# kubectl Create Configmap example-redis-config--from-file=./redis-config# Kubectl Get configmap example-redis-config-o yamlapiversion:v1d

certification aspects of processing, certification is actually entrusted to K8s Apiserver responsible, dashboard just based on user login information generated Authinfo object, encrypted as token carried in the browser, that is Jwe protocol, Jwe Sub-package is the implementation of the JWE protocol, where Keyholder (Rsakeyholder concrete Class) manages the key pair used by Jwe and stores the secret key in Kubernetes-dashboard-key-holder Secrets objec

--dport 2380-m State--state new-j ACCEPTTurn off selinux#setenforce 0[Email protected] ~]# sed-i '/^selinux=/c selinux=disabled '/etc/selinux/config2 , installation ETCDgit address:https://github.com/coreos/etcd/releases/ETCD Chinese Document:http://etcd.doczh.cn/documentation/Download the installation package:https://github.com/coreos/etcd/releases/download/v3.3.8/etcd-v3.3.8-linux-amd64.tar.gz#tar-ZXVF etcd-v3.3.8-linux-amd64.tar.gz#ln-S Etcd-v3.3.8-linux-amd64 etcd#cd ETCD#cp etcd*/bin/#etcd

The previous blog post describes the deployment of the K8s cluster, which focuses on deploying Kube-dns and dashboard.Environment descriptionNode-1 (Master): 10.0.0.1Node-2:10.0.0.2Node-3:10.0.0.3The cluster uses a binary installation, and the Flannel network plug-in is deployed.Kube-dns When doing the following, you must have already deployed the k8s cluster, if you do not have such a cluster, please refer to my previous blog post. 1, find the corresponding Yaml file on the offici

First of all, we need to understand the function of kubernetes, in short, it provides a container orchestration technology, to provide users with a container-based service rapid deployment, upgrade, rollback, access control, elastic scaling and other scheduling functions, so that users in the development, testing, production environment can achieve agile development, The purpose of fast and reliable delivery.Second, you need to understand the kubernet

mountpath:/logs volumes: -name:app-logs Emptudir : {} View Log kubectl logs 5. Configuration management of Pod The Kubernetes v1.2 version provides a unified cluster configuration management solution –configmap. 5.1. Configmap: Configuration management for container applications Usage Scenario: Live as an environment variable within a container. Set startup parameters for the container startup command (set to environment variable). Mou

Kubernetes Dashboard1.8.3 Deployment DescriptionPlease click images to download and use the image below. Installing Dashboard#下载yamlwget https://raw.githubusercontent.com/kubernetes/dashboard/master/src/deploy/recommended/kubernetes-dashboard.yaml#查看yaml中imageimage: k8s.gcr.io/kubernetes-dashboard-amd64:v1.8.3

The introduction on GitHub:Ambassador is a open source kubernetes-native API Gateway built on Envoy, designed for MicroServices . Key features include: Self-Service configuration, via Kubernetes annotations First Class GRPC and HTTP/2 support Support for CORS, timeouts, weighted round robin (Canary), and more Istio Integration Authentication Robust TLS support, including TLS c

Outline: ? How to discover services in Kubernetes ? How to discover the services provided by pod ? How to use service discovery Services ? How to use the Kube-dns discovery service ? Kube-dns principle ? Composition ? Domain name format ? Configuration Note: this share is based on the Kubernetes 1.2 version!Let's start with a simple example.1.How to discover service