Service account for Kubernetes
Service Account RoleThe service account is designed to facilitate the process within the pod to invoke the Kubernetes API or other external services.
Service Account Usage ScenariosProcesses running in the pod need to invoke the Kubernetes API and other services of the non-Kubernetes
[TOC]DescriptionThere is no detailed explanation of the Kubernetes's service exposure and Traefik's principles. The Traefik principle can be consulted in the official documentation: https://docs.traefik.io/, This document can also be consulted about the service exposure of kubernetes and the rationale for using Traefik as a kubernetes ingress: https://mritd.me/2016/12/06/ Try-traefik-on-
Reference Address: Https://github.com/gjmzj/kubeasz
IntroductionProvides tools for quickly deploying highly available k8s clusters, deploying in binary mode and automating with Ansible-playbook, providing a one-click installation script or stepping through the installation of individual components while explaining the main parameter configurations and considerations for each step.CharacteristicsCluster Features: TLS bidirectional authentication, RBAC authorization, multi-master high availab
This article describes how to quickly deploy a set of kubernetes clusters, so let's get started quickly!
Preparatory work//关闭防火墙systemctl stop firewalld.servicesystemctl disable firewalld.service//关闭selinux,修改/etc/selinux/configSELINUX=disabledMachine Deployment Planning
Host
IP
Deploying Components
Master Master Node
192.168.199.206
ETCD, Kube-apiserver, Kube-controller-manager, Kube-sch
Kubernetes components and role distribution component functions:
-Etcd a highly available k/v key value to the storage and service discovery system-Flannel The communication of the container network of the boast host-Kube-apiserver provides API calls to Kubernetes clusters-Kube-controller-manager ensure Cluster service-Kube-scheduler dispatch container, assign to Node-Kubelet boot container on node
This is a creation in
Article, where the information may have evolved or changed.
Kris Nova, of Microsoft, shares lessons on over-engineering from she experience contributing to Kubernetes Kops. In hers spare time, she runs a Kubernetes special Interest Group bringing Kubernetes to AWS, all and working on Microsoft Acs. She ' s writing a book called Cloud Native
The role of Kubernetes Scheduler is to bind controller manager to a new pod according to a specific scheduling algorithm and scheduling policy to a suitable node in the cluster, and to write the binding information to the ETCD.I. Deployment OF SchedulerThe following generates the Kube-scheduler Kubeconfig file, as follows:cd/etc/kubernetesexport kube_apiserver="https://192.168.15.200:6443"Configure clusterKubectl config set---certificate-authority=/et
Brief Description:Using the Rke tool, on the 192.168.3.161 machine, create a kubernetes cluster with two nodes (192.168.3.162 and 192.168.3.163). Rke automatically creates KUBE_CONFIG_CLUSTER.YML configuration files in the/home/user directory.On another server (192.168.3.160), run the Rancher Server 2.0 container. After running, use the https://192.168.3.160 address to access Rancher Server 2.0 preview. (Note: No longer the previous 8080 port)In the R
Brief description:Using the Rke tool, on the 192.168.3.161 machine, create a kubernetes cluster with two nodes (192.168.3.162 and 192.168.3.163). Rke automatically creates KUBE_CONFIG_CLUSTER.YML configuration files in the/home/user directory.On another server (192.168.3.160), run the Rancher Server 2.0 container. After running, use the https://192.168.3.160 address to access Rancher Server 2.0 preview. (Note: No longer the previous 8080 port)In the R
previous Chapters Kubernetes All operations we are using command line tools kubectl completed. To provide a richer user experience, Kubernetes also developed a WEB-based Dashboard that enables users to deploy containerized applications with Kubernetes Dashboard, monitor the status of applications, perform troubleshooting tasks, and manage
First, prefaceKubernetes is the Google Open Source container cluster management system, based on Docker to build a container scheduling service, providing resource scheduling, balanced disaster recovery, service registration, dynamic expansion capacity and other functional suites, currently the latest version is 0.6.2. This article describes how to build Kubernetes platform based on Centos7.0, before it is formally introduced, it is necessary to under
How to obtain a Kubernetes image in China
I. background
As we all know, due to domestic network reasons, when building a Kubernetes environment, we often encounter situations where necessary images cannot be found. After all, it is not a good way to pick up junk in DockerHub. This article will teach you how to build your own image repository in DockerHub.
Requirement: You have a GitHub account and a DockerH
Use Rancher's RKE to quickly deploy a Kubernetes Cluster
Brief description:
This article involves three Ubuntu machines, one RKE deployment machine (192.168.3.161), and two Kubernetes cluster machines (3.162 and 3.163 ).
First on a Windows machine, download the rke_linux-amd64 from github, rename it rke, edit the cluster. the yml cluster deployment file uses the pscp Command provided by putty to upload the
, indicates the use of Host network volumes: #在该pod On the definition shared storage Volume List-name:string #共享存储卷名称 (there are many types of volumes) Emptydir: {} #类型为emtyDir的存储卷, a temporary directory with the pod's life cycle. A null-value hostpath:string #类型为hostPath的存储卷 that represents the directory path:string the host where the pod is mounted, and will be used for the same time Mount directory #Pod所在宿主机的目录. Secret: #类型为secret的存储卷, mount the cluster with the defined Secre ob
Introduction to deploying Calico Network Calico Components:
The Felix:calico agent runs on each node, setting network information for the container: IP, routing Rules, iptable rules, etc.
Etcd:calico Back-End storage
BIRD:BGP Client: Responsible for broadcasting Felix's routing information set on each node to the Calico network (via the BGP Protocol).
BGP Route Reflector: Hierarchical routing distribution for large-scale clusters.
Calico:calico command-line administratio
With the popularity of micro-service architectures and the trend of cloud-native, containerized microservices have become the best product of continuous delivery and have become the kubernetes best ecosystem for operation and maintenance containers. Practice out of knowledge, since kubernetes the study, wrote a series of articles, in order to be able to learn from each other, to find knowledge of the loopho
The current skaffold version is v0.4 and has not yet been released, and is not recommended for use in production environments;Skaffold is used for developer rapid deployment programs to Kubernetes,Skaffold provides dev, run two modes , and Skaffold requires a skaffold configuration file that defines Skaffold workflow ;The Skaffold workflow defines three main stages : Build, Push, Deploy;First, BuildDuring the build phase, Skaffold uses the dockerfile
As early as half a year ago, the company began to implement the container deployment scheme Appos, although the publishing interface is too geek, very obscure, but carefully studied really feel very powerful, after the implementation of the container, computing resources (CPU, memory) utilization can be greatly improved, reduce the number of servers, thereby saving technical costs.
Coincidentally, a number of friends in the start-up companies are also recently trying to do micro-services, contai
Kubernetes Important Concept UnderstandingKubernetes is currently the most mainstream container orchestration tool, the next generation of distributed architecture of the king. 2018 Kubernetes The first version 1.10 has been released. Here's a look at some of the basic concepts of kubernetes.The kubernetes divides the machines in the cluster into master nodes and
Operational environment readiness and related software requirements1. Production-grade Kubernetes cluster recommended 1.8 or later2.Gitlab Docker Image Slpcat/gitlab-ce3.Jenkins Docker ImageJenkins master image Slpcat/kube-jenkins-service has been installed with various plugins required, preconfigured with Kubernetes management Jenkins slave Jenkins slave image slpcat/kube- Jenkins-dind-agentSupport for JNL
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.