Kubernetes cluster configuration notes
This article describes how to configure a Kubernetes cluster. A kubernetes cluster consists of a master node and a slave node.
Run the following services on the Master node:Etcd (the etcd service can also be run independently, not necessarily on the Master node)Kube-apiserverKube-
kubernetes cluster Installation DeploymentKubernetes Cluster Components:-master node-Etcd a highly available k/v key value to the storage and service discovery system-Kube-apiserver provides API calls to Kubernetes clusters-Kube-controller-manager ensure Cluster service-Kube-scheduler dispatch container, assign to Node
1. Reference documentationhttp://traefik.cn/2. Simple way to accessReference documentshttps://tonybai.com/2018/06/25/the-kubernetes-ingress-practice-for-https-service/Previous: Traefik Basic deployment record, describes the simplest HTTP access Traefik, the access process reference is shown below:Client---(via HTTP)---> Traefik----(via HTTP)----> ServicesNow to practice is more secure and more complex HTTPS
apiserverkube_master="--master=http:// 192.168.5.221:8080 "Five, disable the firewallSystemctl Disable iptables-services firewalldsystemctl stop iptables-services FIREWALLDVi. Configuring the Kubernetes service on the master nodeModify the configuration file/etc/etcd/etcd.conf, make sure ETCD listens to all addresses, modify the following:Etcd_name=defaultetcd_data_dir= "/var/lib/etcd/default.etcd" etcd_li
policies are firewall rules that specify the types of data that are allowed to flow in and out. If required, kubernetes can block all traffic that is not explicitly allowed. This paper introduces the network policy of k8s and tests the network performance.
Network PolicyK8s network policies are applied to pod groups identified by common tags. You can then use tags to emulate traditional segmented networks, which are often used to isolate layers
prepare the Kubernetes/pause imageDocker Pull Docker.io/kubernetes/pauseDocker tag f9d5de079539 gcr.io/google_containers/pause:2.0 this is equivalent to renaming the Docker.io to gcr.io,f9d5de079539 as the image ID (Docker images) that was pulled down.9) Confirm that the k8s is starting successfullyKubectl Get Nodes9 Deployment of Nginx cluster1) Create Nginx podskubectl run Nginx--image=nginx--port=80-
the concepts in Kubernetes node, Pod, Replication Controller, service, etc. can be considered as a "resource object", almost all resource objects can be implemented through the Kubectl tool (API call) to perform an increase, delete, change, Check the operation and save it in ETCD for persistent storage. From this point of view, Kubernetes is actually a highly au
sample
This scenario teaches you how to deploy the Guestbook sample using Kubernetes
Network Introduction
Learn about the different network methods available
Create a portal route
Learn how to define host-and path-based ingress routing
Survival and preparation of health checks
Learn how to use liveness and readiness probes to ensure container health
Start using Cri-o and Kubeadm
Learn how t
containers, making deployment and management more flexible. A pod can contain a container or multiple related containers. 2) Replication ControllerThe Replication Controller manages a copy of the pod to ensure that a specified number of pod copies exist in the cluster. If the number of replicas in the cluster is greater than the specified number, the number of extra containers that are outside the specified number is stopped, and conversely, containers with fewer than a specified
node and sends them to Elasticsearch.Elasticsearch runs with Statefulset Resources and elasticsearch-logging provides interfaces externally through the Service. The type of Service has been kubectl edit modified to Nodeport.You can http://192.168.56.106:32607/ verify that the Elasticsearch is working correctly.Kibana runs as a Deployment resource, and users can kibana-logging access their Web GUI through a
Ubernetes is the King of container orchestration and scheduling, it beats the competitors Docker swarm and Apache Mesos, opens the bright future, microservices can be self-repairing, can be automatically expanded, can cross zone, Region even across cloud providers for federate. In this new era of cloud-native applications, it is becoming increasingly important to have a simple insight into how services interact with each other, which can be different from a haystack-wide search for a specific ca
configuration key, flannel queries# for address range assignmentflannel_etcd_prefix= "/atomic.io/network" # Any additional options, want to Pass#flannel_options= ""3 Configuring the key for flannel in ETCDFlannel is configured with ETCD to ensure configuration consistency across multiple flannel instances, so the following configuration is required on the ETCD: ('/atomic.io/network/config ' This key with the above/etc/sysconfig/ The configuration item in flannel Flannel_etcd_prefix is relative,
1. Reference documentationhttp://traefik.cn/2. Simple way to accessReference documentshttps://tonybai.com/2018/06/25/the-kubernetes-ingress-practice-for-https-service/Previous: Traefik Basic deployment record, describes the simplest HTTP access Traefik, the access process reference is shown below:Client---(via HTTP)---> Traefik----(via HTTP)----;? ServicesNow to practice is more secure and more complex HTTP
Containerized technology (containerization).You may have a lot of doubts: what exactly is a container and how does it work? What does Docker and kubernetes mean, and what is the use of Google Container engine and managed VMS? How are they related, and how can we build a powerful service through containers and make them available in a large-scale cluster of production environments? How can you get business v
. When specifying a plug-in in kubernetes, you need to specify the plug-in parameters in the Kubelet service startup parameters:... --network-plugin=cni --cni-conf-dir=/etc/cni/net.d \ # 此目录下的配置文件要符合CNI规范。 --cni-bin-dir=/opt/kubernetes/bin/cni ...There are several open source projects that support deployment to kubernetes
done6. Define flannel network configuration to ETCD, this configuration will be pushed to the flannel service of each MinionsEtcdctl mk/coreos.com/network/config ' {"Network": "172.17.0.0/16"} 'Third, installation MinionsThe following operations are performed on MINIONS1,MINIONS2
Installing flannel and Kubernetes
Yum-y Install flannel Kubernetes2. Configure flannel for the ETCD
of different scenarios. 4.cephceph is currently a very popular open source distributed storage solution. Like Glusterfs, Ceph is a fully software-based distributed storage. One feature of Ceph is that its native provides a variety of interface methods, such as restful objects, blocks, and file systems. Glusterfs and Ceph are very good distributed storage, and many people like to compare them. Should say Glusterfs and ceph each have merits and demerits, in about, vegetables radish each their own
spec's podselector and Ingress-from.?? Next we'll look at the Kubernetes+calico Network policy implementation details.Beta version?? The following is the version of the component used in the test:
Kubernetes
master:v1.9.0
node:v1.9.0
Calico
v2.5.0
Calico-policy-controller
quay.io/calico/kube-policy-controller:v0.7.0
Run Configuration
Calico side,
Kubernetes is Google 's Open source container cluster management system. It is built on Docker technology and provides a whole set of functions, such as resource scheduling, deployment operation, service discovery, expansion and contraction capacity, for containerized applications, which can be regarded as Mini-paas platform based on container technology. The purpose of this article is to comb the architect
The reference urls:https://github.com/kubernetes/kubernetes/blob/master/docs/getting-started-guides/ ubuntu-calico.mdhttps://github.com/projectcalico/calico-docker/blob/master/docs/kubernetes/ Kubernetesintegration.md I have 3 hosts:10.11.151.97, 10.11.151.100, 10.11.150.101. Unfortunately, there is no Internet access in all 3 hosts. Following the guide, I-Build
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.