kubernetes kube

-token-skydns-etcd volumemounts:-Name:etcd-storage Mountpath :/tmp/data-name: Kube2sky Image:registry.fjhb.cn/kubernetes-kube2sky resources:limits:cpu:100m Memory:50mi requests:cpu:100m memory:50mi args:--kube_master_url= http://192.168.115.5:8080--domain=cluster.local-name:skydns Image:registry.fjhb.cn/skydns resources:limits:cpu:100m memory:50mi requests:cpu:100m Memory:50mi args:--machines=http://127.0.0.1:4001--addr=0.0.0

Kubernetes Kubeadm installation requires the following four packages Kubelet Kubernetes-cni Kubeadm kubectl These four packages can be downloaded via the Https://github.com/kubernetes/kubernetes warehouse to perform make fetch installation packages, and the release version is required if the RPM package is required. In

1. The following error was reported during the creation of Nginx pod:#kubectlcreate-F Nginx-pod.yaml from " Nginx-pod.yaml " " Nginx " is for default/default is automatically created and added to the service accountWorkaround:1> Modify the Kube_admission_control parameter in the/etc/kubernetes/apiserver file.Before modification:Kube_admission_control="--admission_control=namespacelifecycle,namespaceexists,limitranger, Securitycontextdeny,serviceacco

Master Node component kube-apiserver 用于暴露kubernetes API，不管是kubectl 还是HTTP 调用来操作kubernets 集群各种资源，都是通过kube-apiserver 提供的接口进行操作的，Node 节点与Master之间的通信也是主要依赖于kube-apiserver，例如pod调度: kube-scheduler 将调度结果写入etcd，kubelet 监听etcd 获取到调度任务。 ETCD 一款用于共享配置和服务发现的高效KV存储系统，具有分布式、强一致性等特点，在

/flanneld.service[Unit]Description=flanneld Overlay Address ETCD AgentAfter=network.targetAfter=network-online.targetWants=network-online.targetBefore=docker.service[Service]Type=notifyEnvironmentfile=/etc/sysconfig/flanneldExecstart=/usr/bin/flanneld $FLANNEL _optionsExecstartpost=/usr/bin/mk-docker-opts.sh-k docker_network_options-d/run/flannel/subnet.envRestart=on-failure[Install]Wantedby=multi-user.targetRequiredby=docker.service5) Configure Docker to start the specified subnet segment (diff

environment, build a certificate to play. In addition to the certificate, the Web software (here is Traefik) is required to turn on SSL support and use the certificate we have established.4. Configure the CertificateThe lab environment uses the existing certificate with the K8s cluster certificate.[[emailprotected] ~]# cd /etc/kubernetes/ssl/[[emailprotected] ssl]# lsadmin.csr? ? ? apiserver-key.pem? ca.srl? ? ? ? ? ? ? ? ? ? ? kubernetes2-worker.csr

[TOC]After DNS is installed, the pod can resolve the service through DNS to enable communicationKubernetes version:kubectl version My current version is 1.9.0.1, kubectl DNS installation 1.1 Download the configuration file on the official websitehttps://github.com/kubernetes/kubernetes具体路径是cluster/addons/dns/kube-dns 可能版本不一样，路径略有不同该路径下有三个相似的配置文件：

ingress this change to generate a nginx configuration, and then this configuration through the Kubernetes API written to the Nginx pod, and then Reload. The specific implementation is as Follows:1. Generate a default backend and forward to the default backend page if you encounter a URL that cannot be resolved[email protected] ingress]# Catdefault-Backend.yaml apiversion:extensions/v1beta1kind:Deploymentmetadata:name:default-http-Backend labels:

,ip:port combination of automatic association back-end pod, even if the pod changes, kubernetes internal Update This group of relationships, so that the service can match to the new pod. In this way, the fixed IP provided by the service, the user no longer care about the need to visit which pod, and whether the pod will change, greatly improve the quality of service. If the pod uses RC to create multiple replicas, then the service can proxy multiple i

In a cluster with TLS enabled, each time the cluster interacts with identity authentication, using Kubeconfig (i.e., certificates) and token two authentication methods is the simplest and most common authentication method.Take Kubectl as an example to introduce the configuration of Kubeconfig. Kubectl is just a go-written executable program that can be used by any node in the cluster as long as the appropriate Kubeconfig is configured for Kubectl. Kubectl Default is to find files with file names

://192.168.1.201:2379,http://localhost:2379" 10. Start the Kubernetes service.Systemctl start Etcd kube-apiserver kube-controller-manager Kube-schedulerSystemctl enable ETCD Kube-apiserver Kube-controller-manager

, build a certificate to play. In addition to the certificate, the Web software (here is Traefik) is required to turn on SSL support and use the certificate we have established.4. Configure the CertificateThe lab environment uses the existing certificate with the K8s cluster certificate.[Email protected] ~]# cd/etc/kubernetes/ssl/[[email protected] ssl]# lsADMIN.CSR??? Apiserver-key.pem? Ca.srl??????????? KUBERNETES2-WORKER.CSR??? Kubernetes3-worker-k

MasterThe following steps are performed on master Installing ETCD and kubernetes through Yum Yum-y Install ETCD kubernetes2. Modify the configuration file/etc/etcd/etcd.conf, make sure ETCD listens to all addresses, modify the following:Etcd_name=defaultetcd_data_dir= "/var/lib/etcd/default.etcd" etcd_listen_client_urls= "http://0.0.0.0:2379"3. Modify the configuration file/etc/kubernetes/api

" to save and reboot. Disabling swap memory may appear to be a strange requirement at the outset. If you are curious about this step, you can click " read the original " at the end of the text to get more details. 4. Installation Kubernetes $ sudo apt-get update \ sudo apt-get install-y apt-transport-https \ Curl-s HTTPS://PACKAGES.CLOUD.GOOGLE.COM/APT/DOC/APT-KEY.GPG | sudo apt-key add- $ echo "Deb http://apt.kubernetes.io/

, build a certificate to play. In addition to the certificate, the Web software (here is Traefik) is required to turn on SSL support and use the certificate we have established.4. Configure the CertificateThe lab environment uses the existing certificate with the K8s cluster certificate.[[emailprotected] ~]# cd /etc/kubernetes/ssl/[[emailprotected] ssl]# lsadmin.csr? ? ? apiserver-key.pem? ca.srl? ? ? ? ? ? ? ? ? ? ? kubernetes2-worker.csr? ? ? kubern

-ingress-lb ports: - name: web containerPort: 80 hostPort: 80 - name: admin containerPort: 8081 args: - --web - --web.address=:8081 - --kubernetes3. Traefik Service File# cat traefik-service.yamlapiVersion: v1kind: Servicemetadata: name: traefik-web-ui namespace: kube-systemspec: selector: k8s-app: traefik-ingress-lb ports: - port: 80targetPort: 80814. Create Clusterro