After deleting the configuration files for Isti and Foo, namespace continues to terminating state, and no Istio-system namespace can be created at this timenamespace "Istio-system"Edited[email protected]:~/istio-0.8.0/install/kubernetes# KubectlGetnsname STATUS Agechoerodon-devops-prod Active 21ddefaultActive 30dfoo terminating 11distio-system terminating 19djack
information about the cluster, and even make changes to the cluster. In this case, Kubernetes provides a special authentication method: Service account. Service account, like pod, service, and deployment, is a resource in a kubernetes cluster, and users can create their own.ServiceAccount contains three main content: namespace, Token, and CA.
resources through selectors. For example, deployment and services.When you start writing a kubernetes configuration file, you feel good and think that maintenance is not a big problem. However, when you try to implement a deployment pipeline, you will find that using a bunch of configuration files is a very bad idea. At this point helm can save, Helm is a tool for packaging kubernetes applications, and I h
IP address and port, but access s Ervice this virtual IP and port, the service forwards the request to the pod behind it.Kubernetes, when creating a service, finds the pod based on the service's label selector (label Selector), creating a endpoints object with the same name as the service. When the address of the pod changes, the endpoints changes as well. When the service accepts the request, it can find the destination address of the request forwarding through endpoints.For example, the autho
all executors, related services, and so on. Driverpod can be considered to be the expression of spark applied in kubernetes.
(9) The characteristics of kubernetes.
L namespaces. Kubernetes has the concept of a namespace. Namespaces are a way of dividing cluster resources across multiple users (through resource quotas
Description: Use the Grafana official plugins (Grafana-kuberneres-app) Link Prometheus show kubernetes informationNote: All monitoring-related information is placed on the Namespace=monitorGithub:https://github.com/grafana/kubernetes-app1, Installation PrometheusProm-rbac.yamlapiVersion: rbac.authorization.k8s.io/v1beta1kind: ClusterRolemetadata: name: prometheu
rangeIPC Namespaces: Multiple containers in the pod can communicate using SYSTEMV IPC or POSIX Message Queuing.UTS namespace: Multiple containers in the pod share a host name.Volumes (Shared storage volume): Each container in the pod can access the Volumes defined at the pod level.LabelLabel is a core concept in the kubernetes system. Labels are attached to various objects in the form of Key/value key-valu
. Main concepts of Kubernetes 2.1 Pods
In the Kubernetes system, the smallest granularity of scheduling is not simply a container, but a Pod. A Pod is the smallest deployment unit that can be created, destroyed, scheduled, and managed. One or more containers (Container) constitute a Pod. Generally, the containers in the Pod run the same application. Pods contain containers running on the same Minion (Host)
Server saves the Node status information to ETCd. The Node Controller in Controller Manager regularly reads the status information of these nodes through the API Server and processes them accordingly. After listening to the information created by a Pod, Scheduler retrieves the list of all nodes that meet the Pod requirements and binds the Pod to the most compliant nodes in the node list: if schedpod detects that a Pod is deleted, the corresponding Pod instance on the current node is deleted.
Fr
Name space
What is a namespace?
The namespace (English: Namespace) represents the visible range of identifiers (identifier). An identifier can be defined in more than one namespace, and its meaning in different namespaces is mutually irrelevant. In this way, any identifiers can be defined in a new
Deployment model, including Pod, Replication controller, Label, and Service.
Pod
The minimum deployment unit of Kubernetes is Pod rather than container. As a First class API citizen, Pods can be created, scheduled, and managed. Simply put, like the peas in a Pod, the application containers in a Pod share the same context:
PID namespace. But not in docker
Network
associated containers into a pod, usually in pod containers running the same application. Pods contain containers that run on the same minion (Host), as a single snap-in that shares the same volumes and network NAMESPACE/IP and port space.3.2. ServicesServices is also the basic operating unit of Kubernetes, is the abstraction of real application services, each service has a lot of corresponding containers
functions are as follows:
1 Use Docker for application wrapping (package), instantiating (instantiate), running (run).
2 to run and manage the containers across the machine in a cluster manner.
3 to solve the communication problem between Docker and cross machine containers.
4 Kubernetes's self-healing mechanism makes the container cluster always run in the user's desired state.
The current kubernetes support GCE, Vshpere, CoreOS, OpenShift, Azure an
Namespaces are actually just a form, and the ultimate goal is to refactor the code, but it's impossible to do this in a single pass.
At first, a pseudo proposition was given: thinkphp-based refactoring (not why). After a period of practice, it is found that this is a wrong way of thinking, in which the pits encountered in this slightly not table.
First, don't try to rewrite the whole namespace based on namespaces, but should be local.
The result o
means to increase the network card, del means to release the network card
Cni_containerid: Container ID
Cni_netns: Container Network namespace file location
Cni_args: Additional parameters to pass
Cni_ifname: Set the container NIC name, such as Eth0
Because of this, the implementation of the code is very easy to expand, in addition to the Macvlan of the bridge, and other basic implementation, there are a large number of third-par
the following two aspects1. ManageabilitySome containers are meant to be closely connected and work together. Pods provide a higher level of abstraction than containers and encapsulate them in a deployment unit. Kubernetes schedules, expands, shares resources, and manages lifecycle with pod as the smallest unit2. Communication and resource sharingAll containers in the pod use the same network namespace, wh
, destroyed, dispatched, and managed. The associated one or more containers (Container) Form a pod, usually in pod containers running the same application. Pods contain containers that run on the same minion (Host), as a single snap-in that shares the same volumes and network NAMESPACE/IP and port space.2.2 ServicesServices is also the basic operating unit of Kubernetes, is the abstraction of real applicati
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.