云原生第四课作业

一、基于Deployment控制器运行pod

1.1yaml文件

root@master1:~/manifests/deployment# cat deployment-nginx

apiVersion: apps/v1

kind: Deployment

metadata:

spec:

replicas: 2

selector:

matchLabels:

app: nginx

tired: frented

template:

metadata:

labels:

app: nginx

tired: frented

spec:

containers:

- name: nginx-c

image: nginx

ports:

- name: http

containerPort: 80

1.2生成pod

root@master1:~/manifests/deployment# kubectl apply -f deployment-nginx --dry-run=client

deployment.apps/deployment-nginx created (dry run)

root@master1:~/manifests/deployment# kubectl apply -f deployment-nginx

deployment.apps/deployment-nginx created

root@master1:~/manifests/deployment# kubectl get pods -w -o wide

NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES

deployment-nginx-69998b8865-7bscd 0/1 ContainerCreating 0 67s <none> 10.0.0.24 <none> <none>

deployment-nginx-69998b8865-z78gm 0/1 ContainerCreating 0 67s <none> 10.0.0.25 <none> <none>

deployment-nginx-69998b8865-z78gm 0/1 ErrImagePull 0 79s 172.200.104.3 10.0.0.25 <none> <none>

deployment-nginx-69998b8865-7bscd 1/1 Running 0 80s 172.200.166.131 10.0.0.24 <none> <none>

deployment-nginx-69998b8865-z78gm 0/1 ImagePullBackOff 0 94s 172.200.104.3 10.0.0.25 <none> <none>

deployment-nginx-69998b8865-z78gm 1/1 Running 0 2m17s 172.200.104.3 10.0.0.25 <none> <none>

二、总结nodeport+svc的访问访问流程

client->nodeport->nginx.svc->nginx-pod->tomcat.svc-tomcat.pod

三、使用nfs为pod提供数据持久化功数据共享

3.1、yaml文件

root@master1:~/manifests/deployment# cat deployment-nfs

apiVersion: apps/v1

kind: Deployment

metadata:

spec:

replicas: 2

selector:

matchLabels:

app: nginx

tired: frented

template:

metadata:

labels:

app: nginx

tired: frented

spec:

containers:

- name: nginx-c

image: nginx

ports:

- name: http

containerPort: 80

volumeMounts:

- name: nfs-test

mountPath: /usr/share/nginx/html

volumes:

- name: nfs-test

nfs:

server: 10.0.0.20

path: /nfs

---

apiVersion: v1

kind: Service

metadata:

spec:

ports:

- name: http

port: 81

targetPort: 80

nodePort: 30080

protocol: TCP

type: NodePort

selector:

app: nginx

tired: frented

3.2NFS SERVER 配置

[root@haproxy1 ~]# cat /etc/exports

/nfs 10.0.0.0/24(rw,no_root_squash) no_root_squash是必须的

[root@haproxy1 ~]# ls /nfs

index.html

[root@haproxy1 ~]# cat /nfs/index.html

test-nfs

3.3启动pod然后修改pod中的/etc/nginx/nginx.conf文件

root@master1:~/manifests/deployment# kubectl apply -f deployment-nfs

deployment.apps/deployment-nginx created

service/service-nfs created

root@master1:~/manifests/deployment# kubectl get pods

NAME READY STATUS RESTARTS AGE

deployment-nginx-85c7ff4d88-4n4d4 1/1 Running 0 3h15m

deployment-nginx-85c7ff4d88-hr4hw 1/1 Running 0 3h15m

root@deployment-nginx-85c7ff4d88-4n4d4:/# cat /etc/nginx/nginx.conf

user root; #必须改为root

worker_processes auto;

root@deployment-nginx-85c7ff4d88-4n4d4:/# nginx -s reload

2022/01/20 10:46:56 [notice] 508#508: signal process started

3.4测试

root@master1:~/manifests/deployment# kubectl get svc

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE

kubernetes ClusterIP 10.100.0.1 <none> 443/TCP 5d1h

service-nfs NodePort 10.100.148.236 <none> 81:30080/TCP 3h19m

root@master1:~/manifests/deployment# curl 10.100.148.236:81

test-nfs

四、使用configmap为pod提供配置

4.1configmap的配置文件

root@master1:~/manifests/configmap# cat nginx-configmap.yaml

apiVersion: v1

kind: ConfigMap

metadata:

namespace: default

data:

default:

server {

listen 80;

server_name www.mysite.com;

index index.html;

location / {

root /data/nginx/html;

if (!-e $request_filename) {

rewrite ^/(.*) /index.html last;

}

4.2其它配置文件

root@master1:~/manifests/configmap# cat configmap.yaml

apiVersion: apps/v1

kind: Deployment

metadata:

spec:

replicas: 2

selector:

matchLabels:

app: nginx

tired: frented

template:

metadata:

labels:

app: nginx

tired: frented

spec:

containers:

- name: nginx-c

image: nginx

ports:

- name: http

containerPort: 80

volumeMounts:

- name: nfs-test

mountPath: /data/nginx/html

- name: cfg-test

mountPath: /etc/nginx/conf.n60

volumes:

- name: nfs-test

nfs:

server: 10.0.0.20

path: /nfs

- name: cfg-test

configMap:

items:

- key: default

path: mysite.conf

---

apiVersion: v1

kind: Service

metadata:

spec:

ports:

- name: http

port: 81

targetPort: 80

nodePort: 30080

protocol: TCP

type: NodePort

selector:

app: nginx

tired: frented

4.3启动

root@master1:~/manifests/configmap# kubectl apply -f nginx-configmap.yaml

configmap/nginx-configmap configured

root@master1:~/manifests/configmap# kubectl apply -f configmap.yaml

deployment.apps/deployment-nginx created

root@master1:~/manifests/configmap# kubectl get configmap

NAME DATA AGE

kube-root-ca.crt 1 5d3h

nginx-configmap 1 77m

root@master1:~/manifests/configmap# kubectl get pods

NAME READY STATUS RESTARTS AGE

deployment-nginx-75d5547b74-5gjdn 1/1 Running 0 56m

deployment-nginx-75d5547b74-7tr7z 1/1 Running 0 56m

service/service-nfs created

修改nginx的主配置文件，启动用户改为root，加载configmap导入的配置文件

configmap加载的配置

root@deployment-nginx-75d5547b74-5gjdn:/# cat /etc/nginx/conf.n60/mysite.conf

server { listen 80; server_name www.mysite.com; index index.html;

location / { root /data/nginx/html; if (!-e $request_filename) { rewrite ^/(.*) /index.html last; } } }

nfs挂载

root@deployment-nginx-75d5547b74-5gjdn:/# df -h

Filesystem Size Used Avail Use% Mounted on

overlay 29G 9.0G 19G 33% /

tmpfs 64M 0 64M 0% /dev

tmpfs 2.0G 0 2.0G 0% /sys/fs/cgroup

/dev/mapper/ubuntu--vg-ubuntu--lv 29G 9.0G 19G 33% /etc/hosts

shm 64M 0 64M 0% /dev/shm

10.0.0.20:/nfs 38G 1.7G 36G 5% /data/nginx/html

tmpfs 3.6G 12K 3.6G 1% /run/secrets/kubernetes.io/serviceaccount

tmpfs 2.0G 0 2.0G 0% /proc/acpi

tmpfs 2.0G 0 2.0G 0% /proc/scsi

tmpfs 2.0G 0 2.0G 0% /sys/firmware

root@deployment-nginx-75d5547b74-5gjdn:/# cat /data/nginx/html/index.html

test-nfs

nginx的主配置文件/etc/nginx/nginx.conf

user root; #改为root用户

include /etc/nginx/conf.n60/*.conf;包含configmap导入的配置文件

修改客户端的host文件解析

root@master1:~/manifests/configmap# cat /etc/hosts

127.0.0.1 localhost

127.0.1.1 cncf-k8s-md

# The following lines are desirable for IPv6 capable host

10.0.0.24 www.mysite.com

4.4访问测试

root@master1:~/manifests/configmap# curl www.mysite.com:30080

test-nfs

五、使用存活探针和就绪探针就pod服务进行探测

5.1readiness探针

错误的目录设定

^Croot@master1:~/manifests/Probes# cat probe.yaml

apiVersion: apps/v1

kind: Deployment

metadata:

spec:

replicas: 2

selector:

matchLabels:

app: nginx-probe

tired: frented-probe

template:

metadata:

labels:

app: nginx-probe

tired: frented-probe

spec:

containers:

- name: nginx-probe

image: nginx

ports:

- name: http

containerPort: 80

volumeMounts:

- name: nfs-test

mountPath: /usr/share/nginx/html

- name: cfg-test

mountPath: /etc/nginx/conf.n60

readinessProbe:

initialDelaySeconds: 5

periodSeconds: 3

timeoutSeconds: 5

successThreshold: 1

failureThreshold: 3

httpGet:

path: /healthz1 #正确的地址是/healthz

port: 80

volumes:

- name: nfs-test

nfs:

server: 10.0.0.20

path: /nfs

- name: cfg-test

configMap:

items:

- key: default

path: mysite.conf

---

apiVersion: v1

kind: Service

metadata:

spec:

ports:

- name: http

port: 81

targetPort: 80

nodePort: 30081

protocol: TCP

type: NodePort

selector:

app: nginx-probe

tired: frented-probe

应用配置

root@master1:~/manifests/Probes# kubectl apply -f probe.yaml

deployment.apps/probe-test configured

service/service-nfs-probe unchanged

root@master1:~/manifests/Probes# kubectl get pods

NAME READY STATUS RESTARTS AGE

probe-test-764bc564c7-2m47c 0/1 ContainerCreating 0 11s

probe-test-764bc564c7-h8vrl 0/1 ContainerCreating 0 12s

ready一直为0

日志：

root@master1:~/manifests/deployment# kubectl logs probe-test-7bd9f8cdb8-4mmmr

/docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration

/docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/

/docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh

10-listen-on-ipv6-by-default.sh: info: Getting the checksum of /etc/nginx/conf.d/default.conf

10-listen-on-ipv6-by-default.sh: info: Enabled listen on IPv6 in /etc/nginx/conf.d/default.conf

/docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh

/docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh

/docker-entrypoint.sh: Configuration complete; ready for start up

2022/01/21 00:38:33 [notice] 1#1: using the "epoll" event method

2022/01/21 00:38:33 [notice] 1#1: nginx/1.21.5

2022/01/21 00:38:33 [notice] 1#1: built by gcc 10.2.1 20210110 (Debian 10.2.1-6)

2022/01/21 00:38:33 [notice] 1#1: OS: Linux 5.4.0-94-generic

2022/01/21 00:38:33 [notice] 1#1: getrlimit(RLIMIT_NOFILE): 1048576:1048576

2022/01/21 00:38:33 [notice] 1#1: start worker processes

2022/01/21 00:38:33 [notice] 1#1: start worker process 30

2022/01/21 00:38:33 [notice] 1#1: start worker process 31

2022/01/21 00:38:40 [error] 31#31: *1 open() "/usr/share/nginx/html/healthz1" failed (2: No such file or directory), client: 10.0.0.25, server: localhost, request: "GET /healthz1 HTTP/1.1", host: "172.200.104.26:80"

10.0.0.25 - - [21/Jan/2022:00:38:40 +0000] "GET /healthz1 HTTP/1.1" 404 153 "-" "kube-probe/1.22" "-"

10.0.0.25 - - [21/Jan/2022:00:38:43 +0000] "GET /healthz1 HTTP/1.1" 404 153 "-" "kube-probe/1.22" "-"

2022/01/21 00:38:43 [error] 31#31: *2 open() "/usr/share/nginx/html/healthz1" failed (2: No such file or directory), client: 10.0.0.25, server: localhost, request: "GET /healthz1 HTTP/1.1", host: "172.200.104.26:80"

10.0.0.25 - - [21/Jan/2022:00:38:46 +0000] "GET /healthz1 HTTP/1.1" 404 153 "-" "kube-probe/1.22" "-"

2022/01/21 00:38:46 [error] 31#31: *3 open() "/usr/share/nginx/html/healthz1" failed (2: No such file or directory), client: 10.0.0.25, server: localhost, request: "GET /healthz1 HTTP/1.1", host: "172.200.104.26:80"

10.0.0.25 - - [21/Jan/2022:00:38:49 +0000] "GET /healthz1 HTTP/1.1" 404 153 "-" "kube-probe/1.22" "-"

2022/01/21 00:38:49 [error] 31#31: *4 open() "/usr/share/nginx/html/healthz1" failed (2: No such file or directory), client: 10.0.0.25, server: localhost, request: "GET /healthz1 HTTP/1.1", host: "172.200.104.26:80"

2022/01/21 00:38:52 [error] 31#31: *5 open() "/usr/share/nginx/html/healthz1" failed (2: No such file or directory), client: 10.0.0.25, server: localhost, request: "GET /healthz1 HTTP/1.1", host: "172.200.104.26:80"

10.0.0.25 - - [21/Jan/2022:00:38:52 +0000] "GET /healthz1 HTTP/1.1" 404 153 "-" "kube-probe/1.22" "-"

10.0.0.25 - - [21/Jan/2022:00:38:55 +0000] "GET /healthz1 HTTP/1.1" 404 153 "-" "kube-probe/1.22" "-"

2022/01/21 00:38:55 [error] 31#31: *6 open() "/usr/share/nginx/html/healthz1" failed (2: No such file or directory), client: 10.0.0.25, server: localhost, request: "GET /healthz1 HTTP/1.1", host: "172.200.104.26:80"

修改为正确的路径

httpGet:

path: /healthz

应用配置

root@master1:~/manifests/Probes# kubectl apply -f probe.yaml

deployment.apps/probe-test configured

service/service-nfs-probe unchanged

root@master1:~/manifests/Probes# kubectl get pods

NAME READY STATUS RESTARTS AGE

probe-test-764bc564c7-n6f9v 1/1 Running 0 96s

probe-test-764bc564c7-wnn2q 1/1 Running 0 72s

root@master1:~/manifests/deployment# kubectl logs probe-test-764bc564c7-n6f9v