浜戝師鐢熸妧鏈細楂樺彲鐢↘ubernetes闆嗙兢

Posted 2021-07-02 鏃剁┖鏈夋俯搴?/a> 浜戝

鏈湡鍐呭姣旇緝纭牳锛屽鏋滀綘瀵笽T鎴栬€呬簯鍘熺敓鎶€鏈鏃犱簡瑙ｇ殑璇濓紝鍙兘闇€瑕佸鐪嬪嚑閬嶆墠鑳界悊瑙ｃ€傚ソ鐨勶紝鐜板湪寮€濮嬭蛋杩汯ubernetes鐨勪笘鐣岋紒

浠€涔堟槸kubernetes锛?/p>

Kubernetes 杩欎釜鍚嶅瓧婧愪簬甯岃厞璇紝鎰忎负鈥滆埖鎵嬧€濇垨鈥滈琛屽憳鈥濓紝鏄竴涓彲绉绘鐨勩€佸彲鎵╁睍鐨勫紑婧愬钩鍙帮紝鐢ㄤ簬绠＄悊瀹瑰櫒鍖栫殑宸ヤ綔璐熻浇鍜屾湇鍔★紝鍙績杩涘０鏄庡紡閰嶇疆鍜岃嚜鍔ㄥ寲銆?/p>

鍥剧墖鏉ユ簮锛欿ubernetes鏂囨。瀹樼綉

Kubernetes鐗圭偣濡備綍锛?/strong>

馃敼鍙Щ妞? 鏀寔鍏湁浜戯紝绉佹湁浜戯紝娣峰悎浜戯紝澶氶噸浜戯紙multi-cloud锛?/p>

馃敼鍙墿灞? 妯″潡鍖? 鎻掍欢鍖? 鍙寕杞? 鍙粍鍚?/p>

馃敼鑷姩鍖? 鑷姩閮ㄧ讲锛岃嚜鍔ㄩ噸鍚紝鑷姩澶嶅埗锛岃嚜鍔ㄤ几缂?鎵╁睍

鏃剁┖鏈夋俯搴?/p>

SKYWD

涓轰粈涔堥渶瑕乲ubernetes锛?br class="mq-105">

鍥剧墖鏉ユ簮锛欿ubernetes鏂囨。瀹樼綉

涓婂浘涓烘湇鍔℃彁渚涙柟寮忕殑鍙戝睍鍘嗗彶锛屾垜浠兘澶熺湅鍒板鍣ㄦ槸鎵撳寘鍜岃繍琛屽簲鐢ㄧ▼搴忕殑涓€绉嶉潪甯稿ソ鐨勬柟寮忋€傚鍣ㄥ彲闈犮€佹晱鎹枫€佽交閲忥紝涓嶸M闀滃儚鐩告瘮锛屽彲绉绘鎬ф洿寮猴紝鍏煎搴︽洿濂姐€佽祫婧愰殧绂诲拰鍒╃敤搴︽洿楂樸€?/span>

鍦ㄧ敓浜х幆澧冧腑锛屼綘闇€瑕佺鐞嗚繍琛屽簲鐢ㄧ▼搴忕殑瀹瑰櫒锛屽苟纭繚涓嶄細鍋滄満锛涜€孠ubernetes 鍒氬ソ涓轰綘鎻愪緵浜嗕竴涓彲寮规€ц繍琛屽垎甯冨紡绯荤粺鐨勬鏋躲€?/span>

Kubernetes鍏蜂綋涓轰綘鎻愪緵浜嗕粈涔堬紵

馃敼鏈嶅姟鍙戠幇鍜岃礋杞藉潎琛?/p>

馃敼瀛樺偍缂栨帓

Kubernetes 鍏佽浣犺嚜鍔ㄦ寕杞戒綘閫夋嫨鐨勫瓨鍌ㄧ郴缁燂紝渚嬪鏈湴瀛樺偍銆佸叕鍏变簯鎻愪緵鍟嗙瓑銆?/p>

馃敼鑷姩閮ㄧ讲鍜屽洖婊?/p>

浣犲彲浠ヤ娇鐢?Kubernetes 鎻忚堪宸查儴缃插鍣ㄧ殑鎵€闇€鐘舵€侊紝瀹冨彲浠ヤ互鍙楁帶鐨勯€熺巼灏嗗疄闄呯姸鎬?鏇存敼涓烘湡鏈涚姸鎬併€備緥濡傦紝浣犲彲浠ヨ嚜鍔ㄥ寲 Kubernetes 鏉ヤ负浣犵殑閮ㄧ讲鍒涘缓鏂板鍣紝 鍒犻櫎鐜版湁瀹瑰櫒骞跺皢瀹冧滑鐨勬墍鏈夎祫婧愮敤浜庢柊瀹瑰櫒銆?/p>

馃敼鑷姩瀹屾垚瑁呯璁＄畻

Kubernetes 鍏佽浣犳寚瀹氭瘡涓鍣ㄦ墍闇€ CPU 鍜屽唴瀛橈紙RAM锛夈€傚綋瀹瑰櫒鎸囧畾浜嗚祫婧愯姹傛椂锛孠ubernetes 鍙互鍋氬嚭鏇村ソ鐨勫喅绛栨潵绠＄悊瀹瑰櫒鐨勮祫婧愩€?/p>

馃敼鑷垜淇

Kubernetes 閲嶆柊鍚姩澶辫触鐨勫鍣ㄣ€佹浛鎹㈠鍣ㄣ€佹潃姝讳笉鍝嶅簲鐢ㄦ埛瀹氫箟鐨?杩愯鐘跺喌妫€鏌ョ殑瀹瑰櫒锛屽苟涓斿湪鍑嗗濂芥湇鍔′箣鍓嶄笉灏嗗叾閫氬憡缁欏鎴风銆?/p>

馃敼瀵嗛挜涓庨厤缃鐞?/p>

Kubernetes 鍏佽浣犲瓨鍌ㄥ拰绠＄悊鏁忔劅淇℃伅锛屼緥濡傚瘑鐮併€丱Auth 浠ょ墝鍜?ssh 瀵嗛挜銆備綘鍙互鍦ㄤ笉閲嶅缓瀹瑰櫒闀滃儚鐨勬儏鍐典笅閮ㄧ讲鍜屾洿鏂板瘑閽ュ拰搴旂敤绋嬪簭閰嶇疆锛屼篃鏃犻渶鍦ㄥ爢鏍堥厤缃腑鏆撮湶瀵嗛挜銆?/p>

                   --淇℃伅鏉ヨ嚜kubernetes瀹樼綉

鏃剁┖鏈夋俯搴?/p>

SKYWD

鎬庢牱閮ㄧ讲kubernetes锛?/p>

Kubernetes閮ㄧ讲涓昏鏈夊叕鏈変簯銆佹湰鍦伴儴缃诧紝杩欓噷鎴戜富瑕佽涓€涓嬮€氳繃kubeadm鐨勬柟寮忔湰鍦伴儴缃睰ubernetes闆嗙兢銆?/p>

01 閮ㄧ讲鍓嶇幆澧冨噯澶?/strong>

鐢变簬鎴戜滑鍑嗗鍋氶珮鍙敤锛屼富瑕佷綋鐜板湪瀵筸aster鑺傜偣缁勪欢鍙奺tcd瀛樺偍鐨勯珮鍙敤锛屾墍浠ヨ繖閲屽噯澶囦簡6鍙癱entos8绯荤粺鐨勮櫄鎷熸満鍋氫竴涓泦缇わ紙浣跨敤鏈湴瀛樺偍锛夈€?/p>

鎵€鏈夎妭鐐规搷浣滃涓嬫楠わ紙鏈変簺姝ラ鍥犱负鎳掓病鏈夋埅鍥撅紝濡傛湁闇€瑕佸彲璇勮鍜ㄨ鎴栬€呯洿鎺ョ櫨搴︼級锛?/p>

1. 淇敼涓绘満鍚嶅拰hosts鏂囦欢锛?/p>

3.  鍚屾涓绘満鏃堕棿锛坈hrony锛夛紱

4.  鍏抽棴闃茬伀澧欙紱

5.  鍏抽棴selinux

6.  绂佺敤swap锛?/p>

7. 閰嶇疆鍐呮牳鍙傛暟锛屽皢妗ユ帴鐨処Pv4娴侀噺浼犻€掑埌iptables鐨勯摼锛?/p>

8. 鍚勮妭鐐归棿鍏嶇閽ョ櫥褰曪紙鏂逛究浼犺緭鏂囦欢锛夛紱

9. 瀹夎鍏宠仈鍖咃紱

02 keepalived+haproxy楂樺彲鐢?/strong>

瀹樼綉缁欏嚭涓ょ鎷撴墤缁撴瀯锛岃繖閲岄噰鐢ㄧ涓€绉嶉儴缃层€?/p>

HAProxy鏄竴涓娇鐢–璇█缂栧啓鐨勮嚜鐢卞強寮€鏀炬簮浠ｇ爜杞欢锛屽叾鎻愪緵楂樺彲鐢ㄦ€с€佽礋杞藉潎琛★紝浠ュ強鍩轰簬TCP鍜孒TTP鐨勫簲鐢ㄧ▼搴忎唬鐞嗐€俬aproxy鍙畨瑁呭湪涓绘満涓婏紝涔熷彲浠ヤ娇鐢╠ocker瀹炵幇锛岃繖閲岄噰鐢ㄧ涓€绉嶃€?/p>

鍥剧墖鏉ユ簮锛氱綉鍙媃oung锛坘ubernetes 涓枃绀惧尯锛?/p>

1. 瀹夎keeplived锛堜笁鍙癿aster鑺傜偣鎿嶄綔锛夛紱

2. 淇敼閰嶇疆锛?/p>

master03鐩存帴澶嶅埗master02鐨勯厤缃紝灏唒riority鏀逛负150鍗冲彲锛涙渶閲嶈鐨勬槸淇敼state鍜宲riority锛屽叾瀹冨唴瀹逛綔绠€鍗曟敞閲婏細

• vrrp_strict check_haproxy锛氭娴媓aproxy鑴氭湰锛?/p>

• interval锛氭瘡3绉掓墽琛屼竴娆℃娴嬶紱

• weight锛氭潈閲嶅彉鍖栵紝鍙鍙礋锛?/p>

• state锛氳缃甿aster涓绘湇鍔″櫒杩樻槸backup澶囩敤鏈嶅姟鍣紱

• virtual_router_id锛氳櫄鎷熻矾鐢辩粍锛?/p>

• priority锛氫紭鍏堢骇/鏉冮噸

3. 鍚姩keepalived鏈嶅姟锛?br class="mq-333">

4. 鏌ョ湅缃戝崱淇℃伅锛屽仠鐢╧eepalived鏈嶅姟锛岀湅vip鏄惁浼氭紓绉诲埌鍏跺畠鐨刴aster鑺傜偣锛涘啀閲嶆柊鍚姩keepalived锛岀湅鐪嬭兘鍚︽紓绉诲洖鍘汇€?/p>

A. 瀹夎haproxy锛堜笁鍙癿aster鑺傜偣鎿嶄綔锛夛紱

B. 淇敼閰嶇疆锛?/p>

C. 鍚姩鏈嶅姟锛屾鏌ラ厤缃紱

03 docker鐜閮ㄧ讲

1. 瀹夎蹇呰宸ュ叿锛?br class="mq-371">

2. 瀹夎docker锛堟墍鏈夎妭鐐规搷浣滐級锛?/p>

3. 閰嶇疆daemon鏂囦欢锛?/p>

鏈変簺浜哄枩娆㈤厤缃樋閲屼簯浠撳簱鍔犻€熷櫒锛岃繖涓厤涓嶉厤鐨勭湅涓汉闇€姹傘€?/p>

4. 鍚姩docker鏈嶅姟锛?br class="mq-391">

04 kubeadm鏂瑰紡鍒濆鍖栭泦缇?/strong>

1. 娣诲姞闃块噷浜慿ubernetes婧愶紱

濡傛灉鎯宠寤虹珛鍏冩暟鎹浛鎹㈡垚娣诲姞闃块噷婧愶紝涔熷彲浠ヨ繖涔堝仛

2. 瀹夎锛堟墍鏈夎妭鐐规搷浣滐級锛?/p>

鍏佽kubelet寮€鏈哄惎鍔紝kubectl鑷姩琛ュ叏锛?br class="mq-423">

3. 鍒濆鍖杒8s闆嗙兢锛?/p>

• --kubernetes-version锛氭寚瀹歬8s鐗堟湰锛?/p>

• --pod-network-cidr锛氭寚瀹歱od鐨勭綉娈碉紱

• --service-cidr锛氭寚瀹歋VC鐨勭綉娈碉紱

• --control-plane-endpoint锛氭寚瀹歬eepalived鐨剉ip锛?/p>

• --upload-certs锛氫笂浼犺瘉涔︺€?/p>

鏈変簺浜哄枩娆㈠啓濂統aml鏂囦欢鍘绘搷浣滆€屼笉鐢ㄥ懡浠わ紝鍏跺疄缁撴灉閮戒竴鏍风殑锛屾兂瑕佹€庝箞鍋氱湅涓汉鍠滃ソ锛屽鏋滄媺鍙栭暅鍍忓け璐ワ紝鍙互鏇存崲闃块噷婧愶紝鍦ㄥ悗闈㈠姞涓婂弬鏁帮細

--image-repository registry.aliyuncs.com/google_containers锛屽垵濮嬪寲鎴愬姛鍚庝綘浼氱湅鍒拌繖鏍风殑鐣岄潰

璁板綍token淇℃伅锛屽緟浼氫綘浼氱敤鍒般€?/p>

4. 鏍规嵁鎻愮ず鎿嶄綔淇℃伅锛?/p>

5. 瀹夎calico缃戠粶锛?br class="mq-462">

kubernetes涓绘祦閫氫俊缁勪欢涓篺lannel鍜宑alico锛宖lannel鐨勫姛鑳芥瘮杈冪畝鍗曪紝涓嶅叿澶囧鏉傜綉缁滅殑閰嶇疆鑳藉姏锛宑alico鐩稿浼氬叏闈竴浜涖€?/p>

6. 澶嶅埗绉橀挜鍜岀浉鍏虫枃浠讹紱

闇€瑕佸湪master02鍜宮aster03涓婂垱寤烘枃浠跺す锛屼篃鍙互鍦╩aster01涓妔sh02璺?3鍒涘缓锛屽彇鍐充簬浣犺嚜宸便€?br class="mq-470">

7. 澶嶅埗涔嬪墠鐨則oken灏唌aster02璺?3灏嗗叆闆嗙兢锛?br class="mq-479">

8. 妫€鏌ode鍜宲od锛?/p>

9. 澶嶅埗涔嬪墠鐨則oken灏唍ode01/02/03鍔犲叆闆嗙兢锛?br class="mq-496">

濡傛灉token宸茬粡杩囨湡锛屽彲浠ヨ緭鍏ュ懡浠ら噸鏂拌幏鍙?/p>

05 Dashboard鍙鍖?/strong>

1. 浠巊ithub鑾峰彇Dashboard recommend鏂囦欢锛?br class="mq-516">

2. 淇敼yaml鏂囦欢锛?/p>

娉ㄩ噴锛?br class="mq-532">

• 娣诲姞Service涓篘odePort绫诲瀷锛岄粯璁ょ綉缁滅被鍨嬪彧鑳藉湪闆嗙兢鍐呴儴璁块棶锛?/p>

• 鏆撮湶绔彛锛?0008锛?/p>

• 鍛藉悕绌洪棿锛歬ubernetes-dashboard锛?/p>

• 绠＄悊鍛樿处鎴凤細dashboard-admin锛?/p>

• role-binding閮ㄥ垎锛氬垎閰嶆潈闄愶紱

3. 閮ㄧ讲锛歬ubectl apply -f recommended.yaml鎴栬€卥ubectl create -f recommended.yaml锛?/p>

4. 鑾峰彇dashboard-admin鐨則oken锛?/p>

5. 杩涘叆dashboard鐣岄潰锛?/p>

6. 杩涘叆鍒氬垰鍒涘缓鐨刱ubernetes-dashboard鍛藉悕绌洪棿锛?/p>

鍒拌繖閲屽熀鏈笂灏辩粨鏉熶簡锛岃兘绠€鍖栫殑鎿嶄綔鎴戦兘绠€鍖栦簡锛岀幇瀹炴搷浣滄楠ゅ彧浼氭瘮杩欎簺澶氳€屼笉浼氬皯銆傚綋鐒讹紝鐜板湪宸茬粡鏈夊緢澶氭洿鐜颁唬鍖栫殑宸ュ叿甯姪浣犲揩閫熼儴缃瞜ubernetes闆嗙兢锛屾湁鍏磋叮鍙互鍘籯ubernetes璺焔ithub璁哄潧娉′竴娉★紝鐩镐俊浣犱細瀛﹀埌寰堝銆?/p>

鎶€鏈案鏃犳澧冿紝鎴戝垰鎺ヨЕdocker璺焝ubernetes鐨勬椂鍊欙紝閭ｆ椂鍊欏畠浠繕寰堜翰瀵嗭紝kubernetes鐨勭増鏈墠1.63锛堜竴涓bug鐨勭増鏈級锛岃€岀幇鍦ㄥ凡缁?.21浜嗭紝鎵€浠ュ敮鏈変笉鏂涔犳墠鑳借窡涓婃椂浠ｇ殑姝ヤ紣銆?/p>

涔嬪悗濡傛灉鏈夋椂闂寸殑璇濓紝鍐嶇粰浣犱滑璁茶promethues鐩戞帶鎶ヨ绯荤粺锛圥romethues+Grafana锛夊拰EFK瀹瑰櫒鏃ュ織鍒嗘瀽绯荤粺锛圗lasticsearch+Filebeat+Kibana锛夈€?br class="mq-566">

鎴戞槸Zanejoe锛屼竴浣嶆病鏈夌悊鎯崇殑搴熺墿銆?/p>

鎷ユ姳鐜板疄锛屼韩鍙楃敓娲伙紒