第一章、k8s中的资源
1.什么叫资源？
k8s中所有的内容都抽象为资源， 资源实例化之后，叫做对象2.在k8s中有哪些资源？
工作负载型资源(workload)： Pod ReplicaSet Deployment StatefulSet DaemonSet Job CronJob (ReplicationController在v1.11版本被废弃)
服务发现及负载均衡型资源(ServiceDiscovery LoadBalance): Service Ingress, ...
配置与存储型资源： Volume(存储卷) CSI(容器存储接口,可以扩展各种各样的第三方存储卷)
特殊类型的存储卷：ConfigMap(当配置中心来使用的资源类型)Secret(保存敏感数据) DownwardAPI(把外部环境中的信息输出给容器)
以上这些资源都是配置在名称空间级别
集群级资源：Namespace Node Role ClusterRole RoleBinding(角色绑定) ClusterRoleBinding(集群角色绑定)
元数据型资源：HPA(Pod水平扩展) PodTemplate(Pod模板,用于让控制器创建Pod时使用的模板) LimitRange(用来定义硬件资源限制的)第二章、资源清单
1.什么是资源清单
在k8s中，一般使用yaml格式的文件来创建符合我们预期期望的pod，这样的yaml文件我们一般称为资源清单2.资源清单的格式
apiVersion: group/apiversion # 如果没有给定group名称，那么默认为croe，可以使用kubectl api-versions 获取当前k8s版本上所有的apiVersion版本信息(每个版本可能不同)
kind: #资源类别
metadata： #资源元数据
name
namespace #k8s自身的namespace
lables
annotations #主要目的是方便用户阅读查找
spec:期望的状态（disired state）
status：当前状态，本字段有kubernetes自身维护，用户不能去定义#配置清单主要有五个一级字段，其中status用户不能定义，有k8s自身维护
3.获取资源的apiVersion版本及资源配置的帮助
1)获取apiVersion版本信息
[root@k8s-master01 ~]# kubectl api-versions
admissionregistration.k8s.io/v1beta1
apiextensions.k8s.io/v1beta1
apiregistration.k8s.io/v1
apiregistration.k8s.io/v1beta1
apps/v1
apps/v1beta1
apps/v1beta2
authentication.k8s.io/v1
authentication.k8s.io/v1beta1
authorization.k8s.io/v1
authorization.k8s.io/v1beta1
autoscaling/v1
autoscaling/v2beta1
batch/v1
......(以下省略)2)获取资源的apiVersion版本信息
[root@k8s-master01 ~]# kubectl explain pod
KIND: Pod
VERSION: v1
.....(以下省略)
[root@k8s-master01 ~]# kubectl explain Ingress
KIND: Ingress
VERSION: extensions/v1beta1#可以看到出来，不同的资源可能属于不同的apiVersion版本
3)获取资源配置清单中字段设置帮助文档(以pod为例)
获取pod资源的配置清单一级字段
[root@k8s-master01 ~]# kubectl explain pod
KIND: Pod
VERSION: v1
DESCRIPTION:
Pod is a collection of containers that can run on a host. This resource is
created by clients and scheduled onto hosts.
FIELDS:
apiVersion <string>
APIVersion defines the versioned schema of this representation of an
object. Servers should convert recognized schemas to the latest internal
value, and may reject unrecognized values. More info:
https://git.k8s.io/community/contributors/devel/api-conventions.md#resources
kind <string>
Kind is a string value representing the REST resource this object
represents. Servers may infer this from the endpoint the client submits
requests to. Cannot be updated. In CamelCase. More info:
https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds
........
........获取pod资源的配置清单二级级其他级别的字段
[root@k8s-master01 ~]# kubectl explain pod.metadata #查看一级字段中有哪些二级字段，字段的上下级以 "." 定义
KIND: Pod
VERSION: v1
RESOURCE: metadata <Object>
DESCRIPTION:
Standard object's metadata. More info:
https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata
ObjectMeta is metadata that all persisted resources must have, which
includes all objects users must create.
........
-------------
[root@k8s-master01 ~]# kubectl explain pod.metadata.labels #查看二级字段中有哪些三级字段
KIND: Pod
VERSION: v1
FIELD: labels <map[string]string>
DESCRIPTION:
Map of string keys and values that can be used to organize and categorize
(scope and select) objects. May match selectors of replication controllers
and services. More info: http://kubernetes.io/docs/user-guide/labels字段配置的格式
帮助信息中常见格式如下：
apiVersion <string> #表示字符串类型
metadata <Object> #表示需要嵌套多层字段
labels <map[string]string> #表示由k:v组成的映射
finalizers <[]string> #表示字串列表
ownerReferences <[]Object> #表示对象列表
hostPID <boolean> #布尔类型
priority <integer> #整型
name <string> -required- #如果类型后面接 -required-，表示为必填字段第四章、创建一个配置清单实例
1.以pod为例，创建一个简单的yaml文件
[root@k8s-master01 ~]# mkdir manifests
[root@k8s-master01 ~]# cd manifests/
[root@k8s-master01 manifests]# cat pod-demo.yaml
apiVersion: v1
kind: Pod
metadata:
name: pod-demo
labels:
app: myapp #给自己打上标签
tier: frontend
spec:
containers: #创建了两个容器
- name: nginx
image: ikubernetes/myapp:v1
- name: tomcat
image: tomcat:7-alpine
[root@k8s-master01 manifests]# kubectl create -f pod-demo.yaml #使用create 子命令以yaml文件的方式启动pod
[root@k8s-master01 manifests]# kubectl get pod #主要查看pod的状态是否支持，因为有一个以上的pod，READY段需要注意pod中的容器是否全部就绪
NAME READY STATUS RESTARTS AGE
......
pod-demo 2/2 Running 0 2h为了便于访问，我们再创建一个service便于外部访问测试
[root@k8s-master01 manifests]# cat svc-demo.yaml
apiVersion: v1
kind: Service #主要类型
metadata:
name: test-service
labels:
app1: nginx
app2: tomcat
spec:
ports: #暴露的端口设置
- name: nginx
port: 80 #service的端口
targetPort: 80 #pod上暴露的端口
nodePort: 32080 #Node上暴露的端口，需要注意的是，Node只能暴露30000-32767之间的端口
- name: tomcat
port: 8080
targetPort: 8080
nodePort: 32088
selector:
app: myapp
type: NodePort #service 端口暴露的类型，默认是ClusterIP
[root@k8s-master01 manifests]# kubectl create -f svc-demo.yaml[root@k8s-master01 manifests]# kubectl get svc -o wide #查看svc的状态
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE SELECTOR
.......
test-service NodePort 10.108.230.27 <none> 80:32080/TCP,8080:32088/TCP 22m app=myapp #根据暴露的端口，加上任意集群的IP地址进行访问
2.pod资源清单示例
[root@k8s-master01 ~]# kubectl get pod #查看集群中pod的状态，选取一个之前使用命令行状态下创建的pod
NAME READY STATUS RESTARTS AGE
client 0/1 Completed 0 19h
myapp-6d6f569fd5-rtgt9 1/1 Running 0 19h
myapp-6d6f569fd5-tjpfn 1/1 Running 0 19h
myapp-6d6f569fd5-tqq5z 1/1 Running 0 19h
nginx 1/1 Running 0 16h
nginx-deploy-7db697dfbd-2qh7v 1/1 Running 0 20h
nginx-deploy-7db697dfbd-gskcv 1/1 Running 0 20h
nginx-deploy-7db697dfbd-ssws8 1/1 Running 0 20h
[root@k8s-master01 ~]# kubectl get pod nginx-deploy-7db697dfbd-2qh7v -o yaml #使用 -o 参数 加yaml，可以将资源的配置以 yaml的格式输出出来，也可以使用json，输出为json格式
apiVersion: v1
kind: Pod
metadata:
creationTimestamp: 2018-10-30T05:40:55Z
generateName: nginx-deploy-7db697dfbd-
labels:
pod-template-hash: "3862538968"
run: nginx-deploy
name: nginx-deploy-7db697dfbd-2qh7v
namespace: default
ownerReferences:
- apiVersion: extensions/v1beta1
blockOwnerDeletion: true
controller: true
kind: ReplicaSet
name: nginx-deploy-7db697dfbd
uid: 0eef9e1c-dbf0-11e8-8969-5254001b07db
resourceVersion: "15622"
selfLink: /api/v1/namespaces/default/pods/nginx-deploy-7db697dfbd-2qh7v
uid: 5ee94f2a-dc06-11e8-8969-5254001b07db
spec:
containers:
- image: nginx:1.14-alpine
imagePullPolicy: IfNotPresent
name: nginx-deploy
ports:
- containerPort: 80
protocol: TCP
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: default-token-tcwjz
readOnly: true
dnsPolicy: ClusterFirst
nodeName: k8s-node02
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
serviceAccount: default
serviceAccountName: default
terminationGracePeriodSeconds: 30
tolerations:
- effect: NoExecute
key: node.kubernetes.io/not-ready
operator: Exists
tolerationSeconds: 300
- effect: NoExecute
key: node.kubernetes.io/unreachable
operator: Exists
tolerationSeconds: 300
volumes:
- name: default-token-tcwjz
secret:
defaultMode: 420
secretName: default-token-tcwjz
status:
conditions:
- lastProbeTime: null
lastTransitionTime: 2018-10-30T05:40:55Z
status: "True"
type: Initialized
- lastProbeTime: null
lastTransitionTime: 2018-10-30T05:41:06Z
status: "True"
type: Ready
- lastProbeTime: null
lastTransitionTime: 2018-10-30T05:40:55Z
status: "True"
type: PodScheduled
containerStatuses:
- containerID: docker://b75740e5919bd975755b256c83e03b63ea95cf2307ffc606abd03b59fea6634a
image: docker.io/nginx:1.14-alpine
imageID: docker-pullable://docker.io/nginx@sha256:8976218be775f4244df2a60a169d44606b6978bac4375192074cefc0c7824ddf
lastState: {}
name: nginx-deploy
ready: true
restartCount: 0
state:
running:
startedAt: 2018-10-30T05:41:06Z
hostIP: 172.16.150.214
phase: Running
podIP: 10.244.2.7
qosClass: BestEffort
startTime: 2018-10-30T05:40:55Z
"一劳永逸" 的话，有是有的，而 "一劳永逸" 的事却极少
