<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[Adhjhfes的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/Adhjhfes</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; Adhjhfes]]></copyright><item><title><![CDATA[K8s弹性伸缩完整实战：HPA内置指标 + Prometheus自定义指标 + VPA垂直伸缩]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/170549981</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/170549981</guid><author>Adhjhfes</author><pubDate>Wed, 11 Nov 2026 17:44:01 +0800</pubDate><description><![CDATA[Kubernetes弹性伸缩是生产环境保障服务稳定性、节约集群资源的核心能力。本文完整带你实操HPA基于CPU内存扩缩容、基于Prometheus QPS自定义指标实现伸缩，同时讲解VPA垂直Pod自动伸缩四种工作模式、部署踩坑与完整实验案例，理清水平扩容和垂直扩容适用业务场景。]]></description><category></category></item><item><title><![CDATA[K8s弹性伸缩完整实战：HPA内置指标 + Prometheus自定义指标 + VPA垂直伸缩]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/170549948</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/170549948</guid><author>Adhjhfes</author><pubDate>Wed, 11 Nov 2026 17:43:30 +0800</pubDate><description><![CDATA[Kubernetes弹性伸缩是生产环境保障服务稳定性、节约集群资源的核心能力。本文完整带你实操HPA基于CPU内存扩缩容、基于Prometheus QPS自定义指标实现伸缩，同时讲解VPA垂直Pod自动伸缩四种工作模式、部署踩坑与完整实验案例，理清水平扩容和垂直扩容适用业务场景。]]></description><category></category></item><item><title><![CDATA[CentOS7搭建Kubernetes v1.28完整集群实战｜cri‑dockerd适配Docker + Calico网络]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/170347353</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/170347353</guid><author>Adhjhfes</author><pubDate>Mon, 09 Nov 2026 13:24:45 +0800</pubDate><description><![CDATA[K8s 1.24版本移除dockershim后，Docker无法直接作为容器运行时。本文完整记录CentOS7环境下1Master+2Node集群部署全过程，包含系统初始化、Docker与cri‑dockerd适配器安装、kubeadm初始化集群、Calico网络插件部署，最后通过Nginx NodePort服务验证集群可用性，所有命令可直接复制用于实验环境。]]></description><category></category></item><item><title><![CDATA[Jenkins Pipeline流水线实战｜从0到1完成Java项目CI/CD完整流程]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/170144479</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/170144479</guid><author>Adhjhfes</author><pubDate>Thu, 05 Nov 2026 16:44:22 +0800</pubDate><description><![CDATA[本文完整实操Jenkins Pipeline流水线，讲解Pipeline核心概念、两种语法，采用Jenkinsfile(SCM模式)实现拉取代码、Maven编译打包、SonarQube代码质量检测、Docker镜像构建、Harbor镜像仓库推送、远程服务器部署、钉钉消息通知全链路CI/CD，带你把代码提交到项目上线自动化落地。]]></description><category></category></item><item><title><![CDATA[DevOps全流程实战：SonarQube代码审计+Harbor镜像仓库+Jenkins流水线完整落地]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/170128226</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/170128226</guid><author>Adhjhfes</author><pubDate>Thu, 05 Nov 2026 10:25:29 +0800</pubDate><description><![CDATA[本文完整实操演示一套企业可用DevOps CI/CD流水线，从SonarQube部署实现静态代码质量审计，解决Elasticsearch虚拟内存、中文插件、JDK版本兼容各类踩坑问题；接着部署Harbor私有镜像仓库完成镜像管理；打通Jenkins，实现代码拉取→Sonar代码质量扫描→Docker镜像构建→推送Harbor仓库→远程服务器自动部署整套自动化流程，记录全部报错与解决方案，适合想要动手搭建DevOps平台的开发者学习参考。]]></description><category></category></item><item><title><![CDATA[小白吃透DevOps入门｜从零搭建CICD完整实验（含原理+实操排坑）]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/169950510</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/169950510</guid><author>Adhjhfes</author><pubDate>Tue, 03 Nov 2026 19:55:36 +0800</pubDate><description><![CDATA[很多同学刚接触DevOps、CI/CD时概念混淆，搞不懂GitLab、Jenkins、Maven各自承担什么角色。本文结合一套完整实操实验，从SDLC软件生命周期、瀑布/敏捷开发理论讲起，手把手带你搭建Windows开发环境、GitLab代码仓库、Jenkins自动化流水线环境，梳理完整数据流，整理常见报错与解决方案，零基础也能看懂DevOps整套落地流程。]]></description><category></category></item><item><title><![CDATA[Etcd深度解析：Kubernetes的底层分布式存储基石]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/169827403</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/169827403</guid><author>Adhjhfes</author><pubDate>Mon, 02 Nov 2026 10:35:17 +0800</pubDate><description><![CDATA[Etcd是基于Raft协议的分布式键值存储，也是K8s集群的“数据库”，保存集群全部元数据。本文讲解Etcd核心特性、典型应用场景，完整演示单节点、多节点集群部署，etcdctl常用命令，K8s内部etcd数据查看，以及生产最重要的备份恢复实操，帮你吃透云原生核心组件Etcd。]]></description><category></category></item><item><title><![CDATA[K8s StatefulSet深度实战：搞定数据库、中间件这类有状态应用]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/169826898</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/169826898</guid><author>Adhjhfes</author><pubDate>Mon, 02 Nov 2026 10:30:04 +0800</pubDate><description><![CDATA[Deployment适合无状态业务，而数据库、Redis、Etcd这类有状态服务需要固定Pod身份、有序启停、独立持久化存储。本文对比无状态与有状态应用差异，详解StatefulSet核心特性、Headless Service、PVC存储模板，附带Nginx、Etcd、Redis、MySQL完整实操案例，带你掌握K8s有状态应用部署落地。]]></description><category></category></item><item><title><![CDATA[Kubernetes动态卷供应：告别手动PV，StorageClass实现存储自动化管理]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/169826291</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/169826291</guid><author>Adhjhfes</author><pubDate>Mon, 02 Nov 2026 10:26:03 +0800</pubDate><description><![CDATA[在K8s传统静态存储模式下，需要管理员提前手动创建PV，存储管理繁琐低效。本文详解Kubernetes动态卷供应核心原理，拆解StorageClass、Provisioner、PVC/PVM绑定逻辑，结合Local‑Path本地存储、NFS‑Subdir外部存储两套完整实操案例，带你掌握动态存储落地，为Deployment、StatefulSet提供自动化存储能力。]]></description><category></category></item><item><title><![CDATA[K8s WebUI工具对比：Kuboard与Kubernetes Dashboard实践笔记]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/169463557</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/169463557</guid><author>Adhjhfes</author><pubDate>Thu, 29 Oct 2026 19:43:17 +0800</pubDate><description><![CDATA[Kubernetes集群命令行操作门槛较高，Web可视化UI能够降低集群运维难度。本文介绍两款主流Web管理工具：官方Kubernetes Dashboard与第三方Kuboard，梳理各自特性、部署方式、RBAC权限注意事项，对比两者差异，同时说明生产环境权限最佳实践，帮助你根据业务场景选择合适的集群可视化平台。]]></description><category></category></item><item><title><![CDATA[Kubernetes 认证与授权详解：守护集群API访问安全]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/169463512</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/169463512</guid><author>Adhjhfes</author><pubDate>Thu, 29 Oct 2026 19:40:25 +0800</pubDate><description><![CDATA[Kubernetes集群所有操作都要经过API Server，API访问安全直接决定集群整体安全。本文完整梳理K8s访问控制全流程：传输TLS安全、身份认证(Authentication)、鉴权授权(Authorization)、准入控制、审计；详解普通用户、ServiceAccount服务账号的区别，手把手演示X509证书创建外部用户、RBAC Role/ClusterRole、RoleBinding/ClusterRoleBinding实战，剖析服务账号令牌机制，同时解答K8s为什么不内置普通用户资源的]]></description><category></category></item><item><title><![CDATA[K8s 健康检查探针详解：Liveness、Readiness、Startup 探针实战]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/169449383</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/169449383</guid><author>Adhjhfes</author><pubDate>Thu, 29 Oct 2026 11:50:54 +0800</pubDate><description><![CDATA[Kubernetes 仅监控容器进程远远不足以保证业务可用，进程正常不代表业务能正常对外服务。本文讲解 K8s 的三大健康检查探针：存活探针 livenessProbe、就绪探针 readinessProbe、启动探针 startupProbe，对比 httpGet、exec、tcpSocket 三种探测方式，结合实验区分探针不同行为；重点讲解探针在副本扩容、滚动更新中的生产价值，帮助理解 “存活就重启、未就绪就摘除流量” 核心逻辑，同时给出生产环境配置建议，规避滚动更新业务雪崩等线上故障。]]></description><category></category></item><item><title><![CDATA[K8s资源管控：ResourceQuota与LimitRange详解，资源请求request/限制limit原理]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/169366249</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/169366249</guid><author>Adhjhfes</author><pubDate>Wed, 28 Oct 2026 20:41:08 +0800</pubDate><description><![CDATA[多团队共享K8s集群，需要对命名空间做资源隔离与管控。本文讲解`ResourceQuota`命名空间资源总配额、`LimitRange`单容器/PVC资源范围，厘清request调度预留、limit运行限制的核心区别，结合实操现象、OOM案例梳理生产避坑要点。]]></description><category></category></item><item><title><![CDATA[K8s自动扩缩容详解：Metrics‑Server、HPA、VPA原理与生产实践]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/169366210</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/169366210</guid><author>Adhjhfes</author><pubDate>Wed, 28 Oct 2026 20:37:37 +0800</pubDate><description><![CDATA[Metrics‑Server为K8s提供节点、Pod资源指标采集，是`kubectl top`与HPA的数据源。本文详解HPA水平Pod自动扩缩容完整原理、v1/v2版本差异、behavior精细控制扩缩容节奏，对比VPA纵向扩缩容，梳理常见排错点、参数说明与实操案例，帮你掌握K8s弹性伸缩。]]></description><category></category></item><item><title><![CDATA[Kubernetes Pod调度详解：调度流程、调度策略、污点容忍与节点维护]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/169366165</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/169366165</guid><author>Adhjhfes</author><pubDate>Wed, 28 Oct 2026 20:35:45 +0800</pubDate><description><![CDATA[Kubernetes调度器kube‑scheduler负责把Pending状态Pod选到合适节点运行。本文梳理Pod完整调度链路，详解nodeName、nodeSelector、亲和/反亲和、污点容忍等调度约束，区分cordon/drain节点维护命令，同时整理高频踩坑点与生产实践，帮助你吃透K8s调度核心原理。]]></description><category></category></item><item><title><![CDATA[Kubernetes 网络]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/169269440</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/169269440</guid><author>Adhjhfes</author><pubDate>Tue, 27 Oct 2026 23:28:47 +0800</pubDate><description><![CDATA[Kubernetes 网络体系包含 Pod 网络、Service 与 kube-proxy、Ingress 三层：Pod 间默认互通；Service 为 Pod 提供稳定访问地址与负载均衡，由 kube-proxy 在节点上生成转发规则实现流量调度；Ingress 作为 HTTP/HTTPS 网关，基于域名、路径路由外部请求到 Service，统一管理 web 入口、证书，共同支撑集群内部和外部的流量通信。]]></description><category></category></item><item><title><![CDATA[Kubernetes Ingress]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/169269425</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/169269425</guid><author>Adhjhfes</author><pubDate>Tue, 27 Oct 2026 23:27:24 +0800</pubDate><description><![CDATA[Ingress 是 K8s 管理外部 HTTP/HTTPS 流量的路由规则资源，依靠 Ingress Controller（如 nginx-ingress）解析规则，根据域名、路径将请求转发到后端 Service，支持 SSL 证书卸载、域名虚拟主机，相比 NodePort 与 LoadBalancer 更节省端口，是集群 web 服务统一入口方案。]]></description><category></category></item><item><title><![CDATA[kubernetes service && proxy]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/169269394</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/169269394</guid><author>Adhjhfes</author><pubDate>Tue, 27 Oct 2026 23:25:59 +0800</pubDate><description><![CDATA[Kubernetes 中 Service 为不断重建、IP 多变的 Pod 提供稳定访问入口与负载均衡能力，它本身不处理流量转发，由运行在所有节点上的 kube-proxy 组件完成底层流量调度。kube-proxy 支持 iptables、ipvs 等模式，监听服务与后端端点变化实时更新转发规则，二者配合构成 K8s 集群内部服务通信的核心网络基础。]]></description><category></category></item><item><title><![CDATA[Kubernetes Controllers]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/168772910</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/168772910</guid><author>Adhjhfes</author><pubDate>Thu, 22 Oct 2026 20:38:07 +0800</pubDate><description><![CDATA[含义：同一时间跑2个Pod，不断补充，直到一共6个Pod成功，Job结束。适用场景：批处理任务，消费任务队列，多Pod并发处理，提升速度。逻辑：RS发现实际Pod数(2) < 期望replicas(3)，立刻使用template新建Pod补足数量，实现自愈。ownerReferences：K8s垃圾收集机制核心字段，标记这个Pod归哪个控制器管理，用于级联删除。例子：backoffLimit=2，最多允许失败2次，超过Job失败。，旧ReplicaSet副本数缩为0，保留不删除，用于回滚。]]></description><category></category></item><item><title><![CDATA[综合实验 ssl+wordpress]]></title><link>https://blog.youkuaiyun.com/Adhjhfes/article/details/168660939</link><guid>https://blog.youkuaiyun.com/Adhjhfes/article/details/168660939</guid><author>Adhjhfes</author><pubDate>Wed, 21 Oct 2026 19:51:53 +0800</pubDate><description><![CDATA[使用mysql和wordpress镜像部署blog应用。访问站点 https://10.1.8.30:8443/]]></description><category></category></item></channel></rss>