
k8s
kong-kong
记录流水账
展开
-
Configure a Pod to Use a Projected Volume for Storage
projected.yamlapiVersion: v1kind: Podmetadata: name: test-projected-volumespec: containers: - name: test-projected-volume image: busybox:1.28 args: - sleep - "86400" volumeMounts: - name: all-in-one mountPath: "/proj原创 2022-04-22 22:17:18 · 273 阅读 · 0 评论 -
部署无状态应用程序及升级
deployment-1-14-2.yamlversion: 1.14.2apiVersion: apps/v1kind: Deploymentmetadata: name: nginx-deploymentspec: selector: matchLabels: app: nginx replicas: 2 # tells deployment to run 2 pods matching the template template: metadata原创 2022-04-22 21:46:29 · 2601 阅读 · 0 评论 -
serviceaccounts is forbidden: User “system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard“
错误信息serviceaccounts is forbidden: User “system:serviceaccount:kubernetes-dashboard:kubernetes-dashboard” cannot list resource “serviceaccounts” in API group “” in the namespace “default”费了老大的功夫才明白是serviceaccount的问题,k8sdashboard出厂的serviceaccount权限太低,需要配置原创 2022-04-22 20:45:32 · 3980 阅读 · 0 评论 -
k8s之namespace
查看kubectl get namespaceskubectl get ns创建kubectl create namespace dev删除kubectl delete namespaces dev原创 2022-01-17 11:11:27 · 400 阅读 · 0 评论 -
configmap-volume-env-usage
myservercm.yamlapiVersion: v1data: username: administrator password: "123456" server: | url: 192.168.3.100 port: "10000"kind: ConfigMapmetadata: creationTimestamp: null name: myservercm # configmap name生成configmapkubectl crea原创 2022-01-15 23:45:58 · 1816 阅读 · 0 评论 -
configmap-simple-env-usage
guestcm.yamlapiVersion: v1data: username: guest password: "123456"kind: ConfigMapmetadata: creationTimestamp: null name: guestcm # configmap name生成configmapkubectl create -f guestcm.yamlkubectl get configmapkubectl get configmap guestcm原创 2022-01-15 20:05:46 · 346 阅读 · 0 评论 -
Error from server (BadRequest): ..... .|assword“:123456
guestcm.yaml(执行前)apiVersion: v1data: username: guest password: 123456kind: ConfigMapmetadata: creationTimestamp: null name: guestcm命令kubectl create -f guestcm.yaml错误信息Error from server (BadRequest): error when creating “guestcm.yaml”: Co原创 2022-01-15 17:02:36 · 2504 阅读 · 0 评论 -
ConfigMap
命令创建kubectl createkubectl create configmap my-config --from-literal=key1=config1 --from-literal=key2=config2configmap/my-config created查看方式1kubectl get configmap my-config -o yaml查看方式2 kubectl describe configmap my-config当前存在的configmapkubectl原创 2022-01-15 11:31:54 · 1082 阅读 · 0 评论 -
k8s使用配置文件启动service
基于上篇k8s使用nginx-deployment.yamlnginx-svc.yamlapiVersion: v1kind: Servicemetadata: name: nginx-svc # service namespec: type: NodePort # 配置NodePort,外部流量可访问k8s中的服务 ports: - port: 80 # 服务访问端口,集群内部访问的端口 # targetPort原创 2021-12-02 23:03:19 · 790 阅读 · 0 评论 -
k8s使用nginx-deployment.yaml启动pod
nginx-deployment.yamlapiVersion: apps/v1kind: Deploymentmetadata: name: nginx-deploymentspec: replicas: 3 selector: matchLabels: app: nginx-deployment template: metadata: labels: app: nginx-deployment spec:原创 2021-12-01 23:50:36 · 2971 阅读 · 0 评论 -
k8s部署tomcat
镜像官网镜像官网: https://hub.docker.com/查看镜像docker search tomcat指定版本# 创建deploymentkubectl create deployment my-tomcat --image=tomcat:8.0.52创建servciekubectl expose deployment my-tomcat --name=tomcat --port=8080 --type=NodePort访问每台都可以通过30308访问200原创 2021-12-01 20:48:12 · 521 阅读 · 0 评论 -
k8s部署nginx例子
部署nginxkubectl create deployment nginx --image=nginx查看podkubectl get pod -o wide查看svckubectl get svc -o wide查看pod和svckubectl get pod,svc -o wide查看podkubectl get pods -n kube-systemdeployments# 查看deploymentskubectl get deployments# 删除depl原创 2021-11-30 22:27:19 · 1619 阅读 · 0 评论 -
k8s token join
忘记joinkubeadm token create --print-join-command加入kubeadm join 192.168.3.168:6443 --token wm2waa.k5wkmh65bbmh8xm0 --discovery-token-ca-cert-hash sha256:1234e47f568a79c33eac7b7b947db460de0f94f5cc1cd941b7b73f8d208a456e查看token列表kubeadm token list查看日志原创 2021-11-30 21:09:03 · 978 阅读 · 0 评论 -
问题:\u00a0\u00a0\u00a0
error validating data: [ValidationError(Deployment): unknown field "\u00a0\u00a0name" in io.k8s.api.apps.v1.Deployment, ValidationError(Deployment): unknown field "\u00a0\u00a0replicas" in io.k8s.api.apps.v1.Deployment, ValidationError(Deployment): unknown原创 2021-08-04 23:24:39 · 688 阅读 · 0 评论 -
问题 : YAML配置:mapping values are not allowed here
mapping values not allowed here解决方法语法都对情况下,一般来说是 冒号(:)后面没有空格 冒号(:)后面的空格有问题,重新敲下空格原创 2021-08-04 23:08:01 · 5578 阅读 · 0 评论 -
x509: certificate has expired or is not yet valid
非虚拟机环境有可能证书过期了,有可能时间有问题virtualbox环境我在虚拟机上搭建了全新的环境,也报这个错,各种方式都试过了。没解决。搞了半天原来是虚拟机的时间有问题 ! ! !解决方法每台机器执行下面命令ntpdate time.windows.com...原创 2021-08-04 00:21:01 · 2106 阅读 · 0 评论 -
grafana添加influxdb数据源
grafana的datasource界面从这里看是没有influxdb的,点击Add data source配置influxdbType选择InfluxDBURL添加具体的ip和port,不要填写localhost配置Database添加成功原创 2021-08-03 18:20:41 · 1185 阅读 · 0 评论 -
The connection to the server localhost:8080 was refused - did you specify the right host or port?
在node节点执行kubectl get pods 会报:The connection to the server localhost:8080 was refused - did you specify the right host or port?# 在从节点执行 复制admin.conf 到 从节点scp root@c208:/etc/kubernetes/admin.c...原创 2020-01-14 09:50:17 · 1063 阅读 · 0 评论 -
kubernetes 主节点Token 配置
kubeadm init --config=kubeadm.yml --upload-certs | tee kubeadm-init.log# 生成# 备份好 kubeadm init 输出中的 kubeadm join 命令# 因为您会需要这个命令来给集群添加节点kubeadm join 192.168.100.237:6443 --token abcdef.0...原创 2020-01-13 16:51:21 · 950 阅读 · 0 评论 -
kbs 安装证书 cfssl
# 安装证书生成工具wget https://pkg.cfssl.org/R1.2/cfssl_linux-amd64 wget https://pkg.cfssl.org/R1.2/cfssljson_linux-amd64 wget https://pkg.cfssl.org/R1.2/cfssl-certinfo_linux-amd64 chmod +x cfssl*...原创 2019-04-29 22:33:08 · 819 阅读 · 0 评论 -
k8s 单机入门安装
systemctl disable firewalldsystemctl stop firewalld#installyum install -y etcd kubernetes#startsystemctl start etcdsystemctl start dockersystemctl start kube-apiserversystemctl start kub...原创 2019-04-30 00:29:40 · 403 阅读 · 0 评论 -
docker-ce conflicts with 2:docker-1.13.1-94.gitb2f74b2.el7.centos.x86_64
环境: Centos 7 Docker版本:docker-ce.x86_64 18.06.1.ce-3.el7运行命令:yum install -y etcd kubernetes然后报错:Error: docker-ce-cli conflicts with 2:docker-1.13.1-94.gitb2f74b2.el7.centos.x86_64Error: ...原创 2019-04-30 00:04:00 · 4973 阅读 · 0 评论 -
执行kubectl get pods 提示 No resources found.
1.vim /etc/kubernetes/apiserver2.找到"KUBE_ADMISSION_CONTROL="--admission_control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota"去掉ServiceAccount,保...原创 2019-04-30 10:53:33 · 3597 阅读 · 0 评论 -
解决k8s的nodePort,外网不能访问
不能通过curl 192.168.3.200:30080 、curl 192.168.3.200:30090访问解决方式:iptables -P FORWARD ACCEPT原创 2019-05-24 14:41:38 · 8200 阅读 · 4 评论 -
k8s问题
1.open /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt: no such file or directory 解决方案1. wgethttp://mirror.centos.org/centos/7/os/x86_64/Packages/python-rhsm-certificates-1.19....原创 2019-05-23 15:37:47 · 7336 阅读 · 0 评论 -
k8s kubectl 命令
systemctl restart kube-apiserverkubectl delete pod ${pod.name}kubectl delete {name}kubectl delete services ${service.name}kubectl get deploymentskubectl get podskubectl get rckubectl...原创 2019-05-24 00:29:53 · 735 阅读 · 0 评论 -
k8s设置阿里云仓库
安装kubernetes的时候,需要安装kubelet, kubeadm等包,但k8s官网给的yum源是packages.cloud.google.com,国内访问不了,此时我们可以使用阿里云的yum仓库镜像。 cat <<EOF > /etc/yum.repos.d/kubernetes.repo[kubernetes]name=Kubernetes...原创 2019-02-22 14:54:36 · 2918 阅读 · 0 评论