锟斤拷锟斤拷位锟矫ｏ拷锟斤拷页 > 锟斤拷锟斤拷锟教筹拷 > 锟教筹拷 > Kubernetes 锟斤拷锟斤拷群1.28.2锟芥本(锟睫匡拷)
锟斤拷锟斤拷锟筋建一锟斤拷一锟斤拷锟斤拷锟节碉拷锟斤拷锟斤拷锟斤拷咏诘锟終ubernetes 1.28.2 锟斤拷群锟斤拷锟斤拷准锟斤拷锟矫伙拷锟斤拷 host hostname os role hardware 192.168.31.200 master01 centos7.9 control-plane cpu:2c 锟节达拷: 3G 硬锟斤拷1:50G 192.
| host | hostname | os | role | hardware |
|---|---|---|---|---|
| 192.168.31.200 | master01 | centos7.9 | control-plane | cpu:2c 锟节达拷: 3G 硬锟斤拷1:50G |
| 192.168.31.201 | node01 | centos7.9 | worker | cpu:2c 锟节达拷: 3G 硬锟斤拷1:50G 硬锟斤拷2:50G |
| 192.168.31.202 | node02 | centos7.9 | worker | cpu:2c 锟节达拷: 3G 硬锟斤拷1:50G 硬锟斤拷2:50G |
systemctl stop firewalld
systemctl disable firewalld
systemctl is-enabled firewalld
ntpdate ntp1.aliyun.com
vi /etc/crontab
1 * * * * root /usr/sbin/ntpdate ntp1.aliyun.com && /sbin/hwclock -w
sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config
setenforce 0
sed -i '/swap/s/^/#/g' /etc/fstab
swapoff -a
[root@master01 ~]# cat >>/etc/hosts <锟斤拷椋� centos7 yum锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟节猴拷
[root@master01 ~]# uname -a
Linux localhost.localdomain 3.10.0-957.el7.x86_64 #1 SMP Thu Nov 8 23:39:32 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org
rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-2.el7.elrepo.noarch.rpm
yum -y --enablerepo=elrepo-kernel install kernel-lt
sudo awk -F\' '$1=="menuentry " {print i++ " : " $2}' /etc/grub2.cfg
grub2-set-default 0
6锟斤拷锟斤拷锟斤拷
reboot
7锟斤拷锟介看锟节核版本
[root@master01 ~]# uname -a
Linux localhost.localdomain 4.4.244-1.el7.elrepo.x86_64 #1 SMP Tue Nov 17 18:57:10 EST 2020 x86_64 x86_64 x86_64 GNU/Linux
cat > /etc/sysctl.d/Kubernetes.conf <锟斤拷些锟斤拷锟矫诧拷锟斤拷锟侥猴拷锟斤拷锟角ｏ拷
net.bridge.bridge-nf-call-ip6tables = 1
锟斤拷锟斤拷通锟斤拷锟脚斤拷锟斤拷锟斤拷锟斤拷盏锟絀Pv6锟斤拷锟捷帮拷时锟斤拷锟斤拷锟斤拷锟斤拷
ip6tables
锟侥癸拷锟斤拷锟斤拷写锟斤拷锟斤拷锟�
net.bridge.bridge-nf-call-iptables = 1
锟斤拷锟斤拷通锟斤拷锟脚斤拷锟斤拷锟斤拷锟斤拷盏锟絀Pv4锟斤拷锟捷帮拷时锟斤拷锟斤拷锟斤拷锟斤拷
iptables
锟侥癸拷锟斤拷锟斤拷写锟斤拷锟斤拷锟�
net.ipv4.ip_forward = 1
锟斤拷锟斤拷锟斤拷IPv4锟斤拷锟斤拷锟捷帮拷转锟斤拷锟斤拷锟斤拷使锟斤拷锟捷帮拷锟斤拷目锟疥不锟角憋拷锟斤拷锟斤拷
vm.swappiness = 0
: vm.swappiness锟角诧拷锟斤拷系统锟斤拷锟斤拷锟斤拷锟斤拷锟节存交锟斤拷锟斤拷去锟侥诧拷锟皆★拷锟斤拷锟斤拷锟斤拷锟斤拷值锟斤拷一锟斤拷锟劫分比碉拷值锟斤拷锟斤拷小为0锟斤拷锟斤拷锟斤拷锟斤拷锟�100锟斤拷锟斤拷值默锟斤拷为60锟斤拷vm.swappiness锟斤拷锟斤拷为0锟斤拷示锟斤拷锟斤拷锟斤拷swap锟斤拷100锟斤拷示锟斤拷锟斤拷锟斤拷inactive锟斤拷锟节达拷页锟斤拷锟斤拷锟斤拷去锟斤拷
Kubernetes通锟斤拷iptables实锟街凤拷锟斤拷锟街猴拷锟斤拷锟斤拷锟斤拷锟斤拷路锟缴ｏ拷pod通锟脚★拷锟斤拷一锟斤拷锟斤拷锟斤拷要锟斤拷没锟斤拷锟斤拷锟矫的伙拷锟结导锟铰硷拷群锟斤拷锟斤拷通锟脚癸拷锟较ｏ拷锟斤拷pod锟睫凤拷通锟脚★拷锟斤拷模锟斤拷
yum -y install conntrack ipvsadm ipset jq iptables curl sysstat libseccomp wget vim net-tools git
# 锟斤拷锟斤拷诤锟侥ｏ拷锟�
cat > /etc/modules-load.d/ipvs.conf <
ip_vs
锟斤拷
ip_vs_rr
锟斤拷
ip_vs_wrr
锟斤拷
ip_vs_sh
锟斤拷IPVS锟斤拷氐锟斤拷诤锟侥ｏ拷椤ｏ拷锟斤拷锟斤拷峁╋拷瞬锟酵拷母锟斤拷鼐锟斤拷锟斤拷惴拷锟絩ound-robin锟斤拷锟斤拷权锟斤拷询锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷龋锟斤拷锟�
nf_conntrack
锟斤拷
nf_conntrack_ipv4
锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟接革拷锟劫碉拷锟节猴拷模锟介，锟斤拷锟节凤拷锟斤拷墙锟斤拷NAT锟叫非筹拷锟斤拷要锟斤拷
[root@master01 ~]# reboot
# 锟斤拷锟斤拷欠锟斤拷锟截成癸拷
lsmod |egrep "ip_vs|nf_conntrack_ipv4"
nf_conntrack_ipv4 15053 26
nf_defrag_ipv4 12729 1 nf_conntrack_ipv4
ip_vs_sh 12688 0
ip_vs_wrr 12697 0
ip_vs_rr 12600 0
ip_vs 145458 6 ip_vs_rr,ip_vs_sh,ip_vs_wrr
nf_conntrack 139264 10 ip_vs,nf_nat,nf_nat_ipv4,nf_nat_ipv6,xt_conntrack,nf_nat_masquerade_ipv4,nf_nat_masquerade_ipv6,nf_conntrack_netlink,nf_conntrack_ipv4,nf_conntrack_ipv6
libcrc32c 12644 4 xfs,ip_vs,nf_nat,nf_conntrack
顺锟斤拷锟斤拷锟揭伙拷锟斤拷锟绞凤拷锟斤拷锟斤拷锟斤拷锟斤拷锟絛ocker锟狡大，碉拷docker没锟斤拷实锟斤拷CRI锟斤拷Kubernetes只锟斤拷锟斤拷dockershim锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷docker锟斤拷使锟斤拷锟斤拷越锟斤拷锟絚ri锟斤拷锟斤拷锟絛ockershim锟斤拷Kubernetes1.24锟芥本锟酵憋拷锟斤拷锟斤拷维锟斤拷锟剿★拷containerd锟角达拷docker锟叫凤拷锟斤拷锟斤拷锟斤拷目锟皆达拷锟侥匡拷锟角匡拷锟斤拷锟斤拷浴锟斤拷锟阶筹拷院涂锟斤拷锟街诧拷浴锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷鹿锟斤拷锟�
锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟节ｏ拷锟接达拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷
锟斤拷取/锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷
锟芥储锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟捷的存储锟斤拷
锟斤拷锟斤拷 runc 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷 runc 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷时锟斤拷锟斤拷锟斤拷runc锟斤拷oci 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷准锟斤拷一锟斤拷实锟街★拷oci锟斤拷锟角达拷锟斤拷锟斤拷锟斤拷锟斤拷要锟斤拷一些 namespaces 锟斤拷 cgroups 锟斤拷锟斤拷锟矫ｏ拷锟皆硷拷锟斤拷锟斤拷 root 锟侥硷拷系统锟饺诧拷锟斤拷锟侥规范锟斤拷
锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷涌诩锟斤拷锟斤拷锟�
yum -y install yum-utils device-mapper-persistent-data lvm2
# 锟斤拷锟接帮拷锟斤拷源
yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
# 锟斤拷锟斤拷 containerd
cat >>/etc/modules-load.d/containerd.conf <
overlay
锟斤拷一锟斤拷锟侥硷拷系统锟斤拷锟酵ｏ拷锟斤拷支锟斤拷锟节诧拷锟侥憋拷撞锟斤拷募锟斤拷锟斤拷锟斤拷锟铰ｏ拷锟斤拷锟侥讹拷锟斤拷锟斤拷锟斤拷锟斤拷一锟斤拷锟斤拷锟斤拷锟斤拷募锟斤拷恪ｏ拷锟斤拷锟斤拷锟斤拷锟� Docker 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷时锟叫ｏ拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟侥硷拷系统锟斤拷锟斤拷写时锟斤拷锟狡ｏ拷
br_netfilter
锟斤拷一锟斤拷锟斤拷锟斤拷锟斤拷氐锟斤拷诤锟侥ｏ拷椋拷锟斤拷锟斤拷锟� iptables 锟斤拷锟斤拷锟斤拷锟斤拷锟界工锟竭讹拷锟脚斤拷锟斤拷锟斤拷锟斤拷锟叫癸拷锟剿★拷锟斤拷锟斤拷 Kubernetes 锟斤拷锟斤拷锟斤拷锟斤拷锟叫猴拷锟斤拷要锟斤拷锟截憋拷锟斤拷锟斤拷使锟斤拷 overlay 锟斤拷锟界（锟斤拷 flannel锟斤拷Calico 锟饺ｏ拷时锟斤拷
mkdir -p /etc/containerd
containerd config default > /etc/containerd/config.toml
# 使锟斤拷systemd锟斤拷锟斤拷cgroups
sed -i '/SystemdCgroup/s/false/true/g' /etc/containerd/config.toml
# 锟斤拷锟斤拷sadnbox image锟接帮拷锟斤拷锟斤拷锟斤拷取
sed -i '/sandbox_image/s/registry.k8s.io/registry.aliyuncs.com\/google_containers/g' /etc/containerd/config.toml
sed -i 's#sandbox_image = "registry.k8s.io/pause:3.6"#sandbox_image = "registry.aliyuncs.com/google_containers/pause:3.9"#' /etc/containerd/config.toml
# 锟斤拷锟斤拷containerd
systemctl enable containerd
systemctl start containerd
cat >/etc/yum.repos.d/kubernetes.repo <https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64/
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
EOF
# 锟介看锟斤拷锟矫版本
yum list kubelet --showduplicates |grep 1.28
# 锟斤拷始锟斤拷装 锟斤拷篇锟侥碉拷写锟斤拷时锟斤拷锟斤拷锟铰版本为1.28.2 锟斤拷直锟接帮拷装锟斤拷锟斤拷锟铰帮拷
yum -y install kubectl-1.28.2 kubelet-1.28.2 kubeadm-1.28.2
# 锟斤拷锟斤拷
systemctl enable kubelet
systemctl start kubelet
# 锟介看锟斤拷锟借镜锟斤拷
[root@master01 ~]# kubeadm config images list --kubernetes-version=v1.28.2
registry.k8s.io/kube-apiserver:v1.28.2
registry.k8s.io/kube-controller-manager:v1.28.2
registry.k8s.io/kube-scheduler:v1.28.2
registry.k8s.io/kube-proxy:v1.28.2
registry.k8s.io/pause:3.9
registry.k8s.io/etcd:3.5.7-0
registry.k8s.io/coredns/coredns:v1.10.1
# 锟斤拷始锟斤拷
[root@master01 ~]# kubeadm init --kubernetes-version=1.28.2 \
--apiserver-advertise-address=192.168.31.200 \
--image-repository registry.aliyuncs.com/google_containers \
--pod-network-cidr=172.16.0.0/16
apiserver-advertise-address
写control-plane锟斤拷ip
pod-network-cidr
写锟斤拷锟斤拷锟斤拷突锟斤拷锟斤拷锟斤拷
image-repository
指锟斤拷锟接帮拷锟斤拷锟斤拷锟斤拷取锟斤拷锟斤拷
锟斤拷锟斤拷执锟斤拷锟斤拷珊锟结返锟斤拷一锟斤拷锟斤拷锟斤拷锟捷ｏ拷锟斤拷要锟斤拷锟斤拷蟛糠锟�
Your Kubernetes control-plane has initialized successfully!
To start using your cluster, you need to run the following as a regular user:
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config
Alternatively, if you are the root user, you can run:
export KUBECONFIG=/etc/kubernetes/admin.conf
You should now deploy a pod network to the cluster.
Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
https://kubernetes.io/docs/concepts/cluster-administration/addons/
Then you can join any number of worker nodes by running the following on each as root:
kubeadm join 192.168.96.101:6443 --token l906wz.0fydt3hcfbogwlo9 \
--discovery-token-ca-cert-hash sha256:2604d3aab372a483b26bcbdafdb54d7746226975c3a317db07d94eccdfca51be
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config
export KUBECONFIG=/etc/kubernetes/admin.conf
[root@master01 ~]# kubectl get node
NAME STATUS ROLES AGE VERSION
control-plane01 NotReady control-plane 50s v1.28.2
[root@master01 ~]# kubectl get pods -A
[root@master01 ~]# kubectl get pods -n kube-system
NAME READY STATUS RESTARTS AGE
coredns-7bdc4cb885-fs2tz 1/1 Pending 0 13d
coredns-7bdc4cb885-wk7c9 1/1 Pending 0 13d
etcd-control-plane01 1/1 Running 0 13d
kube-apiserver-control-plane01 1/1 Running 0 13d
kube-controller-manager-control-plane01 1/1 Running 0 13d
kube-proxy-mfzmq 1/1 Running 3 (25h ago) 13d
kube-scheduler-control-plane01 1/1 Running 0 13d
kubeadm token create --print-join-command
wget https://docs.projectcalico.org/manifests/calico.yaml
锟斤拷为10.244.0.0/16
# Cluster type to identify the deployment type
- name: CLUSTER_TYPE
value: "k8s,bgp"
# 锟斤拷锟斤拷锟斤拷锟斤拷
- name: IP_AUTODETECTION_METHOD
value: "interface=eth0"
# eth0为锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷
Failed to create pod sandbox: rpc error: code = Unknown desc = [failed to set up sandbox container "5d6557ac061d164d494042e7e9b6cc38c95688a358275a78f5bbb7dd3883c063" network for pod "ingress-nginx-admission-create-b9q9w": networkPlugin cni failed to set up pod "ingress-nginx-admission-create-b9q9w_ingress-nginx" network: error getting ClusterInformation: connection is unauthorized: Unauthorized, failed to clean up sandbox container "5d6557ac061d164d494042e7e9b6cc38c95688a358275a78f5bbb7dd3883c063" network for pod "ingress-nginx-admission-create-b9q9w": networkPlugin cni failed to teardown pod "ingress-nginx-admission-create-b9q9w_ingress-nginx" network: error getting ClusterInformation: connection is unauthorized: Unauthorized]
kubectl apply -f calico.yaml
# 锟斤拷锟�
[root@master01 ~]# kubectl get pods -n kube-system
NAME READY STATUS RESTARTS AGE
calico-kube-controllers-6849cf9bcf-gv6xx 1/1 Running 0 13d
calico-node-2d7xx 1/1 Running 0 13d
coredns-7bdc4cb885-fs2tz 1/1 Running 0 13d
coredns-7bdc4cb885-wk7c9 1/1 Running 0 13d
etcd-control-plane01 1/1 Running 0 13d
kube-apiserver-control-plane01 1/1 Running 0 13d
kube-controller-manager-control-plane01 1/1 Running 0 13d
kube-proxy-mfzmq 1/1 Running 3 (25h ago) 13d
kube-scheduler-control-plane01 1/1 Running 0 13d
# 锟斤拷锟斤拷worker锟节点都执锟斤拷
kubeadm join 192.168.31.200:6443 --token l906wz.0fydt3hcfbogwlo9 \
--discovery-token-ca-cert-hash sha256:2604d3aab372a483b26bcbdafdb54d7746226975c3a317db07d94eccdfca51be
# 锟介看状态
[root@master01 ~]# kubectl get nodes
NAME STATUS ROLES AGE VERSION
control-plane01 Ready control-plane 13d v1.28.2
node01 Ready 13d v1.28.2
node02 Ready 13d v1.28.2
node03 Ready 13d v1.28.2
yum -y install bash-completion
echo "source <(kubectl completion bash)" >> /etc/profile
source /etc/profile
kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v3.0.0-alpha0/charts/kubernetes-dashboard.yaml
kind: Service
apiVersion: v1
metadata:
labels:
Kubernetes-app: kubernetes-dashboard
name: kubernetes-dashboard
namespace: kubernetes-dashboard
spec:
type: NodePort # 锟斤拷锟斤拷锟斤拷锟斤拷
ports:
- port: 443
targetPort: 8443
nodePort: 30000 # 锟斤拷锟斤拷锟斤拷锟捷ｏ拷锟剿口凤拷围30000-32767锟斤拷
selector:
Kubernetes-app: kubernetes-dashboard
# 锟斤拷装
kubectl apply -f recommended.yaml
# 锟介看锟斤拷锟斤拷
[root@master01 ~]# kubectl get all -n kubernetes-dashboard
NAME READY STATUS RESTARTS AGE
pod/dashboard-metrics-scraper-5cb4f4bb9c-h549p 1/1 Running 3 (26h ago) 13d
pod/kubernetes-dashboard-6967859bff-cm4tl 1/1 Running 4 (26h ago) 13d
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
service/dashboard-metrics-scraper ClusterIP 10.108.31.72 8000/TCP 13d
service/kubernetes-dashboard NodePort 10.102.47.173 443:30000/TCP 13d
NAME READY UP-TO-DATE AVAILABLE AGE
deployment.apps/dashboard-metrics-scraper 1/1 1 1 13d
deployment.apps/kubernetes-dashboard 1/1 1 1 13d
NAME DESIRED CURRENT READY AGE
replicaset.apps/dashboard-metrics-scraper-5cb4f4bb9c 1 1 1 13d
replicaset.apps/kubernetes-dashboard-6967859bff 1 1 1 13d
[root@master01 ~]# vim admin.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: admin
namespace: kubernetes-dashboard
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: admin
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: admin
namespace: kubernetes-dashboard
---
apiVersion: v1
kind: Secret
metadata:
name: kubernetes-dashboard-admin
namespace: kubernetes-dashboard
annotations:
kubernetes.io/service-account.name: "admin"
type: kubernetes.io/service-account-token
# 锟斤拷锟斤拷admin锟矫伙拷token
kubectl -n kubernetes-dashboard create token admin
# 锟斤拷取token
Token=$(kubectl -n kubernetes-dashboard get secret |awk '/kubernetes-dashboard-admin/ {print $1}')
kubectl describe secrets -n kubernetes-dashboard ${Token} |grep token |awk 'NR==NF {print $2}'
wget https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yaml -O metrics-server.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
k8s-app: metrics-server
name: metrics-server
namespace: kube-system
spec:
# ...
template:
spec:
containers:
- args:
- --cert-dir=/tmp
- --secure-port=4443
- --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
- --kubelet-use-node-status-port
- --metric-resolution=15s
- --kubelet-insecure-tls # 锟斤拷要锟铰加碉拷一锟斤拷
image: registry.cn-hangzhou.aliyuncs.com/rainux/metrics-server:v0.6.4
kubectl apply -f metrics-server.yaml
# 锟介看锟角凤拷锟斤拷锟斤拷锟斤拷
kubectl get pods -n kube-system | grep metrics
# 锟斤拷取锟斤拷群锟斤拷指锟斤拷锟斤拷锟斤拷
kubectl get --raw /apis/metrics.k8s.io/v1beta1 | python3 -m json.tool
锟斤拷锟斤拷锟斤拷锟斤拷杉锟斤拷锟斤拷锟饺猴拷峁﹏odes锟斤拷pods锟斤拷锟斤拷源指锟疥。
{
"kind": "APIResourceList",
"apiVersion": "v1",
"groupVersion": "metrics.k8s.io/v1beta1",
"resources": [
{
"name": "nodes",
"singularName": "",
"namespaced": false,
"kind": "NodeMetrics",
"verbs": [
"get",
"list"
]
},
{
"name": "pods",
"singularName": "",
"namespaced": true,
"kind": "PodMetrics",
"verbs": [
"get",
"list"
]
}
]
}
#1-2锟斤拷锟接猴拷榭达拷锟斤拷
[root@master01 ~]# kubectl top nodes
NAME CPU(cores) CPU% MEMORY(bytes) MEMORY%
k8s-master 256m 12% 2002Mi 52%
k8s-node1 103m 5% 1334Mi 34%
k8s-node2 144m 7% 1321Mi 34%
# 锟介看 top 锟斤拷锟斤拷陌锟斤拷锟�
kubectl top --help
# 锟介看node锟节碉拷锟斤拷锟皆词癸拷锟斤拷锟斤拷
kubectl top node
# 锟介看pod锟斤拷锟斤拷源使锟斤拷锟斤拷锟�
kubectl top pod
# 锟介看锟斤拷锟斤拷锟斤拷锟斤拷锟秸硷拷锟絧od锟斤拷源使锟斤拷锟斤拷锟�
kubectl top pod -A
源锟斤拷
[root@k8s-master01 dashboard]# vim /root/.kube/config # 锟斤拷锟斤拷 token 锟斤拷锟斤拷
- name: admin
user:
client-certificate-data: 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
client-key-data: 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
token: JSUzI1NiIsImtpZCI6Ikg5dThGMmc0c1ZBOTVkajVjMGRlb2poZjJMaExDSFp1T1NJWTdobkYtWmsifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJrdWJlLXN5c3RlbSIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VjcmV0Lm5hbWUiOiJhZG1pbi11c2VyLXRva2VuLTRsYzkyIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQubmFtZSI6ImFkbWluLXVzZXIiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC51aWQiOiJiNjc2MGRkZi1kN2FhLTRlZjctYWZkOS05YzA0ZThlMWE5NTQiLCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6a3ViZS1zeXN0ZW06YWRtaW4tdXNlciJ9.XCA6-Wo7q8tJY8td1PRGkruvuNOmtHenjzyToRq5fJjGmWjdLspMDRvDul7YjMeY5eNuhcMG1cJgnyTZZW4gypIiVK1cAtvNR-U4oS0Vv8PqknZdc5-U1ftjIUeayH33tPCAgj-rui31CTwg26s0Z0B312XHF6tLOZZYxkavd1zYVt7DJaJcJpVsC1yaagoLBTjrfpV42N2s49QxnXMaQwYJGy2vowbLcxekdOV2h-7Hv63DxqBRoFYNx_DawN2m3JFfIyQMP7lwENXvNK76wnY2boO8asbIS92V4poLnc9v0r4gtV80dFp3558_XYBWhnZq-_klFHsfxJ0Opt_iEA
# 锟斤拷锟斤拷
cp /root/.kube/config /data/dashboard/k8s-dashboard.kubeconfig
sz k8s-dashboard.kubeconfig
Kuboard锟斤拷一锟斤拷锟斤拷训锟� Kubernetes 锟斤拷锟斤拷锟斤拷锟竭ｏ拷锟结供锟剿丰富锟侥癸拷锟杰ｏ拷锟斤拷锟斤拷锟斤拷谢锟斤拷陆锟斤拷拇锟斤拷锟街库、锟斤拷锟斤拷挚狻I/CD锟斤拷锟竭等ｏ拷锟斤拷锟皆憋拷莸拇罱ㄒ伙拷锟斤拷锟斤拷锟斤拷锟斤拷玫锟� Kubernetes 锟斤拷锟斤拷锟斤拷平台锟斤拷锟斤拷锟缴癸拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷原锟斤拷应锟矫★拷锟斤拷也锟斤拷锟斤拷直锟接斤拷 Kuboard 锟斤拷装锟斤拷锟斤拷锟叫碉拷 Kubernetes 锟斤拷群锟斤拷通锟斤拷 Kuboard 锟结供锟斤拷 Kubernetes RBAC 锟斤拷锟斤拷锟斤拷锟芥，锟斤拷 Kubernetes 锟结供锟斤拷锟斤拷锟斤拷锟斤拷锟脚革拷锟斤拷锟侥匡拷锟斤拷锟脚队★拷
Kubernetes 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷
锟节碉拷锟斤拷锟�
锟斤拷锟狡空硷拷锟斤拷锟�
锟芥储锟斤拷/锟芥储锟斤拷锟斤拷锟斤拷
锟斤拷锟斤拷锟斤拷锟斤拷Deployment/StatefulSet/DaemonSet/CronJob/Job/ReplicaSet锟斤拷锟斤拷锟斤拷
Service/Ingress 锟斤拷锟斤拷
ConfigMap/Secret 锟斤拷锟斤拷
CustomerResourceDefinition 锟斤拷锟斤拷
Kubernetes 锟斤拷锟斤拷锟斤拷锟�
Top Nodes / Top Pods
锟铰硷拷锟叫憋拷锟斤拷通知
锟斤拷锟斤拷锟斤拷志锟斤拷锟秸讹拷
KuboardProxy (kubectl proxy 锟斤拷锟斤拷锟竭版本)
PortForward (kubectl port-forward 锟侥匡拷莅姹�)
锟斤拷锟斤拷锟侥硷拷 锟斤拷kubectl cp 锟斤拷锟斤拷锟竭版本锟斤拷
锟斤拷证锟斤拷锟斤拷权
Github/GitLab 锟斤拷锟斤拷锟铰�
KeyCloak 锟斤拷证
LDAP 锟斤拷证
锟斤拷锟斤拷锟斤拷 RBAC 权锟睫癸拷锟斤拷
Kuboard 锟斤拷色锟斤拷锟斤拷
Grafana+ Prometheus 锟斤拷源锟斤拷锟�
Grafana+Loki+Promtail 锟斤拷志锟桔猴拷
Kuboard 锟劫凤拷锟阶硷拷
Kuboard 锟皆讹拷锟斤拷锟斤拷锟狡空间布锟斤拷
Kuboard 锟斤拷英锟斤拷锟斤拷锟皆帮拷
KuBord锟斤拷锟斤拷锟斤拷 https://kuboard.cn/install/v3/install-in-k8s.html#%E5%AE%89%E8%A3%85
锟结供锟侥帮拷装锟斤拷锟斤拷锟斤拷锟铰ｏ拷(支锟斤拷1.27)
KuBord锟斤拷锟斤拷锟斤拷https://kuboard.cn/install/v3/install.html
锟结供锟侥帮拷装锟斤拷锟斤拷锟斤拷锟铰ｏ拷
kubectl apply -f https://addons.kuboard.cn/kuboard/kuboard-v3.yaml
锟斤拷锟斤拷锟届常pod一直锟斤拷锟斤拷锟斤拷 缺锟斤拷 Master Role
锟斤拷锟斤拷缺锟斤拷 Master Role 锟斤拷锟斤拷锟斤拷校锟�
锟斤拷锟斤拷锟斤拷 * 锟斤拷锟斤拷锟狡★拷锟斤拷讯锟狡ｏ拷锟皆硷拷锟斤拷锟斤拷锟狡ｏ拷锟叫癸拷* 锟斤拷 K8S 锟斤拷群锟斤拷锟皆此凤拷式锟斤拷装 Kuboard 时锟斤拷锟斤拷执锟斤拷 kubectl get nodes 锟斤拷 * 锟斤拷锟斤拷锟斤拷 master 锟节碉拷* 锟斤拷
锟斤拷锟斤拷锟侥硷拷群锟斤拷通锟斤拷锟斤拷锟斤拷锟狡凤拷式锟斤拷装时锟斤拷锟斤拷锟侥硷拷群锟叫匡拷锟斤拷缺锟斤拷 Master Role锟斤拷锟斤拷锟竭碉拷锟斤拷删锟斤拷锟斤拷 Master 锟节碉拷锟�
锟节硷拷群锟斤拷缺锟斤拷 Master Role 锟节碉拷时锟斤拷锟斤拷也锟斤拷锟斤拷为一锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷 worker 锟节碉拷锟斤拷锟接的憋拷签锟斤拷锟斤拷锟斤拷锟斤拷 kuboard-etcd 锟斤拷实锟斤拷锟斤拷锟斤拷锟斤拷
kubectl label nodes your-node-name k8s.kuboard.cn/role=etcd
锟斤拷锟斤拷锟斤拷锟斤拷写锟斤拷锟斤拷锟� http://172.23.70.235:30080
锟斤拷锟斤拷锟绞硷拷没锟斤拷锟斤拷锟斤拷锟斤拷耄拷锟斤拷锟铰�
锟斤拷锟斤拷锟斤拷珊螅锟斤拷锟�30080锟剿口匡拷锟皆匡拷锟斤拷锟斤拷锟斤拷锟斤拷睿拷锟斤拷锟�
curl -k 'http://172.23.70.235:30080/kuboard-api/cluster/default/kind/KubernetesCluster/default/resource/installAgentToKubernetes?token=VJr7EYvO0Dvh7eoB8JlYcN7S0GQhnPZE' > kuboard-agent.yaml
kubectl apply -f ./kuboard-agent.yaml
然锟斤拷涂锟斤拷钥锟斤拷锟斤拷锟饺猴拷锟较拷锟�
锟斤拷锟剿硷拷群锟斤拷锟斤拷锟斤拷锟�
全锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷ERA5锟斤拷锟斤拷锟截凤拷锟斤拷
锟侥讹拷锟斤拷锟斤拷学习锟斤拷锟斤拷锟斤拷锟界构锟斤拷锟斤拷锟铰ｏ拷
锟侥讹拷锟斤拷为Mate品锟斤拷盛锟戒：HarmonyOS NEXT锟接筹拷锟斤拷锟斤拷戏锟斤拷锟杰得碉拷锟斤拷锟斤拷头锟�
锟侥讹拷实锟街讹拷锟襟集猴拷锟斤拷DataTable锟斤拷锟洁互转锟斤拷
锟侥讹拷锟斤拷锟斤拷NEXT元锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟窖匡拷锟斤拷锟较硷拷锟斤拷品
锟侥讹拷锟结巢锟斤拷锟叫★拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟狡硷拷锟截闭凤拷锟斤拷
锟侥讹拷锟斤拷锟斤拷锟紸rcMap锟斤拷锟斤拷锟叫斤拷锟斤拷栅锟斤拷图锟斤拷锟截诧拷锟斤拷锟斤拷锟斤拷
锟侥讹拷锟斤拷讯锟斤拷锟斤拷锟竭客凤拷锟斤拷营锟斤拷系统锟斤拷锟斤拷
锟侥讹拷锟斤拷锟节猴拷锟斤拷NEXT锟斤拷血锟斤拷锟脚达拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷
锟侥讹拷5. Spring Cloud OpenFeign 锟斤拷锟斤拷式 WebService 锟酵伙拷锟剿的筹拷锟斤拷细使锟斤拷
锟侥讹拷Java锟斤拷锟斤拷模式锟斤拷锟斤拷态锟斤拷锟斤拷锟酵讹拷态锟斤拷锟斤拷锟侥对比凤拷锟斤拷
锟侥讹拷Win11锟绞记憋拷锟斤拷锟皆讹拷锟斤拷锟斤拷应锟矫碉拷锟斤拷色锟斤拷锟斤拷示锟斤拷锟斤拷
锟侥讹拷
锟斤拷锟节猴拷锟斤拷锟斤拷锟斤拷系锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟�锟斤拷锟斤拷站锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟狡硷拷锟斤拷锟斤拷
频锟斤拷 锟斤拷锟斤拷频锟斤拷锟斤拷锟斤拷锟斤拷专锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷卓锟斤拷锟斤拷锟�锟斤拷app锟斤拷锟斤拷
锟狡硷拷 锟斤拷原锟斤拷锟斤拷锟斤拷锟斤拷锟铰帮拷锟斤拷锟斤拷锟斤拷锟杰匡拷锟斤拷锟斤拷锟截诧拷锟斤拷
锟斤拷锟斤拷 锟斤拷锟斤拷色锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷 锟斤拷锟斤拷锟�锟斤拷锟斤拷战锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷
扫锟斤拷维锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟街伙拷锟芥本锟斤拷
扫锟斤拷维锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷微锟脚癸拷锟节号ｏ拷
锟斤拷站锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟较达拷锟斤拷锟斤拷锟斤拷锟街凤拷锟斤拷陌锟饺拷锟斤拷敕拷始锟�[email protected]
锟斤拷ICP锟斤拷2022002427锟斤拷-10 锟芥公锟斤拷锟斤拷锟斤拷锟斤拷43070202000427锟斤拷© 2013~2025 haote.com 锟斤拷锟斤拷锟斤拷
