├── .gitignore ├── cka-training ├── 11.logging.md ├── 4.workload.md ├── 10.monitoring.md ├── 6.service-and-ingress.md ├── pea-pods.jpeg ├── 1.installing.md ├── README.md ├── 9.helm.md ├── 2.pod.md ├── 8.troubleshooting.md ├── 0.tips.md ├── 7.security.md └── 5.networking.md ├── istio ├── 5.fault-injection │ ├── README.md │ ├── nginx-service.yaml │ ├── istio-gateway.yaml │ ├── nginx-deployment.yaml │ ├── istio-virtual-service-abort.yaml │ └── istio-virtual-service-delay.yaml ├── 4.destination-rule │ ├── README.md │ ├── kustomization.yaml │ ├── echo-service.yaml │ ├── istio-destination-rule.yaml │ ├── istio-gateway.yaml │ ├── istio-virtual-service.yaml │ ├── echo-v1-deployment.yaml │ └── echo-v2-deployment.yaml ├── 6.circuit-breaking │ ├── nginx-service.yaml │ ├── fortio-service.yaml │ ├── nginx-deployment.yaml │ ├── README.md │ ├── nginx-destination-rule.yaml │ └── fortio-deployment.yaml ├── case-grpc-web │ ├── README.md │ ├── frontend.yaml │ ├── backend.yaml │ └── istio.yaml ├── 3.virtual-service │ ├── kustomization.yaml │ ├── echo-v1-service.yaml │ ├── echo-v2-service.yaml │ ├── istio-gateway.yaml │ ├── istio-virtual-service.yaml │ ├── echo-v2-deployment.yaml │ ├── echo-v1-deployment.yaml │ └── README.md ├── case-advanced-traffic-routing │ ├── customers-service.yaml │ ├── webfrontend-service.yaml │ ├── customers-destination-rule.yaml │ ├── kustomization.yaml │ ├── istio-gateway.yaml │ ├── webfrontend-virtual-service.yaml │ ├── customers-deployment-v1.yaml │ ├── customers-deployment-v2.yaml │ ├── webfrontend-deployment.yaml │ ├── customers-virtual-service.yaml │ └── README.md ├── 2.injection │ ├── nginx.yaml │ └── README.md ├── 1.profile │ └── README.md ├── case-online-boutique │ └── README.md └── 0.installing │ └── README.md ├── deploying-simple-hello-flask-app ├── requirements.txt ├── kustomization.yaml ├── Dockerfile ├── app.py ├── ingress.yaml ├── hello-flask-deployment-and-service.yaml └── README.md ├── ingress-nginx ├── kustomization.yaml └── README.md ├── multi-nodes-cluster ├── vagrant-centos7-kubeadm │ ├── .gitignore │ └── Vagrantfile └── vagrant-ubuntu18.04-kubeadm │ ├── .gitignore │ └── Vagrantfile ├── deploying-simple-hello-spring-app ├── src │ ├── main │ │ ├── resources │ │ │ └── application.properties │ │ └── java │ │ │ └── com │ │ │ └── example │ │ │ └── hellospring │ │ │ ├── HelloSpringApplication.java │ │ │ └── HomeController.java │ └── test │ │ └── java │ │ └── com │ │ └── example │ │ └── hellospring │ │ └── HelloSpringApplicationTests.java ├── kustomization.yaml ├── .mvn │ └── wrapper │ │ ├── maven-wrapper.jar │ │ └── maven-wrapper.properties ├── ingress.yaml ├── Dockerfile ├── .gitignore ├── hello-spring-deployment-and-service.yaml └── pom.xml ├── ingress.png ├── deploying-simple-php-app-with-fpm-and-nginx ├── php-info │ ├── index.php │ └── Dockerfile ├── kustomization.yaml ├── ingress.yaml ├── horizontalpodautoscaler.yaml ├── configmap.yaml └── php-fpm-nginx-deployment-and-service.yaml ├── deploying-simple-hello-gin-app ├── kustomization.yaml ├── main.go ├── ingress.yaml ├── Dockerfile ├── hello-gin-deployment-and-service.yaml └── go.mod ├── deploying-simple-hello-express-app ├── kustomization.yaml ├── Dockerfile ├── index.js ├── package.json ├── ingress.yaml ├── hello-express-deployment-and-service.yaml ├── .gitignore ├── .dockerignore └── README.md ├── learn-from-source-code ├── schedule.jpeg ├── deployment-replicaset-pod.png ├── README.md ├── what-happens-in-kubernetes-when-a-request-hits-kube-apiserver.md ├── what-happens-in-kubernetes-when-create-a-deployment.md └── what-happens-in-kubernetes-when-schedule-a-pod.md ├── deploying-hello-world-web-application-with-go ├── kustomization.yaml ├── ingress.yaml ├── hello-web-deployment-and-service.yaml └── README.md ├── dapr ├── 1.hello-kubernetes │ ├── node │ │ ├── Dockerfile │ │ ├── package.json │ │ ├── app.js │ │ └── .gitignore │ ├── python │ │ ├── Dockerfile │ │ ├── app.py │ │ └── .gitignore │ ├── README.md │ └── deploy.yaml └── 0.installing │ ├── redis.yaml │ └── README.md ├── deploying-kbp-journal-app ├── redis │ ├── secret.yaml │ ├── configmap.yaml │ ├── service.yaml │ └── statefulset.yaml ├── frontend │ ├── configmap.yaml │ ├── service.yaml │ └── deployment.yaml ├── fileserver │ ├── service.yaml │ └── deployment.yaml ├── kustomization.yaml ├── ingress.yaml └── README.md ├── deploying-simple-microservice-using-gin-and-grpc ├── kubernetes-manifests │ ├── kustomization.yaml │ ├── ingress.yaml │ ├── calculator.yaml │ └── api-server.yaml ├── .gitignore ├── cmd │ ├── api-server │ │ ├── Dockerfile │ │ └── main.go │ └── calculator │ │ ├── Dockerfile │ │ └── main.go ├── api │ └── protobuf │ │ ├── calculator │ │ └── calculator.proto │ │ └── health │ │ └── health.proto ├── README.md ├── internal │ ├── health │ │ └── server.go │ └── calculator │ │ └── server.go ├── Makefile └── go.mod ├── deploying-simple-apple-and-banana-ingress ├── kustomization.yaml ├── ingress.yaml ├── apple-deployment-and-service.yaml ├── banana-deployment-and-service.yaml └── README.md ├── deploying-nodejs-note-application-with-mongodb ├── kustomization.yaml ├── ingress.yaml ├── README.md ├── frontend-deployment-and-service.yaml └── mongo-deployment-and-service.yaml ├── deploying-php-guestbook-application-with-mongodb ├── kustomization.yaml ├── README.md ├── ingress.yaml ├── mongodb-deployment-and-service.yaml └── frontend-deployment-and-service.yaml ├── deploying-simple-echo-app-using-blue-green-deployment ├── kustomization.yml ├── service.yaml ├── ingress.yaml ├── echo-v1-deployment.yaml ├── echo-v2-deployment.yaml └── README.md ├── deploying-wordpress-and-mysql-with-persistent-volumes ├── hello-world.png ├── kustomization.yaml ├── ingress.yaml ├── mysql-deployment-and-service.yaml ├── README.md └── wordpress-deployment-and-service.yaml ├── deploying-simple-echo-app-using-canary-deployment ├── kustomization.yaml ├── ingress-primary.yaml ├── ingress-canary-by-header.yaml ├── echo-v1-deployment-and-service.yaml └── echo-v2-deployment-and-service.yaml ├── deploying-php-guestbook-application-with-redis ├── kustomization.yaml ├── README.md ├── ingress.yaml ├── frontend-deployment-and-service.yaml ├── redis-leader-deployment-and-service.yaml └── redis-follower-deployment-and-service.yaml ├── deploying-laravel-application ├── kustomization.yaml ├── ingress.yaml ├── laravel-deployment-and-service.yaml └── README.md ├── knative ├── 0.installing │ ├── eventing.yaml │ ├── serving.yaml │ ├── http-echo.yaml │ ├── README.md │ └── serving-default-domain.yaml ├── 2.traffic-split │ ├── http-echo-update.yaml │ ├── http-echo-split.yaml │ └── README.md └── 1.autoscale │ └── README.md ├── deploying-laravel-7-with-mysql-and-redis ├── configmap.yaml ├── ingress.yaml ├── redis-deployment-and-service.yaml ├── mysql-deployment-and-service.yaml └── laravel-deployment-and-service.yaml ├── metrics-server ├── nginx.yaml └── README.md ├── .github └── workflows │ └── testing.yml ├── deploying-basic-statefulset-app ├── nginx-statefulset-and-service.yaml └── README.md ├── LICENSE ├── crd └── argo-rollouts │ ├── resources.yaml │ └── README.md ├── deploying-replicated-mysql-statefulset-app └── README.md └── README.md /.gitignore: -------------------------------------------------------------------------------- 1 | .idea -------------------------------------------------------------------------------- /cka-training/11.logging.md: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /cka-training/4.workload.md: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /cka-training/10.monitoring.md: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /istio/5.fault-injection/README.md: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /cka-training/6.service-and-ingress.md: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /istio/4.destination-rule/README.md: -------------------------------------------------------------------------------- 1 | # 目标规则 2 | -------------------------------------------------------------------------------- /deploying-simple-hello-flask-app/requirements.txt: -------------------------------------------------------------------------------- 1 | Flask -------------------------------------------------------------------------------- /ingress-nginx/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - deploy.yaml -------------------------------------------------------------------------------- /multi-nodes-cluster/vagrant-centos7-kubeadm/.gitignore: -------------------------------------------------------------------------------- 1 | /.vagrant/ -------------------------------------------------------------------------------- /deploying-simple-hello-spring-app/src/main/resources/application.properties: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /ingress.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jxlwqq/kubernetes-examples/HEAD/ingress.png -------------------------------------------------------------------------------- /deploying-simple-php-app-with-fpm-and-nginx/php-info/index.php: -------------------------------------------------------------------------------- 1 | WIP，更新中 4 | 5 | * [考试技巧](0.tips.md) 6 | * [安装集群](1.installing.md) 7 | * [Pod](2.pod.md) 8 | * [存储](3.storage.md) 9 | -------------------------------------------------------------------------------- /dapr/1.hello-kubernetes/python/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM python:3.7-alpine 2 | WORKDIR /app 3 | COPY . . 4 | RUN pip install requests 5 | ENTRYPOINT ["python"] 6 | CMD ["app.py"] -------------------------------------------------------------------------------- /learn-from-source-code/deployment-replicaset-pod.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jxlwqq/kubernetes-examples/HEAD/learn-from-source-code/deployment-replicaset-pod.png -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/kubernetes-manifests/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - api-server.yaml 3 | - calculator.yaml 4 | - ingress.yaml 5 | -------------------------------------------------------------------------------- /deploying-simple-apple-and-banana-ingress/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - apple-deployment-and-service.yaml 3 | - banana-deployment-and-service.yaml 4 | - ingress.yaml -------------------------------------------------------------------------------- /deploying-nodejs-note-application-with-mongodb/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - frontend-deployment-and-service.yaml 3 | - mongo-deployment-and-service.yaml 4 | - ingress.yaml -------------------------------------------------------------------------------- /deploying-simple-php-app-with-fpm-and-nginx/php-info/Dockerfile: -------------------------------------------------------------------------------- 1 | # syntax=docker/dockerfile:1 2 | FROM --platform=$TARGETPLATFORM php:8.1-fpm 3 | WORKDIR /app 4 | COPY index.php /app -------------------------------------------------------------------------------- /deploying-php-guestbook-application-with-mongodb/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - frontend-deployment-and-service.yaml 3 | - mongodb-deployment-and-service.yaml 4 | - ingress.yaml -------------------------------------------------------------------------------- /deploying-simple-echo-app-using-blue-green-deployment/kustomization.yml: -------------------------------------------------------------------------------- 1 | resources: 2 | - echo-v1-deployment.yaml 3 | - echo-v2-deployment.yaml 4 | - service.yaml 5 | - ingress.yaml -------------------------------------------------------------------------------- /istio/5.fault-injection/nginx-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: nginx-svc 5 | spec: 6 | ports: 7 | - port: 80 8 | selector: 9 | app: nginx -------------------------------------------------------------------------------- /istio/6.circuit-breaking/nginx-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: nginx-svc 5 | spec: 6 | ports: 7 | - port: 80 8 | selector: 9 | app: nginx -------------------------------------------------------------------------------- /deploying-simple-hello-spring-app/.mvn/wrapper/maven-wrapper.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jxlwqq/kubernetes-examples/HEAD/deploying-simple-hello-spring-app/.mvn/wrapper/maven-wrapper.jar -------------------------------------------------------------------------------- /istio/case-grpc-web/README.md: -------------------------------------------------------------------------------- 1 | article: https://ahmednader839.medium.com/istio-grpc-web-cert-manager-e212873624d5 2 | 3 | source code: https://github.com/Niraj-Fonseka/grpc_stream-medium 4 | -------------------------------------------------------------------------------- /deploying-wordpress-and-mysql-with-persistent-volumes/hello-world.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jxlwqq/kubernetes-examples/HEAD/deploying-wordpress-and-mysql-with-persistent-volumes/hello-world.png -------------------------------------------------------------------------------- /deploying-simple-php-app-with-fpm-and-nginx/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - configmap.yaml 3 | - php-fpm-nginx-deployment-and-service.yaml 4 | - horizontalpodautoscaler.yaml 5 | - ingress.yaml 6 | -------------------------------------------------------------------------------- /deploying-simple-echo-app-using-canary-deployment/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - echo-v1-deployment-and-service.yaml 3 | - echo-v2-deployment-and-service.yaml 4 | - ingress-primary.yaml 5 | - ingress-canary-by-header.yaml -------------------------------------------------------------------------------- /dapr/1.hello-kubernetes/README.md: -------------------------------------------------------------------------------- 1 | # Hello World 2 | 3 | #### 部署 4 | 5 | ```shell 6 | kubectl apply -f deploy.yaml 7 | ``` 8 | 9 | #### 查看日志 10 | 11 | ```shell 12 | kubectl logs --selector=app=node -c node --tail=-1 13 | ``` -------------------------------------------------------------------------------- /istio/3.virtual-service/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - echo-v1-deployment.yaml 3 | - echo-v1-service.yaml 4 | - echo-v2-deployment.yaml 5 | - echo-v2-service.yaml 6 | - istio-gateway.yaml 7 | - istio-virtual-service.yaml -------------------------------------------------------------------------------- /deploying-php-guestbook-application-with-redis/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - frontend-deployment-and-service.yaml 3 | - redis-leader-deployment-and-service.yaml 4 | - redis-follower-deployment-and-service.yaml 5 | - ingress.yaml -------------------------------------------------------------------------------- /deploying-simple-hello-flask-app/Dockerfile: -------------------------------------------------------------------------------- 1 | # syntax=docker/dockerfile:1 2 | FROM --platform=$TARGETPLATFORM python:alpine 3 | 4 | WORKDIR / 5 | ADD . / 6 | RUN pip install -r requirements.txt 7 | 8 | EXPOSE 5000 9 | CMD ["python", "app.py"] -------------------------------------------------------------------------------- /istio/4.destination-rule/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - echo-v1-deployment.yaml 3 | - echo-v2-deployment.yaml 4 | - echo-service.yaml 5 | - istio-gateway.yaml 6 | - istio-virtual-service.yaml 7 | - istio-destination-rule.yaml -------------------------------------------------------------------------------- /istio/4.destination-rule/echo-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: echo-service 5 | spec: 6 | selector: 7 | app: echo 8 | ports: 9 | - port: 8080 10 | protocol: TCP 11 | name: http -------------------------------------------------------------------------------- /deploying-simple-hello-express-app/Dockerfile: -------------------------------------------------------------------------------- 1 | # syntax=docker/dockerfile:1 2 | FROM --platform=$TARGETPLATFORM node:14-alpine 3 | WORKDIR /usr/src/app 4 | ADD package*.json . 5 | RUN npm install 6 | ADD . . 7 | EXPOSE 3000 8 | CMD [ "node", "index.js" ] -------------------------------------------------------------------------------- /deploying-simple-hello-flask-app/app.py: -------------------------------------------------------------------------------- 1 | from flask import Flask 2 | 3 | app = Flask(__name__) 4 | 5 | @app.route("/") 6 | def hello_flask(): 7 | return "

Hello, Flask!

" 8 | 9 | if __name__ == "__main__": 10 | app.run(host='0.0.0.0') -------------------------------------------------------------------------------- /deploying-laravel-application/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - laravel-deployment-and-service.yaml 3 | - ingress.yaml 4 | 5 | configMapGenerator: 6 | - name: laravel-env 7 | literals: 8 | - APP_KEY=base64:zC8wVldUZfZJaGaZ7+CPh+5FzaXYmShm7G/Qh6GdRl8= -------------------------------------------------------------------------------- /deploying-simple-echo-app-using-blue-green-deployment/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: echo-svc 5 | spec: 6 | selector: 7 | app: echo 8 | version: v1 9 | ports: 10 | - port: 80 11 | targetPort: 8080 -------------------------------------------------------------------------------- /knative/0.installing/eventing.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: knative-eventing 5 | --- 6 | apiVersion: operator.knative.dev/v1alpha1 7 | kind: KnativeEventing 8 | metadata: 9 | name: knative-eventing 10 | namespace: knative-eventing -------------------------------------------------------------------------------- /deploying-simple-hello-gin-app/main.go: -------------------------------------------------------------------------------- 1 | package main 2 | 3 | import "github.com/gin-gonic/gin" 4 | 5 | func main() { 6 | r := gin.Default() 7 | 8 | r.GET("/hello", func(c *gin.Context) { 9 | c.String(200, "Hello, Gin!") 10 | }) 11 | 12 | _ = r.Run(":8080") 13 | } 14 | -------------------------------------------------------------------------------- /deploying-wordpress-and-mysql-with-persistent-volumes/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - mysql-deployment-and-service.yaml 3 | - wordpress-deployment-and-service.yaml 4 | - ingress.yaml 5 | 6 | secretGenerator: 7 | - name: mysql-pass 8 | literals: 9 | - password=!@#123 # 自定义密码 -------------------------------------------------------------------------------- /istio/3.virtual-service/echo-v1-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: echo-v1 5 | labels: 6 | app: echo-v1 7 | spec: 8 | selector: 9 | app: echo-v1 10 | ports: 11 | - port: 8080 12 | protocol: TCP 13 | name: http -------------------------------------------------------------------------------- /istio/3.virtual-service/echo-v2-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: echo-v2 5 | labels: 6 | app: echo-v2 7 | spec: 8 | selector: 9 | app: echo-v2 10 | ports: 11 | - port: 8080 12 | protocol: TCP 13 | name: http -------------------------------------------------------------------------------- /istio/6.circuit-breaking/fortio-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: fortio-svc 5 | labels: 6 | app: fortio 7 | service: fortio 8 | spec: 9 | ports: 10 | - port: 8080 11 | name: http 12 | selector: 13 | app: fortio -------------------------------------------------------------------------------- /deploying-laravel-7-with-mysql-and-redis/configmap.yaml: -------------------------------------------------------------------------------- 1 | kind: ConfigMap 2 | apiVersion: v1 3 | metadata: 4 | name: laravel-env 5 | data: 6 | APP_KEY: base64:zC8wVldUZfZJaGaZ7+CPh+5FzaXYmShm7G/Qh6GdRl8= 7 | APP_ENV: production 8 | DB_DATABASE: laravel 9 | DB_USERNAME: root 10 | -------------------------------------------------------------------------------- /istio/case-advanced-traffic-routing/customers-service.yaml: -------------------------------------------------------------------------------- 1 | kind: Service 2 | apiVersion: v1 3 | metadata: 4 | name: customers 5 | labels: 6 | app: customers 7 | spec: 8 | selector: 9 | app: customers 10 | ports: 11 | - port: 80 12 | name: http 13 | targetPort: 3000 -------------------------------------------------------------------------------- /deploying-simple-hello-spring-app/.mvn/wrapper/maven-wrapper.properties: -------------------------------------------------------------------------------- 1 | distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.8.6/apache-maven-3.8.6-bin.zip 2 | wrapperUrl=https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.1.0/maven-wrapper-3.1.0.jar 3 | -------------------------------------------------------------------------------- /istio/case-advanced-traffic-routing/webfrontend-service.yaml: -------------------------------------------------------------------------------- 1 | kind: Service 2 | apiVersion: v1 3 | metadata: 4 | name: web-frontend 5 | labels: 6 | app: web-frontend 7 | spec: 8 | selector: 9 | app: web-frontend 10 | ports: 11 | - port: 80 12 | name: http 13 | targetPort: 8080 -------------------------------------------------------------------------------- /deploying-simple-hello-express-app/index.js: -------------------------------------------------------------------------------- 1 | const express = require('express') 2 | const app = express() 3 | const port = 3000 4 | 5 | app.get('/', (req, res) => { 6 | res.send('Hello Express!') 7 | }) 8 | 9 | app.listen(port, () => { 10 | console.log(`Example app listening at http://localhost:${port}`) 11 | }) -------------------------------------------------------------------------------- /deploying-kbp-journal-app/fileserver/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: fileserver-svc 5 | namespace: default 6 | labels: 7 | app: fileserver 8 | spec: 9 | selector: 10 | app: fileserver 11 | ports: 12 | - port: 80 13 | targetPort: 80 14 | protocol: TCP 15 | type: ClusterIP -------------------------------------------------------------------------------- /deploying-kbp-journal-app/frontend/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: frontend-svc 5 | namespace: default 6 | labels: 7 | app: frontend 8 | spec: 9 | ports: 10 | - port: 8080 11 | targetPort: 8080 12 | protocol: TCP 13 | selector: 14 | app: frontend 15 | type: ClusterIP -------------------------------------------------------------------------------- /istio/3.virtual-service/istio-gateway.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1beta1 2 | kind: Gateway 3 | metadata: 4 | name: http-gateway 5 | spec: 6 | selector: 7 | istio: ingressgateway 8 | servers: 9 | - hosts: 10 | - "*" 11 | port: 12 | number: 80 13 | name: http 14 | protocol: HTTP 15 | -------------------------------------------------------------------------------- /istio/4.destination-rule/istio-destination-rule.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1beta1 2 | kind: DestinationRule 3 | metadata: 4 | name: echo-destination-rule 5 | spec: 6 | host: echo-service 7 | subsets: 8 | - name: v1 9 | labels: 10 | version: v1 11 | - name: v2 12 | labels: 13 | version: v2 -------------------------------------------------------------------------------- /istio/4.destination-rule/istio-gateway.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1beta1 2 | kind: Gateway 3 | metadata: 4 | name: echo-gateway 5 | spec: 6 | selector: 7 | istio: ingressgateway 8 | servers: 9 | - hosts: 10 | - "*" 11 | port: 12 | number: 80 13 | name: http 14 | protocol: HTTP 15 | -------------------------------------------------------------------------------- /istio/5.fault-injection/istio-gateway.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1beta1 2 | kind: Gateway 3 | metadata: 4 | name: nginx-gateway 5 | spec: 6 | selector: 7 | istio: ingressgateway 8 | servers: 9 | - hosts: 10 | - "*" 11 | port: 12 | number: 80 13 | name: http 14 | protocol: HTTP 15 | -------------------------------------------------------------------------------- /deploying-kbp-journal-app/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - frontend/configmap.yaml 3 | - frontend/deployment.yaml 4 | - frontend/service.yaml 5 | - redis/configmap.yaml 6 | - redis/secret.yaml 7 | - redis/statefulset.yaml 8 | - redis/service.yaml 9 | - fileserver/deployment.yaml 10 | - fileserver/service.yaml 11 | - ingress.yaml -------------------------------------------------------------------------------- /learn-from-source-code/README.md: -------------------------------------------------------------------------------- 1 | # 源码研习 2 | 3 | * [当你创建了一个Deployment时，Kubernetes内部发生了什么？](./what-happens-in-kubernetes-when-create-a-deployment.md) 4 | * [当一个请求到达 kube-apiserver 时，Kubernetes 内部发生了什么？](./what-happens-in-kubernetes-when-a-request-hits-kube-apiserver.md) 5 | * [当一个 Pod 被调度时，Kubernetes 内部发生了什么？](./what-happens-in-kubernetes-when-schedule-a-pod.md) -------------------------------------------------------------------------------- /istio/case-advanced-traffic-routing/customers-destination-rule.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: DestinationRule 3 | metadata: 4 | name: customers 5 | spec: 6 | host: customers.default.svc.cluster.local 7 | subsets: 8 | - name: v1 9 | labels: 10 | version: v1 11 | - name: v2 12 | labels: 13 | version: v2 -------------------------------------------------------------------------------- /istio/case-advanced-traffic-routing/kustomization.yaml: -------------------------------------------------------------------------------- 1 | resources: 2 | - istio-gateway.yaml 3 | - customers-deployment-v1.yaml 4 | - customers-deployment-v2.yaml 5 | - customers-service.yaml 6 | - customers-virtual-service.yaml 7 | - customers-destination-rule.yaml 8 | - webfrontend-deployment.yaml 9 | - webfrontend-service.yaml 10 | - webfrontend-virtual-service.yaml -------------------------------------------------------------------------------- /deploying-simple-hello-spring-app/src/test/java/com/example/hellospring/HelloSpringApplicationTests.java: -------------------------------------------------------------------------------- 1 | package com.example.hellospring; 2 | 3 | import org.junit.jupiter.api.Test; 4 | import org.springframework.boot.test.context.SpringBootTest; 5 | 6 | @SpringBootTest 7 | class HelloSpringApplicationTests { 8 | 9 | @Test 10 | void contextLoads() { 11 | } 12 | 13 | } 14 | -------------------------------------------------------------------------------- /knative/2.traffic-split/http-echo-update.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: serving.knative.dev/v1 2 | kind: Service 3 | metadata: 4 | name: http-echo 5 | spec: 6 | template: 7 | metadata: 8 | name: http-echo-v2 9 | spec: 10 | containers: 11 | - image: jxlwqq/http-echo 12 | ports: 13 | - containerPort: 8080 14 | args: 15 | - "--text=v2" -------------------------------------------------------------------------------- /istio/case-advanced-traffic-routing/istio-gateway.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: Gateway 3 | metadata: 4 | name: sample-gateway 5 | spec: 6 | selector: 7 | istio: ingressgateway 8 | servers: 9 | - port: 10 | number: 80 11 | name: http 12 | protocol: HTTP 13 | hosts: 14 | - 'web.example.com' 15 | - 'svc.example.com' -------------------------------------------------------------------------------- /deploying-php-guestbook-application-with-redis/README.md: -------------------------------------------------------------------------------- 1 | # 使用 Redis 部署 PHP 留言板应用程序 2 | 3 | 原文：https://kubernetes.io/zh/docs/tutorials/stateless-application/guestbook/ ，基于原文做了一些相关调整。 4 | 5 | 本教程向您展示如何使用 Kubernetes 和 Docker 构建和部署 一个简单的_(非面向生产)的_多层 web 应用程序。 6 | 7 | #### 部署 8 | 9 | ```shell 10 | kubectl apply -k . 11 | ``` 12 | 13 | #### 清理 14 | 15 | ```shell 16 | kubectl delete -k . 17 | ``` 18 | 19 | -------------------------------------------------------------------------------- /deploying-php-guestbook-application-with-mongodb/README.md: -------------------------------------------------------------------------------- 1 | # 使用 Redis 部署 PHP 留言板应用程序 2 | 3 | 原文：https://v1-20.docs.kubernetes.io/docs/tutorials/stateless-application/guestbook/ ，基于原文做了一些相关调整。 4 | 5 | 本教程向您展示如何使用 Kubernetes 和 Docker 构建和部署 一个简单的_(非面向生产)的_多层 web 应用程序。 6 | 7 | #### 部署 8 | 9 | ```shell 10 | kubectl apply -k . 11 | ``` 12 | 13 | #### 清理 14 | 15 | ```shell 16 | kubectl delete -k . 17 | ``` 18 | 19 | -------------------------------------------------------------------------------- /deploying-simple-hello-express-app/package.json: -------------------------------------------------------------------------------- 1 | { 2 | "name": "hello-express", 3 | "version": "1.0.0", 4 | "description": "example: deploying-simple-hello-express-app", 5 | "main": "index.js", 6 | "scripts": { 7 | "test": "echo \"Error: no test specified\" && exit 1" 8 | }, 9 | "author": "jxlwqq", 10 | "license": "ISC", 11 | "dependencies": { 12 | "express": "^4.21.2" 13 | } 14 | } 15 | -------------------------------------------------------------------------------- /knative/0.installing/serving.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Namespace 3 | metadata: 4 | name: knative-serving 5 | --- 6 | apiVersion: operator.knative.dev/v1alpha1 7 | kind: KnativeServing 8 | metadata: 9 | name: knative-serving 10 | namespace: knative-serving 11 | spec: 12 | config: 13 | istio: 14 | local-gateway.knative-serving.knative-local-gateway: "knative-local-gateway.istio-system.svc.cluster.local" -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/.gitignore: -------------------------------------------------------------------------------- 1 | ### Go template 2 | # Binaries for programs and plugins 3 | *.exe 4 | *.exe~ 5 | *.dll 6 | *.so 7 | *.dylib 8 | 9 | # Test binary, built with `go test -c` 10 | *.test 11 | 12 | # Output of the go coverage tool, specifically when used with LiteIDE 13 | *.out 14 | 15 | # Dependency directories (remove the comment below to include it) 16 | # vendor/ 17 | 18 | .idea 19 | 20 | -------------------------------------------------------------------------------- /istio/case-advanced-traffic-routing/webfrontend-virtual-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | name: web-frontend 5 | spec: 6 | hosts: 7 | - 'web.example.com' 8 | gateways: 9 | - sample-gateway 10 | http: 11 | - route: 12 | - destination: 13 | host: web-frontend.default.svc.cluster.local 14 | port: 15 | number: 80 -------------------------------------------------------------------------------- /deploying-simple-echo-app-using-blue-green-deployment/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: echo-ing 5 | spec: 6 | rules: 7 | - http: 8 | paths: 9 | - path: / 10 | pathType: Prefix 11 | backend: 12 | service: 13 | name: echo-svc 14 | port: 15 | number: 80 16 | ingressClassName: nginx -------------------------------------------------------------------------------- /deploying-simple-hello-flask-app/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: hello-flask-ingress 5 | spec: 6 | rules: 7 | - http: 8 | paths: 9 | - path: / 10 | pathType: Prefix 11 | backend: 12 | service: 13 | name: hello-flask-svc 14 | port: 15 | number: 80 16 | ingressClassName: nginx -------------------------------------------------------------------------------- /deploying-simple-hello-gin-app/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: hello-gin-ingress 5 | spec: 6 | rules: 7 | - http: 8 | paths: 9 | - path: / 10 | pathType: Prefix 11 | backend: 12 | service: 13 | name: hello-gin-svc 14 | port: 15 | number: 8080 16 | ingressClassName: nginx 17 | -------------------------------------------------------------------------------- /istio/5.fault-injection/nginx-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: nginx 5 | labels: 6 | app: nginx 7 | spec: 8 | selector: 9 | matchLabels: 10 | app: nginx 11 | template: 12 | metadata: 13 | labels: 14 | app: nginx 15 | spec: 16 | containers: 17 | - name: nginx 18 | image: nginx 19 | ports: 20 | - containerPort: 80 21 | -------------------------------------------------------------------------------- /istio/6.circuit-breaking/nginx-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: nginx 5 | labels: 6 | app: nginx 7 | spec: 8 | selector: 9 | matchLabels: 10 | app: nginx 11 | template: 12 | metadata: 13 | labels: 14 | app: nginx 15 | spec: 16 | containers: 17 | - name: nginx 18 | image: nginx 19 | ports: 20 | - containerPort: 80 21 | -------------------------------------------------------------------------------- /dapr/1.hello-kubernetes/node/package.json: -------------------------------------------------------------------------------- 1 | { 2 | "name": "node_server", 3 | "version": "1.0.0", 4 | "private": true, 5 | "description": "", 6 | "main": "app.js", 7 | "scripts": { 8 | "test": "echo \"Error: no test specified\" && exit 1" 9 | }, 10 | "author": "", 11 | "license": "ISC", 12 | "dependencies": { 13 | "body-parser": "^1.18.3", 14 | "express": "^4.20.0", 15 | "isomorphic-fetch": "^3.0.0" 16 | } 17 | } -------------------------------------------------------------------------------- /deploying-php-guestbook-application-with-redis/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: guestbook-ingress 5 | spec: 6 | rules: 7 | - http: 8 | paths: 9 | - path: / 10 | pathType: Prefix 11 | backend: 12 | service: 13 | name: frontend 14 | port: 15 | number: 80 16 | ingressClassName: nginx -------------------------------------------------------------------------------- /ingress-nginx/README.md: -------------------------------------------------------------------------------- 1 | #### 安装 2 | 3 | 为了让 Ingress 资源工作，集群必须有一个正在运行的 Ingress 控制器。Kubernetes 作为一个项目，目前支持和维护 AWS， GCE 和 nginx Ingress 控制器。这里我们推荐安装 nginx Ingress 控制器。 4 | 5 | ```bash 6 | kubectl apply -f deploy.yaml 7 | ``` 8 | 9 | 注： 10 | 11 | deploy.yaml 文件内容来源自：https://github.com/kubernetes/ingress-nginx/blob/main/deploy/static/provider/cloud/deploy.yaml 12 | 13 | 详细操作说明见：https://github.com/kubernetes/ingress-nginx/blob/main/docs/deploy/index.md -------------------------------------------------------------------------------- /deploying-hello-world-web-application-with-go/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: hello-web-ingress 5 | spec: 6 | rules: 7 | - http: 8 | paths: 9 | - path: / 10 | pathType: Prefix 11 | backend: 12 | service: 13 | name: hello-web-svc 14 | port: 15 | number: 80 16 | ingressClassName: nginx -------------------------------------------------------------------------------- /deploying-nodejs-note-application-with-mongodb/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: frontend-ingress 5 | spec: 6 | rules: 7 | - http: 8 | paths: 9 | - path: / 10 | pathType: Prefix 11 | backend: 12 | service: 13 | name: frontend-service 14 | port: 15 | number: 80 16 | ingressClassName: nginx -------------------------------------------------------------------------------- /deploying-simple-hello-spring-app/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: hello-spring-ingress 5 | spec: 6 | rules: 7 | - http: 8 | paths: 9 | - path: / 10 | pathType: Prefix 11 | backend: 12 | service: 13 | name: hello-spring-svc 14 | port: 15 | number: 8080 16 | ingressClassName: nginx 17 | -------------------------------------------------------------------------------- /istio/6.circuit-breaking/README.md: -------------------------------------------------------------------------------- 1 | ```shell 2 | export FORTIO_POD=$(kubectl get pods -l app=fortio -o 'jsonpath={.items[0].metadata.name}') 3 | kubectl exec "$FORTIO_POD" -c fortio -- /usr/bin/fortio curl -quiet http://nginx-svc:80 4 | kubectl exec "$FORTIO_POD" -c fortio -- /usr/bin/fortio load -c 3 -qps 0 -n 30 -loglevel Warning http://nginx-svc:80 5 | kubectl exec "$FORTIO_POD" -c istio-proxy -- pilot-agent request GET stats | grep nginx| grep pending 6 | ``` -------------------------------------------------------------------------------- /deploying-simple-php-app-with-fpm-and-nginx/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: php-fpm-nginx-ingress 5 | spec: 6 | rules: 7 | - http: 8 | paths: 9 | - path: / 10 | pathType: Prefix 11 | backend: 12 | service: 13 | name: php-fpm-nginx-svc 14 | port: 15 | number: 80 16 | ingressClassName: nginx -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/cmd/api-server/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM golang:1.17-alpine AS builder 2 | WORKDIR /workspace 3 | COPY go.mod go.mod 4 | COPY go.sum go.sum 5 | RUN go mod download 6 | COPY api api 7 | COPY cmd/api-server cmd/api-server 8 | RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o app cmd/api-server/main.go 9 | 10 | FROM alpine 11 | WORKDIR / 12 | COPY --from=builder /workspace/app . 13 | EXPOSE 8080 14 | ENTRYPOINT ["/app"] -------------------------------------------------------------------------------- /istio/5.fault-injection/istio-virtual-service-abort.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1beta1 2 | kind: VirtualService 3 | metadata: 4 | name: nginx-virtual-service 5 | spec: 6 | gateways: 7 | - nginx-gateway 8 | hosts: 9 | - "*" 10 | http: 11 | - route: 12 | - destination: 13 | host: nginx-svc 14 | fault: 15 | abort: 16 | percentage: 17 | value: 50 18 | httpStatus: 503 19 | -------------------------------------------------------------------------------- /istio/5.fault-injection/istio-virtual-service-delay.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1beta1 2 | kind: VirtualService 3 | metadata: 4 | name: nginx-virtual-service 5 | spec: 6 | gateways: 7 | - nginx-gateway 8 | hosts: 9 | - "*" 10 | http: 11 | - route: 12 | - destination: 13 | host: nginx-svc 14 | fault: 15 | delay: 16 | percentage: 17 | value: 100 18 | fixedDelay: 5s 19 | -------------------------------------------------------------------------------- /deploying-kbp-journal-app/redis/configmap.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ConfigMap 3 | metadata: 4 | name: redis-config 5 | data: 6 | launch.sh: |- 7 | #!/bin/sh 8 | 9 | PASSWORD=$(cat /etc/redis-passwd/passwd) 10 | 11 | if [[ "${HOSTNAME}" == "redis-0" ]]; then 12 | redis-server --requirepass ${PASSWORD} 13 | else 14 | redis-server --slaveof redis-0.redis 6379 --masterauth ${PASSWORD} --requirepass ${PASSWORD} 15 | fi 16 | 17 | 18 | -------------------------------------------------------------------------------- /deploying-laravel-application/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: laravel-ingress 5 | labels: 6 | app: laravel 7 | spec: 8 | rules: 9 | - http: 10 | paths: 11 | - path: / 12 | pathType: Prefix 13 | backend: 14 | service: 15 | name: laravel-service 16 | port: 17 | number: 80 18 | ingressClassName: nginx -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/kubernetes-manifests/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: api-server-ing 5 | spec: 6 | rules: 7 | - http: 8 | paths: 9 | - path: / 10 | pathType: Prefix 11 | backend: 12 | service: 13 | name: api-server-svc 14 | port: 15 | number: 8080 16 | ingressClassName: nginx -------------------------------------------------------------------------------- /deploying-laravel-7-with-mysql-and-redis/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: laravel-ingress 5 | labels: 6 | app: laravel 7 | spec: 8 | rules: 9 | - http: 10 | paths: 11 | - path: / 12 | pathType: Prefix 13 | backend: 14 | service: 15 | name: laravel-service 16 | port: 17 | number: 80 18 | ingressClassName: nginx -------------------------------------------------------------------------------- /cka-training/9.helm.md: -------------------------------------------------------------------------------- 1 | ```shell 2 | curl https://baltocdn.com/helm/signing.asc | sudo apt-key add - 3 | sudo apt-get install apt-transport-https --yes 4 | echo "deb https://baltocdn.com/helm/stable/debian/ all main" | sudo tee /etc/apt/sources.list.d/helm-stable-debian.list 5 | sudo apt-get update 6 | sudo apt-get install helm 7 | 8 | echo "source <(helm completion bash)" >> ~/.bashrc 9 | 10 | 11 | helm repo add bitnami https://charts.bitnami.com/bitnami 12 | helm repo update 13 | ``` -------------------------------------------------------------------------------- /deploying-simple-echo-app-using-canary-deployment/ingress-primary.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: echo-ing 5 | spec: 6 | rules: 7 | - host: canary.example.com 8 | http: 9 | paths: 10 | - path: / 11 | pathType: Prefix 12 | backend: 13 | service: 14 | name: echo-v1-svc 15 | port: 16 | number: 80 17 | ingressClassName: nginx -------------------------------------------------------------------------------- /deploying-simple-hello-spring-app/src/main/java/com/example/hellospring/HelloSpringApplication.java: -------------------------------------------------------------------------------- 1 | package com.example.hellospring; 2 | 3 | import org.springframework.boot.SpringApplication; 4 | import org.springframework.boot.autoconfigure.SpringBootApplication; 5 | 6 | @SpringBootApplication 7 | public class HelloSpringApplication { 8 | 9 | public static void main(String[] args) { 10 | SpringApplication.run(HelloSpringApplication.class, args); 11 | } 12 | 13 | } 14 | -------------------------------------------------------------------------------- /deploying-wordpress-and-mysql-with-persistent-volumes/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: wordpress-ingress 5 | spec: 6 | rules: 7 | - http: 8 | paths: 9 | - path: / 10 | pathType: Prefix 11 | backend: 12 | service: 13 | name: wordpress-svc # 匹配 wordpress Service 的 name 14 | port: 15 | number: 80 16 | ingressClassName: nginx -------------------------------------------------------------------------------- /deploying-simple-hello-spring-app/src/main/java/com/example/hellospring/HomeController.java: -------------------------------------------------------------------------------- 1 | package com.example.hellospring; 2 | 3 | import org.springframework.stereotype.Controller; 4 | import org.springframework.web.bind.annotation.GetMapping; 5 | import org.springframework.web.bind.annotation.RestController; 6 | 7 | @RestController 8 | public class HomeController { 9 | 10 | @GetMapping("/") 11 | public String index() { 12 | return "Hello, Spring!"; 13 | } 14 | } 15 | -------------------------------------------------------------------------------- /knative/0.installing/http-echo.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: serving.knative.dev/v1 2 | kind: Service 3 | metadata: 4 | name: http-echo 5 | spec: 6 | template: 7 | metadata: 8 | # This is the name of our new "Revision," it must follow the convention {service-name}-{revision-name} 9 | name: http-echo-v1 10 | spec: 11 | containers: 12 | - image: jxlwqq/http-echo 13 | ports: 14 | - containerPort: 8080 15 | args: 16 | - "--text=v1" -------------------------------------------------------------------------------- /deploying-php-guestbook-application-with-mongodb/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: guestbook-ingress 5 | labels: 6 | app: guestbook 7 | spec: 8 | rules: 9 | - http: 10 | paths: 11 | - path: / 12 | pathType: Prefix 13 | backend: 14 | service: 15 | name: frontend 16 | port: 17 | number: 80 18 | ingressClassName: nginx 19 | 20 | -------------------------------------------------------------------------------- /istio/4.destination-rule/istio-virtual-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1beta1 2 | kind: VirtualService 3 | metadata: 4 | name: echo-virtual-service 5 | spec: 6 | gateways: 7 | - echo-gateway 8 | hosts: 9 | - "*" 10 | http: 11 | - route: 12 | - destination: 13 | host: echo-service 14 | subset: v1 15 | weight: 90 16 | - destination: 17 | host: echo-service 18 | subset: v2 19 | weight: 10 -------------------------------------------------------------------------------- /deploying-simple-hello-express-app/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: hello-express-ingress 5 | labels: 6 | app.kubernetes.io/name: hello-express 7 | spec: 8 | rules: 9 | - http: 10 | paths: 11 | - path: / 12 | pathType: Prefix 13 | backend: 14 | service: 15 | name: hello-express-svc 16 | port: 17 | number: 3000 18 | ingressClassName: nginx -------------------------------------------------------------------------------- /deploying-simple-hello-spring-app/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM maven:3-openjdk-8 AS compile_stage 2 | WORKDIR /app 3 | 4 | COPY .mvn .mvn 5 | COPY pom.xml . 6 | COPY src src 7 | 8 | RUN mvn clean package -U -DskipTests 9 | 10 | FROM openjdk:8-jdk-alpine 11 | ENV PROJECT_NAME hello-spring 12 | ENV PROJECT_VERSION 0.0.1-SNAPSHOT 13 | WORKDIR /app 14 | 15 | COPY --from=compile_stage /app/target/${PROJECT_NAME}-${PROJECT_VERSION}.jar . 16 | 17 | CMD ["sh", "-c", "java -jar /app/${PROJECT_NAME}-${PROJECT_VERSION}.jar"] 18 | -------------------------------------------------------------------------------- /deploying-simple-php-app-with-fpm-and-nginx/horizontalpodautoscaler.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: autoscaling/v2beta2 2 | kind: HorizontalPodAutoscaler 3 | metadata: 4 | name: php-fpm-nginx 5 | spec: 6 | scaleTargetRef: 7 | apiVersion: apps/v1 8 | kind: Deployment 9 | name: php-fpm-nginx 10 | minReplicas: 3 11 | maxReplicas: 10 12 | metrics: 13 | - type: Resource 14 | resource: 15 | name: memory 16 | target: 17 | type: Utilization 18 | averageUtilization: 1 -------------------------------------------------------------------------------- /deploying-simple-hello-gin-app/Dockerfile: -------------------------------------------------------------------------------- 1 | # syntax=docker/dockerfile:1 2 | FROM --platform=$TARGETPLATFORM golang:1.19-alpine AS builder 3 | ARG TARGETARCH 4 | ARG TARGETOS 5 | WORKDIR /workspace 6 | COPY go.mod go.mod 7 | COPY go.sum go.sum 8 | RUN go mod download 9 | COPY . . 10 | RUN CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH go build -a -o app main.go 11 | 12 | FROM gcr.io/distroless/static:nonroot-$TARGETARCH 13 | WORKDIR / 14 | COPY --from=builder /workspace/app . 15 | EXPOSE 8080 16 | ENTRYPOINT ["/app"] -------------------------------------------------------------------------------- /istio/2.injection/nginx.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | creationTimestamp: null 5 | labels: 6 | app: nginx 7 | name: nginx 8 | spec: 9 | replicas: 1 10 | selector: 11 | matchLabels: 12 | app: nginx 13 | strategy: {} 14 | template: 15 | metadata: 16 | creationTimestamp: null 17 | labels: 18 | app: nginx 19 | spec: 20 | containers: 21 | - image: nginx 22 | name: nginx 23 | resources: {} 24 | status: {} 25 | -------------------------------------------------------------------------------- /knative/2.traffic-split/http-echo-split.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: serving.knative.dev/v1 2 | kind: Service 3 | metadata: 4 | name: http-echo 5 | spec: 6 | template: 7 | metadata: 8 | name: http-echo-v2 9 | spec: 10 | containers: 11 | - image: jxlwqq/http-echo 12 | ports: 13 | - containerPort: 8080 14 | args: 15 | - "--text=v2" 16 | traffic: 17 | - latestRevision: true 18 | percent: 50 19 | - revisionName: http-echo-v1 20 | percent: 50 -------------------------------------------------------------------------------- /istio/6.circuit-breaking/nginx-destination-rule.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: DestinationRule 3 | metadata: 4 | name: nginx-destination-rule 5 | spec: 6 | host: nginx-svc 7 | trafficPolicy: 8 | connectionPool: 9 | tcp: 10 | maxConnections: 1 11 | http: 12 | http1MaxPendingRequests: 1 13 | maxRequestsPerConnection: 1 14 | outlierDetection: 15 | consecutive5xxErrors: 1 16 | interval: 1s 17 | baseEjectionTime: 3m 18 | maxEjectionPercent: 100 -------------------------------------------------------------------------------- /istio/3.virtual-service/istio-virtual-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1beta1 2 | kind: VirtualService 3 | metadata: 4 | name: http-virtual-service 5 | spec: 6 | hosts: 7 | - "*" 8 | gateways: 9 | - http-gateway 10 | http: 11 | - route: 12 | - destination: 13 | host: echo-v1 14 | port: 15 | number: 8080 16 | weight: 90 17 | - destination: 18 | host: echo-v2 19 | port: 20 | number: 8080 21 | weight: 10 -------------------------------------------------------------------------------- /istio/3.virtual-service/echo-v2-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | labels: 5 | app: echo-v2 6 | name: echo-v2 7 | spec: 8 | replicas: 1 9 | selector: 10 | matchLabels: 11 | app: echo-v2 12 | template: 13 | metadata: 14 | labels: 15 | app: echo-v2 16 | spec: 17 | containers: 18 | - name: echo-v2 19 | image: jxlwqq/http-echo 20 | ports: 21 | - containerPort: 8080 22 | args: 23 | - "--text=v2" 24 | 25 | -------------------------------------------------------------------------------- /deploying-kbp-journal-app/redis/service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: redis-svc 5 | namespace: default 6 | labels: 7 | app: redis 8 | spec: 9 | selector: 10 | app: redis 11 | ports: 12 | - port: 6379 13 | targetPort: 6379 14 | protocol: TCP 15 | type: ClusterIP 16 | --- 17 | apiVersion: v1 18 | kind: Service 19 | metadata: 20 | name: redis-write 21 | namespace: default 22 | labels: 23 | app: redis-write 24 | spec: 25 | ports: 26 | - port: 6379 27 | clusterIP: None 28 | 29 | -------------------------------------------------------------------------------- /istio/3.virtual-service/echo-v1-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: echo-v1 5 | labels: 6 | app: echo-v1 7 | spec: 8 | selector: 9 | matchLabels: 10 | app: echo-v1 11 | template: 12 | metadata: 13 | labels: 14 | app: echo-v1 15 | spec: 16 | containers: 17 | - name: echo-v1 18 | image: jxlwqq/http-echo 19 | imagePullPolicy: IfNotPresent 20 | ports: 21 | - containerPort: 8080 22 | args: 23 | - "--text=v1" -------------------------------------------------------------------------------- /deploying-simple-hello-spring-app/.gitignore: -------------------------------------------------------------------------------- 1 | HELP.md 2 | target/ 3 | !.mvn/wrapper/maven-wrapper.jar 4 | !**/src/main/**/target/ 5 | !**/src/test/**/target/ 6 | 7 | ### STS ### 8 | .apt_generated 9 | .classpath 10 | .factorypath 11 | .project 12 | .settings 13 | .springBeans 14 | .sts4-cache 15 | 16 | ### IntelliJ IDEA ### 17 | .idea 18 | *.iws 19 | *.iml 20 | *.ipr 21 | 22 | ### NetBeans ### 23 | /nbproject/private/ 24 | /nbbuild/ 25 | /dist/ 26 | /nbdist/ 27 | /.nb-gradle/ 28 | build/ 29 | !**/src/main/**/build/ 30 | !**/src/test/**/build/ 31 | 32 | ### VS Code ### 33 | .vscode/ 34 | -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/api/protobuf/calculator/calculator.proto: -------------------------------------------------------------------------------- 1 | syntax = "proto3"; 2 | 3 | package grpc.calculator.v1; 4 | 5 | option go_package = "./api/protobuf/calculator;grpc_calculator_v1"; 6 | 7 | service calculator { 8 | rpc add(request) returns (response) {} 9 | rpc subtract(request) returns (response) {} 10 | rpc multiply(request) returns (response) {} 11 | rpc divide(request) returns (response) {} 12 | } 13 | 14 | 15 | message request { 16 | float x = 1; 17 | float y = 2; 18 | } 19 | 20 | message response { 21 | float res = 1; 22 | string err = 2; 23 | } 24 | -------------------------------------------------------------------------------- /istio/4.destination-rule/echo-v1-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: echo-v1 5 | labels: 6 | app: echo 7 | version: v1 8 | spec: 9 | selector: 10 | matchLabels: 11 | app: echo 12 | version: v1 13 | template: 14 | metadata: 15 | labels: 16 | app: echo 17 | version: v1 18 | spec: 19 | containers: 20 | - name: echo 21 | image: jxlwqq/http-echo 22 | imagePullPolicy: IfNotPresent 23 | ports: 24 | - containerPort: 8080 25 | args: 26 | - "--text=v1" -------------------------------------------------------------------------------- /istio/4.destination-rule/echo-v2-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: echo-v2 5 | labels: 6 | app: echo 7 | version: v2 8 | spec: 9 | selector: 10 | matchLabels: 11 | app: echo 12 | version: v2 13 | template: 14 | metadata: 15 | labels: 16 | app: echo 17 | version: v2 18 | spec: 19 | containers: 20 | - name: echo 21 | image: jxlwqq/http-echo 22 | imagePullPolicy: IfNotPresent 23 | ports: 24 | - containerPort: 8080 25 | args: 26 | - "--text=v2" -------------------------------------------------------------------------------- /istio/case-advanced-traffic-routing/customers-deployment-v1.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: customers-v1 5 | labels: 6 | app: customers 7 | version: v1 8 | spec: 9 | replicas: 1 10 | selector: 11 | matchLabels: 12 | app: customers 13 | version: v1 14 | template: 15 | metadata: 16 | labels: 17 | app: customers 18 | version: v1 19 | spec: 20 | containers: 21 | - image: gcr.io/tetratelabs/customers:1.0.0 22 | imagePullPolicy: Always 23 | name: svc 24 | ports: 25 | - containerPort: 3000 -------------------------------------------------------------------------------- /istio/case-advanced-traffic-routing/customers-deployment-v2.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: customers-v2 5 | labels: 6 | app: customers 7 | version: v2 8 | spec: 9 | replicas: 1 10 | selector: 11 | matchLabels: 12 | app: customers 13 | version: v2 14 | template: 15 | metadata: 16 | labels: 17 | app: customers 18 | version: v2 19 | spec: 20 | containers: 21 | - image: gcr.io/tetratelabs/customers:2.0.0 22 | imagePullPolicy: Always 23 | name: svc 24 | ports: 25 | - containerPort: 3000 -------------------------------------------------------------------------------- /deploying-simple-echo-app-using-blue-green-deployment/echo-v1-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: echo-v1 5 | spec: 6 | replicas: 1 7 | selector: 8 | matchLabels: 9 | app: echo 10 | version: v1 11 | template: 12 | metadata: 13 | labels: 14 | app: echo 15 | version: v1 16 | spec: 17 | containers: 18 | - name: echo 19 | image: jxlwqq/http-echo 20 | args: 21 | - "--text=echo-v1" 22 | ports: 23 | - name: http 24 | protocol: TCP 25 | containerPort: 8080 26 | -------------------------------------------------------------------------------- /deploying-simple-echo-app-using-blue-green-deployment/echo-v2-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: echo-v2 5 | spec: 6 | replicas: 1 7 | selector: 8 | matchLabels: 9 | app: echo 10 | version: v2 11 | template: 12 | metadata: 13 | labels: 14 | app: echo 15 | version: v2 16 | spec: 17 | containers: 18 | - name: echo 19 | image: jxlwqq/http-echo 20 | args: 21 | - "--text=echo-v2" 22 | ports: 23 | - name: http 24 | protocol: TCP 25 | containerPort: 8080 26 | -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/cmd/calculator/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM golang:1.17-alpine AS builder 2 | WORKDIR /workspace 3 | RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go install github.com/grpc-ecosystem/grpc-health-probe@latest 4 | COPY go.mod go.mod 5 | COPY go.sum go.sum 6 | RUN go mod download 7 | COPY api api 8 | COPY cmd/calculator cmd/calculator 9 | COPY internal internal 10 | RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o app cmd/calculator/main.go 11 | 12 | FROM alpine 13 | WORKDIR / 14 | COPY --from=builder /workspace/app . 15 | COPY --from=builder /go/bin/grpc-health-probe . 16 | EXPOSE 50051 17 | ENTRYPOINT ["/app"] -------------------------------------------------------------------------------- /metrics-server/nginx.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | labels: 5 | app: nginx 6 | name: nginx 7 | spec: 8 | replicas: 1 9 | selector: 10 | matchLabels: 11 | app: nginx 12 | template: 13 | metadata: 14 | labels: 15 | app: nginx 16 | spec: 17 | containers: 18 | - image: nginx 19 | name: nginx 20 | ports: 21 | - containerPort: 80 22 | resources: 23 | limits: 24 | cpu: "20m" 25 | memory: "50Mi" 26 | requests: 27 | cpu: "20m" 28 | memory: "50Mi" -------------------------------------------------------------------------------- /deploying-laravel-7-with-mysql-and-redis/redis-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | kind: Deployment 2 | apiVersion: apps/v1 3 | metadata: 4 | name: redis-deployment 5 | labels: 6 | app: redis 7 | spec: 8 | selector: 9 | matchLabels: 10 | app: redis 11 | template: 12 | metadata: 13 | labels: 14 | app: redis 15 | spec: 16 | containers: 17 | - name: redis 18 | image: redis 19 | ports: 20 | - containerPort: 6379 21 | --- 22 | kind: Service 23 | apiVersion: v1 24 | metadata: 25 | name: redis-service 26 | spec: 27 | selector: 28 | app: redis 29 | ports: 30 | - port: 6379 -------------------------------------------------------------------------------- /deploying-simple-apple-and-banana-ingress/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: fruit-ing 5 | spec: 6 | rules: 7 | - http: 8 | paths: 9 | - path: /apple 10 | pathType: Prefix 11 | backend: 12 | service: 13 | name: apple-svc 14 | port: 15 | number: 8080 16 | - path: /banana 17 | pathType: Prefix 18 | backend: 19 | service: 20 | name: banana-svc 21 | port: 22 | number: 8080 23 | ingressClassName: nginx -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/README.md: -------------------------------------------------------------------------------- 1 | # 部署一个简单的加减乘除计算器微服务 2 | 3 | 本示例使用 grpc 和 Gin 来构建一个简单的加减乘除计算服务。项目架构很简单，分为两部分： 4 | 5 | * 一个是对外暴露的 Web 服务：api-server 6 | * 一个是内部调用的微服务：calculator 7 | 8 | ### 前置依赖 9 | 10 | protoc: 11 | 12 | ```shell 13 | brew install protoc 14 | go install google.golang.org/protobuf/cmd/protoc-gen-go@latest 15 | go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@latest 16 | ``` 17 | 18 | ingress-nginx 控制器： 19 | 20 | ```shell 21 | kubectl apply -k ../ingress-nginx 22 | ``` 23 | 24 | ### 构建镜像 25 | 26 | ```shell 27 | make docker-build 28 | ``` 29 | 30 | ### 部署 31 | 32 | ```shell 33 | make kube-deploy 34 | ``` -------------------------------------------------------------------------------- /istio/3.virtual-service/README.md: -------------------------------------------------------------------------------- 1 | # 虚拟服务 2 | 3 | ### Demo 介绍 4 | 5 | 基于 [jxlwqq/http-echo](https://github.com/jxlwqq/http-echo) 镜像，我们部署两个简单的 Web 服务。访问它们时，分别返回 `v1` 和 `v2`。 6 | 7 | ### 部署 8 | 9 | ```shell 10 | kubectl apply -f echo-v1-deployment.yaml 11 | kubectl apply -f echo-v1-service.yaml 12 | kubectl apply -f echo-v2-deployment.yaml 13 | kubectl apply -f echo-v2-service.yaml 14 | kubectl apply -f istio-gateway.yaml # istio 网关 15 | kubectl apply -f istio-virtual-service.yaml # istio 虚拟服务 16 | ``` 17 | 18 | ### 访问 19 | 20 | ```shell 21 | curl http://localhost # 返回的 v1 与 v2 大致的比例是 9:1 22 | ``` 23 | 24 | ### 清理 25 | 26 | ```shell 27 | kubectl delete -k . 28 | ``` -------------------------------------------------------------------------------- /deploying-kbp-journal-app/ingress.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: journal-ing 5 | namespace: default 6 | spec: 7 | rules: 8 | - http: 9 | paths: 10 | - path: /api 11 | pathType: Prefix 12 | backend: 13 | service: 14 | name: frontend-svc 15 | port: 16 | number: 8080 17 | - path: / 18 | pathType: Prefix 19 | backend: 20 | service: 21 | name: fileserver-svc 22 | port: 23 | number: 80 24 | ingressClassName: nginx 25 | -------------------------------------------------------------------------------- /deploying-simple-echo-app-using-canary-deployment/ingress-canary-by-header.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.k8s.io/v1 2 | kind: Ingress 3 | metadata: 4 | name: echo-canary-ing 5 | annotations: 6 | nginx.ingress.kubernetes.io/canary: "true" 7 | nginx.ingress.kubernetes.io/canary-by-header: "Region" 8 | nginx.ingress.kubernetes.io/canary-by-header-pattern: "shanghai|beijing" 9 | spec: 10 | rules: 11 | - host: canary.example.com 12 | http: 13 | paths: 14 | - path: / 15 | pathType: Prefix 16 | backend: 17 | service: 18 | name: echo-v2-svc 19 | port: 20 | number: 80 21 | ingressClassName: nginx -------------------------------------------------------------------------------- /istio/case-advanced-traffic-routing/webfrontend-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: web-frontend 5 | labels: 6 | app: web-frontend 7 | spec: 8 | replicas: 1 9 | selector: 10 | matchLabels: 11 | app: web-frontend 12 | template: 13 | metadata: 14 | labels: 15 | app: web-frontend 16 | version: v1 17 | spec: 18 | containers: 19 | - image: gcr.io/tetratelabs/web-frontend:1.0.0 20 | imagePullPolicy: Always 21 | name: web 22 | ports: 23 | - containerPort: 8080 24 | env: 25 | - name: CUSTOMER_SERVICE_URL 26 | value: 'http://customers.default.svc.cluster.local' -------------------------------------------------------------------------------- /deploying-simple-apple-and-banana-ingress/apple-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | kind: Deployment 2 | apiVersion: apps/v1 3 | metadata: 4 | name: apple 5 | spec: 6 | selector: 7 | matchLabels: 8 | app: apple 9 | replicas: 2 10 | template: 11 | metadata: 12 | labels: 13 | app: apple 14 | spec: 15 | containers: 16 | - name: apple 17 | image: jxlwqq/http-echo 18 | args: 19 | - "--text=apple" 20 | ports: 21 | - containerPort: 8080 22 | 23 | --- 24 | 25 | kind: Service 26 | apiVersion: v1 27 | metadata: 28 | name: apple-svc 29 | spec: 30 | selector: 31 | app: apple 32 | ports: 33 | - port: 8080 34 | targetPort: 8080 35 | 36 | -------------------------------------------------------------------------------- /deploying-simple-apple-and-banana-ingress/banana-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | kind: Deployment 2 | apiVersion: apps/v1 3 | metadata: 4 | name: banana 5 | spec: 6 | selector: 7 | matchLabels: 8 | app: banana 9 | replicas: 2 10 | template: 11 | metadata: 12 | labels: 13 | app: banana 14 | spec: 15 | containers: 16 | - name: banana 17 | image: jxlwqq/http-echo 18 | args: 19 | - "--text=banana" 20 | ports: 21 | - containerPort: 8080 22 | 23 | --- 24 | 25 | kind: Service 26 | apiVersion: v1 27 | metadata: 28 | name: banana-svc 29 | spec: 30 | selector: 31 | app: banana 32 | ports: 33 | - port: 8080 34 | targetPort: 8080 -------------------------------------------------------------------------------- /dapr/0.installing/redis.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: dapr.io/v1alpha1 2 | kind: Component 3 | metadata: 4 | name: statestore 5 | spec: 6 | type: state.redis 7 | version: v1 8 | metadata: 9 | # These settings will work out of the box if you use `helm install 10 | # bitnami/redis`. If you have your own setup, replace 11 | # `redis-master:6379` with your own Redis master address, and the 12 | # Redis password with your own Secret's name. For more information, 13 | # see https://docs.dapr.io/operations/components/component-secrets . 14 | - name: redisHost 15 | value: redis-master:6379 16 | - name: redisPassword 17 | secretKeyRef: 18 | name: redis 19 | key: redis-password 20 | auth: 21 | secretStore: kubernetes -------------------------------------------------------------------------------- /deploying-simple-hello-gin-app/hello-gin-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: hello-gin 5 | spec: 6 | selector: 7 | matchLabels: 8 | app: hello-gin 9 | template: 10 | metadata: 11 | labels: 12 | app: hello-gin 13 | spec: 14 | containers: 15 | - name: hello-gin 16 | image: jxlwqq/hello-gin:latest 17 | resources: 18 | limits: 19 | memory: "128Mi" 20 | cpu: "500m" 21 | ports: 22 | - containerPort: 8080 23 | --- 24 | apiVersion: v1 25 | kind: Service 26 | metadata: 27 | name: hello-gin-svc 28 | spec: 29 | selector: 30 | app: hello-gin 31 | ports: 32 | - port: 8080 33 | targetPort: 8080 -------------------------------------------------------------------------------- /deploying-simple-php-app-with-fpm-and-nginx/configmap.yaml: -------------------------------------------------------------------------------- 1 | kind: ConfigMap 2 | apiVersion: v1 3 | metadata: 4 | name: nginx-config 5 | data: 6 | nginx.conf: | 7 | events { 8 | } 9 | http { 10 | server { 11 | listen 80 default_server; 12 | listen [::]:80 default_server; 13 | root /var/www/html; 14 | index index.php; 15 | server_name _; 16 | location / { 17 | try_files $uri $uri/ =404; 18 | } 19 | location ~ \.php$ { 20 | include fastcgi_params; 21 | fastcgi_param REQUEST_METHOD $request_method; 22 | fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; 23 | fastcgi_pass 127.0.0.1:9000; 24 | } 25 | } 26 | } -------------------------------------------------------------------------------- /deploying-simple-hello-spring-app/hello-spring-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: hello-spring 5 | spec: 6 | selector: 7 | matchLabels: 8 | app: hello-spring 9 | template: 10 | metadata: 11 | labels: 12 | app: hello-spring 13 | spec: 14 | containers: 15 | - name: hello-spring 16 | image: jxlwqq/hello-spring:latest 17 | resources: 18 | limits: 19 | memory: "1Gi" 20 | cpu: "500m" 21 | ports: 22 | - containerPort: 8080 23 | --- 24 | apiVersion: v1 25 | kind: Service 26 | metadata: 27 | name: hello-spring-svc 28 | spec: 29 | selector: 30 | app: hello-spring 31 | ports: 32 | - port: 8080 33 | targetPort: 8080 -------------------------------------------------------------------------------- /deploying-simple-echo-app-using-canary-deployment/echo-v1-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: echo-v1 5 | spec: 6 | selector: 7 | matchLabels: 8 | app: echo 9 | version: v1 10 | template: 11 | metadata: 12 | labels: 13 | app: echo 14 | version: v1 15 | spec: 16 | containers: 17 | - name: echo 18 | image: jxlwqq/http-echo 19 | args: 20 | - "--text=echo-v1" 21 | ports: 22 | - containerPort: 8080 23 | 24 | --- 25 | apiVersion: v1 26 | kind: Service 27 | metadata: 28 | name: echo-v1-svc 29 | spec: 30 | selector: 31 | app: echo 32 | version: v1 33 | ports: 34 | - port: 80 35 | targetPort: 8080 36 | 37 | 38 | 39 | -------------------------------------------------------------------------------- /deploying-simple-echo-app-using-canary-deployment/echo-v2-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: echo-v2 5 | spec: 6 | selector: 7 | matchLabels: 8 | app: echo 9 | version: v2 10 | template: 11 | metadata: 12 | labels: 13 | app: echo 14 | version: v2 15 | spec: 16 | containers: 17 | - name: echo 18 | image: jxlwqq/http-echo 19 | args: 20 | - "--text=echo-v2" 21 | ports: 22 | - containerPort: 8080 23 | 24 | --- 25 | apiVersion: v1 26 | kind: Service 27 | metadata: 28 | name: echo-v2-svc 29 | spec: 30 | selector: 31 | app: echo 32 | version: v2 33 | ports: 34 | - port: 80 35 | targetPort: 8080 36 | 37 | 38 | 39 | -------------------------------------------------------------------------------- /deploying-nodejs-note-application-with-mongodb/README.md: -------------------------------------------------------------------------------- 1 | #### 示例来源 2 | 3 | [Hands-on guide: developing and deploying Node.js apps in Kubernetes](https://learnk8s.io/nodejs-kubernetes-guide) 4 | 5 | 本仓库的示例均使用 Ingress 进行负载均衡，所以略有调整。也可以点击链接按照原文步骤进行安装和实验。 6 | 7 | #### 镜像准备 8 | 9 | ```bash 10 | docker pull learnk8s/knote-js:1.0.0 # 源码地址：https://github.com/learnk8s/knote-js/tree/master/01 11 | docker pull mongo 12 | ``` 13 | #### 部署服务 14 | ```bash 15 | kubectl apply -f frontend-deployment-and-service.yaml 16 | kubectl apply -f mongo-deployment-and-service.yaml 17 | kubectl apply -f ingress.yaml 18 | 19 | ############# 20 | # 或者使用一个命令进行部署 21 | kubectl apply -k ./ 22 | ############# 23 | ``` 24 | 25 | #### 访问 26 | 27 | 打开浏览器访问：`http://localhost` 28 | 29 | 30 | #### 清理 31 | ```shell 32 | kubectl delete -k ./ 33 | ``` -------------------------------------------------------------------------------- /deploying-nodejs-note-application-with-mongodb/frontend-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | kind: Deployment 2 | apiVersion: apps/v1 3 | metadata: 4 | name: frontend-deployment 5 | spec: 6 | selector: 7 | matchLabels: 8 | app: frontend 9 | template: 10 | metadata: 11 | labels: 12 | app: frontend 13 | spec: 14 | containers: 15 | - name: frontend 16 | image: learnk8s/knote-js:1.0.0 17 | ports: 18 | - containerPort: 3000 19 | env: 20 | - name: MONGO_URL 21 | value: mongodb://mongo-service:27017/dev 22 | imagePullPolicy: Always 23 | --- 24 | kind: Service 25 | apiVersion: v1 26 | metadata: 27 | name: frontend-service 28 | spec: 29 | selector: 30 | app: frontend 31 | ports: 32 | - port: 80 33 | targetPort: 3000 34 | 35 | -------------------------------------------------------------------------------- /deploying-laravel-application/laravel-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | kind: Deployment 2 | apiVersion: apps/v1 3 | metadata: 4 | name: laravel-deployment 5 | labels: 6 | app: laravel 7 | spec: 8 | selector: 9 | matchLabels: 10 | app: laravel 11 | template: 12 | metadata: 13 | name: laravel 14 | labels: 15 | app: laravel 16 | spec: 17 | containers: 18 | - name: laravel 19 | image: jxlwqq/laravel-kubernetes-demo 20 | envFrom: 21 | - configMapRef: 22 | name: laravel-env 23 | ports: 24 | - containerPort: 80 25 | --- 26 | kind: Service 27 | apiVersion: v1 28 | metadata: 29 | name: laravel-service 30 | labels: 31 | app: laravel 32 | spec: 33 | selector: 34 | app: laravel 35 | ports: 36 | - port: 80 37 | targetPort: 80 38 | -------------------------------------------------------------------------------- /dapr/1.hello-kubernetes/python/app.py: -------------------------------------------------------------------------------- 1 | # ------------------------------------------------------------ 2 | # Copyright (c) Microsoft Corporation. 3 | # Licensed under the MIT License. 4 | # ------------------------------------------------------------ 5 | 6 | import os 7 | import requests 8 | import time 9 | 10 | dapr_port = os.getenv("DAPR_HTTP_PORT", 3500) 11 | dapr_url = "http://localhost:{}/v1.0/invoke/nodeapp/method/neworder".format(dapr_port) 12 | 13 | n = 0 14 | while True: 15 | n += 1 16 | message = {"data": {"orderId": n}} 17 | 18 | try: 19 | response = requests.post(dapr_url, json=message, timeout=5) 20 | if not response.ok: 21 | print("HTTP %d => %s" % (response.status_code, 22 | response.content.decode("utf-8")), flush=True) 23 | except Exception as e: 24 | print(e, flush=True) 25 | 26 | time.sleep(1) -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/internal/health/server.go: -------------------------------------------------------------------------------- 1 | package health 2 | 3 | import ( 4 | "context" 5 | healthv1 "github.com/jxlwqq/route-guide/api/protobuf/health" 6 | "log" 7 | ) 8 | 9 | type server struct { 10 | healthv1.UnimplementedHealthServer 11 | } 12 | 13 | func (s server) Check(ctx context.Context, request *healthv1.HealthCheckRequest) (*healthv1.HealthCheckResponse, error) { 14 | log.Printf("Received Check") 15 | return &healthv1.HealthCheckResponse{ 16 | Status: healthv1.HealthCheckResponse_SERVING, 17 | }, nil 18 | } 19 | 20 | func (s server) Watch(request *healthv1.HealthCheckRequest, watchServer healthv1.Health_WatchServer) error { 21 | log.Printf("Received Watch") 22 | return watchServer.Send(&healthv1.HealthCheckResponse{ 23 | Status: healthv1.HealthCheckResponse_SERVING, 24 | }) 25 | } 26 | 27 | func NewServer() healthv1.HealthServer { 28 | return &server{} 29 | } 30 | -------------------------------------------------------------------------------- /.github/workflows/testing.yml: -------------------------------------------------------------------------------- 1 | name: "Testing" 2 | on: [pull_request, push] 3 | 4 | jobs: 5 | kind: 6 | runs-on: ubuntu-latest 7 | steps: 8 | - uses: actions/checkout@v3 9 | - name: Kind Cluster 10 | uses: helm/kind-action@v1.2.0 11 | - name: Deploying ingress-nginx 12 | run: | 13 | kubectl cluster-info 14 | echo "current-context:" $(kubectl config current-context) 15 | kubectl apply -k ./ingress-nginx 16 | kubectl rollout status deployments.apps ingress-nginx-controller --namespace=ingress-nginx 17 | kubectl get service ingress-nginx-controller --namespace=ingress-nginx 18 | - name: Deploying simple apple and banana ingress 19 | run: | 20 | kubectl apply -k ./deploying-simple-apple-and-banana-ingress 21 | kubectl rollout status deployments.apps apple 22 | kubectl rollout status deployments.apps banana 23 | 24 | 25 | -------------------------------------------------------------------------------- /deploying-simple-hello-flask-app/hello-flask-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: hello-flask 5 | spec: 6 | selector: 7 | matchLabels: 8 | name: hello-flask 9 | template: 10 | metadata: 11 | name: hello-flask 12 | labels: 13 | name: hello-flask 14 | spec: 15 | containers: 16 | - name: hello-flask 17 | image: jxlwqq/hello-flask:latest 18 | ports: 19 | - containerPort: 5000 20 | livenessProbe: 21 | httpGet: 22 | path: / 23 | port: 5000 24 | readinessProbe: 25 | httpGet: 26 | path: / 27 | port: 5000 28 | --- 29 | apiVersion: v1 30 | kind: Service 31 | metadata: 32 | name: hello-flask-svc 33 | spec: 34 | selector: 35 | name: hello-flask 36 | ports: 37 | - port: 80 38 | targetPort: 5000 39 | 40 | -------------------------------------------------------------------------------- /deploying-simple-hello-express-app/hello-express-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: hello-express 5 | spec: 6 | selector: 7 | matchLabels: 8 | app.kubernetes.io/name: hello-express 9 | app.kubernetes.io/version: 1.0.0 10 | replicas: 3 11 | template: 12 | metadata: 13 | labels: 14 | app.kubernetes.io/name: hello-express 15 | app.kubernetes.io/version: 1.0.0 16 | spec: 17 | containers: 18 | - name: hello-express 19 | image: jxlwqq/hello-express:1.0.0 20 | ports: 21 | - containerPort: 3000 22 | protocol: TCP 23 | --- 24 | apiVersion: v1 25 | kind: Service 26 | metadata: 27 | name: hello-express-svc 28 | labels: 29 | app.kubernetes.io/name: hello-express 30 | spec: 31 | selector: 32 | app.kubernetes.io/name: hello-express 33 | type: ClusterIP 34 | ports: 35 | - port: 3000 36 | targetPort: 3000 -------------------------------------------------------------------------------- /istio/case-grpc-web/frontend.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: client 5 | labels: 6 | app: client 7 | service: client 8 | spec: 9 | ports: 10 | - port: 3000 11 | targetPort: 3000 12 | name: http 13 | appProtocol: http 14 | selector: 15 | app: client 16 | --- 17 | apiVersion: apps/v1 18 | kind: Deployment 19 | metadata: 20 | name: client 21 | labels: 22 | app: client 23 | version: v1 24 | spec: 25 | replicas: 1 26 | selector: 27 | matchLabels: 28 | app: client 29 | version: v1 30 | template: 31 | metadata: 32 | labels: 33 | app: client 34 | version: v1 35 | spec: 36 | containers: 37 | - name: client 38 | image: nadera2/grpc-web-client 39 | imagePullPolicy: IfNotPresent 40 | env: 41 | - name: REACT_APP_GATEWAY_URL 42 | value: localhost 43 | ports: 44 | - containerPort: 3000 -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/cmd/calculator/main.go: -------------------------------------------------------------------------------- 1 | package main 2 | 3 | import ( 4 | calculatorv1 "github.com/jxlwqq/route-guide/api/protobuf/calculator" 5 | healthv1 "github.com/jxlwqq/route-guide/api/protobuf/health" 6 | "github.com/jxlwqq/route-guide/internal/calculator" 7 | "github.com/jxlwqq/route-guide/internal/health" 8 | "google.golang.org/grpc" 9 | "log" 10 | "net" 11 | ) 12 | 13 | const ( 14 | PORT = ":50051" 15 | ) 16 | 17 | func main() { 18 | lis, err := net.Listen("tcp", PORT) 19 | if err != nil { 20 | log.Fatalf("failed to listen: %v", err) 21 | } 22 | s := grpc.NewServer() 23 | 24 | calculatorServer := calculator.NewServer() 25 | healthServer := health.NewServer() 26 | 27 | calculatorv1.RegisterCalculatorServer(s, calculatorServer) 28 | healthv1.RegisterHealthServer(s, healthServer) 29 | 30 | log.Printf("server listening at %v", lis.Addr()) 31 | if err = s.Serve(lis); err != nil { 32 | log.Fatalf("failed to serve: %v", err) 33 | } 34 | 35 | } 36 | -------------------------------------------------------------------------------- /deploying-php-guestbook-application-with-redis/frontend-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: frontend 5 | spec: 6 | replicas: 3 7 | selector: 8 | matchLabels: 9 | app: guestbook 10 | tier: frontend 11 | template: 12 | metadata: 13 | labels: 14 | app: guestbook 15 | tier: frontend 16 | spec: 17 | containers: 18 | - name: php-redis 19 | image: gcr.io/google_samples/gb-frontend:v5 20 | env: 21 | - name: GET_HOSTS_FROM 22 | value: "dns" 23 | resources: 24 | requests: 25 | cpu: 100m 26 | memory: 100Mi 27 | ports: 28 | - containerPort: 80 29 | --- 30 | apiVersion: v1 31 | kind: Service 32 | metadata: 33 | name: frontend 34 | labels: 35 | app: guestbook 36 | tier: frontend 37 | spec: 38 | ports: 39 | - port: 80 40 | selector: 41 | app: guestbook 42 | tier: frontend -------------------------------------------------------------------------------- /deploying-kbp-journal-app/README.md: -------------------------------------------------------------------------------- 1 | # KBP Journal App 2 | 3 | 《Kubernetes Best Practices》第一章「搭建一个基本服务」的示例应用程序。随书仓库 https://github.com/brendandburns/kbp-sample 代码不全。 4 | 5 | 本示例中的应用程序包含： 6 | * 一个用于存储数据的 Redis 后端服务 `redis/` 7 | * 一个简单的日志系统 `frontend/` 8 | * 一个 Nginx 静态文件服务器 `fileserver/` 9 | 10 | #### 部署有状态 Redis 后端服务 11 | 12 | 使用 StatefulSet 资源来部署 Redis 集群，使用卷说明来编写可复制的模版，为多副本中的每个 Pod 分配自己独有的 PV。集群中的 Leader 和 Follower 使用存储在 ConfigMap 中启动脚本区分角色。 13 | 14 | ```shell 15 | kubectl apply -f redis/ 16 | ``` 17 | 18 | #### 部署日志服务 19 | 20 | 日志系统的前端采用 TS 实现的一个 Node.js 应用程序，该应用程序使用暴露在 8080 端口上的 HTTP服务来处理请求，并采用 Redis 作为后端来 CURD 当前日志条目。 21 | 22 | ```shell 23 | kubectl apply -f frontend/ 24 | ``` 25 | 26 | #### 部署静态文件服务器 27 | 28 | 使用 Deployment 来声明多副本的 Nginx 服务器。 29 | 30 | ```shell 31 | kubectl apply -f fileserver/ 32 | ``` 33 | 34 | #### 部署 Ingress 35 | 36 | ```shell 37 | kubectl apply -f ingress.yaml 38 | kubectl apply -f ../ingress-nginx/deploy.yaml 39 | ``` 40 | 41 | #### 清理 42 | 43 | ```shell 44 | kubectl delete -k . 45 | ``` 46 | 47 | -------------------------------------------------------------------------------- /deploying-kbp-journal-app/fileserver/deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: fileserver 5 | namespace: default 6 | labels: 7 | app: fileserver 8 | spec: 9 | replicas: 2 10 | selector: 11 | matchLabels: 12 | app: fileserver 13 | template: 14 | metadata: 15 | labels: 16 | app: fileserver 17 | spec: 18 | containers: 19 | - name: fileserver 20 | image: nginx:latest 21 | imagePullPolicy: IfNotPresent 22 | readinessProbe: 23 | httpGet: 24 | port: 80 25 | path: / 26 | livenessProbe: 27 | httpGet: 28 | port: 80 29 | path: / 30 | lifecycle: 31 | preStop: 32 | exec: 33 | command: [ "usr/sbin/nginx", "-s", "quit" ] 34 | terminationMessagePath: /dev/termination-log 35 | terminationMessagePolicy: File 36 | dnsPolicy: ClusterFirst 37 | restartPolicy: Always -------------------------------------------------------------------------------- /istio/case-grpc-web/backend.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: server 5 | labels: 6 | app: server 7 | service: server 8 | spec: 9 | ports: 10 | - port: 8080 11 | name: grpc-web 12 | targetPort: 8080 13 | appProtocol: grpc-web # https://istio.io/latest/zh/docs/ops/configuration/traffic-management/protocol-selection/ 14 | selector: 15 | app: server 16 | --- 17 | apiVersion: apps/v1 18 | kind: Deployment 19 | metadata: 20 | name: server 21 | labels: 22 | app: server 23 | version: v1 24 | spec: 25 | replicas: 1 26 | selector: 27 | matchLabels: 28 | app: server 29 | version: v1 30 | template: 31 | metadata: 32 | labels: 33 | app: server 34 | version: v1 35 | spec: 36 | containers: 37 | - name: server 38 | image: nadera2/grpc-web-server 39 | imagePullPolicy: IfNotPresent 40 | ports: 41 | - containerPort: 8080 42 | securityContext: 43 | runAsUser: 1000 -------------------------------------------------------------------------------- /cka-training/2.pod.md: -------------------------------------------------------------------------------- 1 | # Pod 2 | 3 | 4 | ![pea-pods](pea-pods.jpeg) 5 | 6 | pod 就像一个豌豆荚，里面的豌豆就是 container。 7 | 8 | 最小原子单位。 9 | 10 | ```shell 11 | kubectl run nginx-pod --image=nginx --dry-run=client -output=yaml > nginx-pod.yaml # --dry-run=server 12 | kubectl apply -f nginx-pod.yaml 13 | kubectl get pods 14 | ``` 15 | 16 | ```yaml 17 | apiVersion: v1 # 对象 api 版本 18 | kind: Pod # 对象类型 19 | metadata: # 元数据 20 | labels: # 标签 21 | run: nginx-pod # key: value 22 | name: nginx-pod 23 | spec: 24 | containers: 25 | - image: nginx 26 | name: nginx-pod 27 | resources: {} 28 | dnsPolicy: ClusterFirst 29 | restartPolicy: Always 30 | ``` 31 | 32 | [推荐使用的标签](https://kubernetes.io/zh/docs/concepts/overview/working-with-objects/common-labels/) 33 | 34 | #### 35 | Assigning Pods to Nodes 36 | 37 | ### 污点和容忍度 38 | 39 | Taint And Toleration 40 | 41 | ```shell 42 | kubectl get nodes -o custom-columns=NAME:.metadata.name,TAINTS:.spec.taints 43 | ``` 44 | -------------------------------------------------------------------------------- /cka-training/8.troubleshooting.md: -------------------------------------------------------------------------------- 1 | # 故障排查 2 | 3 | 如何找到真实的故障原因，每个人都有自己的实践总结。而 Kubernetes 集群的复杂性会在排查的过程中造成干扰，会让你忽视真正需要洞悉的信号。在考虑 Kubernetes 中的故障排查时，笔者通常采取分层的方法，依次 check 如下因素： 4 | 5 | * 节点（控制面板和 node） 6 | * 集群原生组件（apiserver、controller-manager、scheduler、kubelet、etcd、容器运行时等） 7 | * 集群附加组件（网络和网络策略 Calico 等、服务发现 coreDNS 等） 8 | * 终端用户应用程序（实际部署的 apps） 9 | 10 | ## 集群排错 11 | 12 | #### 节点 NotReady 13 | 14 | * 检查 kube-system 命名空间下的 Pod 状态：`kubectl get pods -n kube-system -o wide` ； 15 | * 检查是否安装了 Pod 网络附加组件，如 Calico 等； 16 | * 检查节点组件 kubelet 是否正常运行，`systemctl is-active kubelet`； 17 | * `PLEG`: 容器运行时是否工作正常，节点服务器的 Docker 或者 containerd 是否运行正常。 18 | 19 | 参考：https://aws.amazon.com/cn/premiumsupport/knowledge-center/eks-node-status-ready/ 20 | 21 | ## 应用排错 22 | 23 | * OOM（内存不足）事件：1）优化应用程序内部的逻辑，优化内存使用；2）内存用量达到预警值时驱逐 pod，以减少对系统的冲击并防止系统 OOM 的发生； 24 | * `kubectl describe` 可以重点关注对象的 Event 事件信息； 25 | * `kubectl get events` 查看 Event 事件列表； 26 | * `kubectl logs` 查看应用程序的标准输出； 27 | * `kubectl exec` 进入容器内，查看一些必要的信息或执行相关 debug 命令； 28 | * `kubectl port-forward` 将服务转发至本地端口，方便调试； 29 | -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/kubernetes-manifests/calculator.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: calculator 5 | labels: 6 | app: calculator 7 | spec: 8 | selector: 9 | matchLabels: 10 | app: calculator 11 | template: 12 | metadata: 13 | labels: 14 | app: calculator 15 | spec: 16 | containers: 17 | - name: calculator 18 | image: jxlwqq/calculator 19 | imagePullPolicy: IfNotPresent 20 | ports: 21 | - containerPort: 50051 22 | readinessProbe: 23 | exec: 24 | command: [ "/grpc-health-probe", "-addr=:50051" ] 25 | livenessProbe: 26 | exec: 27 | command: [ "/grpc-health-probe", "-addr=:50051" ] 28 | --- 29 | apiVersion: v1 30 | kind: Service 31 | metadata: 32 | name: calculator-svc 33 | labels: 34 | app: calculator 35 | spec: 36 | selector: 37 | app: calculator 38 | ports: 39 | - port: 50051 40 | targetPort: 50051 -------------------------------------------------------------------------------- /deploying-php-guestbook-application-with-redis/redis-leader-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: redis-leader 5 | labels: 6 | app: redis 7 | role: leader 8 | tier: backend 9 | spec: 10 | replicas: 1 11 | selector: 12 | matchLabels: 13 | app: redis 14 | template: 15 | metadata: 16 | labels: 17 | app: redis 18 | role: leader 19 | tier: backend 20 | spec: 21 | containers: 22 | - name: leader 23 | image: "docker.io/redis:6.0.5" 24 | resources: 25 | requests: 26 | cpu: 100m 27 | memory: 100Mi 28 | ports: 29 | - containerPort: 6379 30 | --- 31 | apiVersion: v1 32 | kind: Service 33 | metadata: 34 | name: redis-leader 35 | labels: 36 | app: redis 37 | role: leader 38 | tier: backend 39 | spec: 40 | ports: 41 | - port: 6379 42 | targetPort: 6379 43 | selector: 44 | app: redis 45 | role: leader 46 | tier: backend -------------------------------------------------------------------------------- /deploying-php-guestbook-application-with-redis/redis-follower-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: redis-follower 5 | labels: 6 | app: redis 7 | role: follower 8 | tier: backend 9 | spec: 10 | replicas: 2 11 | selector: 12 | matchLabels: 13 | app: redis 14 | template: 15 | metadata: 16 | labels: 17 | app: redis 18 | role: follower 19 | tier: backend 20 | spec: 21 | containers: 22 | - name: follower 23 | image: gcr.io/google_samples/gb-redis-follower:v2 24 | resources: 25 | requests: 26 | cpu: 100m 27 | memory: 100Mi 28 | ports: 29 | - containerPort: 6379 30 | --- 31 | apiVersion: v1 32 | kind: Service 33 | metadata: 34 | name: redis-follower 35 | labels: 36 | app: redis 37 | role: follower 38 | tier: backend 39 | spec: 40 | ports: 41 | - port: 6379 42 | selector: 43 | app: redis 44 | role: follower 45 | tier: backend -------------------------------------------------------------------------------- /deploying-basic-statefulset-app/nginx-statefulset-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: nginx 5 | labels: 6 | app: nginx 7 | spec: 8 | ports: 9 | - port: 80 10 | name: web 11 | clusterIP: None 12 | selector: 13 | app: nginx 14 | --- 15 | apiVersion: apps/v1 16 | kind: StatefulSet 17 | metadata: 18 | name: web 19 | spec: 20 | serviceName: nginx 21 | replicas: 2 22 | selector: 23 | matchLabels: 24 | app: nginx 25 | template: 26 | metadata: 27 | labels: 28 | app: nginx 29 | spec: 30 | containers: 31 | - name: nginx 32 | image: k8s.gcr.io/nginx-slim:0.8 33 | ports: 34 | - containerPort: 80 35 | name: web 36 | volumeMounts: 37 | - name: www 38 | mountPath: /usr/share/nginx/html 39 | volumeClaimTemplates: 40 | - metadata: 41 | name: www 42 | spec: 43 | accessModes: [ "ReadWriteOnce" ] 44 | resources: 45 | requests: 46 | storage: 1Gi -------------------------------------------------------------------------------- /istio/1.profile/README.md: -------------------------------------------------------------------------------- 1 | # 配置文件 2 | 3 | 在上一节安装环节中，我们在命令行中增加了 `--set profile=demo` 参数： 4 | 5 | ```shell 6 | istioctl install --set profile=demo -y 7 | ``` 8 | 9 | profile 是 istioctl 内置的安装配置文件，有以下几个选择： 10 | 11 | 1. default：根据 IstioOperator API 的默认设置启动组件。 建议用于生产部署和 Multicluster Mesh 中的 Primary Cluster。 12 | 2. demo：这一配置具有适度的资源需求，旨在展示 Istio 的功能。 它适合运行 Bookinfo 应用程序和相关任务。 这是通过快速开始指导安装的配置。 13 | 3. minimal：与默认配置文件相同，但只安装了控制平面组件。 它允许您使用 Separate Profile 配置控制平面和数据平面组件(例如 Gateway)。 14 | 4. remote：配置 Multicluster Mesh 的 Remote Cluster。 15 | 5. empty：不部署任何东西。可以作为自定义配置的基本配置文件。 16 | 6. preview：预览文件包含的功能都是实验性。这是为了探索 Istio 的新功能。不确保稳定性、安全性和性能（使用风险需自负）。 17 | 18 | 本地开发环境一般选择 `demo`，生产部署选择 `default`。 19 | 20 | 21 | 标注 ✔ 的组件安装在每个配置文件中： 22 | 23 | | | default | demo | minimal | remote | empty | preview | 24 | | --- | --- | --- | --- | --- | --- | --- | 25 | | 核心组件 | | | | | | | | 26 | | `istio-egressgateway` | | ✔ | | | | | | | 27 | | `istio-ingressgateway` | ✔ | ✔ | | | | ✔ | 28 | | `istiod` | ✔ | ✔ | ✔ | | | ✔ | 29 | 30 | -------------------------------------------------------------------------------- /deploying-hello-world-web-application-with-go/hello-web-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: hello-web 5 | spec: 6 | selector: 7 | matchLabels: 8 | app.kubernetes.io/name: hello-web 9 | app.kubernetes.io/component: frontend 10 | replicas: 1 11 | template: 12 | metadata: 13 | labels: 14 | app.kubernetes.io/name: hello-web 15 | app.kubernetes.io/component: frontend 16 | spec: 17 | containers: 18 | - name: hello-web 19 | image: gcr.io/google-samples/hello-app:1.0 20 | ports: 21 | - containerPort: 8080 22 | resources: 23 | requests: 24 | cpu: 200m 25 | 26 | --- 27 | 28 | apiVersion: v1 29 | kind: Service 30 | metadata: 31 | name: hello-web-svc 32 | labels: 33 | app.kubernetes.io/name: hello-web 34 | app.kubernetes.io/component: frontend 35 | spec: 36 | selector: 37 | app.kubernetes.io/name: hello-web 38 | app.kubernetes.io/component: frontend 39 | ports: 40 | - port: 80 41 | targetPort: 8080 42 | 43 | 44 | -------------------------------------------------------------------------------- /deploying-nodejs-note-application-with-mongodb/mongo-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | kind: Deployment 2 | apiVersion: apps/v1 3 | metadata: 4 | name: mongo-deployment 5 | spec: 6 | selector: 7 | matchLabels: 8 | app: mongo 9 | template: 10 | metadata: 11 | labels: 12 | app: mongo 13 | spec: 14 | containers: 15 | - name: mongo 16 | image: mongo 17 | ports: 18 | - containerPort: 27017 19 | volumeMounts: 20 | - mountPath: /data/db 21 | name: mongo-storage 22 | volumes: 23 | - name: mongo-storage 24 | persistentVolumeClaim: 25 | claimName: mongo-persistentvolumeclaim 26 | --- 27 | kind: PersistentVolumeClaim 28 | apiVersion: v1 29 | metadata: 30 | name: mongo-persistentvolumeclaim 31 | spec: 32 | accessModes: 33 | - ReadWriteOnce 34 | resources: 35 | requests: 36 | storage: 256Mi 37 | --- 38 | kind: Service 39 | apiVersion: v1 40 | metadata: 41 | name: mongo-service 42 | spec: 43 | selector: 44 | app: mongo 45 | ports: 46 | - port: 27017 47 | targetPort: 27017 -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | MIT License 2 | 3 | Copyright (c) 2021 jxlwqq 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. 22 | -------------------------------------------------------------------------------- /learn-from-source-code/what-happens-in-kubernetes-when-a-request-hits-kube-apiserver.md: -------------------------------------------------------------------------------- 1 | # 当一个请求到达 kube-apiserver 时，Kubernetes 内部发生了什么？ 2 | 3 | 我们通常使用 kubectl 来与我们的 Kubernetes 集群进行交互作业。当 kubectl 构造的一个 REST 请求到达 kube-apiserver 时，它会经历多个阶段。 4 | 5 | 与通用的 API 安全性和可靠性规范一样，请求到达 apiserver 时，也需要经过经典的三个步骤，如下图所示： 6 | 7 | ![access-control-overview](./access-control-overview.svg) 8 | 9 | 1. 认证：验证发起 API 请求的用户的身份； 10 | 11 | 2. 鉴权：鉴别发起 API 请求的用户的权限； 12 | 13 | 3. 准入控制：变更（Mutating）和验证（Validating）传入的请求数据； 14 | 15 | ### 认证 16 | 17 | kube-server 支持多个类型的身份认证方式，包含客户端证书、密码、普通令牌、引导令牌和 JSON Web 令牌等。具体使用哪一种（或者哪几种）认证方式是由集群管理员设置的。 如果请求认证不通过，服务器将以 HTTP 状态码 401 拒绝该请求。 反之，该用户被认证为特定的 username，并且该用户名可用于后续步骤以在其决策中使用。 18 | 19 | ### 鉴权 20 | 21 | 如上图的步骤 2 所示，将请求验证为来自特定的用户后，请求必须被鉴权。 请求必须包含请求者的用户名、请求的行为以及受该操作影响的对象。 如果现有策略声明用户有权完成请求的操作，那么该请求被鉴权通过。反之，服务器将以 HTTP 状态码 403 拒绝该请求。 22 | 23 | ### 准入控制 24 | 25 | 准入控制器是一段代码，它会在请求通过认证和授权之后、对象被持久化之前拦截到达 API 服务器的请求，如上图的步骤 3 所示。 准入控制器可以执行 “验证（Validating）” 和/或 “变更（Mutating）” 操作。 变更（mutating）控制器可以修改被其接受的对象；验证（validating）控制器则不行。 准入控制过程分为两个阶段。第一阶段，运行变更准入控制器。第二阶段，运行验证准入控制器。 再次提醒，某些控制器既是变更准入控制器又是验证准入控制器。 如果任何一个阶段的任何控制器拒绝了该请求，则整个请求将立即被拒绝，并向终端用户返回一个错误。 -------------------------------------------------------------------------------- /istio/6.circuit-breaking/fortio-deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: fortio-deploy 5 | spec: 6 | replicas: 1 7 | selector: 8 | matchLabels: 9 | app: fortio 10 | template: 11 | metadata: 12 | annotations: 13 | # This annotation causes Envoy to serve cluster.outbound statistics via 15000/stats 14 | # in addition to the stats normally served by Istio. The Circuit Breaking example task 15 | # gives an example of inspecting Envoy stats via proxy config. 16 | proxy.istio.io/config: |- 17 | proxyStatsMatcher: 18 | inclusionPrefixes: 19 | - "cluster.outbound" 20 | - "cluster_manager" 21 | - "listener_manager" 22 | - "server" 23 | - "cluster.xds-grpc" 24 | labels: 25 | app: fortio 26 | spec: 27 | containers: 28 | - name: fortio 29 | image: fortio/fortio:latest_release 30 | imagePullPolicy: Always 31 | ports: 32 | - containerPort: 8080 33 | name: http-fortio 34 | - containerPort: 8079 35 | name: grpc-ping 36 | -------------------------------------------------------------------------------- /istio/case-advanced-traffic-routing/customers-virtual-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: VirtualService 3 | metadata: 4 | name: customers 5 | spec: 6 | hosts: 7 | - 'svc.example.com' 8 | - 'customers.default.svc.cluster.local' 9 | gateways: 10 | - sample-gateway 11 | - mesh 12 | http: 13 | - match: 14 | - gateways: 15 | - mesh 16 | headers: 17 | user: 18 | exact: debug 19 | route: 20 | - destination: 21 | host: customers.default.svc.cluster.local 22 | port: 23 | number: 80 24 | subset: v2 25 | - match: 26 | - gateways: 27 | - mesh 28 | route: 29 | - destination: 30 | host: customers.default.svc.cluster.local 31 | port: 32 | number: 80 33 | subset: v1 34 | - match: 35 | - gateways: 36 | - sample-gateway 37 | route: 38 | - destination: 39 | host: customers.default.svc.cluster.local 40 | port: 41 | number: 80 42 | subset: v2 -------------------------------------------------------------------------------- /knative/0.installing/README.md: -------------------------------------------------------------------------------- 1 | # 安装 2 | 3 | 基于 Knative v1.0.0 版本进行安装调试。 4 | 5 | ### 前置条件 6 | 7 | * 安装 Docker Desktop，并启动内置的 Kubernetes 集群 8 | * 安装 istioctl 9 | * 安装 kn 10 | 11 | ``` 12 | brew install istioctl 13 | brew install kn 14 | ``` 15 | 16 | ### 安装 Istio 17 | ```shell 18 | istioctl install -y 19 | ``` 20 | 21 | ### 安装 Knative Operator 22 | ```shell 23 | kubectl apply -f operator.yaml 24 | ``` 25 | 26 | ### 安装 Knative Serving 27 | ```shell 28 | kubectl apply -f serving.yaml 29 | kubectl apply -f serving-default-domain.yaml 30 | ``` 31 | 32 | ### 安装 Knative Eventing 33 | ```shell 34 | kubectl apply -f eventing.yaml 35 | ``` 36 | 37 | ### 安装第一个应用 38 | ```shell 39 | kubectl apply -f http-echo.yaml 40 | ``` 41 | 42 | 查看服务： 43 | 44 | ``` 45 | kn services list 46 | ``` 47 | 48 | 返回： 49 | 50 | ``` 51 | NAME URL LATEST AGE CONDITIONS READY REASON 52 | http-echo http://http-echo.default.127.0.0.1.sslip.io http-echo-v1 21s 3 OK / 3 True 53 | ``` 54 | 55 | 56 | 访问： 57 | 58 | ``` 59 | curl http://http-echo.default.127.0.0.1.sslip.io 60 | ``` 61 | 62 | 返回： 63 | 64 | ``` 65 | v1 66 | ``` 67 | -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/Makefile: -------------------------------------------------------------------------------- 1 | .PHONY: proto 2 | proto: 3 | @ if ! which protoc > /dev/null; then \ 4 | echo "error: protoc not installed" >&2; \ 5 | exit 1; \ 6 | fi 7 | @ if ! which protoc-gen-go > /dev/null; then \ 8 | echo "error: protoc-gen-go not installed" >&2; \ 9 | exit 1; \ 10 | fi 11 | @ if ! which protoc-gen-go-grpc > /dev/null; then \ 12 | echo "error: protoc-gen-go-grpc not installed" >&2; \ 13 | exit 1; \ 14 | fi 15 | for file in $$(git ls-files '*.proto'); do \ 16 | protoc -I $$(dirname $$file) \ 17 | --go_out=:$$(dirname $$file) --go_opt=paths=source_relative \ 18 | --go-grpc_out=:$$(dirname $$file) --go-grpc_opt=paths=source_relative \ 19 | $$file; \ 20 | done 21 | 22 | .PHONY: docker-build 23 | docker-build: 24 | docker build -t jxlwqq/api-server -f cmd/api-server/Dockerfile . 25 | docker build -t jxlwqq/calculator -f cmd/calculator/Dockerfile . 26 | 27 | .PHONY: kube-deploy 28 | kube-deploy: 29 | kubectl apply -k ./kubernetes-manifests 30 | 31 | .PHONY: kube-undeploy 32 | kube-undeploy: 33 | kubectl delete -k ./kubernetes-manifests 34 | 35 | .PHONY: kube-redeploy 36 | kube-redeploy: 37 | make kube-undeploy 38 | make kube-deploy -------------------------------------------------------------------------------- /deploying-kbp-journal-app/frontend/deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: frontend 5 | namespace: default 6 | labels: 7 | app: frontend 8 | spec: 9 | replicas: 2 10 | selector: 11 | matchLabels: 12 | app: frontend 13 | template: 14 | metadata: 15 | labels: 16 | app: frontend 17 | spec: 18 | containers: 19 | - name: frontend 20 | image: brendanburns/journal-server:latest 21 | imagePullPolicy: IfNotPresent 22 | readinessProbe: 23 | httpGet: 24 | port: 8080 25 | path: /api 26 | livenessProbe: 27 | httpGet: 28 | port: 8080 29 | path: /api 30 | env: 31 | - name: JOURNAL_ENTRIES 32 | valueFrom: 33 | configMapKeyRef: 34 | key: journalEntries 35 | name: frontend-config 36 | volumeMounts: 37 | - name: passwd-volume 38 | mountPath: /etc/redis-passwd 39 | readOnly: true 40 | volumes: 41 | - name: passwd-volume 42 | secret: 43 | secretName: redis-passwd -------------------------------------------------------------------------------- /deploying-laravel-application/README.md: -------------------------------------------------------------------------------- 1 | # 轻松部署 Laravel 应用 2 | 3 | 原文链接：[Kubernetes: deploy Laravel the easy way](https://learnk8s.io/blog/kubernetes-deploy-laravel-the-easy-way) 4 | 5 | 译文链接：[使用 Kubernetes 来部署你的 Laravel 程序](https://learnku.com/server/t/22017) 6 | 7 | 注意：原文使用了 minikube 来部署，本文使用的是 Docker for Mac 自带的 Kubernetes 集群。所以做了一些适当的调整。 8 | 9 | #### 拉取镜像 10 | 11 | 基于原文，制作了一个 Docker 镜像 [laravel-kubernetes-demo](https://hub.docker.com/repository/docker/jxlwqq/laravel-kubernetes-demo) 12 | ，方便大家快速拉取镜像： 13 | 14 | ```bash 15 | docker pull jxlwqq/laravel-kubernetes-demo 16 | ``` 17 | 18 | #### 部署 19 | 20 | ```bash 21 | kubectl apply -k ./ 22 | ``` 23 | 24 | 上述命令会应用本目录下的 kustomization.yaml 文件。它的信息如下： 25 | ```yaml 26 | resources: # 需要apply的资源文件 27 | - laravel-deployment-and-service.yaml 28 | - ingress.yaml 29 | 30 | configMapGenerator: # 生成一个 ConfigMap 对象 31 | - name: laravel-env 32 | literals: 33 | - APP_KEY=base64:zC8wVldUZfZJaGaZ7+CPh+5FzaXYmShm7G/Qh6GdRl8= 34 | ``` 35 | 36 | #### 部署 Ingress-nginx 控制器 37 | 38 | ```bash 39 | cd ../ingress-nginx 40 | kubectl apply -k ./ 41 | ``` 42 | 43 | #### 访问 44 | ```bash 45 | curl http://localhost 46 | ``` 47 | 48 | #### 清理 49 | ```bash 50 | kubectl delete -k ./ 51 | ``` 52 | -------------------------------------------------------------------------------- /deploying-php-guestbook-application-with-mongodb/mongodb-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: mongo 5 | labels: 6 | app.kubernetes.io/name: mongo 7 | app.kubernetes.io/component: backend 8 | spec: 9 | selector: 10 | matchLabels: 11 | app.kubernetes.io/name: mongo 12 | app.kubernetes.io/component: backend 13 | replicas: 1 14 | template: 15 | metadata: 16 | labels: 17 | app.kubernetes.io/name: mongo 18 | app.kubernetes.io/component: backend 19 | spec: 20 | containers: 21 | - name: mongo 22 | image: mongo:4.2 23 | args: 24 | - --bind_ip 25 | - 0.0.0.0 26 | resources: 27 | requests: 28 | cpu: 100m 29 | memory: 100Mi 30 | ports: 31 | - containerPort: 27017 32 | --- 33 | apiVersion: v1 34 | kind: Service 35 | metadata: 36 | name: mongo 37 | labels: 38 | app.kubernetes.io/name: mongo 39 | app.kubernetes.io/component: backend 40 | spec: 41 | selector: 42 | app.kubernetes.io/name: mongo 43 | app.kubernetes.io/component: backend 44 | ports: 45 | - port: 27017 46 | targetPort: 27017 47 | 48 | -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/kubernetes-manifests/api-server.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: api-server 5 | labels: 6 | app: api-server 7 | spec: 8 | selector: 9 | matchLabels: 10 | app: api-server 11 | template: 12 | metadata: 13 | labels: 14 | app: api-server 15 | spec: 16 | containers: 17 | - name: api-server 18 | image: jxlwqq/api-server:latest 19 | imagePullPolicy: IfNotPresent 20 | ports: 21 | - containerPort: 8080 22 | envFrom: 23 | - configMapRef: 24 | name: api-server-conf 25 | readinessProbe: 26 | httpGet: 27 | port: 8080 28 | path: /healthz 29 | livenessProbe: 30 | httpGet: 31 | port: 8080 32 | path: /healthz 33 | --- 34 | apiVersion: v1 35 | kind: Service 36 | metadata: 37 | name: api-server-svc 38 | labels: 39 | app: api-server 40 | spec: 41 | selector: 42 | app: api-server 43 | ports: 44 | - port: 8080 45 | targetPort: 8080 46 | --- 47 | apiVersion: v1 48 | kind: ConfigMap 49 | metadata: 50 | name: api-server-conf 51 | data: 52 | CALCULATOR_SVC: calculator-svc 53 | 54 | 55 | 56 | -------------------------------------------------------------------------------- /deploying-php-guestbook-application-with-mongodb/frontend-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: frontend 5 | labels: 6 | app.kubernetes.io/name: guestbook 7 | app.kubernetes.io/component: frontend 8 | spec: 9 | selector: 10 | matchLabels: 11 | app.kubernetes.io/name: guestbook 12 | app.kubernetes.io/component: frontend 13 | replicas: 3 14 | template: 15 | metadata: 16 | labels: 17 | app.kubernetes.io/name: guestbook 18 | app.kubernetes.io/component: frontend 19 | spec: 20 | containers: 21 | - name: guestbook 22 | image: paulczar/gb-frontend:v5 23 | resources: 24 | requests: 25 | cpu: 100m 26 | memory: 100Mi 27 | env: 28 | - name: GET_HOSTS_FROM 29 | value: dns 30 | ports: 31 | - containerPort: 80 32 | --- 33 | apiVersion: v1 34 | kind: Service 35 | metadata: 36 | name: frontend 37 | labels: 38 | app.kubernetes.io/name: guestbook 39 | app.kubernetes.io/component: frontend 40 | spec: 41 | selector: 42 | app.kubernetes.io/name: guestbook 43 | app.kubernetes.io/component: frontend 44 | ports: 45 | - port: 80 46 | targetPort: 80 47 | 48 | 49 | -------------------------------------------------------------------------------- /knative/2.traffic-split/README.md: -------------------------------------------------------------------------------- 1 | # 流量分流 2 | 3 | ### 更新 Hello 服务 4 | ```shell 5 | kubectl apply -f http-echo-update.yaml 6 | ``` 7 | 8 | 访问： 9 | ```shell 10 | curl http://http-echo.default.127.0.0.1.sslip.io 11 | ``` 12 | 13 | 返回： 14 | ```shell 15 | v2 16 | ``` 17 | 18 | ### 查看修订历史 19 | 20 | ```shell 21 | kn revisions list 22 | ``` 23 | 24 | 返回： 25 | 26 | ```shell 27 | NAME SERVICE TRAFFIC TAGS GENERATION AGE CONDITIONS READY REASON 28 | http-echo-v2 http-echo 100% 2 25s 4 OK / 4 True 29 | http-echo-v1 http-echo 1 9m5s 3 OK / 4 True 30 | ``` 31 | 32 | 可以看出，http-echo-v2 版本分流了所有流量。 33 | 34 | ### 分流 35 | 36 | ```shell 37 | kubectl apply -f http-echo-split.yaml 38 | ``` 39 | 40 | 再次查看修订历史： 41 | 42 | ```shell 43 | kn revisions list 44 | ``` 45 | 46 | ```shell 47 | NAME SERVICE TRAFFIC TAGS GENERATION AGE CONDITIONS READY REASON 48 | http-echo-v2 http-echo 50% 2 61s 4 OK / 4 True 49 | http-echo-v1 http-echo 50% 1 9m41s 3 OK / 4 True 50 | ``` 51 | 52 | 现在变更为了各 50%。 53 | 54 | 再次访问： 55 | ```shell 56 | curl http://http-echo.default.127.0.0.1.sslip.io 57 | ``` 58 | 59 | 返回： 60 | 61 | ```shell 62 | v1 63 | ``` 64 | 65 | 或者： 66 | 67 | ```shell 68 | v2 69 | ``` 70 | -------------------------------------------------------------------------------- /istio/case-online-boutique/README.md: -------------------------------------------------------------------------------- 1 | # 在线精品店 2 | 3 | [Online Boutique](https://github.com/GoogleCloudPlatform/microservices-demo) 是一个云原生微服务演示应用程序。Online Boutique 是一个由 10 个微服务组成的应用。该应用是一个基于 Web 的电子商务应用，用户可以浏览商品，将其添加到购物车，并购买商品。 4 | 5 | ### 预先拉取镜像 6 | 7 | ```shell 8 | docker pull gcr.io/google-samples/microservices-demo/emailservice:v0.3.4 9 | docker pull gcr.io/google-samples/microservices-demo/checkoutservice:v0.3.4 10 | docker pull gcr.io/google-samples/microservices-demo/recommendationservice:v0.3.4 11 | docker pull gcr.io/google-samples/microservices-demo/frontend:v0.3.4 12 | docker pull gcr.io/google-samples/microservices-demo/paymentservice:v0.3.4 13 | docker pull gcr.io/google-samples/microservices-demo/productcatalogservice:v0.3.4 14 | docker pull gcr.io/google-samples/microservices-demo/cartservice:v0.3.4 15 | docker pull gcr.io/google-samples/microservices-demo/loadgenerator:v0.3.4 16 | docker pull gcr.io/google-samples/microservices-demo/currencyservice:v0.3.4 17 | docker pull gcr.io/google-samples/microservices-demo/shippingservice:v0.3.4 18 | docker pull gcr.io/google-samples/microservices-demo/adservice:v0.3.4 19 | ``` 20 | 21 | ### 部署服务 22 | 23 | ```shell 24 | git clone git@github.com:GoogleCloudPlatform/microservices-demo.git 25 | cd microservices-demo 26 | kubectl apply -f release/kubernetes-manifests.yaml 27 | kubectl apply -f release/istio-manifests.yaml 28 | ``` -------------------------------------------------------------------------------- /deploying-laravel-7-with-mysql-and-redis/mysql-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | kind: Deployment 2 | apiVersion: apps/v1 3 | metadata: 4 | name: mysql-deployment 5 | labels: 6 | app: mysql 7 | spec: 8 | selector: 9 | matchLabels: 10 | app: mysql 11 | strategy: 12 | type: Recreate 13 | template: 14 | metadata: 15 | labels: 16 | app: mysql 17 | spec: 18 | containers: 19 | - name: mysql 20 | image: mysql:5.7 21 | env: 22 | - name: MYSQL_ALLOW_EMPTY_PASSWORD 23 | value: 'true' 24 | ports: 25 | - containerPort: 3306 26 | volumeMounts: 27 | - mountPath: /var/lib/mysql 28 | name: mysql-storage 29 | volumes: 30 | - name: mysql-storage 31 | persistentVolumeClaim: 32 | claimName: mysql-persistentvolumeclaim 33 | --- 34 | kind: PersistentVolumeClaim 35 | apiVersion: v1 36 | metadata: 37 | name: mysql-persistentvolumeclaim 38 | labels: 39 | app: mysql 40 | spec: 41 | accessModes: 42 | - ReadWriteOnce 43 | resources: 44 | requests: 45 | storage: 1Gi 46 | --- 47 | kind: Service 48 | apiVersion: v1 49 | metadata: 50 | name: mysql-service 51 | labels: 52 | app: mysql 53 | spec: 54 | selector: 55 | app: mysql 56 | ports: 57 | - port: 3306 58 | targetPort: 3306 -------------------------------------------------------------------------------- /deploying-kbp-journal-app/redis/statefulset.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: StatefulSet 3 | metadata: 4 | name: redis 5 | namespace: default 6 | spec: 7 | selector: 8 | matchLabels: 9 | app: redis 10 | serviceName: "redis" 11 | replicas: 3 12 | template: 13 | metadata: 14 | labels: 15 | app: redis 16 | spec: 17 | containers: 18 | - name: redis 19 | image: redis:5-alpine 20 | imagePullPolicy: IfNotPresent 21 | ports: 22 | - containerPort: 6379 23 | name: redis 24 | volumeMounts: 25 | - mountPath: /data 26 | name: data 27 | - mountPath: /script/launch.sh 28 | name: script 29 | subPath: launch.sh 30 | - mountPath: /etc/redis-passwd 31 | name: passwd-volume 32 | command: 33 | - sh 34 | - -c 35 | - /script/launch.sh 36 | volumes: 37 | - name: script 38 | configMap: 39 | name: redis-config 40 | defaultMode: 0777 41 | - name: passwd-volume 42 | secret: 43 | secretName: redis-passwd 44 | volumeClaimTemplates: 45 | - metadata: 46 | name: data 47 | spec: 48 | accessModes: ["ReadWriteOnce"] 49 | resources: 50 | requests: 51 | storage: 1Gi 52 | -------------------------------------------------------------------------------- /deploying-laravel-7-with-mysql-and-redis/laravel-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | kind: Deployment 2 | apiVersion: apps/v1 3 | metadata: 4 | name: laravel-deployment 5 | labels: 6 | app: laravel 7 | spec: 8 | selector: 9 | matchLabels: 10 | app: laravel 11 | replicas: 1 12 | strategy: 13 | type: RollingUpdate 14 | rollingUpdate: 15 | maxSurge: 1 16 | maxUnavailable: 0 17 | template: 18 | metadata: 19 | labels: 20 | app: laravel 21 | spec: 22 | containers: 23 | - name: laravel 24 | image: jxlwqq/laravel-7-kubernetes-demo 25 | ports: 26 | - containerPort: 80 27 | env: 28 | - name: DB_HOST 29 | value : mysql-service 30 | - name: REDIS_HOST 31 | value: redis-service 32 | envFrom: 33 | - configMapRef: 34 | name: laravel-env 35 | readinessProbe: 36 | httpGet: 37 | port: 80 38 | path: / 39 | scheme: HTTP 40 | livenessProbe: 41 | httpGet: 42 | port: 80 43 | path: / 44 | scheme: HTTP 45 | --- 46 | kind: Service 47 | apiVersion: v1 48 | metadata: 49 | name: laravel-service 50 | labels: 51 | app: laravel 52 | spec: 53 | selector: 54 | app: laravel 55 | ports: 56 | - port: 80 57 | targetPort: 80 58 | 59 | -------------------------------------------------------------------------------- /istio/case-grpc-web/istio.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: networking.istio.io/v1alpha3 2 | kind: DestinationRule 3 | metadata: 4 | name: server 5 | spec: 6 | host: server 7 | subsets: 8 | - name: v1 9 | labels: 10 | version: v1 11 | --- 12 | apiVersion: networking.istio.io/v1alpha3 13 | kind: DestinationRule 14 | metadata: 15 | name: client 16 | spec: 17 | host: client 18 | subsets: 19 | - name: v1 20 | labels: 21 | version: v1 22 | --- 23 | apiVersion: networking.istio.io/v1alpha3 24 | kind: Gateway 25 | metadata: 26 | name: gateway 27 | spec: 28 | selector: 29 | istio: ingressgateway 30 | servers: 31 | - port: 32 | number: 80 33 | name: http 34 | protocol: HTTP 35 | hosts: 36 | - "*" 37 | --- 38 | apiVersion: networking.istio.io/v1alpha3 39 | kind: VirtualService 40 | metadata: 41 | name: vs 42 | spec: 43 | hosts: 44 | - "*" 45 | gateways: 46 | - gateway 47 | http: 48 | - match: 49 | - uri: 50 | exact: /ui 51 | - uri: 52 | prefix: /static 53 | - uri: 54 | prefix: /sockjs-node 55 | route: 56 | - destination: 57 | host: client 58 | port: 59 | number: 3000 60 | subset: v1 61 | - route: 62 | - destination: 63 | host: server 64 | port: 65 | number: 8080 66 | subset: v1 -------------------------------------------------------------------------------- /dapr/1.hello-kubernetes/deploy.yaml: -------------------------------------------------------------------------------- 1 | kind: Service 2 | apiVersion: v1 3 | metadata: 4 | name: nodeapp 5 | labels: 6 | app: node 7 | spec: 8 | selector: 9 | app: node 10 | ports: 11 | - protocol: TCP 12 | port: 80 13 | targetPort: 3000 14 | type: LoadBalancer 15 | 16 | --- 17 | apiVersion: apps/v1 18 | kind: Deployment 19 | metadata: 20 | name: nodeapp 21 | labels: 22 | app: node 23 | spec: 24 | replicas: 1 25 | selector: 26 | matchLabels: 27 | app: node 28 | template: 29 | metadata: 30 | labels: 31 | app: node 32 | annotations: 33 | dapr.io/enabled: "true" 34 | dapr.io/app-id: "nodeapp" 35 | dapr.io/app-port: "3000" 36 | spec: 37 | containers: 38 | - name: node 39 | image: dapriosamples/hello-k8s-node:latest 40 | ports: 41 | - containerPort: 3000 42 | imagePullPolicy: Always 43 | --- 44 | apiVersion: apps/v1 45 | kind: Deployment 46 | metadata: 47 | name: pythonapp 48 | labels: 49 | app: python 50 | spec: 51 | replicas: 1 52 | selector: 53 | matchLabels: 54 | app: python 55 | template: 56 | metadata: 57 | labels: 58 | app: python 59 | annotations: 60 | dapr.io/enabled: "true" 61 | dapr.io/app-id: "pythonapp" 62 | spec: 63 | containers: 64 | - name: python 65 | image: dapriosamples/hello-k8s-python:latest -------------------------------------------------------------------------------- /deploying-simple-hello-gin-app/go.mod: -------------------------------------------------------------------------------- 1 | module hello-gin 2 | 3 | go 1.21 4 | 5 | require github.com/gin-gonic/gin v1.9.1 6 | 7 | require ( 8 | github.com/bytedance/sonic v1.10.2 // indirect 9 | github.com/chenzhuoyu/base64x v0.0.0-20230717121745-296ad89f973d // indirect 10 | github.com/chenzhuoyu/iasm v0.9.0 // indirect 11 | github.com/gabriel-vasile/mimetype v1.4.2 // indirect 12 | github.com/gin-contrib/sse v0.1.0 // indirect 13 | github.com/go-playground/locales v0.14.1 // indirect 14 | github.com/go-playground/universal-translator v0.18.1 // indirect 15 | github.com/go-playground/validator/v10 v10.15.5 // indirect 16 | github.com/goccy/go-json v0.10.2 // indirect 17 | github.com/json-iterator/go v1.1.12 // indirect 18 | github.com/klauspost/cpuid/v2 v2.2.5 // indirect 19 | github.com/leodido/go-urn v1.2.4 // indirect 20 | github.com/mattn/go-isatty v0.0.19 // indirect 21 | github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect 22 | github.com/modern-go/reflect2 v1.0.2 // indirect 23 | github.com/pelletier/go-toml/v2 v2.1.0 // indirect 24 | github.com/twitchyliquid64/golang-asm v0.15.1 // indirect 25 | github.com/ugorji/go/codec v1.2.11 // indirect 26 | golang.org/x/arch v0.5.0 // indirect 27 | golang.org/x/crypto v0.21.0 // indirect 28 | golang.org/x/net v0.23.0 // indirect 29 | golang.org/x/sys v0.18.0 // indirect 30 | golang.org/x/text v0.14.0 // indirect 31 | google.golang.org/protobuf v1.33.0 // indirect 32 | gopkg.in/yaml.v3 v3.0.1 // indirect 33 | ) 34 | -------------------------------------------------------------------------------- /metrics-server/README.md: -------------------------------------------------------------------------------- 1 | # 在 Docker Desktop 集群中安装 Metrics Server 2 | 3 | ### 部署 4 | 5 | 部署完 [Metrics Server 组件](https://github.com/kubernetes-sigs/metrics-server)后，需要 patch 下一个参数，才能正常运行： 6 | 7 | ```shell 8 | # 部署组件 9 | kubectl apply -f metrics-server.yaml 10 | # 增加一个 kubelet-insecure-tls 参数 11 | kubectl patch deployments.apps \ 12 | metrics-server \ 13 | --namespace kube-system \ 14 | --type='json' \ 15 | -p='[{"op": "replace", "path": "/spec/template/spec/containers/0/args", "value": [ 16 | "--cert-dir=/tmp", 17 | "--secure-port=4443", 18 | "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", 19 | "--kubelet-use-node-status-port", 20 | "--metric-resolution=15s", 21 | "--kubelet-insecure-tls" 22 | ]}]' 23 | ``` 24 | 25 | ### 试验 26 | 27 | ```shell 28 | # 部署一个 nginx deployment 29 | kubectl apply -f nginx.yaml 30 | # 自动扩缩 31 | kubectl autoscale deployment nginx --min=1 --max=10 --cpu-percent=10 32 | # 暴露服务 33 | kubectl expose deployment nginx --port=80 --type=LoadBalancer 34 | # 查看 35 | kubectl top nodes 36 | kubectl top pods 37 | ``` 38 | 39 | 40 | ```shell 41 | # 获取 LoadBalancer 的 IP 地址 42 | kubectl get services nginx -o jsonpath='{.status.loadBalancer.ingress[0].ip}' 43 | # 增大负载 44 | while true; do wget -q -O- http://localhost; done 45 | # 打开另外一个窗口观察 46 | kubectl get pods --watch 47 | ``` 48 | 49 | 50 | ### 清理 51 | 52 | ```shell 53 | kubectl delete -f metrics-server.yaml 54 | kubectl delete -f nginx.yaml 55 | kubectl delete svc nginx 56 | kubectl delete hpa nginx 57 | ``` -------------------------------------------------------------------------------- /cka-training/0.tips.md: -------------------------------------------------------------------------------- 1 | # 考试 Tips 2 | 3 | #### 科学上网 4 | 5 | 考试允许访问 https://kubernetes.io/ 作为参考，请确保可以访问。 6 | 7 | #### 考试环境 8 | 9 | 理论上，你的电脑唯一可前台运行的只有 Chrome 浏览器。如果你使用的 VPN 软件不能隐藏用户界面，需要提前与监考人员沟通，说明这个软件的用途。 10 | 11 | #### 缩进 12 | 13 | 创建或修改 YAML 文件时，请使用空格来进行缩进。 14 | 15 | #### 复制粘贴 16 | 17 | 左侧题目的关键字可以直接单击复制，能复制就不手打，避免 typo。 18 | 19 | #### vi模式复制粘贴缩进错乱 20 | 21 | 新版的考试环境已经没有缩进问题，如果遇到的话，可以执行以下命令： 22 | 23 | ```shell 24 | echo set paste > .vimrc 25 | ``` 26 | 27 | #### 多集群环境 28 | 29 | 考试题目涉及到多个集群的切换，请操作前确认当前的集群与题目要求的一致。 30 | 31 | `kubectl config use-context ` 务必确保每个题目在对应的集群下操作。 32 | 33 | ```shell 34 | kubectl config current-context # 查看当前上下文 35 | ``` 36 | 37 | #### 书签 38 | 39 | 由于 CKA 考试只允许打开额外一个浏览器窗口，且仅允许访问 https://kubernetes.io/ 作为参考，类似开卷考试，建议考前熟悉 Kubernetes 文档的结构和内容，善用关键字进行文档搜索，节省考试时翻阅文档的时间，重要的内容可以存成浏览器的**书签**。 40 | 41 | #### 自动补全 42 | 43 | kubectl 自动补全 `echo "source <(kubectl completion bash)" >> ~/.bashrc` 44 | 45 | 非常有用的命令： 46 | ``` 47 | kubectl expose 48 | kubectl scale 49 | ``` 50 | 51 | #### 查看更多信息 52 | 53 | 查看 Pod 信息 `kubectl get pods -o wide --show-labels -A` 54 | 55 | #### dry-run 56 | 57 | yaml 定义对象，各种属性记不住，没关系，使用 `--dry-run=client` 58 | 59 | ```shell 60 | kubectl create deployment nginx --image=nginx --dry-run=client -o yaml > nginx-deploy.yaml 61 | kubectl run nginx-pod --image=nginx --dry-run=client -o yaml > nginx-pod.yaml 62 | ``` 63 | 64 | 想要更详细的对象属性，还可以使用`--dry-run=server`。 65 | 66 | 然后在 yaml 文件的基础上，再做调整。最后 apply 。 67 | 68 | ```shell 69 | kubectl apply -f nginx-deploy.yaml 70 | kubectl apply -f nginx-pod.yaml 71 | ``` 72 | 73 | -------------------------------------------------------------------------------- /multi-nodes-cluster/vagrant-centos7-kubeadm/Vagrantfile: -------------------------------------------------------------------------------- 1 | # -*- mode: ruby -*- 2 | # vi: set ft=ruby : 3 | boxes = [ 4 | { 5 | :name => "k8s-1", 6 | :eth1 => "192.168.205.10", 7 | :mem => "2048", 8 | :cpu => "2" 9 | }, 10 | { 11 | :name => "k8s-2", 12 | :eth1 => "192.168.205.11", 13 | :mem => "512", 14 | :cpu => "2" 15 | }, 16 | { 17 | :name => "k8s-3", 18 | :eth1 => "192.168.205.12", 19 | :mem => "512", 20 | :cpu => "2" 21 | } 22 | ] 23 | 24 | Vagrant.configure(2) do |config| 25 | config.vm.box = "centos/7" 26 | boxes.each do |opts| 27 | config.vm.define opts[:name] do |config| 28 | config.vm.hostname = opts[:name] 29 | config.vm.provider "vmware_fusion" do |v| 30 | v.vmx["memsize"] = opts[:mem] 31 | v.vmx["num:qvcpus"] = opts[:cpu] 32 | end 33 | config.vm.provider "virtualbox" do |v| 34 | v.customize ["modifyvm", :id, "--memory", opts[:mem]] 35 | v.customize ["modifyvm", :id, "--cpus", opts[:cpu]] 36 | end 37 | config.vm.network :private_network, ip: opts[:eth1] 38 | end 39 | config.vm.provision "shell", inline: <<-SHELL 40 | sudo yum install -y yum-utils 41 | sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo 42 | sudo yum install -y docker-ce docker-ce-cli containerd.io 43 | sudo systemctl start docker 44 | sudo systemctl enable --now docker 45 | SHELL 46 | end 47 | end -------------------------------------------------------------------------------- /deploying-wordpress-and-mysql-with-persistent-volumes/mysql-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 # for versions before 1.9.0 use apps/v1beta2 2 | kind: Deployment 3 | metadata: 4 | name: mysql-deploy 5 | labels: 6 | app: wordpress 7 | spec: 8 | selector: 9 | matchLabels: 10 | app: wordpress 11 | tier: mysql 12 | strategy: 13 | type: Recreate 14 | template: 15 | metadata: 16 | labels: 17 | app: wordpress 18 | tier: mysql 19 | spec: 20 | containers: 21 | - image: mysql:5.7 22 | name: mysql 23 | env: 24 | - name: MYSQL_ROOT_PASSWORD 25 | valueFrom: 26 | secretKeyRef: 27 | name: mysql-pass 28 | key: password 29 | ports: 30 | - containerPort: 3306 31 | name: mysql 32 | volumeMounts: 33 | - name: mysql-volume 34 | mountPath: /var/lib/mysql 35 | volumes: 36 | - name: mysql-volume 37 | persistentVolumeClaim: 38 | claimName: mysql-pvc 39 | --- 40 | apiVersion: v1 41 | kind: PersistentVolumeClaim 42 | metadata: 43 | name: mysql-pvc 44 | labels: 45 | app: wordpress 46 | spec: 47 | accessModes: 48 | - ReadWriteOnce 49 | resources: 50 | requests: 51 | storage: 1Gi 52 | --- 53 | apiVersion: v1 54 | kind: Service 55 | metadata: 56 | name: mysql-svc 57 | labels: 58 | app: wordpress 59 | spec: 60 | ports: 61 | - port: 3306 62 | selector: 63 | app: wordpress 64 | tier: mysql 65 | -------------------------------------------------------------------------------- /crd/argo-rollouts/resources.yaml: -------------------------------------------------------------------------------- 1 | # rollout 2 | apiVersion: argoproj.io/v1alpha1 3 | kind: Rollout 4 | metadata: 5 | name: http-echo 6 | spec: 7 | replicas: 5 8 | strategy: 9 | canary: 10 | steps: 11 | - setWeight: 20 12 | - pause: {} 13 | - setWeight: 40 14 | - pause: {duration: 10} 15 | - setWeight: 60 16 | - pause: {duration: 10} 17 | - setWeight: 80 18 | - pause: {duration: 10} 19 | maxSurge: 20% 20 | maxUnavailable: 0 21 | revisionHistoryLimit: 10 22 | selector: 23 | matchLabels: 24 | app: http-echo 25 | template: 26 | metadata: 27 | labels: 28 | app: http-echo 29 | spec: 30 | containers: 31 | - name: http-echo 32 | image: jxlwqq/http-echo 33 | args: 34 | - --text=v1 35 | ports: 36 | - name: http 37 | containerPort: 8080 38 | protocol: TCP 39 | --- 40 | # http-echo-svc.yaml 41 | apiVersion: v1 42 | kind: Service 43 | metadata: 44 | labels: 45 | app: http-echo 46 | name: http-echo 47 | spec: 48 | ports: 49 | - port: 8080 50 | protocol: TCP 51 | targetPort: 8080 52 | selector: 53 | app: http-echo 54 | --- 55 | # http-echo-ing.yaml 56 | apiVersion: networking.k8s.io/v1 57 | kind: Ingress 58 | metadata: 59 | name: http-echo 60 | spec: 61 | rules: 62 | - http: 63 | paths: 64 | - path: / 65 | pathType: Prefix 66 | backend: 67 | service: 68 | name: http-echo 69 | port: 70 | number: 8080 71 | ingressClassName: nginx 72 | -------------------------------------------------------------------------------- /deploying-hello-world-web-application-with-go/README.md: -------------------------------------------------------------------------------- 1 | 2 | > [原文](https://cloud.google.com/kubernetes-engine/docs/tutorials/hello-app) 为 Google Kubernetes Engine(GKE) 的部署应用的教程。本文稍作修改，使其可以部署在本地集群中。 3 | 4 | 在本示例中，我们将部署一个名为 hello-app 的示例 Web 应用[源代码](https://github.com/GoogleCloudPlatform/kubernetes-engine-samples/tree/master/hello-app)，这是一个用 Go 编写的 Web 服务器，响应请求并显示 Hello, World! 消息。 5 | 6 | #### 前提条件：部署 nginx ingress 7 | 8 | ```bash 9 | cd ../ingress-nginx # 切换到 ingress-nginx 目录 10 | kubectl apply -f deploy.yaml 11 | ``` 12 | 13 | #### 拉取镜像 14 | 15 | ```bash 16 | docker pull gcr.io/google-samples/hello-app:1.0 17 | docker pull gcr.io/google-samples/hello-app:2.0 18 | ``` 19 | 20 | 执行 `docker image ls` 命令，可见以下两个镜像: 21 | 22 | ``` 23 | gcr.io/google-samples/hello-app 1.0 bc5c421ecd6c 3 years ago 9.86MB 24 | gcr.io/google-samples/hello-app 2.0 c5607c30fb08 3 years ago 9.86MB 25 | ``` 26 | 27 | 28 | #### 创建服务 29 | 30 | 执行以下命令，创建 hello-web 服务 31 | 32 | ```bash 33 | kubectl apply -k . 34 | ``` 35 | 36 | 访问: 37 | 38 | ```bash 39 | curl http://localhost 40 | ``` 41 | 42 | 显示以下内容： 43 | 44 | ``` 45 | Hello, world! 46 | Version: 1.0.0 47 | Hostname: hello-web-6f844b8699-nmlls 48 | ``` 49 | 50 | #### 更新镜像版本 51 | ```bash 52 | kubectl set image deployments/hello-web hello-web=gcr.io/google-samples/hello-app:2.0 53 | ``` 54 | 55 | 访问: 56 | 57 | ```bash 58 | curl http://localhost 59 | ``` 60 | 61 | 显示以下内容： 62 | 63 | ``` 64 | Hello, world! 65 | Version: 2.0.0 66 | Hostname: hello-web-7ffff4ffd4-jz52k 67 | ``` 68 | 69 | #### 清理 70 | 71 | ```bash 72 | kubectl delete -k . 73 | ``` 74 | 75 | -------------------------------------------------------------------------------- /deploying-replicated-mysql-statefulset-app/README.md: -------------------------------------------------------------------------------- 1 | # 运行一个有状态的 MySQL 服务 2 | 3 | 原文：https://kubernetes.io/zh/docs/tasks/run-application/run-replicated-stateful-application/ 4 | 5 | #### 镜像准备 6 | 7 | ```shell 8 | docker pull mysql:5.7 9 | docker pull gcr.io/google-samples/xtrabackup:1.0 10 | ``` 11 | 12 | #### 部署 13 | 14 | ```shell 15 | kubectl apply -f mysql.yaml 16 | kubectl get pods -w 17 | # 缩容 18 | kubectl scale statefulset mysql --replicas=2 19 | # 扩容 20 | kubectl scale statefulset mysql --replicas=3 21 | ``` 22 | 23 | #### 查询操作 24 | 25 | 创建数据库： 26 | 27 | ```shell 28 | # 直连写入 29 | kubectl run mysql-client --image=mysql:5.7 -i --rm --restart=Never --\ 30 | mysql -h mysql-0.mysql < The WORDPRESS_DB_NAME needs to already exist on the given MySQL server; it will not be created by the wordpress container. [source](https://hub.docker.com/_/wordpress) 30 | 31 | 5 版本的 WordPress 将不在自动创建数据库，所以这里我们需要手动登录 mysql 的容器中来 create 数据库。 32 | 33 | ```shell 34 | kubectl exec mysql-deploy-5d585f4476-h7rgr -it -- mysql -uroot -p # mysql-deploy-5d585f4476-h7rgr pod名称替换成你自己的 35 | ``` 36 | 37 | 密码: `!@#123` 38 | 39 | ```mysql 40 | CREATE DATABASE IF NOT EXISTS `wordpressdb`; 41 | ``` 42 | 43 | #### 查看各类资源 44 | 45 | ```shell 46 | kubectl get secret # 查看 secret 47 | kubectl get pod # 查看 pod 48 | kubectl get deploy # 查看 deployment 49 | kubectl get svc # 查看 service 50 | kubectl get ingress # 查看 ingress 51 | kubectl get sc # 查看 storageClass 52 | kubectl get pv # 查看 persistentVolume 53 | kubectl get pvc # 查看 persistentVolumeClaim 54 | ``` 55 | 56 | #### 设置 WordPress 57 | 58 | 浏览器打开 http://localhost:80 ，设置用户名和密码： 59 | 60 | ![wordpress:hello-world](hello-world.png) 61 | 62 | 63 | #### 清理 64 | 65 | ```shell 66 | kubectl delete -k . 67 | ``` 68 | 69 | 70 | 71 | -------------------------------------------------------------------------------- /istio/2.injection/README.md: -------------------------------------------------------------------------------- 1 | # 注入 2 | 3 | ### 自动注入 4 | 5 | ```shell 6 | kubectl label namespace default istio-injection=enabled 7 | ``` 8 | 9 | 使用 Istio 提供的`准入控制器变更 Webhook`，可以将 Sidecar 自动添加到可用的 Kubernetes Pod 中。当你在一个命名空间中设置了 istio-injection=enabled 标签，且 Injection webhook 被启用后，任何新的 Pod 都有将在创建时自动添加 Sidecar。 10 | 11 | 查看**准入控制器变更 Webhook**: 12 | 13 | ```shell 14 | kubectl get mutatingwebhookconfigurations 15 | ``` 16 | 17 | 返回： 18 | ```shell 19 | NAME WEBHOOKS AGE 20 | istio-sidecar-injector 4 23h 21 | ``` 22 | 23 | 什么是**准入控制 Webhook**: 24 | 25 | 准入 Webhook 是一种用于接收准入请求并对其进行处理的 HTTP 回调机制。 可以定义两种类型的准入 webhook，即 **验证性质的准入 Webhook** 和 **变更性质的准入 Webhook**。 变更性质的准入 Webhook 会先被调用。它们可以更改发送到 kube-apiserver 的对象以执行自定义的设置默认值操作。 26 | 27 | 在完成了所有对象修改并且 kube-apiserver 也验证了所传入的对象之后， 验证性质的 Webhook 会被调用，并通过拒绝请求的方式来强制实施自定义的策略。 28 | 29 | 更多信息请参阅： 30 | 31 | * [使用准入控制器](https://kubernetes.io/zh/docs/reference/access-authn-authz/admission-controllers/) 32 | * [动态准入控制](https://kubernetes.io/zh/docs/reference/access-authn-authz/extensible-admission-controllers/) 33 | 34 | ### 手动注入 35 | 36 | ```shell 37 | # 由于 default 命令空间已经被设置为自动注入，所以我们需要新建一个命名空间，试验手动注入 38 | kubectl create namespace tutorial 39 | # 新建一个 nginx Deployment 40 | kubectl create deployment nginx --image=nginx --dry-run=client --output=yaml > nginx.yaml 41 | kubectl apply -f nginx.yaml -n tutorial 42 | # 手动注入 43 | istioctl kube-inject -f nginx.yaml > nginx-injection.yaml 44 | kubectl apply -f nginx-injection.yaml -n tutorial 45 | # 比较差异 46 | diff nginx.yaml nginx-injection.yaml 47 | ``` 48 | 49 | 对比两个文件差异，可以看出一些核心变化： 50 | 51 | * 新增了一个名为 `istio-init` 的初始化容器 52 | * 新增了一个名为 `istio-proxy` 的边车容器 53 | * 原来的 nginx 容器上增加了一些启动参数和环境变量 -------------------------------------------------------------------------------- /crd/argo-rollouts/README.md: -------------------------------------------------------------------------------- 1 | # Argo Rollouts 2 | 3 | Argo Rollouts（https://argoproj.github.io/argo-rollouts/） 是一个 Kubernetes Controller 和一组 CRD，为 Kubernetes 提供高级部署功能，例如蓝绿、金丝雀、金丝雀分析、实验和渐进式交付功能。 4 | 5 | 原生 Kubernetes Deployment 对象支持 RollingUpdate 策略，该策略在更新期间提供一组基本的安全保证（就绪探测）。 然而滚动更新策略面临许多限制： 6 | 7 | 无法控制流量到新版本 8 | 无法查询外部指标来验证更新 9 | 可以停止部署进程，但无法自动中止和回滚更新 10 | 由于这些原因，在大规模的大批量生产环境中，滚动更新通常被认为更新过程的风险太大，因为它无法控制爆炸半径，可能会过于激进地 Rollout，并且不会在失败时提供自动回滚。 11 | 12 | #### 安装 13 | 14 | ```bash 15 | kubectl create namespace argo-rollouts 16 | kubectl apply -n argo-rollouts -f https://github.com/argoproj/argo-rollouts/releases/latest/download/install.yaml 17 | 18 | brew install argoproj/tap/kubectl-argo-rollouts 19 | kubectl argo rollouts version 20 | ``` 21 | 22 | ### yaml 23 | ```yaml 24 | apiVersion: argoproj.io/v1alpha1 25 | kind: Rollout 26 | metadata: 27 | name: http-echo 28 | spec: 29 | replicas: 5 30 | strategy: 31 | canary: 32 | steps: 33 | - setWeight: 20 34 | - pause: {} 35 | - setWeight: 40 36 | - pause: {duration: 10} 37 | - setWeight: 60 38 | - pause: {duration: 10} 39 | - setWeight: 80 40 | - pause: {duration: 10} 41 | maxSurge: 20% 42 | maxUnavailable: 0 43 | revisionHistoryLimit: 10 44 | selector: 45 | matchLabels: 46 | app: http-echo 47 | template: 48 | metadata: 49 | labels: 50 | app: http-echo 51 | spec: 52 | containers: 53 | - name: http-echo 54 | image: jxlwqq/http-echo 55 | args: 56 | - --text=v1 57 | ports: 58 | - name: http 59 | containerPort: 8080 60 | protocol: TCP 61 | ``` 62 | -------------------------------------------------------------------------------- /deploying-simple-hello-spring-app/pom.xml: -------------------------------------------------------------------------------- 1 | 2 | 4 | 4.0.0 5 | 6 | org.springframework.boot 7 | spring-boot-starter-parent 8 | 2.7.5 9 | 10 | 11 | com.example 12 | hello-spring 13 | 0.0.1-SNAPSHOT 14 | hello-spring 15 | hello-spring 16 | 17 | 1.8 18 | 19 | 20 | 21 | org.springframework.boot 22 | spring-boot-starter-actuator 23 | 24 | 25 | org.springframework.boot 26 | spring-boot-starter-web 27 | 28 | 29 | 30 | org.springframework.boot 31 | spring-boot-starter-test 32 | test 33 | 34 | 35 | 36 | 37 | 38 | 39 | org.springframework.boot 40 | spring-boot-maven-plugin 41 | 42 | 43 | 44 | 45 | 46 | -------------------------------------------------------------------------------- /deploying-basic-statefulset-app/README.md: -------------------------------------------------------------------------------- 1 | ```shell 2 | docker pull registry.aliyuncs.com/google_containers/nginx-slim:0.8 3 | docker tag registry.aliyuncs.com/google_containers/nginx-slim:0.8 k8s.gcr.io/nginx-slim:0.8 4 | docker rmi registry.aliyuncs.com/google_containers/nginx-slim:0.8 5 | ``` 6 | 7 | 使用集群默认自带的 StorageClass 8 | 9 | ```shell 10 | kubectl get storageclass 11 | ``` 12 | 13 | ```shell 14 | NAME PROVISIONER RECLAIMPOLICY VOLUMEBINDINGMODE ALLOWVOLUMEEXPANSION AGE 15 | hostpath (default) docker.io/hostpath Delete Immediate false 14d 16 | ``` 17 | 18 | ```shell 19 | kubectl apply -f nginx-statefulset-and-service.yaml 20 | ``` 21 | 22 | ```yaml 23 | apiVersion: v1 24 | kind: Service 25 | metadata: 26 | name: nginx # 无头服务 name 27 | labels: 28 | app: nginx 29 | spec: 30 | ports: 31 | - port: 80 32 | name: web 33 | clusterIP: None # 无头服务（Headless Services），负责 Pod 稳定的、唯一的网络标识 34 | selector: 35 | app: nginx 36 | --- 37 | apiVersion: apps/v1 38 | kind: StatefulSet 39 | metadata: 40 | name: web 41 | spec: 42 | serviceName: nginx # 无头服务 name 43 | replicas: 2 44 | selector: 45 | matchLabels: 46 | app: nginx 47 | template: 48 | metadata: 49 | labels: 50 | app: nginx 51 | spec: 52 | containers: 53 | - name: nginx 54 | image: k8s.gcr.io/nginx-slim:0.8 55 | ports: 56 | - containerPort: 80 57 | name: web 58 | volumeMounts: 59 | - name: www 60 | mountPath: /usr/share/nginx/html 61 | volumeClaimTemplates: # 没有指定 StorageName，则使用集群默认的存储类 62 | - metadata: 63 | name: www 64 | spec: 65 | accessModes: [ "ReadWriteOnce" ] 66 | resources: 67 | requests: 68 | storage: 1Gi 69 | ``` -------------------------------------------------------------------------------- /deploying-simple-php-app-with-fpm-and-nginx/php-fpm-nginx-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | kind: Deployment 2 | apiVersion: apps/v1 3 | metadata: 4 | name: php-fpm-nginx 5 | spec: 6 | selector: 7 | matchLabels: 8 | app: php-fpm-nginx 9 | replicas: 1 10 | template: 11 | metadata: 12 | labels: 13 | app: php-fpm-nginx 14 | spec: 15 | containers: 16 | - name: php-fpm 17 | image: jxlwqq/php-info 18 | imagePullPolicy: IfNotPresent 19 | ports: 20 | - containerPort: 9000 21 | volumeMounts: 22 | - mountPath: /var/www/html 23 | name: nginx-www 24 | lifecycle: 25 | postStart: 26 | exec: 27 | command: ["/bin/sh", "-c", "cp -r /app/. /var/www/html"] 28 | preStop: 29 | exec: 30 | command: 31 | - sh 32 | - '-c' 33 | - sleep 5 && kill -SIGQUIT 1 34 | - name: nginx 35 | image: nginx 36 | ports: 37 | - containerPort: 80 38 | volumeMounts: 39 | - mountPath: /var/www/html 40 | name: nginx-www 41 | - mountPath: /etc/nginx/nginx.conf 42 | subPath: nginx.conf 43 | name: nginx-config 44 | lifecycle: 45 | preStop: 46 | exec: 47 | command: 48 | - sh 49 | - '-c' 50 | - sleep 5 && /usr/sbin/nginx -s quit 51 | volumes: 52 | - name: nginx-www 53 | emptyDir: {} 54 | - name: nginx-config 55 | configMap: 56 | name: nginx-config 57 | --- 58 | kind: Service 59 | apiVersion: v1 60 | metadata: 61 | name: php-fpm-nginx-svc 62 | spec: 63 | selector: 64 | app: php-fpm-nginx 65 | ports: 66 | - port: 80 67 | targetPort: 80 -------------------------------------------------------------------------------- /deploying-wordpress-and-mysql-with-persistent-volumes/wordpress-deployment-and-service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: wordpress-deploy 5 | labels: 6 | app: wordpress 7 | spec: 8 | selector: 9 | matchLabels: 10 | app: wordpress 11 | tier: frontend 12 | strategy: 13 | type: RollingUpdate 14 | rollingUpdate: 15 | maxUnavailable: 0 16 | maxSurge: 1 17 | replicas: 1 18 | template: 19 | metadata: 20 | labels: 21 | app: wordpress 22 | tier: frontend 23 | spec: 24 | containers: 25 | - image: wordpress:5-php8.0-apache 26 | name: wordpress 27 | env: 28 | - name: WORDPRESS_DB_HOST 29 | value: mysql-svc # 这里需要注意填写 mysql-service 中 metadata name 的值（使用一致的 DNS 名称而非 IP 地址来访问服务） 30 | - name: WORDPRESS_DB_NAME 31 | value: wordpressdb # 这个需要手动创建数据库 32 | - name: WORDPRESS_DB_USER 33 | value: root 34 | - name: WORDPRESS_DB_PASSWORD 35 | valueFrom: 36 | secretKeyRef: 37 | name: mysql-pass 38 | key: password 39 | ports: 40 | - containerPort: 80 41 | name: wordpress 42 | volumeMounts: 43 | - name: wordpress-volume 44 | mountPath: /var/www/html 45 | volumes: 46 | - name: wordpress-volume 47 | persistentVolumeClaim: 48 | claimName: wordpress-pvc 49 | --- 50 | apiVersion: v1 51 | kind: PersistentVolumeClaim 52 | metadata: 53 | name: wordpress-pvc 54 | labels: 55 | app: wordpress 56 | spec: 57 | accessModes: 58 | - ReadWriteOnce 59 | resources: 60 | requests: 61 | storage: 1Gi 62 | --- 63 | apiVersion: v1 64 | kind: Service 65 | metadata: 66 | name: wordpress-svc 67 | labels: 68 | app: wordpress 69 | spec: 70 | ports: 71 | - port: 80 72 | selector: 73 | app: wordpress 74 | tier: frontend -------------------------------------------------------------------------------- /deploying-simple-apple-and-banana-ingress/README.md: -------------------------------------------------------------------------------- 1 | # Kubernetes Ingress with Nginx 示例 2 | 3 | #### 实验前提 4 | 5 | * 需要你有 macOS 开发环境，本文以此为例，其他类型的开发环境请自行搭建。 6 | * 需要你对 YAML 这一专门用来写配置文件的语言有所了解。 7 | * 需要你对 Docker 有一些基本的了解。 8 | * 需要你对 Kubernetes 中的 Node、Pod、ReplicaSet、Deployment、Service、Ingress、ConfigMap 等一些核心基础概念有一定的了解。 9 | 10 | #### 安装 Docker for Mac 11 | 12 | 下载地址：https://hub.docker.com/editions/community/docker-ce-desktop-mac 13 | 14 | 启动并开启 Kubernetes 功能，功能开启过程中，Docker将会自动拉取相关镜像，所以全程需要科学上网。 15 | 16 | #### 镜像准备 17 | 18 | 在等待 Kubernetes 的状态变成 running 的同时，我们可以手动拉取以下两个镜像，避免后续操作等待时间过长。 19 | 20 | ```bash 21 | docker pull k8s.gcr.io/ingress-nginx/controller:v1.1.0 22 | docker pull jxlwqq/http-echo 23 | ``` 24 | 25 | #### 本地端口准备 26 | 27 | 请确保本地localhost的80端口没有被占用，已在使用的请在实验期间暂时关闭占用80端口的服务。 28 | 29 | #### 切换集群 30 | 31 | 如果你本地有多个 Kubernetes 的集群配置，请先切换至名为 docker-desktop 的集群： 32 | 33 | ````bash 34 | kubectl config use-context docker-desktop 35 | ```` 36 | 37 | #### 创建 Ingress 控制器 38 | 39 | 这里我们选择 ingress-nginx 40 | 41 | ```bash 42 | kubectl apply -f ../ingress-nginx/deploy.yaml 43 | ``` 44 | 45 | 注：deploy.yaml 文件来源自：https://github.com/kubernetes/ingress-nginx/blob/main/deploy/static/provider/cloud/deploy.yaml 46 | 47 | 详细操作说明见：https://github.com/kubernetes/ingress-nginx/blob/main/docs/deploy/index.md 48 | 49 | 50 | #### 创建 Apple 资源（kind: Deployment 与 kind: Service） 51 | 52 | ```bash 53 | kubectl apply -f apple-deployment-and-service.yaml 54 | ``` 55 | 56 | #### 创建 Banana 资源（kind: Deployment 与 kind: Service） 57 | 58 | ```bash 59 | kubectl apply -f banana-deployment-and-service.yaml 60 | ``` 61 | 62 | #### 创建 Ingress 资源（kind: Ingress） 63 | 64 | 创建 Ingress 路由规则： 65 | 66 | ```bash 67 | kubectl apply -f ingress.yaml 68 | ``` 69 | 70 | #### 查看资源状态 71 | ```bash 72 | kubectl get all --all-namespaces 73 | ``` 74 | 75 | #### 访问 76 | 77 | ```bash 78 | curl http://localhost/apple # return apple 79 | curl http://localhost/banana # return banana 80 | curl http://localhost/pear # return 404 81 | ``` 82 | 83 | 结束，撒花。 84 | -------------------------------------------------------------------------------- /multi-nodes-cluster/vagrant-ubuntu18.04-kubeadm/Vagrantfile: -------------------------------------------------------------------------------- 1 | # -*- mode: ruby -*- 2 | # vi: set ft=ruby : 3 | boxes = [ 4 | { 5 | :name => "k8s-1", 6 | :eth1 => "192.168.205.10", 7 | :mem => "2048", 8 | :cpu => "2" 9 | }, 10 | { 11 | :name => "k8s-2", 12 | :eth1 => "192.168.205.11", 13 | :mem => "1024", 14 | :cpu => "2" 15 | }, 16 | { 17 | :name => "k8s-3", 18 | :eth1 => "192.168.205.12", 19 | :mem => "1024", 20 | :cpu => "2" 21 | }, 22 | { 23 | :name => "nfs", 24 | :eth1 => "192.168.205.20", 25 | :mem => "512", 26 | :cpu => "2" 27 | } 28 | ] 29 | 30 | Vagrant.configure(2) do |config| 31 | config.vm.box = "ubuntu/bionic64" 32 | boxes.each do |opts| 33 | config.vm.define opts[:name] do |config| 34 | config.vm.hostname = opts[:name] 35 | config.vm.provider "vmware_fusion" do |v| 36 | v.vmx["memsize"] = opts[:mem] 37 | v.vmx["num:qvcpus"] = opts[:cpu] 38 | end 39 | config.vm.provider "virtualbox" do |v| 40 | v.customize ["modifyvm", :id, "--memory", opts[:mem]] 41 | v.customize ["modifyvm", :id, "--cpus", opts[:cpu]] 42 | end 43 | config.vm.network :private_network, ip: opts[:eth1] 44 | end 45 | config.vm.provision "shell", inline: <<-SHELL 46 | apt-get update 47 | sudo apt-get install -y apt-transport-https ca-certificates curl gnupg lsb-release 48 | curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg 49 | echo "deb [arch=amd64 signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null 50 | sudo apt-get update 51 | sudo apt-get install -y docker-ce docker-ce-cli containerd.io 52 | sudo systemctl enable --now docker 53 | SHELL 54 | end 55 | end -------------------------------------------------------------------------------- /knative/1.autoscale/README.md: -------------------------------------------------------------------------------- 1 | # 自动扩缩 2 | 3 | 访问： 4 | 5 | ```shell 6 | curl http://http-echo.default.127.0.0.1.sslip.io 7 | ``` 8 | 9 | 另开一个窗口，观察 Pod： 10 | ```shell 11 | kubectl get pod -l serving.knative.dev/service=http-echo --watch 12 | ``` 13 | 14 | watch 返回： 15 | 16 | > 扩缩至零，过程可能需要1-2分钟时间。 17 | 18 | ```shell 19 | NAME READY STATUS RESTARTS AGE 20 | http-echo-v1-deployment-948b9746b-275j2 2/2 Running 0 110s 21 | http-echo-v1-deployment-948b9746b-275j2 2/2 Terminating 0 118s 22 | http-echo-v1-deployment-948b9746b-275j2 1/2 Terminating 0 2m1s 23 | http-echo-v1-deployment-948b9746b-275j2 0/2 Terminating 0 2m29s 24 | http-echo-v1-deployment-948b9746b-275j2 0/2 Terminating 0 2m30s 25 | http-echo-v1-deployment-948b9746b-275j2 0/2 Terminating 0 2m30s 26 | ``` 27 | 28 | 再次访问： 29 | 30 | ```shell 31 | curl http://http-echo.default.127.0.0.1.sslip.io 32 | ``` 33 | 34 | watch 返回： 35 | 36 | > 迅速启动。 37 | 38 | ```shell 39 | NAME READY STATUS RESTARTS AGE 40 | http-echo-v1-deployment-948b9746b-275j2 2/2 Running 0 110s 41 | http-echo-v1-deployment-948b9746b-275j2 2/2 Terminating 0 118s 42 | http-echo-v1-deployment-948b9746b-275j2 1/2 Terminating 0 2m1s 43 | http-echo-v1-deployment-948b9746b-275j2 0/2 Terminating 0 2m29s 44 | http-echo-v1-deployment-948b9746b-275j2 0/2 Terminating 0 2m30s 45 | http-echo-v1-deployment-948b9746b-275j2 0/2 Terminating 0 2m30s 46 | http-echo-v1-deployment-948b9746b-5vwgt 0/2 Pending 0 0s 47 | http-echo-v1-deployment-948b9746b-5vwgt 0/2 Pending 0 0s 48 | http-echo-v1-deployment-948b9746b-5vwgt 0/2 ContainerCreating 0 0s 49 | http-echo-v1-deployment-948b9746b-5vwgt 1/2 Running 0 2s 50 | http-echo-v1-deployment-948b9746b-5vwgt 2/2 Running 0 2s 51 | ``` -------------------------------------------------------------------------------- /dapr/1.hello-kubernetes/node/app.js: -------------------------------------------------------------------------------- 1 | // ------------------------------------------------------------ 2 | // Copyright (c) Microsoft Corporation. 3 | // Licensed under the MIT License. 4 | // ------------------------------------------------------------ 5 | 6 | const express = require('express'); 7 | const bodyParser = require('body-parser'); 8 | require('isomorphic-fetch'); 9 | 10 | const app = express(); 11 | app.use(bodyParser.json()); 12 | 13 | // These ports are injected automatically into the container. 14 | const daprPort = process.env.DAPR_HTTP_PORT; 15 | const daprGRPCPort = process.env.DAPR_GRPC_PORT; 16 | 17 | const stateStoreName = `statestore`; 18 | const stateUrl = `http://localhost:${daprPort}/v1.0/state/${stateStoreName}`; 19 | const port = 3000; 20 | 21 | app.get('/order', (_req, res) => { 22 | fetch(`${stateUrl}/order`) 23 | .then((response) => { 24 | if (!response.ok) { 25 | throw "Could not get state."; 26 | } 27 | 28 | return response.text(); 29 | }).then((orders) => { 30 | res.send(orders); 31 | }).catch((error) => { 32 | console.log(error); 33 | res.status(500).send({message: error}); 34 | }); 35 | }); 36 | 37 | app.post('/neworder', (req, res) => { 38 | const data = req.body.data; 39 | const orderId = data.orderId; 40 | console.log("Got a new order! Order ID: " + orderId); 41 | 42 | const state = [{ 43 | key: "order", 44 | value: data 45 | }]; 46 | 47 | fetch(stateUrl, { 48 | method: "POST", 49 | body: JSON.stringify(state), 50 | headers: { 51 | "Content-Type": "application/json" 52 | } 53 | }).then((response) => { 54 | if (!response.ok) { 55 | throw "Failed to persist state."; 56 | } 57 | 58 | console.log("Successfully persisted state."); 59 | res.status(200).send(); 60 | }).catch((error) => { 61 | console.log(error); 62 | res.status(500).send({message: error}); 63 | }); 64 | }); 65 | 66 | app.get('/ports', (_req, res) => { 67 | console.log("DAPR_HTTP_PORT: " + daprPort); 68 | console.log("DAPR_GRPC_PORT: " + daprGRPCPort); 69 | res.status(200).send({DAPR_HTTP_PORT: daprPort, DAPR_GRPC_PORT: daprGRPCPort }) 70 | }); 71 | 72 | app.listen(port, () => console.log(`Node App listening on port ${port}!`)); -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/go.mod: -------------------------------------------------------------------------------- 1 | module github.com/jxlwqq/route-guide 2 | 3 | go 1.21 4 | 5 | require ( 6 | github.com/gin-gonic/gin v1.9.1 7 | github.com/spf13/viper v1.17.0 8 | google.golang.org/grpc v1.58.3 9 | google.golang.org/protobuf v1.33.0 10 | ) 11 | 12 | require ( 13 | github.com/bytedance/sonic v1.10.2 // indirect 14 | github.com/chenzhuoyu/base64x v0.0.0-20230717121745-296ad89f973d // indirect 15 | github.com/chenzhuoyu/iasm v0.9.0 // indirect 16 | github.com/fsnotify/fsnotify v1.6.0 // indirect 17 | github.com/gabriel-vasile/mimetype v1.4.2 // indirect 18 | github.com/gin-contrib/sse v0.1.0 // indirect 19 | github.com/go-playground/locales v0.14.1 // indirect 20 | github.com/go-playground/universal-translator v0.18.1 // indirect 21 | github.com/go-playground/validator/v10 v10.15.5 // indirect 22 | github.com/goccy/go-json v0.10.2 // indirect 23 | github.com/golang/protobuf v1.5.3 // indirect 24 | github.com/hashicorp/hcl v1.0.0 // indirect 25 | github.com/json-iterator/go v1.1.12 // indirect 26 | github.com/klauspost/cpuid/v2 v2.2.5 // indirect 27 | github.com/leodido/go-urn v1.2.4 // indirect 28 | github.com/magiconair/properties v1.8.7 // indirect 29 | github.com/mattn/go-isatty v0.0.19 // indirect 30 | github.com/mitchellh/mapstructure v1.5.0 // indirect 31 | github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect 32 | github.com/modern-go/reflect2 v1.0.2 // indirect 33 | github.com/pelletier/go-toml/v2 v2.1.0 // indirect 34 | github.com/sagikazarmark/locafero v0.3.0 // indirect 35 | github.com/sagikazarmark/slog-shim v0.1.0 // indirect 36 | github.com/sourcegraph/conc v0.3.0 // indirect 37 | github.com/spf13/afero v1.10.0 // indirect 38 | github.com/spf13/cast v1.5.1 // indirect 39 | github.com/spf13/pflag v1.0.5 // indirect 40 | github.com/subosito/gotenv v1.6.0 // indirect 41 | github.com/twitchyliquid64/golang-asm v0.15.1 // indirect 42 | github.com/ugorji/go/codec v1.2.11 // indirect 43 | go.uber.org/multierr v1.11.0 // indirect 44 | golang.org/x/arch v0.5.0 // indirect 45 | golang.org/x/crypto v0.31.0 // indirect 46 | golang.org/x/exp v0.0.0-20231006140011-7918f672742d // indirect 47 | golang.org/x/net v0.23.0 // indirect 48 | golang.org/x/sys v0.28.0 // indirect 49 | golang.org/x/text v0.21.0 // indirect 50 | google.golang.org/genproto/googleapis/rpc v0.0.0-20231002182017-d307bd883b97 // indirect 51 | gopkg.in/ini.v1 v1.67.0 // indirect 52 | gopkg.in/yaml.v3 v3.0.1 // indirect 53 | ) 54 | -------------------------------------------------------------------------------- /dapr/1.hello-kubernetes/node/.gitignore: -------------------------------------------------------------------------------- 1 | ### Node template 2 | # Logs 3 | logs 4 | *.log 5 | npm-debug.log* 6 | yarn-debug.log* 7 | yarn-error.log* 8 | lerna-debug.log* 9 | 10 | # Diagnostic reports (https://nodejs.org/api/report.html) 11 | report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json 12 | 13 | # Runtime data 14 | pids 15 | *.pid 16 | *.seed 17 | *.pid.lock 18 | 19 | # Directory for instrumented libs generated by jscoverage/JSCover 20 | lib-cov 21 | 22 | # Coverage directory used by tools like istanbul 23 | coverage 24 | *.lcov 25 | 26 | # nyc test coverage 27 | .nyc_output 28 | 29 | # Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files) 30 | .grunt 31 | 32 | # Bower dependency directory (https://bower.io/) 33 | bower_components 34 | 35 | # node-waf configuration 36 | .lock-wscript 37 | 38 | # Compiled binary addons (https://nodejs.org/api/addons.html) 39 | build/Release 40 | 41 | # Dependency directories 42 | node_modules/ 43 | jspm_packages/ 44 | 45 | # Snowpack dependency directory (https://snowpack.dev/) 46 | web_modules/ 47 | 48 | # TypeScript cache 49 | *.tsbuildinfo 50 | 51 | # Optional npm cache directory 52 | .npm 53 | 54 | # Optional eslint cache 55 | .eslintcache 56 | 57 | # Microbundle cache 58 | .rpt2_cache/ 59 | .rts2_cache_cjs/ 60 | .rts2_cache_es/ 61 | .rts2_cache_umd/ 62 | 63 | # Optional REPL history 64 | .node_repl_history 65 | 66 | # Output of 'npm pack' 67 | *.tgz 68 | 69 | # Yarn Integrity file 70 | .yarn-integrity 71 | 72 | # dotenv environment variables file 73 | .env 74 | .env.test 75 | 76 | # parcel-bundler cache (https://parceljs.org/) 77 | .cache 78 | .parcel-cache 79 | 80 | # Next.js build output 81 | .next 82 | out 83 | 84 | # Nuxt.js build / generate output 85 | .nuxt 86 | dist 87 | 88 | # Gatsby files 89 | .cache/ 90 | # Comment in the public line in if your project uses Gatsby and not Next.js 91 | # https://nextjs.org/blog/next-9-1#public-directory-support 92 | # public 93 | 94 | # vuepress build output 95 | .vuepress/dist 96 | 97 | # Serverless directories 98 | .serverless/ 99 | 100 | # FuseBox cache 101 | .fusebox/ 102 | 103 | # DynamoDB Local files 104 | .dynamodb/ 105 | 106 | # TernJS port file 107 | .tern-port 108 | 109 | # Stores VSCode versions used for testing VSCode extensions 110 | .vscode-test 111 | 112 | # yarn v2 113 | .yarn/cache 114 | .yarn/unplugged 115 | .yarn/build-state.yml 116 | .yarn/install-state.gz 117 | .pnp.* 118 | 119 | -------------------------------------------------------------------------------- /deploying-simple-hello-express-app/.gitignore: -------------------------------------------------------------------------------- 1 | ### Node template 2 | # Logs 3 | logs 4 | *.log 5 | npm-debug.log* 6 | yarn-debug.log* 7 | yarn-error.log* 8 | lerna-debug.log* 9 | 10 | # Diagnostic reports (https://nodejs.org/api/report.html) 11 | report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json 12 | 13 | # Runtime data 14 | pids 15 | *.pid 16 | *.seed 17 | *.pid.lock 18 | 19 | # Directory for instrumented libs generated by jscoverage/JSCover 20 | lib-cov 21 | 22 | # Coverage directory used by tools like istanbul 23 | coverage 24 | *.lcov 25 | 26 | # nyc test coverage 27 | .nyc_output 28 | 29 | # Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files) 30 | .grunt 31 | 32 | # Bower dependency directory (https://bower.io/) 33 | bower_components 34 | 35 | # node-waf configuration 36 | .lock-wscript 37 | 38 | # Compiled binary addons (https://nodejs.org/api/addons.html) 39 | build/Release 40 | 41 | # Dependency directories 42 | node_modules/ 43 | jspm_packages/ 44 | 45 | # Snowpack dependency directory (https://snowpack.dev/) 46 | web_modules/ 47 | 48 | # TypeScript cache 49 | *.tsbuildinfo 50 | 51 | # Optional npm cache directory 52 | .npm 53 | 54 | # Optional eslint cache 55 | .eslintcache 56 | 57 | # Microbundle cache 58 | .rpt2_cache/ 59 | .rts2_cache_cjs/ 60 | .rts2_cache_es/ 61 | .rts2_cache_umd/ 62 | 63 | # Optional REPL history 64 | .node_repl_history 65 | 66 | # Output of 'npm pack' 67 | *.tgz 68 | 69 | # Yarn Integrity file 70 | .yarn-integrity 71 | 72 | # dotenv environment variables file 73 | .env 74 | .env.test 75 | 76 | # parcel-bundler cache (https://parceljs.org/) 77 | .cache 78 | .parcel-cache 79 | 80 | # Next.js build output 81 | .next 82 | out 83 | 84 | # Nuxt.js build / generate output 85 | .nuxt 86 | dist 87 | 88 | # Gatsby files 89 | .cache/ 90 | # Comment in the public line in if your project uses Gatsby and not Next.js 91 | # https://nextjs.org/blog/next-9-1#public-directory-support 92 | # public 93 | 94 | # vuepress build output 95 | .vuepress/dist 96 | 97 | # Serverless directories 98 | .serverless/ 99 | 100 | # FuseBox cache 101 | .fusebox/ 102 | 103 | # DynamoDB Local files 104 | .dynamodb/ 105 | 106 | # TernJS port file 107 | .tern-port 108 | 109 | # Stores VSCode versions used for testing VSCode extensions 110 | .vscode-test 111 | 112 | # yarn v2 113 | .yarn/cache 114 | .yarn/unplugged 115 | .yarn/build-state.yml 116 | .yarn/install-state.gz 117 | .pnp.* 118 | 119 | -------------------------------------------------------------------------------- /deploying-simple-hello-express-app/.dockerignore: -------------------------------------------------------------------------------- 1 | ### Node template 2 | # Logs 3 | logs 4 | *.log 5 | npm-debug.log* 6 | yarn-debug.log* 7 | yarn-error.log* 8 | lerna-debug.log* 9 | 10 | # Diagnostic reports (https://nodejs.org/api/report.html) 11 | report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json 12 | 13 | # Runtime data 14 | pids 15 | *.pid 16 | *.seed 17 | *.pid.lock 18 | 19 | # Directory for instrumented libs generated by jscoverage/JSCover 20 | lib-cov 21 | 22 | # Coverage directory used by tools like istanbul 23 | coverage 24 | *.lcov 25 | 26 | # nyc test coverage 27 | .nyc_output 28 | 29 | # Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files) 30 | .grunt 31 | 32 | # Bower dependency directory (https://bower.io/) 33 | bower_components 34 | 35 | # node-waf configuration 36 | .lock-wscript 37 | 38 | # Compiled binary addons (https://nodejs.org/api/addons.html) 39 | build/Release 40 | 41 | # Dependency directories 42 | node_modules/ 43 | jspm_packages/ 44 | 45 | # Snowpack dependency directory (https://snowpack.dev/) 46 | web_modules/ 47 | 48 | # TypeScript cache 49 | *.tsbuildinfo 50 | 51 | # Optional npm cache directory 52 | .npm 53 | 54 | # Optional eslint cache 55 | .eslintcache 56 | 57 | # Microbundle cache 58 | .rpt2_cache/ 59 | .rts2_cache_cjs/ 60 | .rts2_cache_es/ 61 | .rts2_cache_umd/ 62 | 63 | # Optional REPL history 64 | .node_repl_history 65 | 66 | # Output of 'npm pack' 67 | *.tgz 68 | 69 | # Yarn Integrity file 70 | .yarn-integrity 71 | 72 | # dotenv environment variables file 73 | .env 74 | .env.test 75 | 76 | # parcel-bundler cache (https://parceljs.org/) 77 | .cache 78 | .parcel-cache 79 | 80 | # Next.js build output 81 | .next 82 | out 83 | 84 | # Nuxt.js build / generate output 85 | .nuxt 86 | dist 87 | 88 | # Gatsby files 89 | .cache/ 90 | # Comment in the public line in if your project uses Gatsby and not Next.js 91 | # https://nextjs.org/blog/next-9-1#public-directory-support 92 | # public 93 | 94 | # vuepress build output 95 | .vuepress/dist 96 | 97 | # Serverless directories 98 | .serverless/ 99 | 100 | # FuseBox cache 101 | .fusebox/ 102 | 103 | # DynamoDB Local files 104 | .dynamodb/ 105 | 106 | # TernJS port file 107 | .tern-port 108 | 109 | # Stores VSCode versions used for testing VSCode extensions 110 | .vscode-test 111 | 112 | # yarn v2 113 | .yarn/cache 114 | .yarn/unplugged 115 | .yarn/build-state.yml 116 | .yarn/install-state.gz 117 | .pnp.* 118 | 119 | -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/api/protobuf/health/health.proto: -------------------------------------------------------------------------------- 1 | // Copyright 2015 The gRPC Authors 2 | // 3 | // Licensed under the Apache License, Version 2.0 (the "License"); 4 | // you may not use this file except in compliance with the License. 5 | // You may obtain a copy of the License at 6 | // 7 | // http://www.apache.org/licenses/LICENSE-2.0 8 | // 9 | // Unless required by applicable law or agreed to in writing, software 10 | // distributed under the License is distributed on an "AS IS" BASIS, 11 | // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 | // See the License for the specific language governing permissions and 13 | // limitations under the License. 14 | 15 | // The canonical version of this proto can be found at 16 | // https://github.com/grpc/grpc-proto/blob/master/grpc/health/v1/health.proto 17 | 18 | syntax = "proto3"; 19 | 20 | package grpc.health.v1; 21 | 22 | option csharp_namespace = "Grpc.Health.V1"; 23 | option go_package = "google.golang.org/grpc/health/grpc_health_v1"; 24 | option java_multiple_files = true; 25 | option java_outer_classname = "HealthProto"; 26 | option java_package = "io.grpc.health.v1"; 27 | 28 | message HealthCheckRequest { 29 | string service = 1; 30 | } 31 | 32 | message HealthCheckResponse { 33 | enum ServingStatus { 34 | UNKNOWN = 0; 35 | SERVING = 1; 36 | NOT_SERVING = 2; 37 | SERVICE_UNKNOWN = 3; // Used only by the Watch method. 38 | } 39 | ServingStatus status = 1; 40 | } 41 | 42 | service Health { 43 | // If the requested service is unknown, the call will fail with status 44 | // NOT_FOUND. 45 | rpc Check(HealthCheckRequest) returns (HealthCheckResponse); 46 | 47 | // Performs a watch for the serving status of the requested service. 48 | // The server will immediately send back a message indicating the current 49 | // serving status. It will then subsequently send a new message whenever 50 | // the service's serving status changes. 51 | // 52 | // If the requested service is unknown when the call is received, the 53 | // server will send a message setting the serving status to 54 | // SERVICE_UNKNOWN but will *not* terminate the call. If at some 55 | // future point, the serving status of the service becomes known, the 56 | // server will send a new message with the service's serving status. 57 | // 58 | // If the call terminates with status UNIMPLEMENTED, then clients 59 | // should assume this method is not supported and should not retry the 60 | // call. If the call terminates with any other status (including OK), 61 | // clients should retry the call with appropriate exponential backoff. 62 | rpc Watch(HealthCheckRequest) returns (stream HealthCheckResponse); 63 | } 64 | -------------------------------------------------------------------------------- /dapr/1.hello-kubernetes/python/.gitignore: -------------------------------------------------------------------------------- 1 | ### Python template 2 | # Byte-compiled / optimized / DLL files 3 | __pycache__/ 4 | *.py[cod] 5 | *$py.class 6 | 7 | # C extensions 8 | *.so 9 | 10 | # Distribution / packaging 11 | .Python 12 | build/ 13 | develop-eggs/ 14 | dist/ 15 | downloads/ 16 | eggs/ 17 | .eggs/ 18 | lib/ 19 | lib64/ 20 | parts/ 21 | sdist/ 22 | var/ 23 | wheels/ 24 | share/python-wheels/ 25 | *.egg-info/ 26 | .installed.cfg 27 | *.egg 28 | MANIFEST 29 | 30 | # PyInstaller 31 | # Usually these files are written by a python script from a template 32 | # before PyInstaller builds the exe, so as to inject date/other infos into it. 33 | *.manifest 34 | *.spec 35 | 36 | # Installer logs 37 | pip-log.txt 38 | pip-delete-this-directory.txt 39 | 40 | # Unit test / coverage reports 41 | htmlcov/ 42 | .tox/ 43 | .nox/ 44 | .coverage 45 | .coverage.* 46 | .cache 47 | nosetests.xml 48 | coverage.xml 49 | *.cover 50 | *.py,cover 51 | .hypothesis/ 52 | .pytest_cache/ 53 | cover/ 54 | 55 | # Translations 56 | *.mo 57 | *.pot 58 | 59 | # Django stuff: 60 | *.log 61 | local_settings.py 62 | db.sqlite3 63 | db.sqlite3-journal 64 | 65 | # Flask stuff: 66 | instance/ 67 | .webassets-cache 68 | 69 | # Scrapy stuff: 70 | .scrapy 71 | 72 | # Sphinx documentation 73 | docs/_build/ 74 | 75 | # PyBuilder 76 | .pybuilder/ 77 | target/ 78 | 79 | # Jupyter Notebook 80 | .ipynb_checkpoints 81 | 82 | # IPython 83 | profile_default/ 84 | ipython_config.py 85 | 86 | # pyenv 87 | # For a library or package, you might want to ignore these files since the code is 88 | # intended to run in multiple environments; otherwise, check them in: 89 | # .python-version 90 | 91 | # pipenv 92 | # According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control. 93 | # However, in case of collaboration, if having platform-specific dependencies or dependencies 94 | # having no cross-platform support, pipenv may install dependencies that don't work, or not 95 | # install all needed dependencies. 96 | #Pipfile.lock 97 | 98 | # PEP 582; used by e.g. github.com/David-OConnor/pyflow 99 | __pypackages__/ 100 | 101 | # Celery stuff 102 | celerybeat-schedule 103 | celerybeat.pid 104 | 105 | # SageMath parsed files 106 | *.sage.py 107 | 108 | # Environments 109 | .env 110 | .venv 111 | env/ 112 | venv/ 113 | ENV/ 114 | env.bak/ 115 | venv.bak/ 116 | 117 | # Spyder project settings 118 | .spyderproject 119 | .spyproject 120 | 121 | # Rope project settings 122 | .ropeproject 123 | 124 | # mkdocs documentation 125 | /site 126 | 127 | # mypy 128 | .mypy_cache/ 129 | .dmypy.json 130 | dmypy.json 131 | 132 | # Pyre type checker 133 | .pyre/ 134 | 135 | # pytype static type analyzer 136 | .pytype/ 137 | 138 | # Cython debug symbols 139 | cython_debug/ 140 | 141 | -------------------------------------------------------------------------------- /deploying-simple-hello-flask-app/README.md: -------------------------------------------------------------------------------- 1 | # 部署一个简单的 Flask 应用 2 | 3 | #### 源代码 4 | 5 | 一个最迷你的 Flask 应用程序看起来是这样的： 6 | 7 | ```python 8 | from flask import Flask 9 | 10 | app = Flask(__name__) 11 | 12 | @app.route("/") 13 | def hello_flask(): 14 | return "

Hello, Flask!

" 15 | 16 | if __name__ == "__main__": 17 | app.run(host='0.0.0.0') 18 | ``` 19 | 20 | requirements.txt 文件包含 app.py 所需的依赖，pip 将使用它来安装 Flask 包。 21 | 22 | #### Docker 镜像 23 | 24 | 应用的 Dockerfile 如下所示： 25 | 26 | ```dockerfile 27 | # 从官方仓库中获取最新版的 Python 基础镜像 28 | # syntax=docker/dockerfile:1 29 | FROM --platform=$TARGETPLATFORM python:alpine 30 | # 设置工作目录 31 | WORKDIR / 32 | # 复制项目文件 33 | ADD . / 34 | # 安装依赖 35 | RUN pip install -r requirements.txt 36 | # 设置监听端口 37 | EXPOSE 5000 38 | # 配置启动命令 39 | CMD ["python", "app.py"] 40 | ``` 41 | 42 | 构建并提交镜像： 43 | 44 | > jxlwqq 是我的 Docker Hub 账号，这里需要换成你自己的账号。 45 | 46 | ```shell 47 | docker build -f Dockerfile -t jxlwqq/hello-flask:latest . # 构建镜像 48 | docker push jxlwqq/hello-flask:latest # 提交镜像 49 | ``` 50 | 51 | #### 前提条件：部署 nginx ingress 52 | 53 | ```bash 54 | cd ../ingress-nginx # 切换到 ingress-nginx 目录 55 | kubectl apply -f deploy.yaml 56 | ``` 57 | 58 | #### 部署 hello flask 应用 59 | 60 | 执行以下命令： 61 | 62 | ```shell 63 | kubectl apply -f hello-flask-deployment-and-service.yaml 64 | kubectl apply -f ingress.yaml 65 | ``` 66 | 67 | `hello-flask-deployment-and-service.yaml` 文件解读： 68 | 69 | ```yaml 70 | apiVersion: apps/v1 71 | kind: Deployment 72 | metadata: 73 | name: hello-flask 74 | spec: 75 | selector: 76 | matchLabels: 77 | name: hello-flask # 选择匹配的 Pod 标签 78 | template: 79 | metadata: 80 | name: hello-flask 81 | labels: 82 | name: hello-flask # Pod 的标签 83 | spec: 84 | containers: 85 | - name: hello-flask 86 | image: jxlwqq/hello-flask:latest # 镜像名称:镜像版本 87 | ports: 88 | - containerPort: 5000 89 | --- 90 | apiVersion: v1 91 | kind: Service 92 | metadata: 93 | name: hello-flask-svc 94 | spec: 95 | selector: 96 | name: hello-flask # 选择匹配的 Pod 标签 97 | ports: 98 | - port: 80 99 | targetPort: 5000 100 | ``` 101 | 102 | `ingress.yaml` 文件解读： 103 | 104 | ```yaml 105 | apiVersion: networking.k8s.io/v1 106 | kind: Ingress 107 | metadata: 108 | name: hello-flask-ingress 109 | spec: 110 | rules: 111 | - http: 112 | paths: 113 | - path: / 114 | pathType: Prefix 115 | backend: 116 | service: 117 | name: hello-flask-svc # service 名称 118 | port: 119 | number: 80 # 端口号 120 | ingressClassName: nginx 121 | ``` 122 | 123 | 访问验证： 124 | 125 | ```shell 126 | curl 127.0.0.1 # 返回

Hello, Flask!

127 | ``` 128 | 129 | #### 清理 130 | ```shell 131 | kubectl delete -k . 132 | ``` 133 | 134 | -------------------------------------------------------------------------------- /dapr/0.installing/README.md: -------------------------------------------------------------------------------- 1 | # 在集群中安装 Dapr 2 | 3 | Dapr 提供多种使用方式： 4 | 5 | * 独立模式（适用于本地开发） 6 | * Kubernetes 模式（适用于生产环境） 7 | * 特定语言的 SDK 8 | 9 | 我们直接以 Kubernetes 模式开始。 10 | 11 | 12 | ### 在 Kubernetes 集群上设置 Dapr 13 | 14 | 首先，下载并安装最新版本的 Docker Desktop，并启动内置的 Kubernetes 集群。 15 | 16 | 然后执行以下两个命令，完成 Dapr 的基础设置： 17 | 18 | ```shell 19 | # 安装 Dapr 客户端 20 | brew install dapr/tap/dapr-cli 21 | 22 | # 在 Kubernetes 集群中安装 Dapr 控制平面 23 | dapr init -k 24 | ``` 25 | 26 | 执行完成后，查看状态： 27 | 28 | ```shell 29 | dapr status -k 30 | ``` 31 | 32 | 返回： 33 | 34 | ```shell 35 | NAME NAMESPACE HEALTHY STATUS REPLICAS VERSION AGE CREATED 36 | dapr-operator dapr-system True Running 1 1.5.1 12m 2022-01-05 22:55.44 37 | dapr-placement-server dapr-system True Running 1 1.5.1 12m 2022-01-05 22:55.54 38 | dapr-sidecar-injector dapr-system True Running 1 1.5.1 12m 2022-01-05 22:55.44 39 | dapr-dashboard dapr-system True Running 1 0.9.0 12m 2022-01-05 22:55.44 40 | dapr-sentry dapr-system True Running 1 1.5.1 12m 2022-01-05 22:55.44 41 | ``` 42 | 43 | 44 | ### 创建和配置状态存储 45 | 46 | Dapr 支持多种不同的状态存储（如 Redis、CosmosDB、DynamoDB、Cassandra 等）来持久化和检索状态。本演示将使用 Redis。 47 | 48 | 首先，我们使用 helm 创建一个 高可用的 Redis 集群： 49 | 50 | ```shell 51 | # 如果本地没有 helm，则安装 52 | brew install helm 53 | # 创建 Redis 集群 54 | helm repo add bitnami https://charts.bitnami.com/bitnami 55 | helm repo update 56 | helm install redis bitnami/redis 57 | ``` 58 | 59 | 查看 Pod： 60 | 61 | ```shell 62 | kubectl get pods 63 | ``` 64 | 65 | 返回： 66 | ```shell 67 | NAME READY STATUS RESTARTS AGE 68 | redis-master-0 1/1 Running 0 83s 69 | redis-replicas-0 1/1 Running 0 83s 70 | redis-replicas-1 1/1 Running 0 46s 71 | redis-replicas-2 1/1 Running 0 24s 72 | ``` 73 | 74 | 75 | 应用 redis.yaml 文件并观察您的状态存储是否已成功配置： 76 | 77 | ```shell 78 | kubectl apply -f redis.yaml 79 | ``` 80 | 81 | redis.yaml 文件内容如下： 82 | 83 | ```yaml 84 | apiVersion: dapr.io/v1alpha1 85 | kind: Component 86 | metadata: 87 | name: statestore 88 | spec: 89 | type: state.redis 90 | version: v1 91 | metadata: 92 | # These settings will work out of the box if you use `helm install 93 | # bitnami/redis`. If you have your own setup, replace 94 | # `redis-master:6379` with your own Redis master address, and the 95 | # Redis password with your own Secret's name. For more information, 96 | # see https://docs.dapr.io/operations/components/component-secrets . 97 | - name: redisHost 98 | value: redis-master:6379 99 | - name: redisPassword 100 | secretKeyRef: 101 | name: redis 102 | key: redis-password 103 | auth: 104 | secretStore: kubernetes 105 | ``` 106 | 107 | -------------------------------------------------------------------------------- /cka-training/7.security.md: -------------------------------------------------------------------------------- 1 | # 安全 2 | 3 | ### 普通用户 4 | 5 | https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#normal-user 6 | 7 | 8 | 生成 PKI 私钥和 CSR: 9 | 10 | ```shell 11 | openssl genrsa -out john.key 2048 12 | openssl req -new -key john.key -out john.csr -subj "/CN=john/O=cka" # 设置 CSR 的 CN 和 O 属性很重要。CN 是用户名，O 是该用户归属的组 13 | ``` 14 | 15 | 获取 request，该字段是 CSR 文件内容的 base64 编码值： 16 | 17 | ```shell 18 | cat john.csr | base64 | tr -d "\n" 19 | ``` 20 | 21 | 将下面的命令的 request 对应的值替换为 `cat john.csr | base64 | tr -d "\n"` 的返回值： 22 | 23 | ```yaml 24 | cat < john.crt 50 | ``` 51 | 52 | 创建角色并绑定用户： 53 | 54 | ```shell 55 | # 该角色只有对 pod 资源有 create get list update delete 的权限 56 | kubectl create role developer --verb=create --verb=get --verb=list --verb=update --verb=delete --resource=pods 57 | kubectl create rolebinding developer-binding-john --role=developer --user=john 58 | ``` 59 | 60 | 将用户添加到 kubeconfig 文件 61 | 62 | ```shell 63 | kubectl config set-credentials john --client-key=john.key --client-certificate=john.crt --embed-certs=true 64 | ``` 65 | 66 | 添加上下文，并把上下文切换为 john： 67 | 68 | ```shell 69 | kubectl config set-context john --cluster=kubernetes --user=john 70 | kubectl config use-context john 71 | ``` 72 | 73 | 检查下鉴权是否正确： 74 | 75 | ```shell 76 | kubectl get pods # 鉴权通过，可以查看 pods 77 | kubectl get deployments # 鉴权不通过，无法查看 deployments， 78 | ``` 79 | 80 | 81 | ### 服务账户 -------------------------------------------------------------------------------- /deploying-simple-hello-express-app/README.md: -------------------------------------------------------------------------------- 1 | # 部署一个简单的 Express 应用 2 | 3 | #### 源代码 4 | 5 | 一个最简单的 Express 应用程序看起来是这样的： 6 | 7 | ```js 8 | const express = require('express') 9 | const app = express() 10 | const port = 3000 11 | 12 | app.get('/', (req, res) => { 13 | res.send('Hello Express!') 14 | }) 15 | 16 | app.listen(port, () => { 17 | console.log(`Example app listening at http://localhost:${port}`) 18 | }) 19 | ``` 20 | 21 | package.json 文件包含项目所需的依赖。 22 | 23 | #### Docker 镜像 24 | 25 | 应用的 Dockerfile 如下所示： 26 | 27 | ```dockerfile 28 | # 从官方仓库中获取最新版的 Node 基础镜像 29 | # syntax=docker/dockerfile:1 30 | FROM --platform=$TARGETPLATFORM node:14-alpine 31 | # 设置工作目录 32 | WORKDIR /usr/src/app 33 | # 复制项目依赖文件 34 | ADD package*.json . 35 | # 安装依赖 36 | RUN npm install 37 | # 复制项目文件 38 | ADD . . 39 | # 设置监听端口 40 | EXPOSE 3000 41 | # 配置启动命令 42 | CMD [ "node", "index.js" ] 43 | ``` 44 | 45 | 构建并提交镜像： 46 | 47 | > jxlwqq 是我的 Docker Hub 账号，这里需要换成你自己的账号。 48 | 49 | ```shell 50 | docker build -f Dockerfile -t jxlwqq/hello-express:1.0.0 . # 构建镜像 51 | docker push jxlwqq/hello-express:1.0.0 # 提交镜像 52 | ``` 53 | 54 | #### 前提条件：部署 nginx ingress 55 | 56 | ```bash 57 | cd ../ingress-nginx # 切换到 ingress-nginx 目录 58 | kubectl apply -f deploy.yaml 59 | ``` 60 | 61 | #### 部署 hello express 应用 62 | 63 | 执行以下命令： 64 | 65 | ```shell 66 | kubectl apply -f hello-express-deployment-and-service.yaml 67 | kubectl apply -f ingress.yaml 68 | ``` 69 | 70 | `hello-express-deployment-and-service.yaml` 文件解读： 71 | 72 | ```yaml 73 | apiVersion: apps/v1 74 | kind: Deployment 75 | metadata: 76 | name: hello-express 77 | spec: 78 | selector: 79 | matchLabels: 80 | app.kubernetes.io/name: hello-express # 选择匹配的 Pod 标签 81 | app.kubernetes.io/version: 1.0.0 82 | template: 83 | metadata: 84 | name: hello-express 85 | labels: 86 | app.kubernetes.io/name: hello-express # 选择匹配的 Pod 标签 87 | app.kubernetes.io/version: 1.0.0 88 | spec: 89 | containers: 90 | - name: hello-express 91 | image: jxlwqq/hello-express:1.0.0 # 镜像名称:镜像版本 92 | ports: 93 | - containerPort: 3000 94 | --- 95 | apiVersion: v1 96 | kind: Service 97 | metadata: 98 | name: hello-express-svc 99 | labels: 100 | app.kubernetes.io/name: hello-express 101 | spec: 102 | selector: 103 | app.kubernetes.io/name: hello-express # 选择匹配的 Pod 标签 104 | type: ClusterIP 105 | ports: 106 | - port: 3000 107 | targetPort: 3000 108 | ``` 109 | 110 | `ingress.yaml` 文件解读： 111 | 112 | ```yaml 113 | apiVersion: networking.k8s.io/v1 114 | kind: Ingress 115 | metadata: 116 | name: hello-express-ingress 117 | spec: 118 | rules: 119 | - http: 120 | paths: 121 | - path: / 122 | pathType: Prefix 123 | backend: 124 | service: 125 | name: hello-express-svc # service 名称 126 | port: 127 | number: 3000 # 端口号 128 | ingressClassName: nginx 129 | ``` 130 | 131 | 访问验证： 132 | 133 | ```shell 134 | curl 127.0.0.1 # 返回

Hello, Express!

135 | ``` 136 | 137 | #### 清理 138 | ```shell 139 | kubectl delete -k . 140 | ``` 141 | 142 | -------------------------------------------------------------------------------- /knative/0.installing/serving-default-domain.yaml: -------------------------------------------------------------------------------- 1 | # Copyright 2019 The Knative Authors 2 | # 3 | # Licensed under the Apache License, Version 2.0 (the "License"); 4 | # you may not use this file except in compliance with the License. 5 | # You may obtain a copy of the License at 6 | # 7 | # https://www.apache.org/licenses/LICENSE-2.0 8 | # 9 | # Unless required by applicable law or agreed to in writing, software 10 | # distributed under the License is distributed on an "AS IS" BASIS, 11 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 | # See the License for the specific language governing permissions and 13 | # limitations under the License. 14 | 15 | apiVersion: batch/v1 16 | kind: Job 17 | metadata: 18 | name: default-domain 19 | namespace: knative-serving 20 | labels: 21 | app: "default-domain" 22 | app.kubernetes.io/component: default-domain-job 23 | app.kubernetes.io/name: knative-serving 24 | app.kubernetes.io/version: "1.1.0" 25 | serving.knative.dev/release: "v1.1.0" 26 | spec: 27 | template: 28 | metadata: 29 | annotations: 30 | sidecar.istio.io/inject: "false" 31 | labels: 32 | app: "default-domain" 33 | app.kubernetes.io/component: default-domain-job 34 | app.kubernetes.io/name: knative-serving 35 | app.kubernetes.io/version: "1.1.0" 36 | spec: 37 | serviceAccountName: controller 38 | containers: 39 | - name: default-domain 40 | # This is the Go import path for the binary that is containerized 41 | # and substituted here. 42 | image: gcr.io/knative-releases/knative.dev/serving/cmd/default-domain@sha256:f04cd06536e321f8f564ac193919a68e4908d0a709090a94f60333125119e946 43 | args: ["-magic-dns=sslip.io"] 44 | ports: 45 | - name: http 46 | containerPort: 8080 47 | readinessProbe: 48 | httpGet: 49 | port: 8080 50 | livenessProbe: 51 | httpGet: 52 | port: 8080 53 | failureThreshold: 6 54 | resources: 55 | requests: 56 | cpu: 100m 57 | memory: 100Mi 58 | limits: 59 | cpu: 1000m 60 | memory: 1000Mi 61 | securityContext: 62 | allowPrivilegeEscalation: false 63 | readOnlyRootFilesystem: true 64 | runAsNonRoot: true 65 | env: 66 | - name: POD_NAME 67 | valueFrom: 68 | fieldRef: 69 | fieldPath: metadata.name 70 | - name: SYSTEM_NAMESPACE 71 | valueFrom: 72 | fieldRef: 73 | fieldPath: metadata.namespace 74 | restartPolicy: Never 75 | backoffLimit: 10 76 | --- 77 | apiVersion: v1 78 | kind: Service 79 | metadata: 80 | name: default-domain-service 81 | namespace: knative-serving 82 | labels: 83 | app: default-domain 84 | app.kubernetes.io/component: default-domain-job 85 | app.kubernetes.io/name: knative-serving 86 | app.kubernetes.io/version: "1.1.0" 87 | serving.knative.dev/release: "v1.1.0" 88 | spec: 89 | selector: 90 | app: default-domain 91 | ports: 92 | - name: http 93 | port: 80 94 | targetPort: 8080 95 | type: ClusterIP 96 | 97 | --- 98 | -------------------------------------------------------------------------------- /deploying-simple-echo-app-using-blue-green-deployment/README.md: -------------------------------------------------------------------------------- 1 | # 基于 Service 的 selector 实现蓝绿发布 2 | 3 | > [原文](https://cloud.tencent.com/document/product/457/48877) 为腾讯云容器服务（Tencent Kubernetes Engine，TKE）部署应用的教程。本文对此基础上进行了较大的变更，使其可以部署在本地集群中。 4 | 5 | 以 Deployment 为例，集群中已部署两个不同版本的 Deployment，其 Pod 拥有共同的 label。但有一个 label 值不同，用于区分不同的版本。Service 使用 selector 选中了其中一个版本的 Deployment 的 Pod，此时通过修改 Service 的 selector 中决定服务版本的 label 的值来改变 Service 后端对应的 Deployment，即可实现让服务从一个版本直接切换到另一个版本。 6 | 7 | #### 前提条件：部署 nginx ingress 8 | 9 | ```bash 10 | kubectl apply -f ../ingress-nginx/deploy.yaml 11 | ``` 12 | 13 | #### 部署 v1 版本的 echo Deployment 14 | 15 | 执行以下命令： 16 | 17 | ```shell 18 | kubectl apply -f echo-v1-deployment.yaml 19 | ``` 20 | 21 | `echo-v1-deployment.yaml`的解读： 22 | 23 | ```yaml 24 | apiVersion: apps/v1 25 | kind: Deployment 26 | metadata: 27 | name: echo-v1 28 | spec: 29 | replicas: 1 30 | selector: 31 | matchLabels: 32 | app: echo 33 | version: v1 34 | template: 35 | metadata: 36 | labels: 37 | app: echo # 标签1 38 | version: v1 # 标签2 39 | spec: 40 | containers: 41 | - name: echo 42 | image: jxlwqq/http-echo 43 | args: 44 | - "--text=echo-v1" # 响应请求，返回"echo-v1" 45 | ports: 46 | - name: http 47 | protocol: TCP 48 | containerPort: 8080 # 容器端口号 49 | ``` 50 | 51 | #### 部署 v2 版本的 echo Deployment 52 | 53 | 执行以下命令： 54 | 55 | ```shell 56 | kubectl apply -f echo-v2-deployment.yaml 57 | ``` 58 | 59 | `echo-v2-deployment.yaml`的解读： 60 | 61 | ```yaml 62 | apiVersion: apps/v1 63 | kind: Deployment 64 | metadata: 65 | name: echo-v2 66 | spec: 67 | replicas: 1 68 | selector: 69 | matchLabels: 70 | app: echo 71 | version: v2 72 | template: 73 | metadata: 74 | labels: 75 | app: echo # 标签1 76 | version: v2 # 标签2 77 | spec: 78 | containers: 79 | - name: echo 80 | image: jxlwqq/http-echo 81 | args: 82 | - "--text=echo-v2" # 响应请求，返回"echo-v2" 83 | ports: 84 | - name: http 85 | protocol: TCP 86 | containerPort: 8080 87 | ``` 88 | 89 | 90 | 91 | 92 | #### 创建 Service 93 | 94 | ```shell 95 | kubectl apply -f service.yaml 96 | ``` 97 | 98 | `service.yaml`的解读： 99 | 100 | ```yaml 101 | apiVersion: v1 102 | kind: Service 103 | metadata: 104 | name: echo-svc 105 | spec: 106 | selector: # 选择 v1 版本的 Pod 107 | app: echo 108 | version: v1 109 | ports: 110 | - port: 80 111 | targetPort: 8080 112 | ``` 113 | 114 | #### 创建 Ingress 115 | 116 | ```yaml 117 | apiVersion: networking.k8s.io/v1 118 | kind: Ingress 119 | metadata: 120 | name: echo-ing 121 | spec: 122 | rules: 123 | - http: 124 | paths: 125 | - path: / 126 | pathType: Prefix 127 | backend: 128 | service: 129 | name: echo-svc 130 | port: 131 | number: 8080 132 | ingressClassName: nginx 133 | ``` 134 | 135 | 访问验证： 136 | 137 | ```shell 138 | curl 127.0.0.1 # 返回 echo-v1 139 | ``` 140 | 141 | #### 修改 Service 的 selector，使其选中 v2 版本的服务 142 | 143 | ```shell 144 | kubectl patch service echo-svc -p '{"spec":{"selector":{"app": "echo", "version": "v2"}}}' 145 | ``` 146 | 147 | 访问验证： 148 | 149 | ```shell 150 | curl 127.0.0.1 # 返回 echo-v2 151 | ``` 152 | 153 | #### 清理 154 | 155 | ```shell 156 | kubectl delete -k . 157 | ``` -------------------------------------------------------------------------------- /deploying-simple-microservice-using-gin-and-grpc/cmd/api-server/main.go: -------------------------------------------------------------------------------- 1 | package main 2 | 3 | import ( 4 | "context" 5 | "github.com/gin-gonic/gin" 6 | calculatorv1 "github.com/jxlwqq/route-guide/api/protobuf/calculator" 7 | "github.com/spf13/viper" 8 | "google.golang.org/grpc" 9 | "log" 10 | "net/http" 11 | "os" 12 | "os/signal" 13 | "strconv" 14 | "syscall" 15 | "time" 16 | ) 17 | 18 | const ( 19 | ADDRESS = "localhost" 20 | PORT = ":50051" 21 | ) 22 | 23 | var address string 24 | 25 | func main() { 26 | 27 | viper.AutomaticEnv() 28 | viper.SetDefault("CALCULATOR_SVC", ADDRESS) 29 | address = viper.GetString("CALCULATOR_SVC") 30 | r := gin.Default() 31 | r.GET("/add/:x/:y", Add) 32 | r.GET("/subtract/:x/:y", Subtract) 33 | r.GET("/multiply/:x/:y", Multiply) 34 | r.GET("/divide/:x/:y", Divide) 35 | r.GET("/healthz", Headlthz) 36 | 37 | server := &http.Server{ 38 | Addr: ":8080", 39 | Handler: r, 40 | } 41 | 42 | go func() { 43 | if err := server.ListenAndServe(); err != nil { 44 | log.Fatalf("server serve failed: %v", err) 45 | } 46 | }() 47 | 48 | quit := make(chan os.Signal, 1) 49 | signal.Notify(quit, syscall.SIGINT, syscall.SIGTERM) 50 | <-quit 51 | log.Println("server is shutting down ...") 52 | 53 | ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second) 54 | defer cancel() 55 | if err := server.Shutdown(ctx); err != nil { 56 | log.Fatalf("server forced to shutdown: %v", err) 57 | } 58 | log.Println("server is exiting") 59 | } 60 | 61 | func Headlthz(c *gin.Context) { 62 | c.Status(http.StatusOK) 63 | } 64 | 65 | func Multiply(c *gin.Context) { 66 | x, _ := strconv.ParseFloat(c.Param("x"), 32) 67 | y, _ := strconv.ParseFloat(c.Param("y"), 32) 68 | 69 | res, err := calculate(float32(x), "*", float32(y)) 70 | c.JSON(http.StatusOK, gin.H{ 71 | "res": res, 72 | "err": err, 73 | }) 74 | } 75 | 76 | func Divide(c *gin.Context) { 77 | x, _ := strconv.ParseFloat(c.Param("x"), 32) 78 | y, _ := strconv.ParseFloat(c.Param("y"), 32) 79 | 80 | res, err := calculate(float32(x), "/", float32(y)) 81 | c.JSON(http.StatusOK, gin.H{ 82 | "res": res, 83 | "err": err, 84 | }) 85 | } 86 | 87 | func Subtract(c *gin.Context) { 88 | x, _ := strconv.ParseFloat(c.Param("x"), 32) 89 | y, _ := strconv.ParseFloat(c.Param("y"), 32) 90 | 91 | res, err := calculate(float32(x), "-", float32(y)) 92 | c.JSON(http.StatusOK, gin.H{ 93 | "res": res, 94 | "err": err, 95 | }) 96 | } 97 | 98 | func Add(c *gin.Context) { 99 | x, _ := strconv.ParseFloat(c.Param("x"), 32) 100 | y, _ := strconv.ParseFloat(c.Param("y"), 32) 101 | 102 | res, err := calculate(float32(x), "+", float32(y)) 103 | c.JSON(http.StatusOK, gin.H{ 104 | "res": res, 105 | "err": err, 106 | }) 107 | } 108 | 109 | func calculate(x float32, operator string, y float32) (float32, string) { 110 | conn, err := grpc.Dial(address+PORT, grpc.WithInsecure(), grpc.WithBlock()) 111 | if err != nil { 112 | log.Fatalf("did not connect: %v", err) 113 | } 114 | defer conn.Close() 115 | c := calculatorv1.NewCalculatorClient(conn) 116 | 117 | ctx, cancel := context.WithTimeout(context.Background(), time.Second) 118 | defer cancel() 119 | req := &calculatorv1.Request{X: x, Y: y} 120 | 121 | switch operator { 122 | case "+": 123 | resp, _ := c.Add(ctx, req) 124 | return resp.Res, resp.Err 125 | case "-": 126 | resp, _ := c.Subtract(ctx, req) 127 | return resp.Res, resp.Err 128 | case "*": 129 | resp, _ := c.Multiply(ctx, req) 130 | return resp.Res, resp.Err 131 | case "/": 132 | resp, _ := c.Divide(ctx, req) 133 | return resp.Res, resp.Err 134 | } 135 | 136 | return 0, "" 137 | } 138 | -------------------------------------------------------------------------------- /learn-from-source-code/what-happens-in-kubernetes-when-create-a-deployment.md: -------------------------------------------------------------------------------- 1 | # 当你创建了一个 Deployment 时，Kubernetes 内部发生了什么？ 2 | 3 | 4 | 我们通常使用 kubectl 来管理我们的 Kubernetes 集群。 当我们需要一个 Nginx 服务时，可以使用以下命令来创建： 5 | 6 | ```shell 7 | kubectl create deployment nginx --image nginx 8 | ``` 9 | 10 | 返回： 11 | 12 | ```shell 13 | deployment.apps/nginx created 14 | ``` 15 | 16 | 稍等片刻，一个包含 Nginx 容器的 Pod 就会启动成功。那么在我们执行在上述命令后，Kubernetes 内部发生了什么呢？ 17 | 18 | ### 核心组件 19 | 20 | ![components-of-kubernetes](./components-of-kubernetes.svg) 21 | 22 | 在介绍内部发生了什么之前，我们首先需要了解一下以下 4 个核心组件在 Kubernetes 集群中的角色和作用： 23 | 24 | * **kube-apiserver**: Kubernetes API 服务器验证并配置 API 对象的数据， 这些对象包括 pods、services 等。 API 服务器为 REST 操作提供服务，并为集群的共享状态提供前端， 所有其他组件都通过该前端进行交互。 25 | 26 | * **kube-controller-manager**: 运行控制器进程的控制平面组件。 从逻辑上讲，每个控制器都是一个单独的进程， 但是为了降低复杂性，它们都被编译到同一个可执行文件，并在一个进程中运行，所以它会被称作为 `manager`。它包含 DeploymentController、ReplicaSetController、JobController 等一系列控制器。 27 | 28 | * **kube-scheduler**: 控制平面组件，负责监视新创建的、未指定运行节点（node）的 Pods，选择节点让 Pod 在上面运行。 调度决策考虑的因素包括单个 Pod 和 Pod 集合的资源需求、硬件/软件/策略约束、亲和性和反亲和性规范、数据位置、工作负载间的干扰和最后时限。 29 | 30 | * **kubelet**: 一个在集群中每个节点（node）上运行的代理。 它保证容器（containers）都运行在 Pod 中。 kubelet 接收一组通过各类机制提供给它的 PodSpecs，确保这些 PodSpecs 中描述的容器处于运行状态且健康。 31 | 32 | ### 简化的核心过程 33 | 34 | ![deployment-replicaset-pod](./deployment-replicaset-pod.png) 35 | 36 | 在了解上述核心组件的角色后，我们来看一下 Kubernetes 内部到底发生了哪些事情： 37 | 38 | 1. 用户通过 kubectl 向 kube-apiserver 发起一个创建 Deployment 对象的请求。 39 | 40 | 2. kube-apiserver 在对上述请求进行认证（Authentication）、鉴权（Authorization）、准入控制（Admission control）等一系列操作后，会创建一个 Deployment 对象。 41 | 42 | 3. 上述的 Deployment 创建事件，会被 DeploymentController 通过其内部的 DeploymentInformer 监听到，然后根据 DeploymentController 内部设定的逻辑，它将会创建一个 ReplicaSet 对象。[源码 syncDeployment](https://github.com/kubernetes/kubernetes/blob/2c0e4a232a3c10a9083012ec28a3622bd4e4be90/pkg/controller/deployment/deployment_controller.go#L566) 43 | 44 | 4. 上述的 ReplicaSet 创建事件，会被 ReplicaSetController 通过其内部的 ReplicaSetInformer 监听到，然后根据 ReplicaSetController 内部设定的逻辑，它将创建一个 Pod 对象，而此时 Pod 的 Spec.nodeName 字段的值为空；[源码 syncReplicaSet](https://github.com/kubernetes/kubernetes/blob/59e5b849c9439375575f6ced54fb9e2364b58797/pkg/controller/replicaset/replica_set.go#L650) 45 | 46 | 5. 上述的 Pod 创建事件，会被 Scheduler 通过其内部的 PodInformer 监听到，Scheduler 会根据其内部的调度算法，选择一个合适的 Node 节点，例如 node-A，并更新 Pod 的 Spec.nodeName 字段。[源码 Schedule](https://github.com/kubernetes/kubernetes/blob/2c0e4a232a3c10a9083012ec28a3622bd4e4be90/pkg/scheduler/generic_scheduler.go#L93) 47 | 48 | 6. 上述的 Pod 更新事件，会被 node-A 节点上 kubelet 感知到，它会发现自己的 nodeName 和 Pod 的 Spec.nodeName 相匹配，接着 kubelet 将按照一定的步骤顺序启动 Pod 中的容器，并将容器已启动的信息写入 Pod 的 Status 中。[源码 syncPod](https://github.com/kubernetes/kubernetes/blob/fb70ca9b7b24ce90b19b0d565ae43e6af20458ad/pkg/kubelet/kubelet.go#L1530) 49 | 50 | 如上所述，DeploymentController、ReplicaSetController 等许多独立的控制循环都是通过监听 kube-apiserver 上对象的变化进行通信，而这些变化会通过各种 Informer 触发事件，执行其对应的业务逻辑。之所以这么设计，是为了减少对 apiserver 的压力。 51 | 52 | ### kubelet 创建 Pod 的过程 53 | 54 | Pod 的创建的过程大体上可以分为 4 个步骤（实际上为 7 步，这里省略了前置的 3 个步骤。[源码 SyncPod](https://github.com/kubernetes/kubernetes/blob/0b4a793da2a2912393687367e0af2436612a9b8e/pkg/kubelet/kuberuntime/kuberuntime_manager.go#L726)）： 55 | 56 | 1. 为 Pod 创建沙盒，即基础设施容器 Infrastructure Container（镜像名称为 k8s.gcr.io/pause），它的主要作用是创建并共享进程命名空间。 57 | 58 | 2. 创建 Pod 规格中指定的临时容器 Ephemeral Containers（Alpha 功能，默认不开启），临时容器是一种特殊的容器，该容器在现有 Pod 中临时运行，以便完成用户发起的操作，例如故障排查。 你可以使用临时容器来检查服务，而不是用它来构建应用程序。 59 | 60 | 3. 创建 Pod 规格中指定的初始化容器 Init Containers，初始化容器是一种特殊容器，在 Pod 内的应用容器启动之前运行。Init 容器可以包括一些应用镜像中不存在的实用工具和安装脚本。 61 | 62 | 4. 依次创建 Pod 规格中指定的常规容器 Containers。 63 | 64 | ### 参考 65 | 66 | * 张磊《深入剖析 Kubernetes》 67 | * Michael Hausenblas, Stefan Schimanski《Kubernetes 编程》 68 | * [Kubernetes 组件](https://kubernetes.io/zh/docs/concepts/overview/components/) 69 | * [详解 Kubernetes Deployment 的实现原理](https://draveness.me/kubernetes-deployment/) 70 | * [详解 Kubernetes ReplicaSet 的实现原理](https://draveness.me/kubernetes-replicaset/) 71 | * [详解 Kubernetes Pod 的实现原理](https://draveness.me/kubernetes-pod/) 72 | * [Kubernetes CRI 分析 - kubelet 创建 Pod 分析](https://mp.weixin.qq.com/s/AG6H_mPuTu6-_ISQWu3YHw) 73 | -------------------------------------------------------------------------------- /istio/case-advanced-traffic-routing/README.md: -------------------------------------------------------------------------------- 1 | # 高级流量路由 2 | 3 | 本示例为一个简单的 Customer List 微服务应用，由 [Tetrate](https://academy.tetrate.io/) 创建。访问 Web 页面，将展示顾客信息。 4 | 5 | 6 | 我们将部署 Web 前端、Customers v1、Customers v2，以及相应的 Gateway、 VirtualServices 和 DestinationRule。其中 Customers v1 仅返回顾客姓名，而 Customers v2 返回顾客的姓名和所在城市。 7 | 8 | 9 | ### 部署网关 10 | 11 | ```shell 12 | kubectl apply -f istio-gateway.yaml 13 | ``` 14 | 15 | 信息如下： 16 | 17 | ```yaml 18 | apiVersion: networking.istio.io/v1alpha3 19 | kind: Gateway 20 | metadata: 21 | name: sample-gateway 22 | spec: 23 | selector: 24 | istio: ingressgateway 25 | servers: 26 | - port: 27 | number: 80 28 | name: http 29 | protocol: HTTP 30 | hosts: 31 | - 'web.example.com' 32 | - 'svc.example.com' 33 | ``` 34 | 35 | 通过 `curl -H "Host: web.example.com" 127.0.0.1`，我们可以访问 Web 前端服务。 36 | 37 | 通过 `curl -H "Host: svc.example.com" 127.0.0.1`，我们可以访问 Customers 后端服务。 38 | 39 | 40 | ### 部署 Customers 后端服务 41 | 42 | Customers 后端服务同时对服务网格内部和外部暴露服务。 43 | 44 | 部署 Deployment 和 Service： 45 | 46 | ```shell 47 | kubectl apply -f customers-deployment-v1.yaml 48 | kubectl apply -f customers-deployment-v2.yaml 49 | kubectl apply -f customers-service.yaml 50 | ``` 51 | 52 | 部署 VirtualService 和 DestinationRule： 53 | 54 | ```shell 55 | kubectl apply -f customers-virtual-service.yaml 56 | kubectl apply -f customers-destination-rule.yaml 57 | ``` 58 | 59 | 信息如下： 60 | 61 | ```yaml 62 | apiVersion: networking.istio.io/v1alpha3 63 | kind: VirtualService 64 | metadata: 65 | name: customers 66 | spec: 67 | hosts: 68 | - 'svc.example.com' # 集群外访问 69 | - 'customers.default.svc.cluster.local' # 集群内访问 70 | gateways: 71 | - sample-gateway # 集群外访问 72 | - mesh # 集群内访问 73 | http: 74 | - match: # 匹配到集群内网关的访问，**并且**HEAD信息的用户是 debug 75 | - gateways: 76 | - mesh 77 | headers: 78 | user: 79 | exact: debug 80 | route: 81 | - destination: 82 | host: customers.default.svc.cluster.local 83 | port: 84 | number: 80 85 | subset: v2 86 | - match: # 匹配到集群内网关的访问 87 | - gateways: 88 | - mesh 89 | route: 90 | - destination: 91 | host: customers.default.svc.cluster.local 92 | port: 93 | number: 80 94 | subset: v1 95 | - match: # 匹配是集群外的访问（即边缘网关） 96 | - gateways: 97 | - sample-gateway 98 | route: 99 | - destination: 100 | host: customers.default.svc.cluster.local 101 | port: 102 | number: 80 103 | subset: v2 104 | --- 105 | apiVersion: networking.istio.io/v1alpha3 106 | kind: DestinationRule 107 | metadata: 108 | name: customers 109 | spec: 110 | host: customers.default.svc.cluster.local 111 | subsets: 112 | - name: v1 113 | labels: 114 | version: v1 115 | - name: v2 116 | labels: 117 | version: v2 118 | ``` 119 | 120 | ### 部署 Web 前端服务 121 | 122 | Web 前端服务只对集群外部暴露服务。 123 | 124 | 部署 Deployment 和 Service： 125 | 126 | ```shell 127 | kubectl apply -f webfrontend-deployment.yaml 128 | kubectl apply -f webfrontend-service.yaml 129 | ``` 130 | 131 | 132 | 部署 VirtualService： 133 | 134 | ```shell 135 | kubectl apply -f webfrontend-virtual-service.yaml 136 | ``` 137 | 138 | 信息如下： 139 | 140 | ```yaml 141 | apiVersion: networking.istio.io/v1alpha3 142 | kind: VirtualService 143 | metadata: 144 | name: web-frontend 145 | spec: 146 | hosts: 147 | - 'web.example.com' # 集群外访问 148 | gateways: 149 | - sample-gateway # 集群外访问 150 | http: 151 | - route: 152 | - destination: 153 | host: web-frontend.default.svc.cluster.local 154 | port: 155 | number: 80 156 | ``` 157 | 158 | ### 访问 159 | 160 | ```shell 161 | curl -H "Host: web.example.com" -H "User: debug" 127.0.0.1 # 访问 web 页面，展示城市和用户信息 162 | curl -H "Host: web.example.com" -H "User: abc" 127.0.0.1 # 访问 web 页面，仅展示用户信息 163 | curl -H "Host: svc.example.com" 127.0.0.1 # 直接访问后端服务，返回 JSON 数据，包含城市和用户信息 164 | ``` 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | -------------------------------------------------------------------------------- /cka-training/5.networking.md: -------------------------------------------------------------------------------- 1 | # 网络 2 | 3 | ## 网络插件 4 | 5 | 使用支持 NetworkPolicy 的网络解决方案。这里我们选择 Calico。在安装集群这一章节已安装。不再赘述。 6 | 7 | ## 网络策略 NetworkPolicy 8 | 9 | ### MySQL 客户端连接 MySQL 服务 10 | 11 | MySQL 服务端： 12 | 13 | ```yaml 14 | cat < 15 | 16 | > [安装 Ingress 控制器：ingress-nginx](./ingress-nginx) 是以下示例的前提条件。 17 | 18 | * [ingress 路由使用示例](deploying-simple-apple-and-banana-ingress) 19 | * [使用 Redis 部署 PHP 留言板应用程序](deploying-php-guestbook-application-with-redis) 20 | * [使用 MongoDB 部署 PHP 留言板应用程序](deploying-php-guestbook-application-with-mongodb) 21 | * [使用 Persistent Volumes 部署 WordPress 和 MySQL](deploying-wordpress-and-mysql-with-persistent-volumes) 22 | * [使用 MongoDB 部署 Node.js 笔记应用程序](deploying-nodejs-note-application-with-mongodb) 23 | * [部署 Laravel Demo Web 应用](deploying-laravel-application) 24 | * [使用 MySQL 和 Redis 部署 Laravel 7 Demo Web 应用](deploying-laravel-7-with-mysql-and-redis) 25 | * [使用 PHP-FPM 和 Nginx 部署一个简单的 phpinfo 应用](deploying-simple-php-app-with-fpm-and-nginx) 26 | * [部署一个简单的 Go Web 应用](deploying-hello-world-web-application-with-go) 27 | * [部署一个简单的 Gin 应用](deploying-simple-hello-gin-app) 28 | * [部署一个简单的 Flask 应用](deploying-simple-hello-flask-app) 29 | * [部署一个简单的 Express 应用](deploying-simple-hello-express-app) 30 | * [部署一个简单的 Spring 应用](deploying-simple-hello-spring-app) 31 | * [使用蓝绿发布策略部署一个 echo 应用](deploying-simple-echo-app-using-blue-green-deployment) 32 | * [使用金丝雀发布策略部署一个 echo 应用](deploying-simple-echo-app-using-canary-deployment) 33 | * [部署一个基本的 StatefulSet 应用](deploying-basic-statefulset-app) 34 | * [部署一个 MySQL 集群 StatefulSet 应用](deploying-replicated-mysql-statefulset-app) 35 | * [部署 KBP 日志应用](deploying-kbp-journal-app) 36 | * [部署一个简单的加减乘除计算器微服务](deploying-simple-microservice-using-gin-and-grpc) 37 | 38 | --- 39 | 40 | #### 本地安装多节点集群 41 | 42 | * [vagrant-centos7-kubeadm](multi-nodes-cluster/vagrant-centos7-kubeadm) 43 | * [vagrant-ubuntu18.04-kubeadm](multi-nodes-cluster/vagrant-ubuntu18.04-kubeadm) 44 | 45 | #### Certified Kubernetes Administrator (CKA) 46 | 47 | * [考试技巧](./cka-training/0.tips.md) 48 | * [安装](./cka-training/1.installing.md) 49 | * [Pod](./cka-training/2.pod.md) 50 | * [故障排查](./cka-training/8.troubleshooting.md) 51 | 52 | #### Istio 53 | 54 | * [安装](istio/0.installing) 55 | * [配置](istio/1.profile) 56 | * [注入](istio/2.injection) 57 | * [虚拟服务](istio/3.virtual-service) 58 | * [目标规则](istio/4.destination-rule) 59 | * [故障注入](istio/5.fault-injection) 60 | * [熔断](istio/6.circuit-breaking) 61 | * [案例：gRPC 负载均衡](https://github.com/jxlwqq/grpc-lb) 62 | * [案例：待办清单](https://github.com/jxlwqq/todo) 63 | * [案例：高级流量路由](istio/case-advanced-traffic-routing) 64 | * [案例：在线精品店](istio/case-online-boutique) 65 | * [案例：博客](https://github.com/jxlwqq/blog-microservices) 66 | 67 | #### Dapr 68 | 69 | * [安装](dapr/0.installing) 70 | * [Hello Kubernetes](dapr/1.hello-kubernetes) 71 | 72 | #### Knative 73 | 74 | * [安装](knative/0.installing) 75 | * [自动扩缩](knative/1.autoscale) 76 | * [流量分流](knative/2.traffic-split) 77 | 78 | #### Operator 79 | 80 | * [memcached-operator](https://github.com/jxlwqq/memcached-operator)：源于 Operator Framework 官方示例 81 | * [cnat-operator](https://github.com/jxlwqq/cnat-operator)：源于《Kubernetes 编程》示例 82 | * [hello-operator](https://github.com/jxlwqq/hello-operator)：源于 Hello Kubernetes 示例 83 | * [visitors-operator](https://github.com/jxlwqq/visitors-operator)：源于《Kubernetes 操作器》示例 84 | * [wordpress-operator](https://github.com/jxlwqq/wordpress-operator)：源于 Kubernetes 官方文档示例 Wordpress 85 | * [guestbook-operator](https://github.com/jxlwqq/guestbook-operator)：源于 Kubernetes 官方文档示例 Guestbook 86 | 87 | #### Learn From Source Code 88 | 89 | * [当你创建了一个 Deployment 时，Kubernetes 内部发生了什么？](./learn-from-source-code/what-happens-in-kubernetes-when-create-a-deployment.md) 90 | * [当一个请求到达 kube-apiserver 时，Kubernetes 内部发生了什么？](./learn-from-source-code/what-happens-in-kubernetes-when-a-request-hits-kube-apiserver.md) 91 | * [当一个 Pod 被调度时，Kubernetes 内部发生了什么？](./learn-from-source-code/what-happens-in-kubernetes-when-schedule-a-pod.md) 92 | 93 | #### 鸣谢 94 | 95 | [![JetBrains Logo (Main) logo](https://resources.jetbrains.com/storage/products/company/brand/logos/jb_beam.svg)](https://www.jetbrains.com/) 96 | 97 | 本项目受到了来自 JetBrains 的产品的支持，在此表示感谢。 98 | -------------------------------------------------------------------------------- /istio/0.installing/README.md: -------------------------------------------------------------------------------- 1 | # 快速入门 2 | 3 | ### 前提 4 | 5 | * 启动 Docker For Mac，并开启 Kubernetes 功能； 6 | * 如果 Istio 相关组件在集群中无法正常运行，需要在 Docker 首选项的 Advanced 面板下增加 Docker 的 CPU 和内存限制； 7 | * （可选）提前拉取容器镜像，提升 Pod 启动速度： 8 | 9 | ```shell 10 | # 核心组件 11 | docker pull docker.io/istio/pilot 12 | docker pull docker.io/istio/proxyv2 13 | # 相关插件 14 | docker pull docker.io/grafana/grafana 15 | docker pull docker.io/jaegertracing/all-in-one 16 | docker pull docker.io/prom/prometheus 17 | docker pull docker.io/jimmidyson/configmap-reload 18 | docker pull quay.io/kiali/kiali 19 | # bookinfo 示例 20 | docker pull docker.io/istio/examples-bookinfo-details-v1 21 | docker pull docker.io/istio/examples-bookinfo-ratings-v1 22 | docker pull docker.io/istio/examples-bookinfo-reviews-v1 23 | docker pull docker.io/istio/examples-bookinfo-reviews-v2 24 | docker pull docker.io/istio/examples-bookinfo-reviews-v3 25 | docker pull docker.io/istio/examples-bookinfo-productpage-v1 26 | ``` 27 | 28 | ### 最小步骤 29 | 30 | 一共分为 9 个步骤，如下所示： 31 | 32 | ```shell 33 | # 第1步：安装 istioctl 34 | brew install istioctl 35 | # 第2步：切换至目标集群 36 | kubectl config use-context docker-desktop 37 | # 第3步：在目标集群中安装 istio 38 | istioctl install --set profile=demo -y 39 | # 第4步：自动注入 Envoy 边车代理 40 | kubectl label namespace default istio-injection=enabled 41 | # 第5步：获取示例代码 42 | git clone git@github.com:istio/istio.git && cd istio 43 | # 第6步：部署 Bookinfo 示例应用 44 | kubectl apply -f samples/bookinfo/platform/kube/bookinfo.yaml 45 | # 第7步：把应用关联到 Istio 网关 46 | kubectl apply -f samples/bookinfo/networking/bookinfo-gateway.yaml 47 | # 第8步：安装 Kiali、Prometheus、Grafana、Jaeger 等插件 48 | kubectl apply -f samples/addons 49 | # 第9步：访问应用 50 | curl http://127.0.0.1/productpage 51 | ``` 52 | 53 | > ⚠️ Apple chip 用户注意，需要 patch 下 istio-egressgateway 和 istio-ingressgateway 这两个 Deployment 资源，它们的默认节点亲和性只有 `amd64`，需要手动新增 `arm64` 这个值，否则 Pod 将一直处于 Pending 状态。[详见](https://github.com/istio/istio/issues/21094) 54 | 55 | 解决方案： 56 | ```shell 57 | # 使用社区（非官方）构建的 arm64 镜像（https://github.com/resf/istio）： 58 | istioctl install --set hub=ghcr.io/resf/istio --set profile=demo -y 59 | ``` 60 | 61 | ```shell 62 | # 更新 istio-egressgateway 63 | kubectl patch deployments.apps \ 64 | istio-ingressgateway \ 65 | --namespace istio-system \ 66 | --type='json' \ 67 | -p='[ 68 | {"op": "replace", "path": "/spec/template/spec/affinity/nodeAffinity/preferredDuringSchedulingIgnoredDuringExecution/0/preference/matchExpressions/0/values", "value": [amd64,arm64]}, 69 | {"op": "replace", "path": "/spec/template/spec/affinity/nodeAffinity/requiredDuringSchedulingIgnoredDuringExecution/nodeSelectorTerms/0/matchExpressions/0/values", "value": [amd64,arm64,ppc64le,s390x]} 70 | ]' 71 | ``` 72 | 73 | ```shell 74 | # 更新 istio-ingressgateway 75 | kubectl patch deployments.apps \ 76 | istio-egressgateway \ 77 | --namespace istio-system \ 78 | --type='json' \ 79 | -p='[ 80 | {"op": "replace", "path": "/spec/template/spec/affinity/nodeAffinity/preferredDuringSchedulingIgnoredDuringExecution/0/preference/matchExpressions/0/values", "value": [amd64,arm64]}, 81 | {"op": "replace", "path": "/spec/template/spec/affinity/nodeAffinity/requiredDuringSchedulingIgnoredDuringExecution/nodeSelectorTerms/0/matchExpressions/0/values", "value": [amd64,arm64,ppc64le,s390x]} 82 | ]' 83 | ``` 84 | 85 | ### 命令行自动补全 86 | 87 | Zsh 用户： 88 | 89 | ``` 90 | echo "source <(istioctl completion zsh) 91 | compdef _istioctl istioctl" >> ~/.zprofile 92 | ``` 93 | 94 | ### 查看仪表板 95 | 96 | 打入流量： 97 | 98 | ```shell 99 | while true; do curl http://127.0.0.1/productpage; done 100 | ``` 101 | 102 | 访问 Kiali 仪表板: 103 | 104 | ```shell 105 | istioctl dashboard kiali 106 | ``` 107 | 108 | ### 清理 bookinfo 109 | 110 | ```shell 111 | kubectl delete -f samples/bookinfo/platform/kube/bookinfo.yaml 112 | kubectl delete -f samples/bookinfo/networking/bookinfo-gateway.yaml 113 | ``` 114 | 115 | Istio 的组件和插件暂时不要清理。后续实验需要接着用。 116 | 117 | #### 参考： 118 | 119 | * [Istio 文档：平台安装 Docker Desktop](https://istio.io/latest/zh/docs/setup/platform-setup/docker/) 120 | * [Istio 文档：入门](https://istio.io/latest/zh/docs/setup/getting-started/) 121 | * [什么是微服务？](https://www.redhat.com/zh/topics/microservices/what-are-microservices) 122 | * [什么是服务网格？](https://www.redhat.com/zh/topics/microservices/what-is-a-service-mesh) 123 | * [什么是 Istio？](https://www.redhat.com/zh/topics/microservices/what-is-istio) 124 | * [什么是 Jaeger？原理，用途，组件及相关术语盘点](https://www.redhat.com/zh/topics/microservices/what-is-jaeger) 125 | -------------------------------------------------------------------------------- /learn-from-source-code/what-happens-in-kubernetes-when-schedule-a-pod.md: -------------------------------------------------------------------------------- 1 | # 当一个 Pod 被调度时，Kubernetes 内部发生了什么？ 2 | 3 | 在 Kubernetes 中，调度是指将 Pod 放置到合适的 Node 上，然后对应 Node 上的 Kubelet 才能够运行这些 Pod 。 4 | 5 | kube-scheduler 是集群控制平面的主要组件之一。Kubernetes 通过它来决定如何调度集群中的 Pod。它会使用基于预选（断言 predicate）和基于优选（优先级 priority）的评分算法，根据集群中的约束以及用户指定的约束来优化资源。 6 | 7 | ![schedule](schedule.jpeg) 8 | 9 | ### 预选（过滤） 10 | 11 | kube-scheduler 首先使用**预选函数**来制定调度策略，决定 Pod 可以在哪些节点上进行调度。它意味着一个硬性约束条件，因此函数的返回值为布尔值。例如，一个 Pod 请求 10GB 的内存，而节点 A 的配置为 8 GB，那么节点 A 将返回 `false` 并从 Pod 的候选调度节点中剔除。另一个例子是节点 B 被集群管理员执行了 `kubectl cordon node-b`，被标记节点为不可调度，它也将会被调度决策直接剔除。 12 | 13 | 调度程序会根据限制条件和复杂性依次进行以下预选检查，检查顺序存储在一个名为 predicatesOrdering （顺序断言）的切片中： 14 | 15 | ```go 16 | var predicateOrdering = []string{ 17 | CheckNodeUnschedulablePred, 18 | GeneralPred, HostNamePred, PodFitsHostPortsPred, 19 | MatchNodeSelectorPred, PodFitsResourcesPred, NoDiskConflictPred, 20 | PodToleratesNodeTaintsPred, CheckNodeLabelPresencePred, 21 | CheckServiceAffinityPred, MaxEBSVolumeCountPred, MaxGCEPDVolumeCountPred, MaxCSIVolumeCountPred, 22 | MaxAzureDiskVolumeCountPred, MaxCinderVolumeCountPred, CheckVolumeBindingPred, NoVolumeZoneConflictPred, 23 | EvenPodsSpreadPred, MatchInterPodAffinityPred, 24 | } 25 | ``` 26 | 27 | * **CheckNodeUnschedulablePred**：检查节点是否可调度； 28 | * **GeneralPred**：一般性检测，如检测资源是否充足，Pod 的 Host、Port、Selector 是否匹配； 29 | * **HostNamePred**：检测 Pod 指定的 Node 名称是否和 Node 名称相同； 30 | * **PodFitsHostPortsPred**：检查 Pod 请求的端口（网络协议类型）在节点上是否可用； 31 | * **MatchNodeSelectorPred**：检测是否匹配 NodeSelector 节点选择器的设置； 32 | * **PodFitsResourcesPred**：检查节点的空闲资源（例如，CPU 和内存）是否满足 Pod 的要求； 33 | * **NoDiskConflictPred**：根据 Pod 请求的卷是否在节点上已经挂载，评估 Pod 和节点是否匹配； 34 | * **PodToleratesNodeTaintsPred**：检查 Pod 的容忍是否能容忍节点的污点； 35 | * **CheckNodeLabelPresencePred**：检测 NodeLabel 是否存在； 36 | * **CheckServiceAffinityPred**：检测服务的亲和； 37 | * **~~MaxEBSVolumeCountPred~~**：已废弃，检测 Volume 数量是否超过云服务商 AWS 的存储服务的配置限制； 38 | * **~~MaxGCEPDVolumeCountPred~~**：已废弃，检测 Volume 数量是否是否超过云服务商 Google Cloud 的存储服务的配置限制； 39 | * **MaxCSIVolumeCountPred**：Pod 附加 CSI 卷的数量，判断是否超过配置的限制； 40 | * **~~MaxAzureDiskVolumeCountPred~~**：已废弃，检测 Volume 数量是否超过云服务商 Azure 的存储服务的配置限制； 41 | * **~~MaxCinderVolumeCountPred~~**：已废弃，检测 Volume 数量是否超过云服务商 OpenStack 的存储服务的配置限制； 42 | * **CheckVolumeBindingPred**,：基于 Pod 的卷请求，评估 Pod 是否适合节点，这里的卷包括绑定的和未绑定的 PVC 都适用； 43 | * **NoVolumeZoneConflictPred**：给定该存储的故障区域限制， 评估 Pod 请求的卷在节点上是否可用； 44 | * **EvenPodsSpreadPred**：检测 Node 是否满足拓扑传播限制； 45 | * **MatchInterPodAffinityPred**：检测是否匹配 Pod 的亲和与反亲和的设置； 46 | 47 | 可以看出，Kubernetes 正在逐步移除某个具体云服务商的服务的相关代码，而使用接口（Interface）来扩展功能。 48 | 49 | 50 | ### 优选（打分） 51 | 52 | 预选通过返回 true 或者 false 来表示节点是否参与调度，而优选则是根据优先级的相对值对所有可调度节点进行排名，以下是为节点评分的优先级列表： 53 | 54 | * **EqualPriority**：给予所有节点相等的权重； 55 | * **MostRequestedPriority**：支持最多请求资源的节点。 该策略将 Pod 调度到整体工作负载所需的最少的一组节点上； 56 | * **RequestedToCapacityRatioPriority**：使用默认的打分方法模型，创建基于 ResourceAllocationPriority 的 requestedToCapacity； 57 | * **SelectorSpreadPriority**：属于同一 Service、 StatefulSet 或 ReplicaSet 的 Pod，尽可能地跨 Node 部署（鸡蛋不要只放在一个篮子里，分散风险，提高可用性）； 58 | * **ServiceSpreadingPriority**：对于给定的 Service，此策略旨在确保该 Service 关联的 Pod 在不同的节点上运行。 它偏向把 Pod 调度到没有该服务的节点。 整体来看，Service 对于单个节点故障变得更具弹性； 59 | * **InterPodAffinityPriority**：实现了 Pod 间亲和性与反亲和性的优先级； 60 | * **LeastRequestedPriority**：偏向最少请求资源的节点。 换句话说，节点上的 Pod 越多，使用的资源就越多，此策略给出的排名就越低； 61 | * **BalancedResourceAllocation**：偏向平衡资源使用的节点； 62 | * **NodePreferAvoidPodsPriority**：根据节点的注解 scheduler.alpha.kubernetes.io/preferAvoidPods 对节点进行优先级排序。 你可以使用它来暗示两个不同的 Pod 不应在同一节点上运行； 63 | * **NodeAffinityPriority**：根据节点亲和中 PreferredDuringSchedulingIgnoredDuringExecution 字段对节点进行优先级排序； 64 | * **TaintTolerationPriority**：根据节点上无法忍受的污点数量，给所有节点进行优先级排序。 此策略会根据排序结果调整节点的等级； 65 | * **ImageLocalityPriority**：偏向已在本地缓存 Pod 所需容器镜像的节点； 66 | * **EvenPodsSpreadPriority**：实现了 Pod 拓扑扩展约束的优先级排序； 67 | 68 | 69 | 这些分值将会累计为节点的总分，用来表明其优先级。例如，如果一个 Pod 需要 1 个 cpu 核心的资源，而有两个候选节点满足这一要求，其中节点 A 有 2 个 CPU 核心可供分配，节点 B 有 4 个核心可供分配，则节点 B 将具有更高的优先级。 如果多个节点返回相同的优先级，调度程序将会使用轮循的方式来选择节点。 70 | 71 | ### 最优解 72 | 73 | kube-scheduler 使用基于预选和基于优选的评分算法，理论上需要遍历所有 Node（实际上有缓存逻辑），而当集群中的 Node 数量超过一定数量后，调度算法的开销将变得很大。所以 kube-scheduler 为了解决性能问题，引入了"全局最优解"和"局部最优解"两种最优解。 74 | 75 | * **全局最优解**：遍历集群中的所有节点，找出全局最优的节点； 76 | * **局部最优解**：只遍历集群中的部分节点，找出局部最有的节点； 77 | 78 | 在小型集群中（例如 100 个节点），使用全局最优解。而在超大型集群中（例如 5000 个节点）使用局部最优解。 79 | 80 | ### 抢占机制 81 | 82 | Pod 可以设置优先级（PriorityClass，**注意：此处的 Pod 优先级与优选算法的优先级评分不是一个概念**）。 Pod 优先级表示一个 Pod 相对于其他 Pod 的重要性。 如果一个 Pod 无法被调度，调度程序会尝试抢占（驱逐）较低优先级的 Pod。 83 | 84 | 要使用优先级和抢占，需要： 85 | 86 | 1. 新增 PriorityClass 对象，并设置 value 值； 87 | 2. 将 Pod 的 Spec.priorityClassName 设置为上述新增的 PriorityClass； 88 | 89 | 上述设置了高优先级的 Pod（暂称为 `pod-h`） ，如果 kube-scheduler 没有找到满足其指定要求的节点，则触发抢占逻辑。抢占逻辑试图找到某个节点，在该节点中删除/驱逐一个或多个优先级低于 `pod-h` 的 Pod。被驱逐的 Pod 消失后，`pod-h` 可以被调度到该节点上。 90 | 91 | 92 | 93 | 94 | --------------------------------------------------------------------------------