新增说明及示例文件
This commit is contained in:
parent
823b19c3f0
commit
3445c145aa
description
Configuration
ConfigMaps
Secret
Service
Endpoints
Ingress
Service
Storage
PersistentVolumeClaims
PersistentVolumes
StorageClass
Strategy
HorizontalPodAutoscaler
LimitRanges
PodDisruptionBudget
ResourceQuotas
Workload
CronJob
DaemonSet
Deployment
Deployments
Job
Jobs
Pod
Pods
StatefulSet
StatefulSets
examples
dashboard
drawio
gitea
halo
kiwix-serve
mysql
pgadmin4
phpmyadmin
postgres
vaultwarden
wikijs
wiznote
29
description/Configuration/ConfigMaps/description.yml
Normal file
29
description/Configuration/ConfigMaps/description.yml
Normal file
@ -0,0 +1,29 @@
|
||||
# ConfigMaps 说明，官方文档：https://v1-22.docs.kubernetes.io/zh/docs/concepts/configuration/configmap
|
||||
# API 版本
|
||||
apiVersion: v1
|
||||
# 资源类型
|
||||
kind: ConfigMap
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 ConfigMap 的名称
|
||||
## 命名空间
|
||||
namespace: 此 ConfigMap 所属命名空间
|
||||
# 数据（ UTF-8 字节类型数据）
|
||||
data:
|
||||
## 直接定义属性（每一个键都映射到一个简单的值）
|
||||
key_name_1: 'key_value_1'
|
||||
key_name-2: key_value_2
|
||||
## 定义文件（每一个键都映射到一个文件）
|
||||
file_name_1.properties: |
|
||||
key.1.name=key.1.value
|
||||
key.2.name=key.2.value
|
||||
file_name_2.properties: |
|
||||
key.11.name=key.11.value
|
||||
key.12.name=key.12.value
|
||||
# 数据（二进制 base64 编码类型数据）
|
||||
binaryData:
|
||||
key_name_a: a2V5X3ZhbHVlX2E=
|
||||
key_name_b: a2V5X3ZhbHVlX2I=
|
||||
# 配置此 ConfigMaps 为不可变更（此 ConfigMaps 创建后，内容将不可变更，想要变更内容时，只能将此 ConfigMaps 删除后重建）
|
||||
immutable: true
|
||||
10
description/Configuration/ConfigMaps/example-halo.yml
Normal file
10
description/Configuration/ConfigMaps/example-halo.yml
Normal file
@ -0,0 +1,10 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: example-halo
|
||||
namespace: halo
|
||||
data:
|
||||
spring.sql.init.platform: mysql
|
||||
spring.r2dbc.url: r2dbc:pool:mysql://{HOST}:{PORT}/{DATABASE}
|
||||
halo.external-url: http://localhost:8090/
|
||||
immutable: true
|
||||
8
description/Configuration/ConfigMaps/example-mysql.yml
Normal file
8
description/Configuration/ConfigMaps/example-mysql.yml
Normal file
@ -0,0 +1,8 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: example-mysql
|
||||
namespace: mysql
|
||||
data:
|
||||
MYSQL_DATABASE: app
|
||||
immutable: true
|
||||
23
description/Configuration/Secret/description.yml
Normal file
23
description/Configuration/Secret/description.yml
Normal file
@ -0,0 +1,23 @@
|
||||
# Secret 说明，官方文档：https://v1-22.docs.kubernetes.io/zh/docs/concepts/configuration/secret
|
||||
# API 版本
|
||||
apiVersion: v1
|
||||
# 资源类型
|
||||
kind: Secret
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 Secret 的名称
|
||||
## 命名空间
|
||||
namespace: 此 Secret 所属命名空间
|
||||
# 类型
|
||||
type: Opaque
|
||||
# 数据（ UTF-8 字节类型）
|
||||
stringData:
|
||||
key_name_1: key_value_1
|
||||
key_name-2: key_value_2
|
||||
# 数据（ base64 编码类型数据）
|
||||
data:
|
||||
key_name_a: a2V5X3ZhbHVlX2E=
|
||||
key_name_b: a2V5X3ZhbHVlX2I=
|
||||
# 配置此 Secret 为不可变更（此 Secret 创建后，内容将不可变更，想要变更内容时，只能将此 Secret 删除后重建）
|
||||
immutable: true
|
||||
12
description/Configuration/Secret/example-halo.yml
Normal file
12
description/Configuration/Secret/example-halo.yml
Normal file
@ -0,0 +1,12 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: example-halo
|
||||
namespace: halo
|
||||
type: Opaque
|
||||
stringData:
|
||||
spring.r2dbc.username: halo
|
||||
spring.r2dbc.password: pKMoNmuCyxP6QZq7
|
||||
halo.security.initializer.superadminusername: admin
|
||||
halo.security.initializer.superadminpassword: QrgkqetX7LNz38hB
|
||||
immutable: true
|
||||
11
description/Configuration/Secret/example-mysql.yml
Normal file
11
description/Configuration/Secret/example-mysql.yml
Normal file
@ -0,0 +1,11 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: example-mysql
|
||||
namespace: mysql
|
||||
type: Opaque
|
||||
stringData:
|
||||
MYSQL_ROOT_PASSWORD: pKMoNmuCyxP6QZq7
|
||||
MYSQL_USER: app
|
||||
MYSQL_PASSWORD: QrgkqetX7LNz38hB
|
||||
immutable: true
|
||||
25
description/Service/Endpoints/description.yml
Normal file
25
description/Service/Endpoints/description.yml
Normal file
@ -0,0 +1,25 @@
|
||||
# Endpoint 说明，官方文档：
|
||||
# API 版本
|
||||
apiVersion: v1
|
||||
# 资源类型
|
||||
kind: Endpoints
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 Endpoint 的名称
|
||||
## 命名空间
|
||||
namespace: 此 Endpoint 所属命名空间
|
||||
## 标签
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
# 内容
|
||||
subsets:
|
||||
## 端点1
|
||||
### 端点地址
|
||||
- addresses:
|
||||
#### 端点 IP
|
||||
- ip: 端点 IP
|
||||
### 端点端口号
|
||||
ports:
|
||||
- port: 端点端口号
|
||||
14
description/Service/Endpoints/example.yml
Normal file
14
description/Service/Endpoints/example.yml
Normal file
@ -0,0 +1,14 @@
|
||||
apiVersion: v1
|
||||
kind: Endpoints
|
||||
metadata:
|
||||
name: example-endpoints
|
||||
namespace: demo
|
||||
labels:
|
||||
name: example-endpoints
|
||||
app: demo
|
||||
type: endpoints
|
||||
subsets:
|
||||
- addresses:
|
||||
- ip: 192.0.2.42
|
||||
ports:
|
||||
- port: 9376
|
||||
60
description/Service/Ingress/description.yml
Normal file
60
description/Service/Ingress/description.yml
Normal file
@ -0,0 +1,60 @@
|
||||
# Ingress 说明，官方文档： https://v1-22.docs.kubernetes.io/zh/docs/concepts/services-networking/ingress
|
||||
# API 版本
|
||||
apiVersion: networking.k8s.io/v1
|
||||
# 资源类型
|
||||
kind: Ingress
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 Ingress 的名称
|
||||
## 命名空间
|
||||
namespace: 此 Ingress 所属命名空间
|
||||
## 标签
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
## 注解（使用不同的控制器时注解不同，具体见官方文档）
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
# 内容
|
||||
spec:
|
||||
## TLS 证书
|
||||
tls:
|
||||
### TLS 证书1
|
||||
#### 该 TLS 证书对应的 HOST（需要和 rules 中配置的 host 保持一致）
|
||||
- hosts:
|
||||
- host1
|
||||
- host2
|
||||
#### 该 TLS 证书使用的 Secret 名称
|
||||
secretName: 该 TLS 证书使用的 Secret 名称
|
||||
## 规则
|
||||
rules:
|
||||
### 规则1
|
||||
#### HOST
|
||||
- host: HOST
|
||||
#### HTTP 规则
|
||||
http:
|
||||
##### 路径
|
||||
paths:
|
||||
###### 路径1
|
||||
####### 路径
|
||||
- path: 路径
|
||||
####### 路径类型【ImplementationSpecific：视 IngressClass 而定；Prefix：前缀匹配；Exact：精确匹配】
|
||||
pathType: 路径类型
|
||||
####### 后端
|
||||
backend:
|
||||
######## Service 类型（常用于后端服务，不能和 Resource 类型同时配置）
|
||||
service:
|
||||
######### Service 的名称
|
||||
name: Service 的名称
|
||||
######### Service 的端口号
|
||||
port:
|
||||
number: Service 的端口号
|
||||
######## Resource 类型（常用于前端静态资源服务，不能和 Service 类型同时配置）
|
||||
resource:
|
||||
#########
|
||||
apiGroup: k8s.example.com
|
||||
######### 资源类型
|
||||
kind: StorageBucket
|
||||
######### 资源名称
|
||||
name: icon-assets
|
||||
31
description/Service/Ingress/example-multi.yml
Normal file
31
description/Service/Ingress/example-multi.yml
Normal file
@ -0,0 +1,31 @@
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: example-ingress-multi
|
||||
namespace: demo
|
||||
labels:
|
||||
name: example-ingress-multi
|
||||
app: ingress
|
||||
type: ingress
|
||||
spec:
|
||||
rules:
|
||||
- host: "foo.bar.com"
|
||||
http:
|
||||
paths:
|
||||
- pathType: Prefix
|
||||
path: "/bar"
|
||||
backend:
|
||||
service:
|
||||
name: service1
|
||||
port:
|
||||
number: 80
|
||||
- host: "*.foo.com"
|
||||
http:
|
||||
paths:
|
||||
- pathType: Prefix
|
||||
path: "/foo"
|
||||
backend:
|
||||
service:
|
||||
name: service2
|
||||
port:
|
||||
number: 80
|
||||
22
description/Service/Ingress/example-single.yml
Normal file
22
description/Service/Ingress/example-single.yml
Normal file
@ -0,0 +1,22 @@
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: example-ingress-single
|
||||
namespace: demo
|
||||
labels:
|
||||
name: example-ingress-single
|
||||
app: ingress
|
||||
type: ingress
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
spec:
|
||||
rules:
|
||||
- http:
|
||||
paths:
|
||||
- path: /testpath
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: test
|
||||
port:
|
||||
number: 80
|
||||
25
description/Service/Ingress/example-tls.yml
Normal file
25
description/Service/Ingress/example-tls.yml
Normal file
@ -0,0 +1,25 @@
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: example-ingress-tls
|
||||
namespace: demo
|
||||
labels:
|
||||
name: example-ingress-tls
|
||||
app: ingress
|
||||
type: ingress
|
||||
spec:
|
||||
tls:
|
||||
- hosts:
|
||||
- https-example.foo.com
|
||||
secretName: testsecret-tls
|
||||
rules:
|
||||
- host: https-example.foo.com
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: service1
|
||||
port:
|
||||
number: 80
|
||||
42
description/Service/Service/description.yml
Normal file
42
description/Service/Service/description.yml
Normal file
@ -0,0 +1,42 @@
|
||||
# Service 说明，官方文档： https://v1-22.docs.kubernetes.io/zh/docs/concepts/services-networking/service
|
||||
# API 版本
|
||||
apiVersion: v1
|
||||
# 资源类型
|
||||
kind: Service
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 Service 的名称
|
||||
## 命名空间
|
||||
namespace: 此 Service 所属命名空间
|
||||
## 标签
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
# 内容
|
||||
spec:
|
||||
## 指定 Service 类型【ClusterIP：通过集群的内部 IP 暴露服务，选择该值时服务只能够在集群内部访问；NodePort：通过每个节点上的 IP 和静态端口（NodePort）暴露服务；LoadBalancer：使用云提供商的负载均衡器向外部暴露服务；ExternalName：通过返回 CNAME 和对应值，可以将服务映射到 externalName 字段的内容】
|
||||
type: Service 类型
|
||||
## 指定 Pod 选择器（ 此 Service 需要暴露哪些 Pod ）
|
||||
selector:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
## 端口号
|
||||
ports:
|
||||
### 端口号1
|
||||
#### 端口名称
|
||||
- name:
|
||||
#### 端口类型
|
||||
protocol: 端口类型
|
||||
#### Service 端口号
|
||||
port: Service 端口号
|
||||
#### Pod 端口号
|
||||
targetPort: Pod 端口号
|
||||
### Node 端口号（仅 type 为 NodePort 时使用）
|
||||
nodePort: Node 端口号
|
||||
## ExternalName（仅 type 为 ExternalName 时使用）
|
||||
externalName: ExternalName
|
||||
## 指定外部IP（该 Service 允许通过哪些外部 IP:Port 访问）
|
||||
externalIPs:
|
||||
- externalIP1:Port1
|
||||
- externalIP2:Port2
|
||||
16
description/Service/Service/example-externalips.yml
Normal file
16
description/Service/Service/example-externalips.yml
Normal file
@ -0,0 +1,16 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: example-externalips
|
||||
namespace: demo
|
||||
labels:
|
||||
name: example-externalips
|
||||
app: demo
|
||||
type: service
|
||||
spec:
|
||||
- name: http
|
||||
protocol: TCP
|
||||
port: 80
|
||||
targetPort: 9376
|
||||
externalIPs:
|
||||
- 80.11.12.10
|
||||
12
description/Service/Service/example-externalname.yml
Normal file
12
description/Service/Service/example-externalname.yml
Normal file
@ -0,0 +1,12 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: example-externalname
|
||||
namespace: demo
|
||||
labels:
|
||||
name: example-externalname
|
||||
app: demo
|
||||
type: service
|
||||
spec:
|
||||
type: ExternalName
|
||||
externalName: my.database.example.com
|
||||
21
description/Service/Service/example-multi.yml
Normal file
21
description/Service/Service/example-multi.yml
Normal file
@ -0,0 +1,21 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: example-multi
|
||||
namespace: demo
|
||||
labels:
|
||||
name: example-multi
|
||||
app: demo
|
||||
type: service
|
||||
spec:
|
||||
selector:
|
||||
app: app1
|
||||
ports:
|
||||
- name: http
|
||||
protocol: TCP
|
||||
port: 80
|
||||
targetPort: 9376
|
||||
- name: https
|
||||
protocol: TCP
|
||||
port: 443
|
||||
targetPort: 9377
|
||||
17
description/Service/Service/example-nodeport.yml
Normal file
17
description/Service/Service/example-nodeport.yml
Normal file
@ -0,0 +1,17 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: example-nodeport
|
||||
namespace: demo
|
||||
labels:
|
||||
name: example-nodeport
|
||||
app: demo
|
||||
type: service
|
||||
spec:
|
||||
selector:
|
||||
app: app1
|
||||
ports:
|
||||
- protocol: TCP
|
||||
port: 80
|
||||
targetPort: 80
|
||||
nodePort: 30007
|
||||
16
description/Service/Service/example-single.yml
Normal file
16
description/Service/Service/example-single.yml
Normal file
@ -0,0 +1,16 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: example-single
|
||||
namespace: demo
|
||||
labels:
|
||||
name: example-single
|
||||
app: demo
|
||||
type: service
|
||||
spec:
|
||||
selector:
|
||||
app: app1
|
||||
ports:
|
||||
- protocol: TCP
|
||||
port: 80
|
||||
targetPort: 9376
|
||||
33
description/Storage/PersistentVolumeClaims/description.yml
Normal file
33
description/Storage/PersistentVolumeClaims/description.yml
Normal file
@ -0,0 +1,33 @@
|
||||
# PersistentVolumeClaim（持久卷申领）说明，官方文档：https://kubernetes.io/zh-cn/docs/concepts/storage/persistent-volumes
|
||||
# API 版本
|
||||
apiVersion: v1
|
||||
# 资源名称
|
||||
kind: PersistentVolumeClaim
|
||||
# 资源元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 该 PersistentVolumeClaim 的名称【自定义，见名知意】
|
||||
# 内容
|
||||
spec:
|
||||
## 资源
|
||||
resources:
|
||||
requests:
|
||||
### 容量
|
||||
storage: 该 PersistentVolumeClaim 使用的空间大小【自定义，单位使用量纲，如：Ki、Mi、Gi、Ti、Pi、Ei】
|
||||
## 卷模式
|
||||
volumeMode: 该 PersistentVolumeClaim 使用的卷模式【Filesystem：默认，文件系统；Block：块】
|
||||
## 访问模式
|
||||
accessModes:
|
||||
- 该 PersistentVolumeClaim 使用的访问模式【ReadWriteOnce：卷可以被一个节点以读写方式挂载；ReadOnlyMany：卷可以被多个节点以只读方式挂载；ReadWriteMany：卷可以被多个节点以读写方式挂载；ReadWriteOncePod：卷可以被单个 Pod 以读写方式挂载（整个集群中只有一个 Pod 可以读取和写入）】
|
||||
## Storage Class 名称
|
||||
storageClassName: 该 PersistentVolumeClaim 使用的 StorageClass 的名称
|
||||
## 指定 PersistentVolume （ 配置后该 PersistentVolumeClaim 只能绑定指定的 PersistentVolume ）
|
||||
volumeName: PersistentVolume 的名称
|
||||
## 选择器
|
||||
selector:
|
||||
### 卷必须包含带有此值的标签
|
||||
matchLabels:
|
||||
name: value
|
||||
### 通过设定键（key）、值列表和操作符（operator） 来构造的需求
|
||||
matchExpressions:
|
||||
- {key: key的值, operator: operator的值【In：包含；NotIn：不包含；Exists：存在；DoesNotExist：不存在】,values: [value的值1,value的值2,...]}
|
||||
17
description/Storage/PersistentVolumeClaims/example.yml
Normal file
17
description/Storage/PersistentVolumeClaims/example.yml
Normal file
@ -0,0 +1,17 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: pvc-example
|
||||
spec:
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteMany
|
||||
storageClassName: storage-local-example
|
||||
selector:
|
||||
matchLabels:
|
||||
release: "stable"
|
||||
matchExpressions:
|
||||
- {key: environment, operator: In, values: [dev]}
|
||||
34
description/Storage/PersistentVolumes/description.yml
Normal file
34
description/Storage/PersistentVolumes/description.yml
Normal file
@ -0,0 +1,34 @@
|
||||
# PersistentVolume（持久卷）说明，官方文档：https://kubernetes.io/zh-cn/docs/concepts/storage/persistent-volumes
|
||||
# API 版本
|
||||
apiVersion: v1
|
||||
# 资源名称
|
||||
kind: PersistentVolume
|
||||
# 资源元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 该 PersistentVolume 的名称【自定义，见名知意】
|
||||
# 内容
|
||||
spec:
|
||||
## 资源
|
||||
capacity:
|
||||
### 容量
|
||||
storage: 该 PersistentVolume 使用的空间大小【自定义，单位使用量纲，如：Ki、Mi、Gi、Ti、Pi、Ei】
|
||||
## 卷模式
|
||||
volumeMode: 该 PersistentVolume 使用的卷模式【Filesystem：默认，文件系统；Block：块】
|
||||
## 访问模式
|
||||
accessModes:
|
||||
- 该 PersistentVolume 使用的访问模式【ReadWriteOnce：卷可以被一个节点以读写方式挂载；ReadOnlyMany：卷可以被多个节点以只读方式挂载；ReadWriteMany：卷可以被多个节点以读写方式挂载；ReadWriteOncePod：卷可以被单个 Pod 以读写方式挂载（整个集群中只有一个 Pod 可以读取和写入）】
|
||||
## 回收策略
|
||||
persistentVolumeReclaimPolicy: 该 PersistentVolume 使用的回收策略【Retain：保留、手动回收（当 PersistentVolumeClaim 被删除时，PersistentVolume 仍然存在，需要手动删除 PersistentVolume 及 PersistentVolume 中的数据）；Delete：删除（当 PersistentVolumeClaim 被删除时，自动删除 PersistentVolume 及 PersistentVolume 中的数据）】
|
||||
## StorageClass 名称
|
||||
storageClassName: 该 PersistentVolume 使用的 StorageClass 的名称
|
||||
## 预留 PersistentVolume（配置该 PersistentVolume 只能被指定的 PersistentVolumeClaim 绑定）
|
||||
claimRef:
|
||||
name: PersistentVolumeClaim 的名称
|
||||
namespace: Namespace 的名称
|
||||
## 挂载选项
|
||||
mount-options:
|
||||
挂载选项参数【 不同类型的存储类型参数不一样，具体见官方文档：https://kubernetes.io/zh-cn/docs/concepts/storage/persistent-volumes/#mount-options 】
|
||||
## 节点亲和性
|
||||
nodeAffinity:
|
||||
节点亲和性参数【 local 存储类型需要声明，具体见官方文档：https://kubernetes.io/zh-cn/docs/concepts/storage/persistent-volumes/#node-affinity 】
|
||||
24
description/Storage/PersistentVolumes/example-local.yml
Normal file
24
description/Storage/PersistentVolumes/example-local.yml
Normal file
@ -0,0 +1,24 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: pv-local-example
|
||||
spec:
|
||||
capacity:
|
||||
storage: 5Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: storage-local-example
|
||||
local:
|
||||
path: /data/k8s/pv/local/example
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: kubernetes.io/hostname
|
||||
operator: In
|
||||
values:
|
||||
- nodename-example-1
|
||||
- nodename-example-2
|
||||
- nodename-example-3
|
||||
14
description/Storage/PersistentVolumes/example-nfs.yml
Normal file
14
description/Storage/PersistentVolumes/example-nfs.yml
Normal file
@ -0,0 +1,14 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: pv-nfs-example
|
||||
spec:
|
||||
capacity:
|
||||
storage: 5Gi
|
||||
accessModes:
|
||||
- ReadWriteMany
|
||||
nfs:
|
||||
server: nfs-server.default.svc.cluster.local
|
||||
path: "/"
|
||||
mountOptions:
|
||||
- nfsvers=4.2
|
||||
23
description/Storage/StorageClass/description.yml
Normal file
23
description/Storage/StorageClass/description.yml
Normal file
@ -0,0 +1,23 @@
|
||||
# StorageClass（存储类） 说明，官方文档：https://kubernetes.io/zh-cn/docs/concepts/storage/storage-classes
|
||||
# API 版本
|
||||
apiVersion: storage.k8s.io/v1
|
||||
# 资源名称
|
||||
kind: StorageClass
|
||||
# 资源元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 该 StorageClass 的名称【自定义，见名知意】
|
||||
# 制备器（供应商）
|
||||
provisioner: 该 StorageClass 使用的制备器【可选制备器见官方文档： https://kubernetes.io/zh-cn/docs/concepts/storage/storage-classes/#provisioner 】
|
||||
# 回收策略
|
||||
reclaimPolicy: 该 StorageClass 的回收策略【Delete：删除（默认，当使用此 PersistentVolume 的对象被删除时，此 PersistentVolume 自动删除）；Retain：保留（当使用此 PersistentVolume 的对象被删除时，此 PersistentVolume 不会自动删除）】
|
||||
# 卷捆绑模型
|
||||
volumeBindingMode: 该 StorageClass 的绑定模式【Immediate：默认，PersistentVolumeClaim 创建后立即完成制备和绑定；WaitForFirstConsumer：使用 PersistentVolumeClaim 的 Pod 被创建后才制备和绑定】
|
||||
# 允许的拓扑结构
|
||||
allowedTopologies: 该 StorageClass 允许的拓扑架构【具体见官方文档：https://kubernetes.io/zh-cn/docs/concepts/storage/storage-classes/#allowed-topologies 】
|
||||
# 是否允许卷扩展
|
||||
allowVolumeExpansion: 是否允许卷扩展【true：允许；false：不允许。仅部分制备器可用，具体见官方文档：https://kubernetes.io/zh-cn/docs/concepts/storage/storage-classes/#allow-volume-expansion 】
|
||||
# 挂载选项
|
||||
mountOptions: 该 StorageClass 的挂载选项【仅部分制备器可用，具体见官方文档：https://kubernetes.io/zh-cn/docs/concepts/storage/persistent-volumes/#mount-options 】
|
||||
# 参数
|
||||
parameters: 该 StorageClass 的参数【使用不同类型的制备器时参数不一样，具体见官方文档：https://kubernetes.io/zh-cn/docs/concepts/storage/storage-classes/#parameters 】
|
||||
7
description/Storage/StorageClass/example-local.yml
Normal file
7
description/Storage/StorageClass/example-local.yml
Normal file
@ -0,0 +1,7 @@
|
||||
apiVersion: storage.k8s.io/v1
|
||||
kind: StorageClass
|
||||
metadata:
|
||||
name: storage-local-example
|
||||
provisioner: kubernetes.io/no-provisioner
|
||||
reclaimPolicy: Retain
|
||||
volumeBindingMode: WaitForFirstConsumer
|
||||
42
description/Strategy/HorizontalPodAutoscaler/description.yml
Normal file
42
description/Strategy/HorizontalPodAutoscaler/description.yml
Normal file
@ -0,0 +1,42 @@
|
||||
# HorizontalPodAutoscaler（Pod 水平自动扩缩）说明，官方文档：https://v1-22.docs.kubernetes.io/zh/docs/tasks/run-application/horizontal-pod-autoscale
|
||||
# API 版本
|
||||
apiVersion: autoscaling/v2
|
||||
# 资源类型
|
||||
kind: HorizontalPodAutoscaler
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 HorizontalPodAutoscaler 的名称
|
||||
## 命名空间
|
||||
namespace: 此 HorizontalPodAutoscaler 所属的命名空间
|
||||
# 数据
|
||||
spec:
|
||||
## 扩缩目标
|
||||
scaleTargetRef:
|
||||
### 扩缩目标的 API 版本
|
||||
apiVersion: apps/v1
|
||||
### 扩缩目标的资源类型
|
||||
kind: Deployment
|
||||
### 扩缩目标的资源名称
|
||||
name: php-apache
|
||||
## 最小副本数
|
||||
minReplicas: 1
|
||||
## 最大副本数
|
||||
maxReplicas: 10
|
||||
## 指标
|
||||
metrics:
|
||||
### 指标1
|
||||
#### 指标类型【Resource：资源（如 CPU、内存等）；Pods：Kubernetes Pods；Object：对象】
|
||||
- type: Resource
|
||||
#### 指标详情
|
||||
resource:
|
||||
##### 指标名称
|
||||
name: cpu
|
||||
##### 指标
|
||||
target:
|
||||
###### 类型 【Utilization：百分比；AverageValue：绝对值】
|
||||
type: Utilization
|
||||
###### 数值（百分比）【仅当 type 为 Utilization 时生效】
|
||||
averageUtilization: 50
|
||||
###### 数值（绝对值）【仅当 type 为 AverageValue 时生效】
|
||||
averageValue: 0
|
||||
19
description/Strategy/HorizontalPodAutoscaler/example.yml
Normal file
19
description/Strategy/HorizontalPodAutoscaler/example.yml
Normal file
@ -0,0 +1,19 @@
|
||||
apiVersion: autoscaling/v2
|
||||
kind: HorizontalPodAutoscaler
|
||||
metadata:
|
||||
name: hpa-example
|
||||
namespace: demo
|
||||
spec:
|
||||
scaleTargetRef:
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
name: php-apache
|
||||
minReplicas: 1
|
||||
maxReplicas: 10
|
||||
metrics:
|
||||
- type: Resource
|
||||
resource:
|
||||
name: cpu
|
||||
target:
|
||||
type: Utilization
|
||||
averageUtilization: 50
|
||||
35
description/Strategy/LimitRanges/description.yml
Normal file
35
description/Strategy/LimitRanges/description.yml
Normal file
@ -0,0 +1,35 @@
|
||||
# LimitRange（限制范围）说明，官方文档：https://v1-22.docs.kubernetes.io/zh/docs/concepts/policy/limit-range
|
||||
# API 版本
|
||||
apiVersion: v1
|
||||
# 资源类型
|
||||
kind: LimitRange
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 LimitRange 的名称
|
||||
## 命名空间
|
||||
namespace: 此 LimitRange 所属的命名空间
|
||||
# 数据
|
||||
spec:
|
||||
## 限制详情
|
||||
limits:
|
||||
### 默认值
|
||||
- default:
|
||||
cpu: 500m
|
||||
memory: 1Gi
|
||||
### 默认请求值
|
||||
defaultRequest:
|
||||
cpu: 500m
|
||||
memory: 1Gi
|
||||
### 最大值
|
||||
max:
|
||||
cpu: 800m
|
||||
memory: 2Gi
|
||||
storage: 5Gi
|
||||
### 最小值
|
||||
min:
|
||||
cpu: 200m
|
||||
memory: 500Mi
|
||||
storage: 1Gi
|
||||
### 限制类型
|
||||
type: Container
|
||||
22
description/Strategy/LimitRanges/example.yml
Normal file
22
description/Strategy/LimitRanges/example.yml
Normal file
@ -0,0 +1,22 @@
|
||||
apiVersion: v1
|
||||
kind: LimitRange
|
||||
metadata:
|
||||
name: limit-range-example
|
||||
namespace: demo
|
||||
spec:
|
||||
limits:
|
||||
- default:
|
||||
cpu: 500m
|
||||
memory: 1Gi
|
||||
defaultRequest:
|
||||
cpu: 500m
|
||||
memory: 1Gi
|
||||
max:
|
||||
cpu: 800m
|
||||
memory: 2Gi
|
||||
storage: 5Gi
|
||||
min:
|
||||
cpu: 200m
|
||||
memory: 500Mi
|
||||
storage: 1Gi
|
||||
type: Container
|
||||
22
description/Strategy/PodDisruptionBudget/description.yml
Normal file
22
description/Strategy/PodDisruptionBudget/description.yml
Normal file
@ -0,0 +1,22 @@
|
||||
# PodDisruptionBudget（Pod干扰预算）说明，官方文档：https://v1-22.docs.kubernetes.io/zh/docs/tasks/run-application/configure-pdb
|
||||
# API 版本
|
||||
apiVersion: policy/v1beta1
|
||||
# 资源类型
|
||||
kind: PodDisruptionBudget
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 PodDisruptionBudget 的名称
|
||||
## 命名空间
|
||||
namespace: 此 PodDisruptionBudget 所属的命名空间
|
||||
# 数据
|
||||
spec:
|
||||
## 最少可用 Pod 数（可配置绝对值或百分比，不能和 maxUnavailable 同时存在）
|
||||
minAvailable: 2
|
||||
## 最大不可用 Pod 数（可配置绝对值或百分比，不能和 minAvailable 同时存在）
|
||||
maxUnavailable: 50%
|
||||
## 作用的 Pod 集合
|
||||
selector:
|
||||
### 标签选择
|
||||
matchLabels:
|
||||
name: value
|
||||
10
description/Strategy/PodDisruptionBudget/example.yml
Normal file
10
description/Strategy/PodDisruptionBudget/example.yml
Normal file
@ -0,0 +1,10 @@
|
||||
apiVersion: policy/v1beta1
|
||||
kind: PodDisruptionBudget
|
||||
metadata:
|
||||
name: pdb-example
|
||||
namespace: demo
|
||||
spec:
|
||||
minAvailable: 2
|
||||
selector:
|
||||
matchLabels:
|
||||
app: zookeeper
|
||||
69
description/Strategy/ResourceQuotas/description-item.yml
Normal file
69
description/Strategy/ResourceQuotas/description-item.yml
Normal file
@ -0,0 +1,69 @@
|
||||
# ResourceQuota （资源配额）说明，官方文档：https://v1-22.docs.kubernetes.io/zh/docs/concepts/policy/resource-quotas
|
||||
# API 版本
|
||||
apiVersion: v1
|
||||
# 资源类型
|
||||
kind: ResourceQuota
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 ResourceQuota 的名称
|
||||
## 命名空间
|
||||
namespace: 此 ResourceQuota 所属的命名空间
|
||||
# 数据
|
||||
spec:
|
||||
## 配额
|
||||
hard:
|
||||
### 在该命名空间中，所有非终止状态的 Pod，其 CPU 需求总量不能超过该值
|
||||
cpu: '1000'
|
||||
### 在该命名空间中，所有非终止状态的 Pod，其内存需求总量不能超过该值
|
||||
memory: 200Gi
|
||||
### 在该命名空间中，所有非终止状态的 Pod，其 CPU 限额总量不能超过该值
|
||||
limits.cpu: '1000'
|
||||
### 在该命名空间中，所有非终止状态的 Pod，其内存限额总量不能超过该值
|
||||
limits.memory: 200Gi
|
||||
### 在该命名空间中，所有 PVC，存储资源的需求总量不能超过该值
|
||||
requests.storage: 1Ti
|
||||
### 在该命名空间中，对于 <storage-class-name> 类型的 PVC，存储资源的需求总量不能超过该值
|
||||
<storage-class-name>.storageclass.storage.k8s.io/requests.storage: 300Gi
|
||||
### 在该命名空间中，允许的 PVC 总量
|
||||
persistentvolumeclaims: '1000'
|
||||
### 在该命名空间中，允许的 <storage-class-name> 类型的 PVC 总量
|
||||
<storage-class-name>.storageclass.storage.k8s.io/persistentvolumeclaims: '300'
|
||||
### 在该命名空间中，允许存在的 ReplicationController 总数上限
|
||||
replicationcontrollers: '1000'
|
||||
### 在该命名空间中，允许存在的 ResourceQuota 总数上限
|
||||
resourcequotas: '100'
|
||||
### 在该命名空间中，允许存在的 ConfigMap 总数上限
|
||||
configmaps: '1000'
|
||||
### 在该命名空间中，允许存在的 Secret 总数上限
|
||||
secrets: '1000'
|
||||
### 在该命名空间中，允许存在的 Service 总数上限
|
||||
services: '100'
|
||||
### 在该命名空间中，允许存在的 LoadBalancer 类型的 Service 总数上限
|
||||
services.loadbalancers: '100'
|
||||
### 在该命名空间中，允许存在的 NodePort 类型的 Service 总数上限
|
||||
services.nodeports: '100'
|
||||
### 在该命名空间中，允许存在的非终止状态的 Pod 总数上限
|
||||
pods: '100'
|
||||
## 配额作用域
|
||||
scopeSelector:
|
||||
matchExpressions:
|
||||
### 匹配所有引用了所指定的优先级类的 Pods【 operator 可选：In（包含）、NotIn（不包含）、Exists（存在）、DoesNotExist（不存在）；values 可选：low、medium、high】
|
||||
- scopeName: PriorityClass
|
||||
operator: In
|
||||
values:
|
||||
- high
|
||||
### 匹配所有 spec.activeDeadlineSeconds 不小于 0 的 Pod（不能和 NotTerminating 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: Terminating
|
||||
operator: Exists
|
||||
### 匹配所有 spec.activeDeadlineSeconds 是 nil 的 Pod（不能和 Terminating 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: NotTerminating
|
||||
operator: Exists
|
||||
### 匹配所有 Qos 是 BestEffort 的 Pod（不能和 NotBestEffort 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: BestEffort
|
||||
operator: Exists
|
||||
### 匹配所有 Qos 不是 BestEffort 的 Pod（不能和 BestEffort 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: NotBestEffort
|
||||
operator: Exists
|
||||
### 匹配那些设置了跨名字空间 （反）亲和性条件的 Pod
|
||||
- scopeName: CrossNamespaceAffinity
|
||||
80
description/Strategy/ResourceQuotas/description-list.yml
Normal file
80
description/Strategy/ResourceQuotas/description-list.yml
Normal file
@ -0,0 +1,80 @@
|
||||
# ResourceQuota （资源配额）（ List ）说明，官方文档：https://v1-22.docs.kubernetes.io/zh/docs/concepts/policy/resource-quotas
|
||||
# API 版本
|
||||
apiVersion: v1
|
||||
# 资源类型
|
||||
kind: List
|
||||
# 资源详情
|
||||
items:
|
||||
## ResourceQuota 1
|
||||
### API 版本
|
||||
- apiVersion: v1
|
||||
### 资源类型
|
||||
kind: ResourceQuota
|
||||
### 元数据
|
||||
metadata:
|
||||
#### 名称
|
||||
name: 此 ResourceQuota 的名称
|
||||
#### 命名空间
|
||||
namespace: 此 ResourceQuota 所属的命名空间
|
||||
### 数据
|
||||
spec:
|
||||
#### 配额
|
||||
hard:
|
||||
##### 在该命名空间中，所有非终止状态的 Pod，其 CPU 需求总量不能超过该值
|
||||
cpu: '1000'
|
||||
### 在该命名空间中，所有非终止状态的 Pod，其内存需求总量不能超过该值
|
||||
memory: 200Gi
|
||||
### 在该命名空间中，所有非终止状态的 Pod，其 CPU 限额总量不能超过该值
|
||||
limits.cpu: ''
|
||||
### 在该命名空间中，所有非终止状态的 Pod，其内存限额总量不能超过该值
|
||||
limits.memory:
|
||||
### 在该命名空间中，所有 PVC，存储资源的需求总量不能超过该值
|
||||
requests.storage: 1Ti
|
||||
### 在该命名空间中，对于 <storage-class-name> 类型的 PVC，存储资源的需求总量不能超过该值
|
||||
<storage-class-name>.storageclass.storage.k8s.io/requests.storage: 300Gi
|
||||
### 在该命名空间中，允许的 PVC 总量
|
||||
persistentvolumeclaims: '1000'
|
||||
### 在该命名空间中，允许的 <storage-class-name> 类型的 PVC 总量
|
||||
<storage-class-name>.storageclass.storage.k8s.io/persistentvolumeclaims: '300'
|
||||
### 在该命名空间中，允许存在的 ReplicationController 总数上限
|
||||
replicationcontrollers: '1000'
|
||||
### 在该命名空间中，允许存在的 ResourceQuota 总数上限
|
||||
resourcequotas: '100'
|
||||
### 在该命名空间中，允许存在的 ConfigMap 总数上限
|
||||
configmaps: '1000'
|
||||
### 在该命名空间中，允许存在的 Secret 总数上限
|
||||
secrets: '1000'
|
||||
### 在该命名空间中，允许存在的 Service 总数上限
|
||||
services: '100'
|
||||
### 在该命名空间中，允许存在的 LoadBalancer 类型的 Service 总数上限
|
||||
services.loadbalancers: '100'
|
||||
### 在该命名空间中，允许存在的 NodePort 类型的 Service 总数上限
|
||||
services.nodeports: '100'
|
||||
### 在该命名空间中，允许存在的非终止状态的 Pod 总数上限
|
||||
pods: '100'
|
||||
## 配额作用域
|
||||
scopeSelector:
|
||||
matchExpressions:
|
||||
### 匹配所有引用了所指定的优先级类的 Pods【 operator 可选：In（包含）、NotIn（不包含）、Exists（存在）、DoesNotExist（不存在）；values 可选：low、medium、high】
|
||||
- scopeName: PriorityClass
|
||||
operator: In
|
||||
values:
|
||||
- high
|
||||
### 匹配所有 spec.activeDeadlineSeconds 不小于 0 的 Pod（不能和 NotTerminating 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: Terminating
|
||||
operator: Exists
|
||||
### 匹配所有 spec.activeDeadlineSeconds 是 nil 的 Pod（不能和 Terminating 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: NotTerminating
|
||||
operator: Exists
|
||||
### 匹配所有 Qos 是 BestEffort 的 Pod（不能和 NotBestEffort 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: BestEffort
|
||||
operator: Exists
|
||||
### 匹配所有 Qos 不是 BestEffort 的 Pod（不能和 BestEffort 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: NotBestEffort
|
||||
operator: Exists
|
||||
### 匹配那些设置了跨名字空间 （反）亲和性条件的 Pod
|
||||
- scopeName: CrossNamespaceAffinity
|
||||
## ResourceQuota 2
|
||||
### API 版本
|
||||
- apiVersion: v1
|
||||
...
|
||||
69
description/Strategy/ResourceQuotas/description_item.yml
Normal file
69
description/Strategy/ResourceQuotas/description_item.yml
Normal file
@ -0,0 +1,69 @@
|
||||
# ResourceQuota （资源配额）说明，官方文档：https://v1-22.docs.kubernetes.io/zh/docs/concepts/policy/resource-quotas/
|
||||
# API 版本
|
||||
apiVersion: v1
|
||||
# 资源类型
|
||||
kind: ResourceQuota
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 ResourceQuota 的名称
|
||||
## 命名空间
|
||||
namespace: 此 ResourceQuota 所属的命名空间
|
||||
# 数据
|
||||
spec:
|
||||
## 配额
|
||||
hard:
|
||||
### 在该命名空间中，所有非终止状态的 Pod，其 CPU 需求总量不能超过该值
|
||||
cpu: '1000'
|
||||
### 在该命名空间中，所有非终止状态的 Pod，其内存需求总量不能超过该值
|
||||
memory: 200Gi
|
||||
### 在该命名空间中，所有非终止状态的 Pod，其 CPU 限额总量不能超过该值
|
||||
limits.cpu: ''
|
||||
### 在该命名空间中，所有非终止状态的 Pod，其内存限额总量不能超过该值
|
||||
limits.memory:
|
||||
### 在该命名空间中，所有 PVC，存储资源的需求总量不能超过该值
|
||||
requests.storage: 1Ti
|
||||
### 在该命名空间中，对于 <storage-class-name> 类型的 PVC，存储资源的需求总量不能超过该值
|
||||
<storage-class-name>.storageclass.storage.k8s.io/requests.storage: 300Gi
|
||||
### 在该命名空间中，允许的 PVC 总量
|
||||
persistentvolumeclaims: '1000'
|
||||
### 在该命名空间中，允许的 <storage-class-name> 类型的 PVC 总量
|
||||
<storage-class-name>.storageclass.storage.k8s.io/persistentvolumeclaims: '300'
|
||||
### 在该命名空间中，允许存在的 ReplicationController 总数上限
|
||||
replicationcontrollers: '1000'
|
||||
### 在该命名空间中，允许存在的 ResourceQuota 总数上限
|
||||
resourcequotas: '100'
|
||||
### 在该命名空间中，允许存在的 ConfigMap 总数上限
|
||||
configmaps: '1000'
|
||||
### 在该命名空间中，允许存在的 Secret 总数上限
|
||||
secrets: '1000'
|
||||
### 在该命名空间中，允许存在的 Service 总数上限
|
||||
services: '100'
|
||||
### 在该命名空间中，允许存在的 LoadBalancer 类型的 Service 总数上限
|
||||
services.loadbalancers: '100'
|
||||
### 在该命名空间中，允许存在的 NodePort 类型的 Service 总数上限
|
||||
services.nodeports: '100'
|
||||
### 在该命名空间中，允许存在的非终止状态的 Pod 总数上限
|
||||
pods: '100'
|
||||
## 配额作用域
|
||||
scopeSelector:
|
||||
matchExpressions:
|
||||
### 匹配所有引用了所指定的优先级类的 Pods【 operator 可选：In（包含）、NotIn（不包含）、Exists（存在）、DoesNotExist（不存在）；values 可选：low、medium、high】
|
||||
- scopeName: PriorityClass
|
||||
operator: In
|
||||
values:
|
||||
- high
|
||||
### 匹配所有 spec.activeDeadlineSeconds 不小于 0 的 Pod（不能和 NotTerminating 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: Terminating
|
||||
operator: Exists
|
||||
### 匹配所有 spec.activeDeadlineSeconds 是 nil 的 Pod（不能和 Terminating 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: NotTerminating
|
||||
operator: Exists
|
||||
### 匹配所有 Qos 是 BestEffort 的 Pod（不能和 NotBestEffort 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: BestEffort
|
||||
operator: Exists
|
||||
### 匹配所有 Qos 不是 BestEffort 的 Pod（不能和 BestEffort 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: NotBestEffort
|
||||
operator: Exists
|
||||
### 匹配那些设置了跨名字空间 （反）亲和性条件的 Pod
|
||||
- scopeName: CrossNamespaceAffinity
|
||||
80
description/Strategy/ResourceQuotas/description_list.yml
Normal file
80
description/Strategy/ResourceQuotas/description_list.yml
Normal file
@ -0,0 +1,80 @@
|
||||
# ResourceQuota （资源配额）（ List ）说明，官方文档：https://v1-22.docs.kubernetes.io/zh/docs/concepts/policy/resource-quotas/
|
||||
# API 版本
|
||||
apiVersion: v1
|
||||
# 资源类型
|
||||
kind: List
|
||||
# 资源详情
|
||||
items:
|
||||
## ResourceQuota 1
|
||||
### API 版本
|
||||
- apiVersion: v1
|
||||
### 资源类型
|
||||
kind: ResourceQuota
|
||||
### 元数据
|
||||
metadata:
|
||||
#### 名称
|
||||
name: 此 ResourceQuota 的名称
|
||||
#### 命名空间
|
||||
namespace: 此 ResourceQuota 所属的命名空间
|
||||
### 数据
|
||||
spec:
|
||||
#### 配额
|
||||
hard:
|
||||
##### 在该命名空间中，所有非终止状态的 Pod，其 CPU 需求总量不能超过该值
|
||||
cpu: '1000'
|
||||
### 在该命名空间中，所有非终止状态的 Pod，其内存需求总量不能超过该值
|
||||
memory: 200Gi
|
||||
### 在该命名空间中，所有非终止状态的 Pod，其 CPU 限额总量不能超过该值
|
||||
limits.cpu: ''
|
||||
### 在该命名空间中，所有非终止状态的 Pod，其内存限额总量不能超过该值
|
||||
limits.memory:
|
||||
### 在该命名空间中，所有 PVC，存储资源的需求总量不能超过该值
|
||||
requests.storage: 1Ti
|
||||
### 在该命名空间中，对于 <storage-class-name> 类型的 PVC，存储资源的需求总量不能超过该值
|
||||
<storage-class-name>.storageclass.storage.k8s.io/requests.storage: 300Gi
|
||||
### 在该命名空间中，允许的 PVC 总量
|
||||
persistentvolumeclaims: '1000'
|
||||
### 在该命名空间中，允许的 <storage-class-name> 类型的 PVC 总量
|
||||
<storage-class-name>.storageclass.storage.k8s.io/persistentvolumeclaims: '300'
|
||||
### 在该命名空间中，允许存在的 ReplicationController 总数上限
|
||||
replicationcontrollers: '1000'
|
||||
### 在该命名空间中，允许存在的 ResourceQuota 总数上限
|
||||
resourcequotas: '100'
|
||||
### 在该命名空间中，允许存在的 ConfigMap 总数上限
|
||||
configmaps: '1000'
|
||||
### 在该命名空间中，允许存在的 Secret 总数上限
|
||||
secrets: '1000'
|
||||
### 在该命名空间中，允许存在的 Service 总数上限
|
||||
services: '100'
|
||||
### 在该命名空间中，允许存在的 LoadBalancer 类型的 Service 总数上限
|
||||
services.loadbalancers: '100'
|
||||
### 在该命名空间中，允许存在的 NodePort 类型的 Service 总数上限
|
||||
services.nodeports: '100'
|
||||
### 在该命名空间中，允许存在的非终止状态的 Pod 总数上限
|
||||
pods: '100'
|
||||
## 配额作用域
|
||||
scopeSelector:
|
||||
matchExpressions:
|
||||
### 匹配所有引用了所指定的优先级类的 Pods【 operator 可选：In（包含）、NotIn（不包含）、Exists（存在）、DoesNotExist（不存在）；values 可选：low、medium、high】
|
||||
- scopeName: PriorityClass
|
||||
operator: In
|
||||
values:
|
||||
- high
|
||||
### 匹配所有 spec.activeDeadlineSeconds 不小于 0 的 Pod（不能和 NotTerminating 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: Terminating
|
||||
operator: Exists
|
||||
### 匹配所有 spec.activeDeadlineSeconds 是 nil 的 Pod（不能和 Terminating 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: NotTerminating
|
||||
operator: Exists
|
||||
### 匹配所有 Qos 是 BestEffort 的 Pod（不能和 NotBestEffort 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: BestEffort
|
||||
operator: Exists
|
||||
### 匹配所有 Qos 不是 BestEffort 的 Pod（不能和 BestEffort 同时存在）【 operator 必须为 Exists，不能设置 values 】
|
||||
- scopeName: NotBestEffort
|
||||
operator: Exists
|
||||
### 匹配那些设置了跨名字空间 （反）亲和性条件的 Pod
|
||||
- scopeName: CrossNamespaceAffinity
|
||||
## ResourceQuota 2
|
||||
### API 版本
|
||||
- apiVersion: v1
|
||||
...
|
||||
24
description/Strategy/ResourceQuotas/example-item.yml
Normal file
24
description/Strategy/ResourceQuotas/example-item.yml
Normal file
@ -0,0 +1,24 @@
|
||||
apiVersion: v1
|
||||
kind: ResourceQuota
|
||||
metadata:
|
||||
name: resource-quota-example-item
|
||||
namespace: demo
|
||||
spec:
|
||||
hard:
|
||||
cpu: '64'
|
||||
memory: 256Gi
|
||||
requests.storage: 1Ti
|
||||
persistentvolumeclaims: '1000'
|
||||
resourcequotas: '100'
|
||||
configmaps: '3000'
|
||||
secrets: '3000'
|
||||
services: '100'
|
||||
services.loadbalancers: '100'
|
||||
services.nodeports: '100'
|
||||
pods: '100'
|
||||
scopeSelector:
|
||||
matchExpressions:
|
||||
- scopeName: PriorityClass
|
||||
operator: In
|
||||
values:
|
||||
- high
|
||||
69
description/Strategy/ResourceQuotas/example-list.yml
Normal file
69
description/Strategy/ResourceQuotas/example-list.yml
Normal file
@ -0,0 +1,69 @@
|
||||
apiVersion: v1
|
||||
kind: List
|
||||
items:
|
||||
- apiVersion: v1
|
||||
kind: ResourceQuota
|
||||
metadata:
|
||||
name: resource-quota-example-list-high
|
||||
namespace: demo
|
||||
spec:
|
||||
hard:
|
||||
cpu: '128'
|
||||
memory: 512Gi
|
||||
requests.storage: 1Ti
|
||||
persistentvolumeclaims: '1000'
|
||||
resourcequotas: '100'
|
||||
configmaps: '1000'
|
||||
secrets: '1000'
|
||||
services: '100'
|
||||
pods: '1000'
|
||||
scopeSelector:
|
||||
matchExpressions:
|
||||
- scopeName: PriorityClass
|
||||
operator: In
|
||||
values:
|
||||
- high
|
||||
- apiVersion: v1
|
||||
kind: ResourceQuota
|
||||
metadata:
|
||||
name: resource-quota-example-list-medium
|
||||
namespace: demo
|
||||
spec:
|
||||
hard:
|
||||
cpu: '64'
|
||||
memory: 256Gi
|
||||
requests.storage: 1Ti
|
||||
persistentvolumeclaims: '500'
|
||||
resourcequotas: '100'
|
||||
configmaps: '500'
|
||||
secrets: '500'
|
||||
services: '50'
|
||||
pods: '500'
|
||||
scopeSelector:
|
||||
matchExpressions:
|
||||
- scopeName: PriorityClass
|
||||
operator: In
|
||||
values:
|
||||
- medium
|
||||
- apiVersion: v1
|
||||
kind: ResourceQuota
|
||||
metadata:
|
||||
name: resource-quota-example-list-low
|
||||
namespace: demo
|
||||
spec:
|
||||
hard:
|
||||
cpu: '32'
|
||||
memory: 128Gi
|
||||
requests.storage: 1Ti
|
||||
persistentvolumeclaims: '100'
|
||||
resourcequotas: '10'
|
||||
configmaps: '50'
|
||||
secrets: '50'
|
||||
services: '10'
|
||||
pods: '50'
|
||||
scopeSelector:
|
||||
matchExpressions:
|
||||
- scopeName: PriorityClass
|
||||
operator: In
|
||||
values:
|
||||
- low
|
||||
42
description/Workload/CronJob/description.yml
Normal file
42
description/Workload/CronJob/description.yml
Normal file
@ -0,0 +1,42 @@
|
||||
# CronJob 说明，官方文档： https://v1-22.docs.kubernetes.io/zh/docs/concepts/workloads/controllers/cron-jobs
|
||||
# API 版本
|
||||
apiVersion: batch/v1
|
||||
# 资源类型
|
||||
kind: CronJob
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 CronJob 的名称
|
||||
## 命名空间
|
||||
namespace: 此 CronJob 所属命名空间
|
||||
## 标签
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
# 内容
|
||||
spec:
|
||||
## 此 CronJob 的执行周期【语法见：https://v1-22.docs.kubernetes.io/zh/docs/concepts/workloads/controllers/cron-jobs/#cron-%E6%97%B6%E9%97%B4%E8%A1%A8%E8%AF%AD%E6%B3%95】
|
||||
schedule: 此 CronJob 的执行周期
|
||||
## 此 CronJob 执行的 Job
|
||||
jobTemplate:
|
||||
### Job 的内容
|
||||
spec:
|
||||
#### 指定 Job 的 Pod 模板（内容参考 Pod 的 Yaml）
|
||||
template:
|
||||
##### Pod 的内容
|
||||
spec:
|
||||
###### Pod 的容器
|
||||
containers:
|
||||
####### 容器1
|
||||
######## 容器1的名称
|
||||
- name: 容器1的名称
|
||||
######## 容器1使用的镜像
|
||||
image: 容器1使用的镜像
|
||||
######## 镜像拉取规则
|
||||
imagePullPolicy: IfNotPresent
|
||||
######## 执行的命令
|
||||
command:
|
||||
- 命令1
|
||||
- 命令2
|
||||
###### 容器重启策略【Never：不重启，OnFailure：失败时重启】
|
||||
restartPolicy: 容器重启策略【Never：不重启，OnFailure：失败时重启】
|
||||
24
description/Workload/CronJob/example-hello.yml
Normal file
24
description/Workload/CronJob/example-hello.yml
Normal file
@ -0,0 +1,24 @@
|
||||
apiVersion: batch/v1
|
||||
kind: CronJob
|
||||
metadata:
|
||||
name: example-hello
|
||||
namespace: demo
|
||||
labels:
|
||||
name: example-hello
|
||||
app: hello
|
||||
type: cronjob
|
||||
spec:
|
||||
schedule: "*/1 * * * *"
|
||||
jobTemplate:
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: hello
|
||||
image: busybox
|
||||
imagePullPolicy: IfNotPresent
|
||||
command:
|
||||
- /bin/sh
|
||||
- -c
|
||||
- date; echo Hello from the Kubernetes cluster
|
||||
restartPolicy: OnFailure
|
||||
95
description/Workload/DaemonSet/description.yml
Normal file
95
description/Workload/DaemonSet/description.yml
Normal file
@ -0,0 +1,95 @@
|
||||
# DaemonSet 说明，官方文档： https://v1-22.docs.kubernetes.io/zh/docs/concepts/workloads/controllers/daemonset
|
||||
# API 版本
|
||||
apiVersion: apps/v1
|
||||
# 资源类型
|
||||
kind: DaemonSet
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 DaemonSet 的名称
|
||||
## 命名空间
|
||||
namespace: 此 DaemonSet 所属命名空间
|
||||
## 标签
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
# 内容
|
||||
spec:
|
||||
## 指定 Pod 选择器（ 此 DaemonSet 需要管理哪些 Pod ）
|
||||
selector:
|
||||
### 指定标签选择器
|
||||
matchLabels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
## 指定 Pod 模板
|
||||
template:
|
||||
### Pod 的元数据
|
||||
metadata:
|
||||
#### Pod 的标签（需要和上面 matchLabels 中配置的标签一致）
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
### Pod 的内容
|
||||
spec:
|
||||
#### Pod 的容忍度（需要在哪些节点上部署 Pod ）
|
||||
tolerations:
|
||||
##### Pod 的容忍度 1
|
||||
###### 容忍度 1 的 key
|
||||
- key: 容忍度 1 的 key
|
||||
###### 容忍度 1 的表达式【Equal：等于，Exists：存在】
|
||||
operator: 容忍度 1 的表达式
|
||||
###### 容忍度 1 的值
|
||||
value: 容忍度 1 的值
|
||||
###### 容忍度 1 的效果
|
||||
effect: 容忍度 1 的效果
|
||||
#### Pod 的终止宽限期（秒）
|
||||
terminationGracePeriodSeconds: Pod 的终止宽限期（秒）
|
||||
#### Pod 的容器
|
||||
containers:
|
||||
##### 容器1
|
||||
###### 容器1的名称
|
||||
- name: 容器1的名称
|
||||
###### 容器1使用的镜像
|
||||
image: 容器1使用的镜像
|
||||
###### 容器1的资源
|
||||
resources:
|
||||
####### 限制资源
|
||||
limits:
|
||||
######## 限制的内存
|
||||
memory: 限制的内存
|
||||
####### 请求资源
|
||||
requests:
|
||||
######## 请求的 CPU
|
||||
cpu: 请求的 CPU
|
||||
######## 请求的内存
|
||||
memory: 请求的内存
|
||||
###### 容器1使用的持久卷
|
||||
volumeMounts:
|
||||
####### 持久卷1
|
||||
######## 持久卷1的名称
|
||||
- name: 持久卷1的名称
|
||||
######## 持久卷1的挂载路径（容器内）
|
||||
mountPath: 持久卷1的挂载路径（容器内）
|
||||
####### 持久卷2
|
||||
######## 持久卷2的名称
|
||||
- name: 持久卷2的名称
|
||||
######## 持久卷2的挂载路径（容器内）
|
||||
mountPath: 持久卷2的挂载路径（容器内）
|
||||
######## 容器内是否只读
|
||||
readOnly: true
|
||||
#### 持久卷
|
||||
volumes:
|
||||
##### 持久卷1
|
||||
###### 持久卷1的名称
|
||||
- name: 持久卷1的名称
|
||||
###### 持久卷1的路径（宿主机目录）
|
||||
hostPath:
|
||||
####### 持久卷1的路径（宿主机目录）
|
||||
path: 持久卷1的路径（宿主机目录）
|
||||
##### 持久卷2
|
||||
###### 持久卷2的名称
|
||||
- name: 持久卷2的名称
|
||||
###### 持久卷2的路径（宿主机目录）
|
||||
hostPath:
|
||||
####### 持久卷2的路径（宿主机目录）
|
||||
path: 持久卷2的路径（宿主机目录）
|
||||
@ -0,0 +1,49 @@
|
||||
apiVersion: apps/v1
|
||||
kind: DaemonSet
|
||||
metadata:
|
||||
name: example-elasticsearch-fluentd
|
||||
namespace: demo
|
||||
labels:
|
||||
name: elasticsearch-fluentd
|
||||
app: elasticsearch-fluentd
|
||||
type: daemonset
|
||||
spec:
|
||||
selector:
|
||||
matchLabels:
|
||||
name: elasticsearch-fluentd
|
||||
app: elasticsearch-fluentd
|
||||
type: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
name: elasticsearch-fluentd
|
||||
app: elasticsearch-fluentd
|
||||
type: pod
|
||||
spec:
|
||||
tolerations:
|
||||
- key: node-role.kubernetes.io/master
|
||||
operator: Exists
|
||||
effect: NoSchedule
|
||||
terminationGracePeriodSeconds: 30
|
||||
containers:
|
||||
- name: fluentd-elasticsearch
|
||||
image: quay.io/fluentd_elasticsearch/fluentd:v2.5.2
|
||||
resources:
|
||||
limits:
|
||||
memory: 200Mi
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 200Mi
|
||||
volumeMounts:
|
||||
- name: varlog
|
||||
mountPath: /var/log
|
||||
- name: varlibdockercontainers
|
||||
mountPath: /var/lib/docker/containers
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: varlog
|
||||
hostPath:
|
||||
path: /var/log
|
||||
- name: varlibdockercontainers
|
||||
hostPath:
|
||||
path: /var/lib/docker/containers
|
||||
45
description/Workload/Deployment/description.yml
Normal file
45
description/Workload/Deployment/description.yml
Normal file
@ -0,0 +1,45 @@
|
||||
# Deployment 说明，官方文档： https://v1-22.docs.kubernetes.io/zh/docs/concepts/workloads/controllers/deployment
|
||||
# API 版本
|
||||
apiVersion: apps/v1
|
||||
# 资源类型
|
||||
kind: Deployment
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 Deployment 的名称
|
||||
## 命名空间
|
||||
namespace: 此 Deployment 所属命名空间
|
||||
## 标签
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
# 内容
|
||||
spec:
|
||||
## 指定副本数
|
||||
replicas: 期望副本数
|
||||
## 指定 Pod 选择器（ 此 Deployment 需要管理哪些 Pod ）
|
||||
selector:
|
||||
### 指定标签选择器
|
||||
matchLabels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
## 指定 Pod 模板
|
||||
template:
|
||||
### Pod 的元数据
|
||||
metadata:
|
||||
#### Pod 的标签（需要和上面 matchLabels 中配置的标签一致）
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
### Pod 的内容
|
||||
spec:
|
||||
#### Pod 的容器
|
||||
containers:
|
||||
##### 容器1
|
||||
###### 容器1的名称
|
||||
- name: 容器1的名称
|
||||
###### 容器1使用的镜像
|
||||
image: 容器1使用的镜像
|
||||
###### 容器1使用的端口号
|
||||
ports:
|
||||
- containerPort: 80
|
||||
28
description/Workload/Deployment/example-nginx.yml
Normal file
28
description/Workload/Deployment/example-nginx.yml
Normal file
@ -0,0 +1,28 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: example-nginx
|
||||
namespace: demo
|
||||
labels:
|
||||
name: nginx
|
||||
app: nginx
|
||||
type: deployment
|
||||
spec:
|
||||
replicas: 3
|
||||
selector:
|
||||
matchLabels:
|
||||
name: nginx
|
||||
app: nginx
|
||||
type: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
name: nginx
|
||||
app: nginx
|
||||
type: pod
|
||||
spec:
|
||||
containers:
|
||||
- name: nginx
|
||||
image: nginx:1.23.3
|
||||
ports:
|
||||
- containerPort: 80
|
||||
45
description/Workload/Deployments/description.yml
Normal file
45
description/Workload/Deployments/description.yml
Normal file
@ -0,0 +1,45 @@
|
||||
# Deployments 说明，官方文档： https://v1-22.docs.kubernetes.io/zh/docs/concepts/workloads/controllers/deployment
|
||||
# API 版本
|
||||
apiVersion: apps/v1
|
||||
# 资源类型
|
||||
kind: Deployments
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 Deployments 的名称
|
||||
## 命名空间
|
||||
namespace: 此 Deployments 所属命名空间
|
||||
## 标签
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
# 内容
|
||||
spec:
|
||||
## 指定副本数
|
||||
replicas: 期望副本数
|
||||
## 指定 Pod 选择器（ 此 Deployments 需要管理哪些 Pods ）
|
||||
selector:
|
||||
### 指定标签选择器
|
||||
matchLabels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
## 指定 Pod 模板
|
||||
template:
|
||||
### Pod 的元数据
|
||||
metadata:
|
||||
#### Pod 的标签（需要和上面 matchLabels 中配置的标签一致）
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
### Pod 的内容
|
||||
spec:
|
||||
#### Pod 的容器
|
||||
containers:
|
||||
##### 容器1
|
||||
###### 容器1的名称
|
||||
- name: 容器1的名称
|
||||
###### 容器1使用的镜像
|
||||
image: 容器1使用的镜像
|
||||
###### 容器1使用的端口号
|
||||
ports:
|
||||
- containerPort: 80
|
||||
28
description/Workload/Deployments/example-nginx.yml
Normal file
28
description/Workload/Deployments/example-nginx.yml
Normal file
@ -0,0 +1,28 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployments
|
||||
metadata:
|
||||
name: example-nginx
|
||||
namespace: demo
|
||||
labels:
|
||||
name: nginx
|
||||
app: nginx
|
||||
type: deployments
|
||||
spec:
|
||||
replicas: 3
|
||||
selector:
|
||||
matchLabels:
|
||||
name: nginx
|
||||
app: nginx
|
||||
type: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
name: nginx
|
||||
app: nginx
|
||||
type: pod
|
||||
spec:
|
||||
containers:
|
||||
- name: nginx
|
||||
image: nginx:1.23.3
|
||||
ports:
|
||||
- containerPort: 80
|
||||
48
description/Workload/Job/description.yml
Normal file
48
description/Workload/Job/description.yml
Normal file
@ -0,0 +1,48 @@
|
||||
# Job 说明，官方文档： https://v1-22.docs.kubernetes.io/zh/docs/concepts/workloads/controllers/job
|
||||
# API 版本
|
||||
apiVersion: batch/v1
|
||||
# 资源类型
|
||||
kind: Job
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 Job 的名称
|
||||
## 命名空间
|
||||
namespace: 此 Job 所属命名空间
|
||||
## 标签
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
# 内容
|
||||
spec:
|
||||
## 是否挂起此 Job（true：挂起，false：不挂起（立即执行））
|
||||
suspend: 是否挂起此 Job
|
||||
## 指定 Pod 模板（内容参考 Pod 的 Yaml）
|
||||
template:
|
||||
### Pod 的内容
|
||||
spec:
|
||||
#### Pod 的容器
|
||||
containers:
|
||||
##### 容器1
|
||||
###### 容器1的名称
|
||||
- name: 容器1的名称
|
||||
###### 容器1使用的镜像
|
||||
image: 容器1使用的镜像
|
||||
###### 容器1运行的命令
|
||||
command:
|
||||
- 命令1
|
||||
- 命令2
|
||||
#### 容器重启策略【Never：不重启，OnFailure：失败时重启】
|
||||
restartPolicy: 容器重启策略【Never：不重启，OnFailure：失败时重启】
|
||||
## 失败重试次数（重试次数到达此值后，此 Job 标记为失败）
|
||||
backoffLimit: 失败重试次数
|
||||
## Job 活跃期限（秒）（Job 运行时间达到此值后，此 Job 标记为失败，优先级高于 backoffLimit）
|
||||
activeDeadlineSeconds: Job 活跃期限（秒）
|
||||
## Pod 完成模式【NonIndexed：当成功完成的 Pod 个数达到 .spec.completions 所设值时认为 Job 已经完成，Indexed：Job 的 Pod 会获得对应的完成索引，取值为 0 到 .spec.completions-1，当每个索引都对应一个完成完成的 Pod 时，Job 被认为是已完成的】
|
||||
completionMode: Pod 完成模式
|
||||
## Pod 完成量（当成功的 Pod 个数达到次数时，该 Job 视为完成）
|
||||
completions: Pod 完成量
|
||||
## Pod 工作队列
|
||||
parallelism: Pod 工作队列
|
||||
## Job 完成（状态为 Complete 或 Failed）后自动清除时间（秒）
|
||||
ttlSecondsAfterFinished: Job 完成（状态为 Complete 或 Failed）后自动清除时间（秒）
|
||||
18
description/Workload/Job/example-pi.yml
Normal file
18
description/Workload/Job/example-pi.yml
Normal file
@ -0,0 +1,18 @@
|
||||
apiVersion: batch/v1
|
||||
kind: Job
|
||||
metadata:
|
||||
name: example-pi
|
||||
namespace: demo
|
||||
labels:
|
||||
name: example-pi
|
||||
app: pi
|
||||
type: job
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: pi
|
||||
image: perl
|
||||
command: ["perl", "-Mbignum=bpi", "-wle", "print bpi(2000)"]
|
||||
restartPolicy: Never
|
||||
backoffLimit: 4
|
||||
40
description/Workload/Jobs/description.yml
Normal file
40
description/Workload/Jobs/description.yml
Normal file
@ -0,0 +1,40 @@
|
||||
# Jobs 说明，官方文档： https://v1-22.docs.kubernetes.io/zh/docs/concepts/workloads/controllers/job
|
||||
# API 版本
|
||||
apiVersion: apps/v1
|
||||
# 资源类型
|
||||
kind: Jobs
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 Jobs 的名称
|
||||
## 命名空间
|
||||
namespace: 此 Jobs 所属命名空间
|
||||
## 标签
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
# 内容
|
||||
spec:
|
||||
## 指定 Pod 模板（内容参考 Pod 的 Yaml）
|
||||
template:
|
||||
### Pod 的内容
|
||||
spec:
|
||||
#### Pod 的容器
|
||||
containers:
|
||||
##### 容器1
|
||||
###### 容器1的名称
|
||||
- name: 容器1的名称
|
||||
###### 容器1使用的镜像
|
||||
image: 容器1使用的镜像
|
||||
###### 容器1运行的命令
|
||||
command:
|
||||
- 命令1
|
||||
- 命令2
|
||||
#### 容器重启策略【Never：不重启，OnFailure：失败时重启】
|
||||
restartPolicy: 容器重启策略【Never：不重启，OnFailure：失败时重启】
|
||||
## 失败重试次数
|
||||
backoffLimit: 4
|
||||
## Pod 完成量（当成功的 Pod 个数达到次数时，该 Job 视为完成）
|
||||
completions: Pod 完成量
|
||||
## Pod 工作队列
|
||||
parallelism: Pod 工作队列
|
||||
18
description/Workload/Jobs/example-pi.yml
Normal file
18
description/Workload/Jobs/example-pi.yml
Normal file
@ -0,0 +1,18 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Jobs
|
||||
metadata:
|
||||
name: example-pi
|
||||
namespace: demo
|
||||
labels:
|
||||
name: example-pi
|
||||
app: pi
|
||||
type: job
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: pi
|
||||
image: perl
|
||||
command: ["perl", "-Mbignum=bpi", "-wle", "print bpi(2000)"]
|
||||
restartPolicy: Never
|
||||
backoffLimit: 4
|
||||
33
description/Workload/Pod/description.yml
Normal file
33
description/Workload/Pod/description.yml
Normal file
@ -0,0 +1,33 @@
|
||||
# Pod 说明，官方文档：https://v1-22.docs.kubernetes.io/zh/docs/concepts/workloads/pods
|
||||
# API 版本
|
||||
apiVersion: v1
|
||||
# 资源类型
|
||||
kind: Pod
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 Pod 的名称
|
||||
## 命名空间
|
||||
namespace: 此 Pod 所属命名空间
|
||||
## 标签
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
# 内容
|
||||
spec:
|
||||
## 容器
|
||||
containers:
|
||||
### 容器1
|
||||
#### 容器名称
|
||||
- name: 该容器的名称
|
||||
#### 容器镜像
|
||||
image: 改容器使用的镜像
|
||||
#### 容器端口号
|
||||
ports:
|
||||
##### 端口号1
|
||||
###### 名称
|
||||
- name: 该端口号的名称
|
||||
###### 端口号
|
||||
containerPort: 端口号
|
||||
###### 端口类型
|
||||
protocol: 该端口号的类型
|
||||
17
description/Workload/Pod/example-nginx.yml
Normal file
17
description/Workload/Pod/example-nginx.yml
Normal file
@ -0,0 +1,17 @@
|
||||
apiVersion: v1
|
||||
kind: Pod
|
||||
metadata:
|
||||
name: example-nginx
|
||||
namespace: demo
|
||||
labels:
|
||||
name: nginx
|
||||
app: nginx
|
||||
type: pod
|
||||
spec:
|
||||
containers:
|
||||
- name: web
|
||||
image: nginx:1.23.3
|
||||
ports:
|
||||
- name: web
|
||||
containerPort: 80
|
||||
protocol: TCP
|
||||
33
description/Workload/Pods/description.yml
generated
Normal file
33
description/Workload/Pods/description.yml
generated
Normal file
@ -0,0 +1,33 @@
|
||||
# Pods 说明，官方文档：https://v1-22.docs.kubernetes.io/zh/docs/concepts/workloads/pods
|
||||
# API 版本
|
||||
apiVersion: v1
|
||||
# 资源类型
|
||||
kind: Pods
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 Pods 的名称
|
||||
## 命名空间
|
||||
namespace: 此 Pods 所属命名空间
|
||||
## 标签
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
# 内容
|
||||
spec:
|
||||
## 容器
|
||||
containers:
|
||||
### 容器1
|
||||
#### 容器名称
|
||||
- name: 该容器的名称
|
||||
#### 容器镜像
|
||||
image: 改容器使用的镜像
|
||||
#### 容器端口号
|
||||
ports:
|
||||
##### 端口号1
|
||||
###### 名称
|
||||
- name: 该端口号的名称
|
||||
###### 端口号
|
||||
containerPort: 端口号
|
||||
###### 端口类型
|
||||
protocol: 该端口号的类型
|
||||
17
description/Workload/Pods/example-nginx.yml
generated
Normal file
17
description/Workload/Pods/example-nginx.yml
generated
Normal file
@ -0,0 +1,17 @@
|
||||
apiVersion: v1
|
||||
kind: Pods
|
||||
metadata:
|
||||
name: example-nginx
|
||||
namespace: demo
|
||||
labels:
|
||||
name: nginx
|
||||
app: nginx
|
||||
type: pod
|
||||
spec:
|
||||
containers:
|
||||
- name: web
|
||||
image: nginx:1.23.3
|
||||
ports:
|
||||
- name: web
|
||||
containerPort: 80
|
||||
protocol: TCP
|
||||
83
description/Workload/StatefulSet/description.yml
Normal file
83
description/Workload/StatefulSet/description.yml
Normal file
@ -0,0 +1,83 @@
|
||||
# StatefulSet 说明，官方文档： https://v1-22.docs.kubernetes.io/zh/docs/concepts/workloads/controllers/statefulset
|
||||
# API 版本
|
||||
apiVersion: apps/v1
|
||||
# 资源类型
|
||||
kind: StatefulSet
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 StatefulSet 的名称
|
||||
## 命名空间
|
||||
namespace: 此 StatefulSet 所属命名空间
|
||||
## 标签
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
# 内容
|
||||
spec:
|
||||
## 服务名称
|
||||
serviceName: 服务名称（此 StatefulSet 对应的 Service 的 name ）
|
||||
## 指定副本数
|
||||
replicas: 期望副本数
|
||||
## 指定更新策略
|
||||
updateStrategy:
|
||||
type: 更新策略【OnDelete：不自动更新 Pod；RollingUpdate：自动滚动更新（默认）】
|
||||
## 最短就绪秒数
|
||||
minReadySeconds: 短就绪秒数（ Pod 就绪后默认可用的等待时间，默认为 0，即 Pod 就绪后即为可用状态）
|
||||
## 指定 Pod 选择器（ 此 StatefulSet 需要管理哪些 Pod ）
|
||||
selector:
|
||||
### 指定标签选择器
|
||||
matchLabels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
## 指定 Pod 模板（内容参考 Pod 的 Yaml）
|
||||
template:
|
||||
### Pod 的元数据
|
||||
metadata:
|
||||
#### Pod 的标签（需要和上面 matchLabels 中配置的标签一致）
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
### Pod 的内容
|
||||
spec:
|
||||
#### Pod 的终止宽限期（秒）
|
||||
terminationGracePeriodSeconds: Pod 的终止宽限期（秒）
|
||||
#### Pod 的容器
|
||||
containers:
|
||||
##### 容器1
|
||||
###### 容器1的名称
|
||||
- name: 容器1的名称
|
||||
###### 容器1使用的镜像
|
||||
image: 容器1使用的镜像
|
||||
###### 容器1使用的端口号
|
||||
ports:
|
||||
####### 端口号1
|
||||
######## 端口号1的名称
|
||||
- name: 端口号1的名称
|
||||
######## 端口号1的端口号
|
||||
containerPort: 端口号1的端口号
|
||||
###### 容器1使用的持久卷
|
||||
volumeMounts:
|
||||
######## 持久卷1
|
||||
######## 持久卷1的名称
|
||||
- name: 持久卷1的名称
|
||||
######## 持久卷1的挂载路径（容器内）
|
||||
mountPath: 持久卷1的挂载路径（容器内）
|
||||
## 指定 PersistentVolumeClaims 模板（内容参考 PersistentVolumeClaims 的 Yaml）
|
||||
volumeClaimTemplates:
|
||||
### PersistentVolumeClaims 1
|
||||
#### PersistentVolumeClaims 1 的元数据
|
||||
- metadata:
|
||||
##### PersistentVolumeClaims 1 的名称
|
||||
name: PersistentVolumeClaims 1 的名称
|
||||
#### PersistentVolumeClaims 1 的内容
|
||||
spec:
|
||||
##### 访问模式
|
||||
accessModes:
|
||||
- PersistentVolumeClaims 1 的访问模式
|
||||
##### Storage Class 名称
|
||||
storageClassName: PersistentVolumeClaims 1 使用的 StorageClass 的名称
|
||||
##### 资源
|
||||
resources:
|
||||
requests:
|
||||
storage: PersistentVolumeClaim 1 使用的空间大小
|
||||
49
description/Workload/StatefulSet/example-nginx-slim.yml
Normal file
49
description/Workload/StatefulSet/example-nginx-slim.yml
Normal file
@ -0,0 +1,49 @@
|
||||
apiVersion: apps/v1
|
||||
kind: StatefulSet
|
||||
metadata:
|
||||
name: example-nginx-slim
|
||||
namespace: demo
|
||||
labels:
|
||||
name: nginx
|
||||
app: nginx
|
||||
type: statefulset
|
||||
spec:
|
||||
serviceName: example-nginx-slim
|
||||
replicas: 3
|
||||
updateStrategy:
|
||||
type: RollingUpdate
|
||||
minReadySeconds: 0
|
||||
selector:
|
||||
matchLabels:
|
||||
name: nginx
|
||||
app: nginx
|
||||
type: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
name: nginx
|
||||
app: nginx
|
||||
type: pod
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 10
|
||||
containers:
|
||||
- name: nginx
|
||||
image: nginx:1.23.3-alpine-slim
|
||||
ports:
|
||||
- name: http
|
||||
containerPort: 80
|
||||
- name: https
|
||||
containerPort: 443
|
||||
volumeMounts:
|
||||
- name: html
|
||||
mountPath: /usr/share/nginx/html
|
||||
volumeClaimTemplates:
|
||||
- metadata:
|
||||
name: html
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: example-storage-class-nginx-html
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
83
description/Workload/StatefulSets/description.yml
Normal file
83
description/Workload/StatefulSets/description.yml
Normal file
@ -0,0 +1,83 @@
|
||||
# StatefulSets 说明，官方文档： https://v1-22.docs.kubernetes.io/zh/docs/concepts/workloads/controllers/statefulset
|
||||
# API 版本
|
||||
apiVersion: apps/v1
|
||||
# 资源类型
|
||||
kind: StatefulSets
|
||||
# 元数据
|
||||
metadata:
|
||||
## 名称
|
||||
name: 此 StatefulSets 的名称
|
||||
## 命名空间
|
||||
namespace: 此 StatefulSets 所属命名空间
|
||||
## 标签
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
# 内容
|
||||
spec:
|
||||
## 服务名称
|
||||
serviceName: 服务名称（此 StatefulSets 对应的 Service 的 name ）
|
||||
## 指定副本数
|
||||
replicas: 期望副本数
|
||||
## 指定更新策略
|
||||
updateStrategy:
|
||||
type: 更新策略【OnDelete：不自动更新 Pod；RollingUpdate：自动滚动更新（默认）】
|
||||
## 最短就绪秒数
|
||||
minReadySeconds: 短就绪秒数（ Pod 就绪后默认可用的等待时间，默认为 0，即 Pod 就绪后即为可用状态）
|
||||
## 指定 Pod 选择器（ 此 StatefulSets 需要管理哪些 Pods ）
|
||||
selector:
|
||||
### 指定标签选择器
|
||||
matchLabels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
## 指定 Pod 模板（内容参考 Pod 的 Yaml）
|
||||
template:
|
||||
### Pod 的元数据
|
||||
metadata:
|
||||
#### Pod 的标签（需要和上面 matchLabels 中配置的标签一致）
|
||||
labels:
|
||||
标签名1: 标签值1
|
||||
标签名2: 标签值2
|
||||
### Pod 的内容
|
||||
spec:
|
||||
#### Pod 的终止宽限期（秒）
|
||||
terminationGracePeriodSeconds: Pod 的终止宽限期（秒）
|
||||
#### Pod 的容器
|
||||
containers:
|
||||
##### 容器1
|
||||
###### 容器1的名称
|
||||
- name: 容器1的名称
|
||||
###### 容器1使用的镜像
|
||||
image: 容器1使用的镜像
|
||||
###### 容器1使用的端口号
|
||||
ports:
|
||||
####### 端口号1
|
||||
######## 端口号1的名称
|
||||
- name: 端口号1的名称
|
||||
######## 端口号1的端口号
|
||||
containerPort: 端口号1的端口号
|
||||
###### 容器1使用的持久卷
|
||||
volumeMounts:
|
||||
######## 持久卷1
|
||||
######## 持久卷1的名称
|
||||
- name: 持久卷1的名称
|
||||
######## 持久卷1的挂载路径（容器内）
|
||||
mountPath: 持久卷1的挂载路径（容器内）
|
||||
## 指定 PersistentVolumeClaims 模板（内容参考 PersistentVolumeClaims 的 Yaml）
|
||||
volumeClaimTemplates:
|
||||
### PersistentVolumeClaims 1
|
||||
#### PersistentVolumeClaims 1 的元数据
|
||||
- metadata:
|
||||
##### PersistentVolumeClaims 1 的名称
|
||||
name: PersistentVolumeClaims 1 的名称
|
||||
#### PersistentVolumeClaims 1 的内容
|
||||
spec:
|
||||
##### 访问模式
|
||||
accessModes:
|
||||
- PersistentVolumeClaims 1 的访问模式
|
||||
##### Storage Class 名称
|
||||
storageClassName: PersistentVolumeClaims 1 使用的 StorageClass 的名称
|
||||
##### 资源
|
||||
resources:
|
||||
requests:
|
||||
storage: PersistentVolumeClaim 1 使用的空间大小
|
||||
49
description/Workload/StatefulSets/example-nginx-slim.yml
Normal file
49
description/Workload/StatefulSets/example-nginx-slim.yml
Normal file
@ -0,0 +1,49 @@
|
||||
apiVersion: apps/v1
|
||||
kind: StatefulSets
|
||||
metadata:
|
||||
name: example-nginx-slim
|
||||
namespace: demo
|
||||
labels:
|
||||
name: nginx
|
||||
app: nginx
|
||||
type: statefulsets
|
||||
spec:
|
||||
serviceName: example-nginx-slim
|
||||
replicas: 3
|
||||
updateStrategy:
|
||||
type: RollingUpdate
|
||||
minReadySeconds: 0
|
||||
selector:
|
||||
matchLabels:
|
||||
name: nginx
|
||||
app: nginx
|
||||
type: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
name: nginx
|
||||
app: nginx
|
||||
type: pod
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 10
|
||||
containers:
|
||||
- name: nginx
|
||||
image: nginx:1.23.3-alpine-slim
|
||||
ports:
|
||||
- name: http
|
||||
containerPort: 80
|
||||
- name: https
|
||||
containerPort: 443
|
||||
volumeMounts:
|
||||
- name: html
|
||||
mountPath: /usr/share/nginx/html
|
||||
volumeClaimTemplates:
|
||||
- metadata:
|
||||
name: html
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: example-storage-class-nginx-html
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
12
examples/dashboard/dashboard.admin-user-role.yml
Normal file
12
examples/dashboard/dashboard.admin-user-role.yml
Normal file
@ -0,0 +1,12 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: admin-user
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: cluster-admin
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: admin-user
|
||||
namespace: kubernetes-dashboard
|
||||
5
examples/dashboard/dashboard.admin-user.yml
Normal file
5
examples/dashboard/dashboard.admin-user.yml
Normal file
@ -0,0 +1,5 @@
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: admin-user
|
||||
namespace: kubernetes-dashboard
|
||||
308
examples/dashboard/dashboard.yaml
Normal file
308
examples/dashboard/dashboard.yaml
Normal file
@ -0,0 +1,308 @@
|
||||
# Copyright 2017 The Kubernetes Authors.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: kubernetes-dashboard
|
||||
|
||||
---
|
||||
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
labels:
|
||||
k8s-app: kubernetes-dashboard
|
||||
name: kubernetes-dashboard
|
||||
namespace: kubernetes-dashboard
|
||||
|
||||
---
|
||||
|
||||
kind: Service
|
||||
apiVersion: v1
|
||||
metadata:
|
||||
labels:
|
||||
k8s-app: kubernetes-dashboard
|
||||
name: kubernetes-dashboard
|
||||
namespace: kubernetes-dashboard
|
||||
spec:
|
||||
type: NodePort
|
||||
ports:
|
||||
- port: 443
|
||||
targetPort: 8443
|
||||
nodePort: 30000
|
||||
selector:
|
||||
k8s-app: kubernetes-dashboard
|
||||
|
||||
---
|
||||
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
labels:
|
||||
k8s-app: kubernetes-dashboard
|
||||
name: kubernetes-dashboard-certs
|
||||
namespace: kubernetes-dashboard
|
||||
type: Opaque
|
||||
|
||||
---
|
||||
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
labels:
|
||||
k8s-app: kubernetes-dashboard
|
||||
name: kubernetes-dashboard-csrf
|
||||
namespace: kubernetes-dashboard
|
||||
type: Opaque
|
||||
data:
|
||||
csrf: ""
|
||||
|
||||
---
|
||||
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
labels:
|
||||
k8s-app: kubernetes-dashboard
|
||||
name: kubernetes-dashboard-key-holder
|
||||
namespace: kubernetes-dashboard
|
||||
type: Opaque
|
||||
|
||||
---
|
||||
|
||||
kind: ConfigMap
|
||||
apiVersion: v1
|
||||
metadata:
|
||||
labels:
|
||||
k8s-app: kubernetes-dashboard
|
||||
name: kubernetes-dashboard-settings
|
||||
namespace: kubernetes-dashboard
|
||||
|
||||
---
|
||||
|
||||
kind: Role
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
metadata:
|
||||
labels:
|
||||
k8s-app: kubernetes-dashboard
|
||||
name: kubernetes-dashboard
|
||||
namespace: kubernetes-dashboard
|
||||
rules:
|
||||
# Allow Dashboard to get, update and delete Dashboard exclusive secrets.
|
||||
- apiGroups: [""]
|
||||
resources: ["secrets"]
|
||||
resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
|
||||
verbs: ["get", "update", "delete"]
|
||||
# Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
|
||||
- apiGroups: [""]
|
||||
resources: ["configmaps"]
|
||||
resourceNames: ["kubernetes-dashboard-settings"]
|
||||
verbs: ["get", "update"]
|
||||
# Allow Dashboard to get metrics.
|
||||
- apiGroups: [""]
|
||||
resources: ["services"]
|
||||
resourceNames: ["heapster", "dashboard-metrics-scraper"]
|
||||
verbs: ["proxy"]
|
||||
- apiGroups: [""]
|
||||
resources: ["services/proxy"]
|
||||
resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
|
||||
verbs: ["get"]
|
||||
|
||||
---
|
||||
|
||||
kind: ClusterRole
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
metadata:
|
||||
labels:
|
||||
k8s-app: kubernetes-dashboard
|
||||
name: kubernetes-dashboard
|
||||
rules:
|
||||
# Allow Metrics Scraper to get metrics from the Metrics server
|
||||
- apiGroups: ["metrics.k8s.io"]
|
||||
resources: ["pods", "nodes"]
|
||||
verbs: ["get", "list", "watch"]
|
||||
|
||||
---
|
||||
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: RoleBinding
|
||||
metadata:
|
||||
labels:
|
||||
k8s-app: kubernetes-dashboard
|
||||
name: kubernetes-dashboard
|
||||
namespace: kubernetes-dashboard
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: Role
|
||||
name: kubernetes-dashboard
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: kubernetes-dashboard
|
||||
namespace: kubernetes-dashboard
|
||||
|
||||
---
|
||||
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: kubernetes-dashboard
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: kubernetes-dashboard
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: kubernetes-dashboard
|
||||
namespace: kubernetes-dashboard
|
||||
|
||||
---
|
||||
|
||||
kind: Deployment
|
||||
apiVersion: apps/v1
|
||||
metadata:
|
||||
labels:
|
||||
k8s-app: kubernetes-dashboard
|
||||
name: kubernetes-dashboard
|
||||
namespace: kubernetes-dashboard
|
||||
spec:
|
||||
replicas: 1
|
||||
revisionHistoryLimit: 10
|
||||
selector:
|
||||
matchLabels:
|
||||
k8s-app: kubernetes-dashboard
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
k8s-app: kubernetes-dashboard
|
||||
spec:
|
||||
securityContext:
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
containers:
|
||||
- name: kubernetes-dashboard
|
||||
image: kubernetesui/dashboard:v2.7.0
|
||||
imagePullPolicy: Always
|
||||
ports:
|
||||
- containerPort: 8443
|
||||
protocol: TCP
|
||||
args:
|
||||
- --auto-generate-certificates
|
||||
- --namespace=kubernetes-dashboard
|
||||
# Uncomment the following line to manually specify Kubernetes API server Host
|
||||
# If not specified, Dashboard will attempt to auto discover the API server and connect
|
||||
# to it. Uncomment only if the default does not work.
|
||||
# - --apiserver-host=http://my-address:port
|
||||
volumeMounts:
|
||||
- name: kubernetes-dashboard-certs
|
||||
mountPath: /certs
|
||||
# Create on-disk volume to store exec logs
|
||||
- mountPath: /tmp
|
||||
name: tmp-volume
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
scheme: HTTPS
|
||||
path: /
|
||||
port: 8443
|
||||
initialDelaySeconds: 30
|
||||
timeoutSeconds: 30
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
readOnlyRootFilesystem: true
|
||||
runAsUser: 1001
|
||||
runAsGroup: 2001
|
||||
volumes:
|
||||
- name: kubernetes-dashboard-certs
|
||||
secret:
|
||||
secretName: kubernetes-dashboard-certs
|
||||
- name: tmp-volume
|
||||
emptyDir: {}
|
||||
serviceAccountName: kubernetes-dashboard
|
||||
nodeSelector:
|
||||
"kubernetes.io/os": linux
|
||||
# Comment the following tolerations if Dashboard must not be deployed on master
|
||||
tolerations:
|
||||
- key: node-role.kubernetes.io/master
|
||||
effect: NoSchedule
|
||||
|
||||
---
|
||||
|
||||
kind: Service
|
||||
apiVersion: v1
|
||||
metadata:
|
||||
labels:
|
||||
k8s-app: dashboard-metrics-scraper
|
||||
name: dashboard-metrics-scraper
|
||||
namespace: kubernetes-dashboard
|
||||
spec:
|
||||
ports:
|
||||
- port: 8000
|
||||
targetPort: 8000
|
||||
selector:
|
||||
k8s-app: dashboard-metrics-scraper
|
||||
|
||||
---
|
||||
|
||||
kind: Deployment
|
||||
apiVersion: apps/v1
|
||||
metadata:
|
||||
labels:
|
||||
k8s-app: dashboard-metrics-scraper
|
||||
name: dashboard-metrics-scraper
|
||||
namespace: kubernetes-dashboard
|
||||
spec:
|
||||
replicas: 1
|
||||
revisionHistoryLimit: 10
|
||||
selector:
|
||||
matchLabels:
|
||||
k8s-app: dashboard-metrics-scraper
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
k8s-app: dashboard-metrics-scraper
|
||||
spec:
|
||||
securityContext:
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
containers:
|
||||
- name: dashboard-metrics-scraper
|
||||
image: kubernetesui/metrics-scraper:v1.0.8
|
||||
ports:
|
||||
- containerPort: 8000
|
||||
protocol: TCP
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
scheme: HTTP
|
||||
path: /
|
||||
port: 8000
|
||||
initialDelaySeconds: 30
|
||||
timeoutSeconds: 30
|
||||
volumeMounts:
|
||||
- mountPath: /tmp
|
||||
name: tmp-volume
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
readOnlyRootFilesystem: true
|
||||
runAsUser: 1001
|
||||
runAsGroup: 2001
|
||||
serviceAccountName: kubernetes-dashboard
|
||||
nodeSelector:
|
||||
"kubernetes.io/os": linux
|
||||
# Comment the following tolerations if Dashboard must not be deployed on master
|
||||
tolerations:
|
||||
- key: node-role.kubernetes.io/master
|
||||
effect: NoSchedule
|
||||
volumes:
|
||||
- name: tmp-volume
|
||||
emptyDir: {}
|
||||
192
examples/drawio/drawio.yaml
Normal file
192
examples/drawio/drawio.yaml
Normal file
@ -0,0 +1,192 @@
|
||||
---
|
||||
|
||||
# 创建 Namespace
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: hty1024-app
|
||||
|
||||
---
|
||||
|
||||
# 创建 StorageClass
|
||||
apiVersion: storage.k8s.io/v1
|
||||
kind: StorageClass
|
||||
metadata:
|
||||
name: storage-local-drawio
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: drawio
|
||||
app.k8s.hty1024.com/version: 22.1.8
|
||||
app.k8s.hty1024.com/resources: storageClass
|
||||
provisioner: kubernetes.io/no-provisioner
|
||||
reclaimPolicy: Retain
|
||||
volumeBindingMode: WaitForFirstConsumer
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolume
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: hty1024-app-drawio-pv
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: drawio
|
||||
app.k8s.hty1024.com/version: 22.1.8
|
||||
app.k8s.hty1024.com/resources: persistentVolume
|
||||
spec:
|
||||
capacity:
|
||||
storage: 1Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: storage-local-drawio
|
||||
local:
|
||||
path: /app/drawio/fonts
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: node.k8s.hty1024.com/type
|
||||
operator: In
|
||||
values:
|
||||
- app
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolumeClaim
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: hty1024-app-drawio-pvc
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: drawio
|
||||
app.k8s.hty1024.com/version: 22.1.8
|
||||
app.k8s.hty1024.com/resources: persistentVolumeClaim
|
||||
spec:
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: storage-local-drawio
|
||||
|
||||
---
|
||||
|
||||
# 创建 Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: hty1024-app-drawio-service
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: drawio
|
||||
app.k8s.hty1024.com/version: 22.1.8
|
||||
app.k8s.hty1024.com/resources: service
|
||||
spec:
|
||||
type: NodePort
|
||||
ports:
|
||||
- port: 8080
|
||||
targetPort: 8080
|
||||
nodePort: 30000
|
||||
selector:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: drawio
|
||||
app.k8s.hty1024.com/version: 22.1.8
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
|
||||
---
|
||||
|
||||
# 创建 Deployment
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: hty1024-app-drawio-deployment
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: drawio
|
||||
app.k8s.hty1024.com/version: 22.1.8
|
||||
app.k8s.hty1024.com/resources: deployment
|
||||
spec:
|
||||
replicas: 1
|
||||
minReadySeconds: 30
|
||||
selector:
|
||||
matchLabels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: drawio
|
||||
app.k8s.hty1024.com/version: 22.1.8
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: drawio
|
||||
app.k8s.hty1024.com/version: 22.1.8
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 60
|
||||
volumes:
|
||||
- name: localtime
|
||||
hostPath:
|
||||
path: /etc/localtime
|
||||
- name: hty1024-app-drawio-data
|
||||
persistentVolumeClaim:
|
||||
claimName: hty1024-app-drawio-pvc
|
||||
containers:
|
||||
# - name: plantuml-server
|
||||
# image: plantuml/plantuml-server:v1.2023.13
|
||||
# volumeMounts:
|
||||
# - name: localtime
|
||||
# mountPath: /etc/localtime
|
||||
# readOnly: true
|
||||
# - name: hty1024-app-drawio-data
|
||||
# mountPath: /usr/share/fonts/drawio
|
||||
- name: export-server
|
||||
image: jgraph/export-server:latest
|
||||
volumeMounts:
|
||||
- name: localtime
|
||||
mountPath: /etc/localtime
|
||||
readOnly: true
|
||||
- name: hty1024-app-drawio-data
|
||||
mountPath: /usr/share/fonts/drawio
|
||||
ports:
|
||||
- name: tcp
|
||||
containerPort: 8000
|
||||
env:
|
||||
- name: DRAWIO_SERVER_URL
|
||||
value: "http://localhost:8080"
|
||||
- name: drawio
|
||||
image: jgraph/drawio:22.1.8
|
||||
volumeMounts:
|
||||
- name: localtime
|
||||
mountPath: /etc/localtime
|
||||
readOnly: true
|
||||
ports:
|
||||
- name: tcp
|
||||
containerPort: 8080
|
||||
env:
|
||||
- name: DRAWIO_SELF_CONTAINED
|
||||
value: "1"
|
||||
- name: DRAWIO_BASE_URL
|
||||
value: "http://localhost:8080"
|
||||
# - name: PLANTUML_URL
|
||||
# value: "http://plantuml-server:8080"
|
||||
- name: EXPORT_URL
|
||||
value: "http://localhost:8000"
|
||||
nodeSelector:
|
||||
node.k8s.hty1024.com/type: app
|
||||
|
||||
163
examples/gitea/gitea.yaml
Normal file
163
examples/gitea/gitea.yaml
Normal file
@ -0,0 +1,163 @@
|
||||
---
|
||||
|
||||
# 创建 Namespace
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: hty1024-app
|
||||
|
||||
---
|
||||
|
||||
# 创建 StorageClass
|
||||
apiVersion: storage.k8s.io/v1
|
||||
kind: StorageClass
|
||||
metadata:
|
||||
name: storage-local-gitea
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: gitea
|
||||
app.k8s.hty1024.com/version: 1.19.4
|
||||
app.k8s.hty1024.com/resources: storageClass
|
||||
provisioner: kubernetes.io/no-provisioner
|
||||
reclaimPolicy: Retain
|
||||
volumeBindingMode: WaitForFirstConsumer
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolume
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: hty1024-app-gitea-pv
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: gitea
|
||||
app.k8s.hty1024.com/version: 1.19.4
|
||||
app.k8s.hty1024.com/resources: persistentVolume
|
||||
spec:
|
||||
capacity:
|
||||
storage: 20Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: storage-local-gitea
|
||||
local:
|
||||
path: /app/gitea/data
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: node.k8s.hty1024.com/type
|
||||
operator: In
|
||||
values:
|
||||
- app
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolumeClaim
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: hty1024-app-gitea-pvc
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: gitea
|
||||
app.k8s.hty1024.com/version: 1.19.4
|
||||
app.k8s.hty1024.com/resources: persistentVolumeClaim
|
||||
spec:
|
||||
resources:
|
||||
requests:
|
||||
storage: 20Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: storage-local-gitea
|
||||
|
||||
---
|
||||
|
||||
# 创建 Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: hty1024-app-gitea-service
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: gitea
|
||||
app.k8s.hty1024.com/version: 1.19.4
|
||||
app.k8s.hty1024.com/resources: service
|
||||
spec:
|
||||
type: NodePort
|
||||
ports:
|
||||
- port: 3000
|
||||
targetPort: 3000
|
||||
nodePort: 30000
|
||||
selector:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: gitea
|
||||
app.k8s.hty1024.com/version: 1.19.4
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
|
||||
---
|
||||
|
||||
# 创建 StatefulSet
|
||||
apiVersion: apps/v1
|
||||
kind: StatefulSet
|
||||
metadata:
|
||||
name: hty1024-app-gitea-statefulset
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: gitea
|
||||
app.k8s.hty1024.com/version: 1.19.4
|
||||
app.k8s.hty1024.com/resources: statefulSet
|
||||
spec:
|
||||
replicas: 1
|
||||
minReadySeconds: 30
|
||||
selector:
|
||||
matchLabels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: gitea
|
||||
app.k8s.hty1024.com/version: 1.19.4
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: gitea
|
||||
app.k8s.hty1024.com/version: 1.19.4
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 60
|
||||
volumes:
|
||||
- name: localtime
|
||||
hostPath:
|
||||
path: /etc/localtime
|
||||
- name: hty1024-app-gitea-data
|
||||
persistentVolumeClaim:
|
||||
claimName: hty1024-app-gitea-pvc
|
||||
containers:
|
||||
- name: gitea
|
||||
image: gitea/gitea:1.19.4
|
||||
ports:
|
||||
- name: tcp
|
||||
containerPort: 3000
|
||||
volumeMounts:
|
||||
- name: localtime
|
||||
mountPath: /etc/localtime
|
||||
readOnly: true
|
||||
- name: hty1024-app-gitea-data
|
||||
mountPath: /data
|
||||
nodeSelector:
|
||||
node.k8s.hty1024.com/type: app
|
||||
|
||||
178
examples/halo/halo.yaml
Normal file
178
examples/halo/halo.yaml
Normal file
@ -0,0 +1,178 @@
|
||||
---
|
||||
|
||||
# 创建 Namespace
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: hty1024-app
|
||||
|
||||
---
|
||||
|
||||
# 创建 StorageClass
|
||||
apiVersion: storage.k8s.io/v1
|
||||
kind: StorageClass
|
||||
metadata:
|
||||
name: storage-local-halo
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: halo
|
||||
app.k8s.hty1024.com/version: 1.6.1
|
||||
app.k8s.hty1024.com/resources: storageClass
|
||||
provisioner: kubernetes.io/no-provisioner
|
||||
reclaimPolicy: Retain
|
||||
volumeBindingMode: WaitForFirstConsumer
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolume
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: hty1024-app-halo-pv
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: halo
|
||||
app.k8s.hty1024.com/version: 1.6.1
|
||||
app.k8s.hty1024.com/resources: persistentVolume
|
||||
spec:
|
||||
capacity:
|
||||
storage: 10Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: storage-local-halo
|
||||
local:
|
||||
path: /app/halo/data
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: node.k8s.hty1024.com/type
|
||||
operator: In
|
||||
values:
|
||||
- app
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolumeClaim
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: hty1024-app-halo-pvc
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: halo
|
||||
app.k8s.hty1024.com/version: 1.6.1
|
||||
app.k8s.hty1024.com/resources: persistentVolumeClaim
|
||||
spec:
|
||||
resources:
|
||||
requests:
|
||||
storage: 10Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: storage-local-halo
|
||||
|
||||
---
|
||||
|
||||
# 创建 Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: hty1024-app-halo-service
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: halo
|
||||
app.k8s.hty1024.com/version: 1.6.1
|
||||
app.k8s.hty1024.com/resources: service
|
||||
spec:
|
||||
type: NodePort
|
||||
ports:
|
||||
- port: 8090
|
||||
targetPort: 8090
|
||||
nodePort: 30000
|
||||
selector:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: halo
|
||||
app.k8s.hty1024.com/version: 1.6.1
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
|
||||
---
|
||||
|
||||
# 创建 StatefulSet
|
||||
apiVersion: apps/v1
|
||||
kind: StatefulSet
|
||||
metadata:
|
||||
name: hty1024-app-halo-statefulset
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: halo
|
||||
app.k8s.hty1024.com/version: 1.6.1
|
||||
app.k8s.hty1024.com/resources: statefulSet
|
||||
spec:
|
||||
replicas: 1
|
||||
minReadySeconds: 30
|
||||
selector:
|
||||
matchLabels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: halo
|
||||
app.k8s.hty1024.com/version: 1.6.1
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: halo
|
||||
app.k8s.hty1024.com/version: 1.6.1
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 60
|
||||
volumes:
|
||||
- name: localtime
|
||||
hostPath:
|
||||
path: /etc/localtime
|
||||
- name: hty1024-app-halo-data
|
||||
persistentVolumeClaim:
|
||||
claimName: hty1024-app-halo-pvc
|
||||
containers:
|
||||
- name: halo
|
||||
image: halohub/halo:1.6.1
|
||||
ports:
|
||||
- name: tcp
|
||||
containerPort: 8090
|
||||
volumeMounts:
|
||||
- name: localtime
|
||||
mountPath: /etc/localtime
|
||||
readOnly: true
|
||||
- name: hty1024-app-halo-data
|
||||
mountPath: /root/.halo
|
||||
env:
|
||||
- name: SERVER_PORT
|
||||
value: "8090"
|
||||
- name: SPRING_DATASOURCE_DRIVER_CLASS_NAME
|
||||
value: "com.mysql.cj.jdbc.Driver"
|
||||
- name: SPRING_DATASOURCE_URL
|
||||
value: "jdbc:mysql://hty1024-db-mysql-service.hty1024-db:3306/halo?characterEncoding=utf8&useSSL=false&serverTimezone=Asia/Shanghai&allowPublicKeyRetrieval=true"
|
||||
- name: SPRING_DATASOURCE_USERNAME
|
||||
value: "halo"
|
||||
- name: SPRING_DATASOURCE_PASSWORD
|
||||
value: "123456"
|
||||
- name: HALO_ADMIN_PATH
|
||||
value: "admin"
|
||||
- name: HALO_CACHE
|
||||
value: "memory"
|
||||
nodeSelector:
|
||||
node.k8s.hty1024.com/type: app
|
||||
|
||||
163
examples/kiwix-serve/kiwix-serve.yaml
Normal file
163
examples/kiwix-serve/kiwix-serve.yaml
Normal file
@ -0,0 +1,163 @@
|
||||
---
|
||||
|
||||
# 创建 Namespace
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: hty1024-app
|
||||
|
||||
---
|
||||
|
||||
# 创建 StorageClass
|
||||
apiVersion: storage.k8s.io/v1
|
||||
kind: StorageClass
|
||||
metadata:
|
||||
name: storage-local-kiwix-serve
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: kiwix-serve
|
||||
app.k8s.hty1024.com/version: 3.6.0-alpine
|
||||
app.k8s.hty1024.com/resources: storageClass
|
||||
provisioner: kubernetes.io/no-provisioner
|
||||
reclaimPolicy: Retain
|
||||
volumeBindingMode: WaitForFirstConsumer
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolume
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: hty1024-app-kiwix-serve-pv
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: kiwix-serve
|
||||
app.k8s.hty1024.com/version: 3.6.0-alpine
|
||||
app.k8s.hty1024.com/resources: persistentVolume
|
||||
spec:
|
||||
capacity:
|
||||
storage: 100Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: storage-local-kiwix-serve
|
||||
local:
|
||||
path: /app/kiwix-serve/data
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: node.k8s.hty1024.com/type
|
||||
operator: In
|
||||
values:
|
||||
- app
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolumeClaim
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: hty1024-app-kiwix-serve-pvc
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: kiwix-serve
|
||||
app.k8s.hty1024.com/version: 3.6.0-alpine
|
||||
app.k8s.hty1024.com/resources: persistentVolumeClaim
|
||||
spec:
|
||||
resources:
|
||||
requests:
|
||||
storage: 100Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: storage-local-kiwix-serve
|
||||
|
||||
---
|
||||
|
||||
# 创建 Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: hty1024-app-kiwix-serve-service
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: kiwix-serve
|
||||
app.k8s.hty1024.com/version: 3.6.0-alpine
|
||||
app.k8s.hty1024.com/resources: service
|
||||
spec:
|
||||
type: NodePort
|
||||
ports:
|
||||
- port: 10080
|
||||
targetPort: 10080
|
||||
nodePort: 30000
|
||||
selector:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: kiwix-serve
|
||||
app.k8s.hty1024.com/version: 3.6.0-alpine
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
|
||||
---
|
||||
|
||||
# 创建 Deployment
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: hty1024-app-kiwix-serve-deployment
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: kiwix-serve
|
||||
app.k8s.hty1024.com/version: 3.6.0-alpine
|
||||
app.k8s.hty1024.com/resources: deployment
|
||||
spec:
|
||||
replicas: 1
|
||||
minReadySeconds: 30
|
||||
selector:
|
||||
matchLabels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: kiwix-serve
|
||||
app.k8s.hty1024.com/version: 3.6.0-alpine
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: kiwix-serve
|
||||
app.k8s.hty1024.com/version: 3.6.0-alpine
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 60
|
||||
volumes:
|
||||
- name: localtime
|
||||
hostPath:
|
||||
path: /etc/localtime
|
||||
- name: hty1024-app-kiwix-serve-data
|
||||
persistentVolumeClaim:
|
||||
claimName: hty1024-app-kiwix-serve-pvc
|
||||
containers:
|
||||
- name: kiwix-serve
|
||||
image: hub.hty1024.com/hty1024/kiwix-serve:3.6.0-alpine
|
||||
ports:
|
||||
- name: tcp
|
||||
containerPort: 10080
|
||||
volumeMounts:
|
||||
- name: localtime
|
||||
mountPath: /etc/localtime
|
||||
readOnly: true
|
||||
- name: hty1024-app-kiwix-serve-data
|
||||
mountPath: /data
|
||||
nodeSelector:
|
||||
node.k8s.hty1024.com/type: app
|
||||
|
||||
220
examples/mysql/mysql-8-single.yaml
Normal file
220
examples/mysql/mysql-8-single.yaml
Normal file
@ -0,0 +1,220 @@
|
||||
---
|
||||
|
||||
# 创建 Namespace
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: hty1024-db
|
||||
|
||||
---
|
||||
|
||||
# 创建 StorageClass
|
||||
apiVersion: storage.k8s.io/v1
|
||||
kind: StorageClass
|
||||
metadata:
|
||||
name: storage-local-mysql
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: mysql
|
||||
app.k8s.hty1024.com/version: 8.0.35
|
||||
app.k8s.hty1024.com/resources: storageClass
|
||||
provisioner: kubernetes.io/no-provisioner
|
||||
reclaimPolicy: Retain
|
||||
volumeBindingMode: WaitForFirstConsumer
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolume
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: hty1024-db-mysql-pv
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: mysql
|
||||
app.k8s.hty1024.com/version: 8.0.35
|
||||
app.k8s.hty1024.com/resources: persistentVolume
|
||||
spec:
|
||||
capacity:
|
||||
storage: 20Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: storage-local-mysql
|
||||
local:
|
||||
path: /app/mysql/data
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: node.k8s.hty1024.com/type
|
||||
operator: In
|
||||
values:
|
||||
- app
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolumeClaim
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: hty1024-db-mysql-pvc
|
||||
namespace: hty1024-db
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: mysql
|
||||
app.k8s.hty1024.com/version: 8.0.35
|
||||
app.k8s.hty1024.com/resources: persistentVolumeClaim
|
||||
spec:
|
||||
resources:
|
||||
requests:
|
||||
storage: 20Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: storage-local-mysql
|
||||
|
||||
---
|
||||
|
||||
# 创建 ConfigMap（自定义 my.cnf 文件）
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: hty1024-db-mysql-cm
|
||||
namespace: hty1024-db
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: mysql
|
||||
app.k8s.hty1024.com/version: 8.0.35
|
||||
app.k8s.hty1024.com/resources: configMap
|
||||
data:
|
||||
my.cnf: |
|
||||
[mysqld]
|
||||
max_connections = 1000
|
||||
character-set-server = utf8mb4
|
||||
collation-server = utf8mb4_unicode_ci
|
||||
|
||||
---
|
||||
|
||||
# 创建 Secret（自定义 MySQL 用户密码）
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: hty1024-db-mysql-secret
|
||||
namespace: hty1024-db
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: mysql
|
||||
app.k8s.hty1024.com/version: 8.0.35
|
||||
app.k8s.hty1024.com/resources: secret
|
||||
type: Opaque
|
||||
stringData:
|
||||
root.key: |
|
||||
123456
|
||||
immutable: true
|
||||
|
||||
---
|
||||
|
||||
# 创建 Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: hty1024-db-mysql-service
|
||||
namespace: hty1024-db
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: mysql
|
||||
app.k8s.hty1024.com/version: 8.0.35
|
||||
app.k8s.hty1024.com/resources: service
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- port: 3306
|
||||
targetPort: 3306
|
||||
selector:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: mysql
|
||||
app.k8s.hty1024.com/version: 8.0.35
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
|
||||
---
|
||||
|
||||
# 创建 StatefulSet
|
||||
apiVersion: apps/v1
|
||||
kind: StatefulSet
|
||||
metadata:
|
||||
name: hty1024-db-mysql-statefulset
|
||||
namespace: hty1024-db
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: mysql
|
||||
app.k8s.hty1024.com/version: 8.0.35
|
||||
app.k8s.hty1024.com/resources: statefulSet
|
||||
spec:
|
||||
replicas: 1
|
||||
minReadySeconds: 30
|
||||
selector:
|
||||
matchLabels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: mysql
|
||||
app.k8s.hty1024.com/version: 8.0.35
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: mysql
|
||||
app.k8s.hty1024.com/version: 8.0.35
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 60
|
||||
volumes:
|
||||
- name: localtime
|
||||
hostPath:
|
||||
path: /etc/localtime
|
||||
- name: hty1024-db-mysql-data
|
||||
persistentVolumeClaim:
|
||||
claimName: hty1024-db-mysql-pvc
|
||||
- name: hty1024-db-mysql-conf
|
||||
configMap:
|
||||
name: hty1024-db-mysql-cm
|
||||
items:
|
||||
- key: my.cnf
|
||||
path: my.cnf
|
||||
- name: hty1024-db-mysql-pwd
|
||||
secret:
|
||||
secretName: hty1024-db-mysql-secret
|
||||
containers:
|
||||
- name: mysql
|
||||
image: mysql:8.0.35
|
||||
ports:
|
||||
- name: tcp
|
||||
containerPort: 3306
|
||||
volumeMounts:
|
||||
- name: localtime
|
||||
mountPath: /etc/localtime
|
||||
readOnly: true
|
||||
- name: hty1024-db-mysql-data
|
||||
mountPath: /var/lib/mysql
|
||||
- name: hty1024-db-mysql-conf
|
||||
mountPath: /etc/mysql/conf.d/
|
||||
- name: hty1024-db-mysql-pwd
|
||||
mountPath: /tmp/secret-volume
|
||||
readOnly: true
|
||||
env:
|
||||
- name: MYSQL_ROOT_PASSWORD_FILE
|
||||
value: "/tmp/secret-volume/root.key"
|
||||
nodeSelector:
|
||||
node.k8s.hty1024.com/type: app
|
||||
|
||||
91
examples/pgadmin4/pgadmin4.yaml
Normal file
91
examples/pgadmin4/pgadmin4.yaml
Normal file
@ -0,0 +1,91 @@
|
||||
---
|
||||
|
||||
# 创建 Namespace
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: hty1024-db
|
||||
|
||||
---
|
||||
|
||||
# 创建 Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: hty1024-db-pgadmin4-service
|
||||
namespace: hty1024-db
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: pgadmin4
|
||||
app.k8s.hty1024.com/version: 8.0.0
|
||||
app.k8s.hty1024.com/resources: service
|
||||
spec:
|
||||
type: NodePort
|
||||
ports:
|
||||
- name: pgadmin4
|
||||
port: 80
|
||||
targetPort: 80
|
||||
nodePort: 30000
|
||||
selector:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: pgadmin4
|
||||
app.k8s.hty1024.com/version: 8.0.0
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
|
||||
---
|
||||
|
||||
# 创建 Deployment
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: hty1024-db-pgadmin4
|
||||
namespace: hty1024-db
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: pgadmin4
|
||||
app.k8s.hty1024.com/version: 8.0.0
|
||||
app.k8s.hty1024.com/resources: deployment
|
||||
spec:
|
||||
replicas: 1
|
||||
minReadySeconds: 30
|
||||
selector:
|
||||
matchLabels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: pgadmin4
|
||||
app.k8s.hty1024.com/version: 8.0.0
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: pgadmin4
|
||||
app.k8s.hty1024.com/version: 8.0.0
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 60
|
||||
volumes:
|
||||
- name: localtime
|
||||
hostPath:
|
||||
path: /etc/localtime
|
||||
containers:
|
||||
- name: pgadmin4
|
||||
image: dpage/pgadmin4:8.0
|
||||
ports:
|
||||
- name: http
|
||||
containerPort: 80
|
||||
volumeMounts:
|
||||
- name: localtime
|
||||
mountPath: /etc/localtime
|
||||
readOnly: true
|
||||
env:
|
||||
- name: PGADMIN_DEFAULT_EMAIL
|
||||
value: "test@hty1024.com"
|
||||
- name: PGADMIN_DEFAULT_PASSWORD
|
||||
value: "123456"
|
||||
nodeSelector:
|
||||
node.k8s.hty1024.com/type: app
|
||||
89
examples/phpmyadmin/phpmyadmin.yaml
Normal file
89
examples/phpmyadmin/phpmyadmin.yaml
Normal file
@ -0,0 +1,89 @@
|
||||
---
|
||||
|
||||
# 创建 Namespace
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: hty1024-db
|
||||
|
||||
---
|
||||
|
||||
# 创建 Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: hty1024-db-phpmyadmin-service
|
||||
namespace: hty1024-db
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: phpmyadmin
|
||||
app.k8s.hty1024.com/version: 5.2.1
|
||||
app.k8s.hty1024.com/resources: service
|
||||
spec:
|
||||
type: NodePort
|
||||
ports:
|
||||
- name: phpmyadmin
|
||||
port: 80
|
||||
targetPort: 80
|
||||
nodePort: 30000
|
||||
selector:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: phpmyadmin
|
||||
app.k8s.hty1024.com/version: 5.2.1
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
|
||||
---
|
||||
|
||||
# 创建 Deployment
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: hty1024-db-phpmyadmin
|
||||
namespace: hty1024-db
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: phpmyadmin
|
||||
app.k8s.hty1024.com/version: 5.2.1
|
||||
app.k8s.hty1024.com/resources: deployment
|
||||
spec:
|
||||
replicas: 1
|
||||
minReadySeconds: 30
|
||||
selector:
|
||||
matchLabels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: phpmyadmin
|
||||
app.k8s.hty1024.com/version: 5.2.1
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: phpmyadmin
|
||||
app.k8s.hty1024.com/version: 5.2.1
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 60
|
||||
volumes:
|
||||
- name: localtime
|
||||
hostPath:
|
||||
path: /etc/localtime
|
||||
containers:
|
||||
- name: phpmyadmin
|
||||
image: phpmyadmin:5.2.1
|
||||
ports:
|
||||
- name: http
|
||||
containerPort: 80
|
||||
volumeMounts:
|
||||
- name: localtime
|
||||
mountPath: /etc/localtime
|
||||
readOnly: true
|
||||
env:
|
||||
- name: PMA_ARBITRARY
|
||||
value: "1"
|
||||
nodeSelector:
|
||||
node.k8s.hty1024.com/type: app
|
||||
191
examples/postgres/postgres-16-single.yaml
Normal file
191
examples/postgres/postgres-16-single.yaml
Normal file
@ -0,0 +1,191 @@
|
||||
---
|
||||
|
||||
# 创建 Namespace
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: hty1024-db
|
||||
|
||||
---
|
||||
|
||||
# 创建 StorageClass
|
||||
apiVersion: storage.k8s.io/v1
|
||||
kind: StorageClass
|
||||
metadata:
|
||||
name: storage-local-postgres
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: postgres
|
||||
app.k8s.hty1024.com/version: 16.1-alpine3.19
|
||||
app.k8s.hty1024.com/resources: storageClass
|
||||
provisioner: kubernetes.io/no-provisioner
|
||||
reclaimPolicy: Retain
|
||||
volumeBindingMode: WaitForFirstConsumer
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolume
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: hty1024-db-postgres-pv
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: postgres
|
||||
app.k8s.hty1024.com/version: 16.1-alpine3.19
|
||||
app.k8s.hty1024.com/resources: persistentVolume
|
||||
spec:
|
||||
capacity:
|
||||
storage: 20Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: storage-local-postgres
|
||||
local:
|
||||
path: /app/postgres/data
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: node.k8s.hty1024.com/type
|
||||
operator: In
|
||||
values:
|
||||
- app
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolumeClaim
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: hty1024-db-postgres-pvc
|
||||
namespace: hty1024-db
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: postgres
|
||||
app.k8s.hty1024.com/version: 16.1-alpine3.19
|
||||
app.k8s.hty1024.com/resources: persistentVolumeClaim
|
||||
spec:
|
||||
resources:
|
||||
requests:
|
||||
storage: 20Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: storage-local-postgres
|
||||
|
||||
---
|
||||
|
||||
# 创建 Secret（自定义 PostgreSQL 用户密码）
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: hty1024-db-postgres-secret
|
||||
namespace: hty1024-db
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: postgres
|
||||
app.k8s.hty1024.com/version: 16.1-alpine3.19
|
||||
app.k8s.hty1024.com/resources: secret
|
||||
type: Opaque
|
||||
stringData:
|
||||
postgres.key: |
|
||||
123456
|
||||
immutable: true
|
||||
|
||||
---
|
||||
|
||||
# 创建 Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: hty1024-db-postgres-service
|
||||
namespace: hty1024-db
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: postgres
|
||||
app.k8s.hty1024.com/version: 16.1-alpine3.19
|
||||
app.k8s.hty1024.com/resources: service
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- port: 5432
|
||||
targetPort: 5432
|
||||
selector:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: postgres
|
||||
app.k8s.hty1024.com/version: 16.1-alpine3.19
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
|
||||
---
|
||||
|
||||
# 创建 StatefulSet
|
||||
apiVersion: apps/v1
|
||||
kind: StatefulSet
|
||||
metadata:
|
||||
name: hty1024-db-postgres-statefulset
|
||||
namespace: hty1024-db
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: postgres
|
||||
app.k8s.hty1024.com/version: 16.1-alpine3.19
|
||||
app.k8s.hty1024.com/resources: statefulSet
|
||||
spec:
|
||||
replicas: 1
|
||||
minReadySeconds: 30
|
||||
selector:
|
||||
matchLabels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: postgres
|
||||
app.k8s.hty1024.com/version: 16.1-alpine3.19
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: db
|
||||
app.k8s.hty1024.com/name: postgres
|
||||
app.k8s.hty1024.com/version: 16.1-alpine3.19
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 60
|
||||
volumes:
|
||||
- name: localtime
|
||||
hostPath:
|
||||
path: /etc/localtime
|
||||
- name: hty1024-db-postgres-data
|
||||
persistentVolumeClaim:
|
||||
claimName: hty1024-db-postgres-pvc
|
||||
- name: hty1024-db-postgres-pwd
|
||||
secret:
|
||||
secretName: hty1024-db-postgres-secret
|
||||
containers:
|
||||
- name: postgres
|
||||
image: postgres:16.1-alpine3.19
|
||||
ports:
|
||||
- name: tcp
|
||||
containerPort: 5432
|
||||
volumeMounts:
|
||||
- name: localtime
|
||||
mountPath: /etc/localtime
|
||||
readOnly: true
|
||||
- name: hty1024-db-postgres-data
|
||||
mountPath: /var/lib/postgres
|
||||
- name: hty1024-db-postgres-pwd
|
||||
mountPath: /tmp/secret-volume
|
||||
readOnly: true
|
||||
env:
|
||||
- name: POSTGRES_PASSWORD_FILE
|
||||
value: "/tmp/secret-volume/postgres.key"
|
||||
nodeSelector:
|
||||
node.k8s.hty1024.com/type: app
|
||||
|
||||
166
examples/vaultwarden/vaultwarden.yaml
Normal file
166
examples/vaultwarden/vaultwarden.yaml
Normal file
@ -0,0 +1,166 @@
|
||||
---
|
||||
|
||||
# 创建 Namespace
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: hty1024-app
|
||||
|
||||
---
|
||||
|
||||
# 创建 StorageClass
|
||||
apiVersion: storage.k8s.io/v1
|
||||
kind: StorageClass
|
||||
metadata:
|
||||
name: storage-local-vaultwarden
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: vaultwarden
|
||||
app.k8s.hty1024.com/version: 1.30.1-alpine
|
||||
app.k8s.hty1024.com/resources: storageClass
|
||||
provisioner: kubernetes.io/no-provisioner
|
||||
reclaimPolicy: Retain
|
||||
volumeBindingMode: WaitForFirstConsumer
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolume
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: hty1024-app-vaultwarden-pv
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: vaultwarden
|
||||
app.k8s.hty1024.com/version: 1.30.1-alpine
|
||||
app.k8s.hty1024.com/resources: persistentVolume
|
||||
spec:
|
||||
capacity:
|
||||
storage: 1Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: storage-local-vaultwarden
|
||||
local:
|
||||
path: /app/vaultwarden/data
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: node.k8s.hty1024.com/type
|
||||
operator: In
|
||||
values:
|
||||
- app
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolumeClaim
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: hty1024-app-vaultwarden-pvc
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: vaultwarden
|
||||
app.k8s.hty1024.com/version: 1.30.1-alpine
|
||||
app.k8s.hty1024.com/resources: persistentVolumeClaim
|
||||
spec:
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: storage-local-vaultwarden
|
||||
|
||||
---
|
||||
|
||||
# 创建 Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: hty1024-app-vaultwarden-service
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: vaultwarden
|
||||
app.k8s.hty1024.com/version: 1.30.1-alpine
|
||||
app.k8s.hty1024.com/resources: service
|
||||
spec:
|
||||
type: NodePort
|
||||
ports:
|
||||
- port: 80
|
||||
targetPort: 80
|
||||
nodePort: 30000
|
||||
selector:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: vaultwarden
|
||||
app.k8s.hty1024.com/version: 1.30.1-alpine
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
|
||||
---
|
||||
|
||||
# 创建 StatefulSet
|
||||
apiVersion: apps/v1
|
||||
kind: StatefulSet
|
||||
metadata:
|
||||
name: hty1024-app-vaultwarden-statefulset
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: vaultwarden
|
||||
app.k8s.hty1024.com/version: 1.30.1-alpine
|
||||
app.k8s.hty1024.com/resources: statefulSet
|
||||
spec:
|
||||
replicas: 1
|
||||
minReadySeconds: 30
|
||||
selector:
|
||||
matchLabels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: vaultwarden
|
||||
app.k8s.hty1024.com/version: 1.30.1-alpine
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: vaultwarden
|
||||
app.k8s.hty1024.com/version: 1.30.1-alpine
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 60
|
||||
volumes:
|
||||
- name: localtime
|
||||
hostPath:
|
||||
path: /etc/localtime
|
||||
- name: hty1024-app-vaultwarden-data
|
||||
persistentVolumeClaim:
|
||||
claimName: hty1024-app-vaultwarden-pvc
|
||||
containers:
|
||||
- name: vaultwarden
|
||||
image: vaultwarden/server:1.30.1-alpine
|
||||
ports:
|
||||
- name: tcp
|
||||
containerPort: 80
|
||||
volumeMounts:
|
||||
- name: localtime
|
||||
mountPath: /etc/localtime
|
||||
readOnly: true
|
||||
- name: hty1024-app-vaultwarden-data
|
||||
mountPath: /data
|
||||
env:
|
||||
- name: SIGNUPS_ALLOWED
|
||||
value: "false"
|
||||
nodeSelector:
|
||||
node.k8s.hty1024.com/type: app
|
||||
|
||||
176
examples/wikijs/wikijs.yaml
Normal file
176
examples/wikijs/wikijs.yaml
Normal file
@ -0,0 +1,176 @@
|
||||
---
|
||||
|
||||
# 创建 Namespace
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: hty1024-app
|
||||
|
||||
---
|
||||
|
||||
# 创建 StorageClass
|
||||
apiVersion: storage.k8s.io/v1
|
||||
kind: StorageClass
|
||||
metadata:
|
||||
name: storage-local-wikijs
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wikijs
|
||||
app.k8s.hty1024.com/version: 2.5.300
|
||||
app.k8s.hty1024.com/resources: storageClass
|
||||
provisioner: kubernetes.io/no-provisioner
|
||||
reclaimPolicy: Retain
|
||||
volumeBindingMode: WaitForFirstConsumer
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolume
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: hty1024-app-wikijs-pv
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wikijs
|
||||
app.k8s.hty1024.com/version: 2.5.300
|
||||
app.k8s.hty1024.com/resources: persistentVolume
|
||||
spec:
|
||||
capacity:
|
||||
storage: 10Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: storage-local-wikijs
|
||||
local:
|
||||
path: /app/wikijs/data
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: node.k8s.hty1024.com/type
|
||||
operator: In
|
||||
values:
|
||||
- app
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolumeClaim
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: hty1024-app-wikijs-pvc
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wikijs
|
||||
app.k8s.hty1024.com/version: 2.5.300
|
||||
app.k8s.hty1024.com/resources: persistentVolumeClaim
|
||||
spec:
|
||||
resources:
|
||||
requests:
|
||||
storage: 10Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: storage-local-wikijs
|
||||
|
||||
---
|
||||
|
||||
# 创建 Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: hty1024-app-wikijs-service
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wikijs
|
||||
app.k8s.hty1024.com/version: 2.5.300
|
||||
app.k8s.hty1024.com/resources: service
|
||||
spec:
|
||||
type: NodePort
|
||||
ports:
|
||||
- port: 3000
|
||||
targetPort: 3000
|
||||
nodePort: 30000
|
||||
selector:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wikijs
|
||||
app.k8s.hty1024.com/version: 2.5.300
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
|
||||
---
|
||||
|
||||
# 创建 StatefulSet
|
||||
apiVersion: apps/v1
|
||||
kind: StatefulSet
|
||||
metadata:
|
||||
name: hty1024-app-wikijs-statefulset
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wikijs
|
||||
app.k8s.hty1024.com/version: 2.5.300
|
||||
app.k8s.hty1024.com/resources: statefulSet
|
||||
spec:
|
||||
replicas: 1
|
||||
minReadySeconds: 30
|
||||
selector:
|
||||
matchLabels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wikijs
|
||||
app.k8s.hty1024.com/version: 2.5.300
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wikijs
|
||||
app.k8s.hty1024.com/version: 2.5.300
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 60
|
||||
volumes:
|
||||
- name: localtime
|
||||
hostPath:
|
||||
path: /etc/localtime
|
||||
- name: hty1024-app-wikijs-data
|
||||
persistentVolumeClaim:
|
||||
claimName: hty1024-app-wikijs-pvc
|
||||
containers:
|
||||
- name: wikijs
|
||||
image: requarks/wiki:2.5.300
|
||||
ports:
|
||||
- name: tcp
|
||||
containerPort: 3000
|
||||
volumeMounts:
|
||||
- name: localtime
|
||||
mountPath: /etc/localtime
|
||||
readOnly: true
|
||||
- name: hty1024-app-wikijs-data
|
||||
mountPath: /wiki/data
|
||||
env:
|
||||
- name: DB_TYPE
|
||||
value: "mysql"
|
||||
- name: DB_HOST
|
||||
value: "hty1024-db-mysql-service.hty1024-db"
|
||||
- name: DB_PORT
|
||||
value: "3306"
|
||||
- name: DB_USER
|
||||
value: "wikijs"
|
||||
- name: DB_PASS
|
||||
value: "123456"
|
||||
- name: DB_NAME
|
||||
value: "wikijs"
|
||||
nodeSelector:
|
||||
node.k8s.hty1024.com/type: app
|
||||
|
||||
163
examples/wiznote/wiznote.yaml
Normal file
163
examples/wiznote/wiznote.yaml
Normal file
@ -0,0 +1,163 @@
|
||||
---
|
||||
|
||||
# 创建 Namespace
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: hty1024-app
|
||||
|
||||
---
|
||||
|
||||
# 创建 StorageClass
|
||||
apiVersion: storage.k8s.io/v1
|
||||
kind: StorageClass
|
||||
metadata:
|
||||
name: storage-local-wiznote
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wiznote
|
||||
app.k8s.hty1024.com/version: 1.0.31
|
||||
app.k8s.hty1024.com/resources: storageClass
|
||||
provisioner: kubernetes.io/no-provisioner
|
||||
reclaimPolicy: Retain
|
||||
volumeBindingMode: WaitForFirstConsumer
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolume
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: hty1024-app-wiznote-pv
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wiznote
|
||||
app.k8s.hty1024.com/version: 1.0.31
|
||||
app.k8s.hty1024.com/resources: persistentVolume
|
||||
spec:
|
||||
capacity:
|
||||
storage: 20Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: storage-local-wiznote
|
||||
local:
|
||||
path: /app/wiznote/data
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: node.k8s.hty1024.com/type
|
||||
operator: In
|
||||
values:
|
||||
- app
|
||||
|
||||
---
|
||||
|
||||
# 创建 PersistentVolumeClaim
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: hty1024-app-wiznote-pvc
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wiznote
|
||||
app.k8s.hty1024.com/version: 1.0.31
|
||||
app.k8s.hty1024.com/resources: persistentVolumeClaim
|
||||
spec:
|
||||
resources:
|
||||
requests:
|
||||
storage: 20Gi
|
||||
volumeMode: Filesystem
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: storage-local-wiznote
|
||||
|
||||
---
|
||||
|
||||
# 创建 Service
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: hty1024-app-wiznote-service
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wiznote
|
||||
app.k8s.hty1024.com/version: 1.0.31
|
||||
app.k8s.hty1024.com/resources: service
|
||||
spec:
|
||||
type: NodePort
|
||||
ports:
|
||||
- port: 80
|
||||
targetPort: 80
|
||||
nodePort: 30000
|
||||
selector:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wiznote
|
||||
app.k8s.hty1024.com/version: 1.0.31
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
|
||||
---
|
||||
|
||||
# 创建 StatefulSet
|
||||
apiVersion: apps/v1
|
||||
kind: StatefulSet
|
||||
metadata:
|
||||
name: hty1024-app-wiznote-statefulset
|
||||
namespace: hty1024-app
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wiznote
|
||||
app.k8s.hty1024.com/version: 1.0.31
|
||||
app.k8s.hty1024.com/resources: statefulSet
|
||||
spec:
|
||||
replicas: 1
|
||||
minReadySeconds: 30
|
||||
selector:
|
||||
matchLabels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wiznote
|
||||
app.k8s.hty1024.com/version: 1.0.31
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.k8s.hty1024.com/env: prod
|
||||
app.k8s.hty1024.com/type: app
|
||||
app.k8s.hty1024.com/name: wiznote
|
||||
app.k8s.hty1024.com/version: 1.0.31
|
||||
app.k8s.hty1024.com/resources: pod
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 60
|
||||
volumes:
|
||||
- name: localtime
|
||||
hostPath:
|
||||
path: /etc/localtime
|
||||
- name: hty1024-app-wiznote-data
|
||||
persistentVolumeClaim:
|
||||
claimName: hty1024-app-wiznote-pvc
|
||||
containers:
|
||||
- name: wiznote
|
||||
image: hub.hty1024.com/official/wiznote/wizserver:1.0.31
|
||||
ports:
|
||||
- name: tcp
|
||||
containerPort: 80
|
||||
volumeMounts:
|
||||
- name: localtime
|
||||
mountPath: /etc/localtime
|
||||
readOnly: true
|
||||
- name: hty1024-app-wiznote-data
|
||||
mountPath: /wiz/storage
|
||||
nodeSelector:
|
||||
node.k8s.hty1024.com/type: app
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user