容器交付流程

水深无声 2022-10-05 10:47 101阅读 0赞

容器交付流程通常分为四个阶：开发阶段、持续集成阶段、应用部署阶段和运维阶段。

开发阶段：开发应用程序，编写Dockerfile;

持续集成阶段：对应用程序编译打包、使用Dockerfile构建镜像，把镜像推送到镜像仓库；

应用部署阶段：基于镜像创建pod,使用deploy控制器暴露服务得到service，使用ingress提供域名访问服务；

运维阶段：对应用程序进行监控和版本升级等；

# 一 创建镜像 #

首先准备一个普通的java项目如springboot项目，打成jar包；

接下来编写Dockerfile

FROM openjdk:8-jdk-alpine
    VOLUME /tmp
    ADD ./target/demojenkins.jar demojenkins.jar
    ENTRYPOINT ["java","-jar","/demojenkins.jar", "&"]

在装有Docker非服务器上上传jar包和Dockerfile

构建镜像

# 在jar和Dockerfile所在目录执行
    docker build -t java-demo-01 .

# 查看镜像
    [root@localhost ~]# docker images
    REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
    java-demo-01        latest              34eeb76f25bc        About an hour ago   122MB
    openjdk             8-jdk-alpine        a3562aa0b991        2 years ago         105MB

#运行容器（验证一下jar包是否可用）
     docker run -d -p 8111:8111 java-demo-01 -t

# 二 推送镜像到镜像仓库 #

首先在阿里云创建镜像仓库

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpYW5nd2VubWFpbA_size_16_color_FFFFFF_t_70][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpYW5nd2VubWFpbA_size_16_color_FFFFFF_t_70 1][]

根据如上指引进行上传镜像到仓库

[root@localhost dh]# docker login --username=阿里云账号 registry.cn-hangzhou.aliyuncs.com
    Password:
    WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
    Configure a credential helper to remove this warning. See
    https://docs.docker.com/engine/reference/commandline/login/#credentials-store
    
    Login Succeeded
    [root@localhost dh]# docker images
    REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
    java-demo-01        latest              34eeb76f25bc        2 hours ago         122MB
    openjdk             8-jdk-alpine        a3562aa0b991        2 years ago         105MB
    [root@localhost dh]# docker tag 34eeb76f25bc registry.cn-hangzhou.aliyuncs.com/alytech/java-project-01:1.0.0
    [root@localhost dh]# docker push registry.cn-hangzhou.aliyuncs.com/alytech/java-project-01:1.0.0
    The push refers to repository [registry.cn-hangzhou.aliyuncs.com/alytech/java-project-01]
    4d8e1fdeaad1: Pushed
    ceaf9e1ebef5: Pushed
    9b9b7f3d56a0: Pushed
    f1b5933fe4b5: Pushed
    1.0.0: digest: sha256:609e39370e7d9e281ae0f03b4e7689995384a611f4eaefbe4779b67743681d3d size: 1159

# 三 部署镜像 #

基于上一步制作的镜像创建pod

生成资源编排文件

[root@master1 ~]# kubectl create deploy javaproject01 --image=registry.cn-hangzhou.aliyuncs.com/alytech/java-project-01:1.0.0 -o yaml --dry-run > javaproject-deploy.yaml
    [root@master1 ~]# ls
    anaconda-ks.cfg  javaproject-deploy.yaml
    [root@master1 ~]# cat javaproject-deploy.yaml
    apiVersion: apps/v1
    kind: Deployment
    metadata:
      creationTimestamp: null
      labels:
        app: javaproject01
      name: javaproject01
    spec:
      replicas: 1
      selector:
        matchLabels:
          app: javaproject01
      strategy: {}
      template:
        metadata:
          creationTimestamp: null
          labels:
            app: javaproject01
        spec:
          containers:
          - image: registry.cn-hangzhou.aliyuncs.com/alytech/java-project-01:1.0.0
            name: java-project-01
            resources: {}
    status: {}

基于yaml文件创建pod

[root@master1 ~]# kubectl apply -f javaproject-deploy.yaml
    deployment.apps/javaproject01 created
    [root@master1 ~]# kubectl get pods
    NAME                            READY   STATUS              RESTARTS   AGE
    javaproject01-cb44b468b-lwbgs   0/1     ContainerCreating   0          7s
    nginx-86c57db685-bmm6k          1/1     Running             0          4h33m
    [root@master1 ~]# kubectl get deploy
    NAME            READY   UP-TO-DATE   AVAILABLE   AGE
    javaproject01   0/1     1            0           27s
    nginx           1/1     1            1           4h33m
    
    # 对pod扩容至3个节点
    [root@master1 ~]# kubectl scale deploy javaproject01 --replicas=3
    deployment.apps/javaproject01 scaled
    
    [root@master1 ~]# kubectl get pods -o wide
    NAME                            READY   STATUS    RESTARTS   AGE     IP           NODE    NOMINATED NODE   READINESS GATES
    javaproject01-cb44b468b-lwbgs   1/1     Running   0          2m7s    10.244.2.3   node1   <none>           <none>
    javaproject01-cb44b468b-qc9bp   1/1     Running   0          80s     10.244.2.5   node1   <none>           <none>
    javaproject01-cb44b468b-stqvb   1/1     Running   0          80s     10.244.2.4   node1   <none>           <none>
    nginx-86c57db685-bmm6k          1/1     Running   0          4h35m   10.244.2.2   node1   <none>           <none>

对外暴露应用

[root@master1 ~]# kubectl get deploy
    NAME            READY   UP-TO-DATE   AVAILABLE   AGE
    javaproject01   3/3     3            3           2m55s
    nginx           1/1     1            1           4h35m
    [root@master1 ~]# kubectl expose deploy javaproject01 --port=8111 --target-port=8111 --type=NodePort
    service/javaproject01 exposed
    [root@master1 ~]# kubectl get svc
    NAME            TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)          AGE
    javaproject01   NodePort    10.1.164.137   <none>        8111:31463/TCP   11s
    kubernetes      ClusterIP   10.1.0.1       <none>        443/TCP          6h33m
    nginx           NodePort    10.1.72.72     <none>        80:30237/TCP     4h37m

通过暴露的服务端口可以访问java应用

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpYW5nd2VubWFpbA_size_16_color_FFFFFF_t_70]: /images/20221005/f84858909f3e401db55ad20ae023db83.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2xpYW5nd2VubWFpbA_size_16_color_FFFFFF_t_70 1]: /images/20221005/b338816ee415452bab26e2f2fa6cc180.png