手写chart

野性酷女 2023-05-22 22:11 42阅读 0赞

欢迎关注我的公众号：

watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBAaHhwamF2YTE_size_8_color_FFFFFF_t_70_g_se_x_16

目前刚开始写一个月，一共写了18篇原创文章，文章目录如下：

istio多集群探秘，部署了50次多集群后我得出的结论

istio多集群链路追踪，附实操视频

istio防故障利器，你知道几个,istio新手不要读，太难！

istio业务权限控制，原来可以这么玩

istio实现非侵入压缩，微服务之间如何实现压缩

不懂envoyfilter也敢说精通istio系列-http-rbac-不要只会用AuthorizationPolicy配置权限

不懂envoyfilter也敢说精通istio系列-02-http-corsFilter-不要只会vs

不懂envoyfilter也敢说精通istio系列-03-http-csrf filter-再也不用再代码里写csrf逻辑了

不懂envoyfilter也敢说精通istio系列http-jwt_authn-不要只会RequestAuthorization

不懂envoyfilter也敢说精通istio系列-05-fault-filter-故障注入不止是vs

不懂envoyfilter也敢说精通istio系列-06-http-match-配置路由不只是vs

不懂envoyfilter也敢说精通istio系列-07-负载均衡配置不止是dr

不懂envoyfilter也敢说精通istio系列-08-连接池和断路器

不懂envoyfilter也敢说精通istio系列-09-http-route filter

不懂envoyfilter也敢说精通istio系列-network filter-redis proxy

不懂envoyfilter也敢说精通istio系列-network filter-HttpConnectionManager

不懂envoyfilter也敢说精通istio系列-ratelimit-istio ratelimit完全手册

————————————————

manifest文件：

  1. [root@master01 manifest]# cat ./*
  2. kind: ClusterRoleBinding
  3. apiVersion: rbac.authorization.k8s.io/v1
  4. metadata:
  5.   name: mysql-clusterrole-binding
  6.   labels:
  7.     app: "mysql"
  8.     component: "mysql"
  9.     chart: "mysql-0.1"
  10.     release: "mysql"
  11.     heritage: "Helm"
  12. roleRef:
  13.   kind: ClusterRole
  14.   name: mysql-clusterrole
  15.   apiGroup: rbac.authorization.k8s.io
  16. subjects:
  17. - kind: ServiceAccount
  18.   name: mysql-sa
  19.   namespace: mysql
  20. kind: ClusterRole
  21. apiVersion: rbac.authorization.k8s.io/v1
  22. metadata:
  23.   name: mysql-clusterrole
  24.   labels:
  25.     app: "mysql"
  26.     component: "mysql"
  27.     chart: "mysql-0.1"
  28.     release: "mysql"
  29.     heritage: "Helm"
  30. rules:
  31. - apiGroups: ['policy']
  32.   resources: ['podsecuritypolicies']
  33.   verbs:     ['use']
  34. apiVersion: v1
  35. data:
  36.   my.cnf: |
  37.     [mysqld]
  38.     skip-name-resolve
  39.     port=3306
  40.     innodb_file_per_table = 1
  41. kind: ConfigMap
  42. metadata:
  43.   name: mysql-configmap
  44.   labels:
  45.     app: "mysql"
  46.     component: "mysql"
  47.     chart: "mysql"
  48.     release: "mysql"
  49.     heritage: "helm"
  50. apiVersion: apps/v1
  51. kind: Deployment
  52. metadata:
  53.   name: mysql
  54.   labels:
  55.     app: mysql
  56.     chart: "mysql-0.1"
  57.     release: "mysql"
  58.     heritage: "Helm"
  59. spec:
  60.   progressDeadlineSeconds: 600
  61.   strategy:
  62.     type: RollingUpdate
  63.     rollingUpdate:
  64.       maxSurge: 1
  65.       maxUnavailable: 1
  66.   revisionHistoryLimit: 10
  67.   selector:
  68.     matchLabels:
  69.       app: mysql
  70.       release: mysql
  71.   replicas: 1
  72.   template:
  73.     metadata:
  74.       labels:
  75.         app: mysql
  76.         release: mysql
  77.     spec:
  78.       tolerations:
  79.       - key: "example-key"
  80.         operator: "Exists"
  81.         effect: "NoSchedule"
  82.       serviceAccountName: mysql-sa
  83.       terminationGracePeriodSeconds: 60
  84.       containers:
  85.       - name: mysql
  86.         image: mysql:5.6
  87.         imagePullPolicy: IfNotPresent
  88.         ports:
  89.         - containerPort: 3306
  90.         env:
  91.         - name: MYSQL_ROOT_PASSWORD
  92.           value: "mysql"
  93.         readinessProbe:
  94.           exec:
  95.             command:
  96.             - sh
  97.             - -c
  98.             - "mysqladmin ping -u root -p${MYSQL_ROOT_PASSWORD}"
  99.           initialDelaySeconds: 30
  100.           periodSeconds: 10
  101.           timeoutSeconds: 5
  102.           successThreshold: 1
  103.           failureThreshold: 3 
  104.         livenessProbe:
  105.           exec:
  106.             command:
  107.             - sh
  108.             - -c
  109.             - "mysqladmin ping -u root -p${MYSQL_ROOT_PASSWORD}"
  110.           initialDelaySeconds: 30
  111.           periodSeconds: 10
  112.           timeoutSeconds: 5
  113.           successThreshold: 1
  114.           failureThreshold: 3
  115.         resources:
  116.           requests:
  117.             cpu: 0.2
  118.             memory: 100Mi
  119.           limits:
  120.             cpu: 0.5
  121.             memory: 500Mi
  122.         securityContext:
  123.           allowPrivilegeEscalation: false
  124.         volumeMounts:
  125.         - mountPath: /var/lib/mysql 
  126.           name: data
  127.         - name: configurations
  128.           mountPath: /etc/mysql/conf.d/
  129.           subPath: mysql.cnf
  130.       volumes:
  131.       - name: data
  132.         persistentVolumeClaim:
  133.           claimName: mysql-nfs-pvc
  134.       - name: configurations
  135.         configMap:
  136.           name: mysql-configmap
  137. apiVersion: autoscaling/v1
  138. kind: HorizontalPodAutoscaler
  139. metadata:
  140.   name: mysql-hpa
  141.   labels:
  142.     app: "mysql"
  143.     component: "mysql"
  144.     chart: "mysql-0.1"
  145.     release: "mysql"
  146.     heritage: "Helm"
  147. spec:
  148.   scaleTargetRef:
  149.     apiVersion: apps/v1
  150.     kind: Deployment
  151.     name: mysql
  152.   minReplicas: 1
  153.   maxReplicas: 5
  154.   targetCPUUtilizationPercentage: 50
  156. apiVersion: policy/v1beta1  
  157. kind: PodDisruptionBudget  
  158. metadata:  
  159.   name: mysql-pdb
  160.   labels:
  161.     app: "mysql"
  162.     component: "mysql"
  163.     chart: "mysql-0.1"
  164.     release: "mysql"
  165.     heritage: "Helm"  
  166. spec:  
  167.  minAvailable: 1
  168.  selector:  
  169.    matchLabels:  
  170.      app: mysql
  171.      release: mysql
  172. apiVersion: policy/v1beta1
  173. kind: PodSecurityPolicy
  174. metadata:
  175.   name: mysql-psp
  176.   labels:
  177.     app: "mysql"
  178.     component: "mysql"
  179.     chart: "mysql-0.1"
  180.     release: "mysql"
  181.     heritage: "Helm"
  182. spec:
  183.   runAsUser:
  184.     rule: 'RunAsAny'
  185.   seLinux:
  186.     rule: 'RunAsAny'
  187.   supplementalGroups:
  188.     rule: 'MustRunAs'
  189.     ranges:
  190.       - min: 1
  191.         max: 65535
  192.   fsGroup:
  193.     rule: 'MustRunAs'
  194.     ranges:
  195.       - min: 1
  196.         max: 65535
  197.   volumes:
  198.     - 'configMap'
  199.     - 'emptyDir'
  200.     - 'projected'
  201.     - 'secret'
  202.     - 'downwardAPI'
  203.     - 'persistentVolumeClaim'
  204. apiVersion: v1
  205. kind: PersistentVolumeClaim
  206. metadata:
  207.   name: mysql-nfs-pvc
  208.   labels:
  209.     app: "mysql"
  210.     component: "mysql"
  211.     chart: "mysql-0.1"
  212.     release: "mysql"
  213.     heritage: "Helm"
  214. spec:
  215.   storageClassName: mysql-sc
  216.   accessModes:
  217.   - ReadWriteMany
  218.   resources:
  219.     requests:
  220.       storage: 500Mi
  221. apiVersion: v1
  222. kind: ServiceAccount
  223. metadata:
  224.   name: mysql-sa
  225.   labels:
  226.     app: mysql
  227.     chart: mysql-0.1
  228.     release: mysql
  229.     heritage: helm
  230. apiVersion: storage.k8s.io/v1
  231. kind: StorageClass
  232. metadata:
  233.   name: mysql-sc
  234.   labels:
  235.     app: "mysql"
  236.     component: "mysql"
  237.     chart: "mysql-0.1"
  238.     release: "mysql"
  239.     heritage: "Helm"
  240. provisioner: fuseim.pri/ifs
  241. reclaimPolicy: Retain
  243. apiVersion: v1
  244. kind: Service
  245. metadata:
  246.   name: mysql-svc
  247.   labels:
  248.     app: "mysql"
  249.     component: "mysql"
  250.     chart: "mysql-0.1"
  251.     release: "mysql"
  252.     heritage: "Helm"
  253. spec:
  254.  selector:  
  255.    app: mysql
  256.    release: mysql
  257.  type: NodePort
  258.  ports:
  259.  -  name: tcp
  260.     port: 3306      
  261.     targetPort: 3306

template文件：

  1. [root@master01 templates]# cat ./*
  2. {
  3.    {- if .Values.rbac.create}}
  4. kind: ClusterRoleBinding
  5. apiVersion: rbac.authorization.k8s.io/v1
  6. metadata:
  7.   name: {
  8.    {include "mysql.fullname" .}}-binding
  9.   labels:{
  10.    {include "mysql.labels" .|nindent 4}}
  11. roleRef:
  12.   kind: ClusterRole
  13.   name: {
  14.    {include "mysql.fullname" .}}-clusterrole
  15.   apiGroup: rbac.authorization.k8s.io
  16. subjects:
  17. - kind: ServiceAccount
  18.   name: {
  19.    {include "mysql.fullname" .}}-sa
  20.   namespace: {
  21.    {.Release.Namespace}}
  22. {
  23.    {- end}}
  24. {
  25.    {- if .Values.rbac.create}}
  26. kind: ClusterRole
  27. apiVersion: rbac.authorization.k8s.io/v1
  28. metadata:
  29.   name: {
  30.    {include "mysql.fullname" .}}-clusterrole
  31.   labels:{
  32.    {include "mysql.labels" .|nindent 4}}
  33. rules:
  34. - apiGroups: ['policy']
  35.   resources: ['podsecuritypolicies']
  36.   verbs:     ['use']
  37. {
  38.    {- end}}
  39. apiVersion: v1
  40. data:
  41.   my.cnf: |
  42.     [mysqld]
  43.     skip-name-resolve
  44.     port=3306
  45.     innodb_file_per_table = 1
  46. kind: ConfigMap
  47. metadata:
  48.   name: {
  49.    {include "mysql.fullname" .}}-configmap
  50.   labels:{
  51.    {include "mysql.labels" .|nindent 4}}
  52. apiVersion: {
  53.    {include "deployment.apiVersion" .}}
  54. kind: Deployment
  55. metadata:
  56.   name: {
  57.    {include "mysql.fullname" .}}
  58.   labels:{
  59.    {include "mysql.labels" .|nindent 4}}
  60. spec:
  61.   progressDeadlineSeconds: {
  62.    {.Values.deployment.progressDeadlineSeconds}}
  63.   {
  64.    {- if .Values.deployment.strategy}}
  65.   strategy:{
  66.    {toYaml .Values.deployment.strategy|nindent 4}}
  67.   {
  68.    {- end}}
  69.   revisionHistoryLimit: {
  70.    {.Values.deployment.revisionHistoryLimit}}
  71.   selector:
  72.     matchLabels: {
  73.    {include "mysql.selectorLabels" .|nindent 6}}
  74.   replicas: {
  75.    {.Values.deployment.replicaCount}}
  76.   template:
  77.     metadata:
  78.       labels: {
  79.    {include "mysql.labels" .|nindent 8}}
  80.     spec:
  81.      {
  82.    {- if .Values.deployment.tolerations}}
  83.       tolerations:{
  84.    {toYaml .Values.deployment.tolerations|nindent 8}}
  85.      {
  86.    {- end}}
  87.       serviceAccountName: {
  88.    {include "mysql.serviceAccountName" .}}
  89.       terminationGracePeriodSeconds: {
  90.    {.Values.deployment.terminationGracePeriodSeconds}}
  91.       containers:
  92.       - name: mysql
  93.         image: {
  94.    {.Values.deployment.image.repository}}:{
  95.    {.Values.deployment.image.tag}}
  96.         imagePullPolicy: {
  97.    {.Values.deployment.image.pullPolicy}}
  98.         ports:
  99.         - containerPort: 3306
  100.         env:
  101.         - name: MYSQL_ROOT_PASSWORD
  102.           value: {
  103.    {.Values.deployment.mysql_root_password|quote}}
  104.         {
  105.    {- if .Values.deployment.readinessProbe}}
  106.         readinessProbe:
  107.           exec:
  108.             command:
  109.             - sh
  110.             - -c
  111.             - "mysqladmin ping -u root -p${MYSQL_ROOT_PASSWORD}"
  112.           initialDelaySeconds: {
  113.    {.Values.deployment.readinessProbe.initialDelaySeconds}}
  114.           periodSeconds: {
  115.    {.Values.deployment.readinessProbe.periodSeconds}}
  116.           timeoutSeconds: {
  117.    {.Values.deployment.readinessProbe.timeoutSeconds}}
  118.           successThreshold: {
  119.    {.Values.deployment.readinessProbe.successThreshold}}
  120.           failureThreshold: {
  121.    {.Values.deployment.readinessProbe.failureThreshold}}
  122.         {
  123.    {- end}}
  124.         {
  125.    {- if .Values.deployment.livenessProbe}}
  126.         livenessProbe:
  127.           exec:
  128.             command:
  129.             - sh
  130.             - -c
  131.             - "mysqladmin ping -u root -p${MYSQL_ROOT_PASSWORD}"
  132.           initialDelaySeconds: {
  133.    {.Values.deployment.livenessProbe.initialDelaySeconds}}
  134.           periodSeconds: {
  135.    {.Values.deployment.livenessProbe.periodSeconds}}
  136.           timeoutSeconds: {
  137.    {.Values.deployment.livenessProbe.timeoutSeconds}}
  138.           successThreshold: {
  139.    {.Values.deployment.livenessProbe.successThreshold}}
  140.           failureThreshold: {
  141.    {.Values.deployment.livenessProbe.failureThreshold}}
  142.         {
  143.    {- end}}
  144.         {
  145.    {- if .Values.deployment.resources}}
  146.         resources:{
  147.    {toYaml .Values.deployment.resources|nindent 10}}
  148.         {
  149.    {- end}}
  150.         {
  151.    {- if .Values.deployment.securityContext}}
  152.         securityContext:{
  153.    {toYaml .Values.deployment.securityContext|nindent 10}}
  154.         {
  155.    {- end}}
  156.         volumeMounts:
  157.         - mountPath: /var/lib/mysql 
  158.           name: data
  159.         - name: configurations
  160.           mountPath: /etc/mysql/conf.d/
  161.           subPath: mysql.cnf
  162.       volumes:
  163.       - name: data
  164.         persistentVolumeClaim:
  165.           claimName: {
  166.    {include "mysql.fullname" .}}-pvc
  167.       - name: configurations
  168.         configMap:
  169.           name: {
  170.    {include "mysql.fullname" .}}-configmap
  171. {
  172.    {/* vim: set filetype=mustache: */}}
  173. {
  174.    {/*
  175. Expand the name of the chart.
  176. */}}
  177. {
  178.    {- define "mysql.name" -}}
  179. {
  180.    {- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
  181. {
  182.    {- end -}}
  184. {
  185.    {/*
  186. Create a default fully qualified app name.
  187. We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
  188. If release name contains chart name it will be used as a full name.
  189. */}}
  190. {
  191.    {- define "mysql.fullname" -}}
  192. {
  193.    {- if .Values.fullnameOverride -}}
  194. {
  195.    {- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
  196. {
  197.    {- else -}}
  198. {
  199.    {- $name := default .Chart.Name .Values.nameOverride -}}
  200. {
  201.    {- if contains $name .Release.Name -}}
  202. {
  203.    {- .Release.Name | trunc 63 | trimSuffix "-" -}}
  204. {
  205.    {- else -}}
  206. {
  207.    {- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
  208. {
  209.    {- end -}}
  210. {
  211.    {- end -}}
  212. {
  213.    {- end -}}
  215. {
  216.    {/*
  217. Create chart name and version as used by the chart label.
  218. */}}
  219. {
  220.    {- define "mysql.chart" -}}
  221. {
  222.    {- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
  223. {
  224.    {- end -}}
  226. {
  227.    {/*
  228. Common labels
  229. */}}
  230. {
  231.    {- define "mysql.labels" -}}
  232. helm.sh/chart: {
  233.    { include "mysql.chart" . }}
  234. {
  235.    { include "mysql.selectorLabels" . }}
  236. {
  237.    {- if .Chart.AppVersion }}
  238. app.kubernetes.io/version: {
  239.    { .Chart.AppVersion | quote }}
  240. {
  241.    {- end }}
  242. app.kubernetes.io/managed-by: {
  243.    { .Release.Service }}
  244. {
  245.    {- end -}}
  247. {
  248.    {/*
  249. Selector labels
  250. */}}
  251. {
  252.    {- define "mysql.selectorLabels" -}}
  253. app.kubernetes.io/name: {
  254.    { include "mysql.name" . }}
  255. app.kubernetes.io/instance: {
  256.    { .Release.Name }}
  257. {
  258.    {- end -}}
  260. {
  261.    {/*
  262. Create the name of the service account to use
  263. */}}
  264. {
  265.    {- define "mysql.serviceAccountName" -}}
  266. {
  267.    {- if .Values.serviceAccount.create -}}
  268.     {
  269.    { default (include "mysql.fullname" .) .Values.serviceAccount.name }}
  270. {
  271.    {- else -}}
  272.     {
  273.    { default "default" .Values.serviceAccount.name }}
  274. {
  275.    {- end -}}
  276. {
  277.    {- end -}}
  279. {
  280.    {/*
  281. Return the appropriate apiVersion for deployment.
  282. */}}
  283. {
  284.    {- define "deployment.apiVersion" -}}
  285. {
  286.    {- if semverCompare ">=1.9-0" .Capabilities.KubeVersion.GitVersion -}}
  287. {
  288.    {- print "apps/v1" -}}
  289. {
  290.    {- else -}}
  291. {
  292.    {- print "extensions/v1beta1" -}}
  293. {
  294.    {- end -}}
  295. {
  296.    {- end -}}
  298. {
  299.    {/*
  300. Return the appropriate apiGroup for PodSecurityPolicy.
  301. */}}
  302. {
  303.    {- define "podSecurityPolicy.apiGroup" -}}
  304. {
  305.    {- if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion -}}
  306. {
  307.    {- print "policy" -}}
  308. {
  309.    {- else -}}
  310. {
  311.    {- print "extensions" -}}
  312. {
  313.    {- end -}}
  314. {
  315.    {- end -}}
  317. {
  318.    {/*
  319. Return the appropriate apiVersion for podSecurityPolicy.
  320. */}}
  321. {
  322.    {- define "podSecurityPolicy.apiVersion" -}}
  323. {
  324.    {- if semverCompare ">=1.10-0" .Capabilities.KubeVersion.GitVersion -}}
  325. {
  326.    {- print "policy/v1beta1" -}}
  327. {
  328.    {- else -}}
  329. {
  330.    {- print "extensions/v1beta1" -}}
  331. {
  332.    {- end -}}
  333. {
  334.    {- end -}}
  335. {
  336.    {- if .Values.hpa.create}}
  337. apiVersion: autoscaling/v1
  338. kind: HorizontalPodAutoscaler
  339. metadata:
  340.   name: {
  341.    {include "mysql.fullname" .}}-hpa
  342.   labels:{
  343.    {include "mysql.labels" .|nindent 4}}
  344. spec:
  345.   scaleTargetRef:
  346.     apiVersion: {
  347.    {include "deployment.apiVersion" .}}
  348.     kind: Deployment
  349.     name: {
  350.    {include "mysql.fullname" .}}
  351.   minReplicas: {
  352.    {.Values.hpa.minReplicas}}
  353.   maxReplicas: {
  354.    {.Values.hpa.maxReplicas}}
  355.   targetCPUUtilizationPercentage: {
  356.    {.Values.hpa.targetCPUUtilizationPercentage}}
  357. {
  358.    {- end}}
  359. 1. Get the application URL by running these commands:
  360. {
  361.    {-  if contains "NodePort" .Values.service.type }}
  362.   export NODE_PORT=$(kubectl get --namespace {
  363.    { .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {
  364.    { include "mysql.fullname" . }})
  365.   export NODE_IP=$(kubectl get nodes --namespace {
  366.    { .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
  367.   echo http://$NODE_IP:$NODE_PORT
  368. {
  369.    {- else if contains "LoadBalancer" .Values.service.type }}
  370.      NOTE: It may take a few minutes for the LoadBalancer IP to be available.
  371.            You can watch the status of by running 'kubectl get --namespace {
  372.    { .Release.Namespace }} svc -w {
  373.    { include "mysql.fullname" . }}'
  374.   export SERVICE_IP=$(kubectl get svc --namespace {
  375.    { .Release.Namespace }} {
  376.    { include "mysql.fullname" . }} --template "{
  377.    {"{
  378.    { range (index .status.loadBalancer.ingress 0) }}{
  379.    {.}}{
  380.    { end }}"}}")
  381.   echo http://$SERVICE_IP:{
  382.    { .Values.service.port }}
  383. {
  384.    {- else if contains "ClusterIP" .Values.service.type }}
  385.   export POD_NAME=$(kubectl get pods --namespace {
  386.    { .Release.Namespace }} -l "app.kubernetes.io/name={
  387.    { include "mysql.name" . }},app.kubernetes.io/instance={
  388.    { .Release.Name }}" -o jsonpath="{.items[0].metadata.name}")
  389.   echo "Visit http://127.0.0.1:8080 to use your application"
  390.   kubectl --namespace {
  391.    { .Release.Namespace }} port-forward $POD_NAME 8080:80
  392. {
  393.    {- end }}
  394. {
  395.    {- if and .Values.pdb.create (or (gt (.Values.deployment.replicaCount|int) 1) .Values.hpa.create )}}
  396. apiVersion: policy/v1beta1  
  397. kind: PodDisruptionBudget  
  398. metadata:  
  399.   name: {
  400.    {include "mysql.fullname" .}}-pdb
  401.   labels: {
  402.    {include "mysql.labels" .|nindent 4}}
  403. spec:  
  404.   minAvailable: {
  405.    {.Values.pdb.minAvailable}}
  406.   selector:  
  407.     matchLabels:{
  408.    {include "mysql.selectorLabels" .|nindent 6}}  
  409. {
  410.    {- end}}
  411. {
  412.    {- if .Values.psp.create}}
  413. apiVersion: {
  414.    {include "podSecurityPolicy.apiVersion" .}}
  415. kind: PodSecurityPolicy
  416. metadata:
  417.   name: {
  418.    {include "mysql.fullname" .}}-psp
  419.   labels: {
  420.    {include "mysql.labels" .|nindent 4}}
  421. spec:
  422.   runAsUser:
  423.     rule: 'RunAsAny'
  424.   seLinux:
  425.     rule: 'RunAsAny'
  426.   supplementalGroups:
  427.     rule: 'MustRunAs'
  428.     ranges:
  429.       - min: 1
  430.         max: 65535
  431.   fsGroup:
  432.     rule: 'MustRunAs'
  433.     ranges:
  434.       - min: 1
  435.         max: 65535
  436.   volumes:
  437.     - 'configMap'
  438.     - 'emptyDir'
  439.     - 'projected'
  440.     - 'secret'
  441.     - 'downwardAPI'
  442.     - 'persistentVolumeClaim'
  443. {
  444.    {- end}}
  445. apiVersion: v1
  446. kind: PersistentVolumeClaim
  447. metadata:
  448.   name: {
  449.    {include "mysql.fullname" .}}-pvc
  450.   labels: {
  451.    {include "mysql.labels" .|nindent 4}}
  452. spec:
  453.   storageClassName: {
  454.    {include "mysql.fullname" .}}-sc
  455.   accessModes:{
  456.    {toYaml .Values.pvc.accessModes|nindent 2}}
  457.   resources:
  458.     requests:
  459.       storage: {
  460.    {.Values.pvc.storage}}
  461. {
  462.    {- if .Values.serviceAccount.create}}
  463. apiVersion: v1
  464. kind: ServiceAccount
  465. metadata:
  466.   name: {
  467.    {include "mysql.fullname" .}}-sa
  468.   labels: {
  469.    {include "mysql.labels" .|nindent 4}}
  470. {
  471.    {- end}}
  472. apiVersion: storage.k8s.io/v1
  473. kind: StorageClass
  474. metadata:
  475.   name: {
  476.    {include "mysql.fullname" .}}-sc
  477.   labels: {
  478.    {include "mysql.labels" .|nindent 4}}
  479. provisioner: {
  480.    {.Values.sc.provisioner}}
  481. reclaimPolicy: {
  482.    {.Values.sc.reclaimPolicy}}
  484. apiVersion: v1
  485. kind: Service
  486. metadata:
  487.   name: {
  488.    {include "mysql.fullname" .}}-svc
  489.   labels: {
  490.    {include "mysql.labels" .|nindent 4}}
  491. spec:
  492.  selector:{
  493.    {include "mysql.selectorLabels" .|nindent 4}}
  494.  {
  495.    {- if eq .Values.service.type "NodePort"}}  
  496.  type: NodePort
  497.  ports:
  498.  -  name: tcp
  499.     port: 3306      
  500.     targetPort: 3306
  501.     {
  502.    {- if .Values.service.nodePort}}
  503.     nodePort: {
  504.    {.Values.service.nodePort}}
  505.     {
  506.    {- end}}
  507.  {
  508.    {- else if eq .Values.service.type "ClusterIP"}}
  509.  ports:
  510.  -  name: tcp
  511.     port: 3306
  512.     targetPort: 3306
  513.  {
  514.    {- end}}

发表评论

表情：
评论列表 （有 0 条评论，42人围观）

还没有评论，来说两句吧...

相关阅读

    相关 手写java_手写java锁

    手写非公平可重入锁 公平锁：多个线程按照申请锁的顺序去获得锁，线程会直接进入队列去排队，永远都是队列的第一位才能得到锁。 优点：所有的线程都能得到资源，不会饿死在队列中。

    矫情吗；*矫情吗；*/ 0 赞/ 130 阅读

    相关 手写HashMap

    在本文中，将会实现一个简单的HashMap，模拟实现了put、get和到达扩容条件时自动扩容等功能。     1、Map<K,V>接口的定义 public

    傷城~傷城~/ 0 赞/ 286 阅读

    相关 手写识别

    作者：倪屁屁 链接：https://zhuanlan.zhihu.com/p/40431290 来源：知乎 著作权归作者所有。商业转载请联系作者获得授权，非商业转载

    左手的ㄟ右手左手的ㄟ右手/ 0 赞/ 436 阅读