容器相关

秒速五厘米 2023-08-17 16:15 58阅读 0赞

快速生成自签证书，
    openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ${KEY_FILE} -out ${CERT_FILE} -subj "/CN=${HOST}/O=${HOST}"
    kubectl create secret tls ${CERT_NAME} --key ${KEY_FILE} --cert ${CERT_FILE}
    通过K8S CA证书创建证书
    (umask 077; openssl genrsa -out lixiang.key 2048)
    openssl req -new -key test.key -out lixiang.csr -subj "/CN=${HOST}/O=${HOST}"
    openssl  x509 -req -in test.csr -CA ca.crt -CAkey ca.key  -CAcreateserial -out test.crt -days 3650
    openssl x509 -in test.crt -text -noout

1.  [使用GCR Proxy Cache从gcr.io下载镜像][GCR Proxy Cache_gcr.io]
2.  `kubectl run nginx --image=nginx --replicas=3 --dry-run -o yaml 或者 kubectl get pods/nginx -o yaml --export`
3.  [Docker快速入门——Docker-Compose][Docker_Docker-Compose]
4.  [Kubernetes + Compose = Kompose][Kubernetes _ Compose _ Kompose]
5.  `可以在docker的systemd启动文件中加入Environment="HTTPS_PROXY=http://www.ik8s.io:10080" Environment="NO_PROXY=127.0.0.0/8,192.168.4.0/24" 来获取gcr.io的镜像文件`
6.  `helm init初始化需要连接google， 可定义export HTTPS_PROXY='http://www.ik8s.io:10080' export NO_PROXY='127.0.0.0/8,192.168.4.0/24'`
7.  `helm安装需要得tiller镜像： docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/tiller:v2.14.3`
8.  [在k8s中安装rancher][k8s_rancher]
9.  k8s，资源限制 limitrange 、resourcequota 和 pod 驱逐 eviction-soft 、 eviction-soft-grace-period、eviction-hard
10. 在容器内获取Pod信息 Downward API，env 中 fieldref
11. [基于 IBM Cloud Private 的 DevOps 实践][IBM Cloud Private _ DevOps]
12. [Kubernetes+Gitlab+Jenkins构建镜像并创建Pod][Kubernetes_Gitlab_Jenkins_Pod]
13. [k8s+Jenkins+GitLab-自动化部署asp.net core项目][k8s_Jenkins_GitLab-_asp.net core]
14. [etcd备份与恢复][etcd]
15.

如果想在k8s集群core-dns中手动添加dns，可以在core-dns的config-map prometheus :9153的上面加上
    hosts {
        10.10.10.10 k8s-master
         fallthrough  ### 出问题继续往下走
    }

1.  `公司内网安装dns，然后把域名ning.com直接指向ingress-nginx的ip`

转载于:https://www.cnblogs.com/blackmood/p/11356710.html

[GCR Proxy Cache_gcr.io]: http://mirror.azure.cn/help/gcr-proxy-cache.html
[Docker_Docker-Compose]: https://blog.51cto.com/9291927/2310444
[Kubernetes _ Compose _ Kompose]: http://kompose.io/
[k8s_rancher]: https://blog.51cto.com/wangpengtai/2413697
[IBM Cloud Private _ DevOps]: https://www.ibm.com/developerworks/cn/devops/d-based-ibm-cloud-private/index.html?ca=drs-&utm_source=tuicool&utm_medium=referral
[Kubernetes_Gitlab_Jenkins_Pod]: https://blog.51cto.com/wangzhijian/2285861
[k8s_Jenkins_GitLab-_asp.net core]: https://www.cnblogs.com/guolianyu/p/9520046.html
[etcd]: https://www.cnblogs.com/breezey/p/10898368.html