maguowei/gotok8s

Goto Kubernetes

Goto Kubernetes

安装 Kubernetes

• kind
• k3d
• k3s
• rke

Helm

安装

详细使用说明请参考 Helm官方文档

$ brew install helm

使用

• Artifact Hub

# 添加 charts repo
$ helm repo add bitnami https://charts.bitnami.com/bitnami

# 测试安装 redis chart
$ helm install my-redis bitnami/redis

# 删除 redis
$ helm uninstall my-redis

Kubernetes Dashboard

部署 Kubernetes Dashboard

$ helm repo add kubernetes-dashboard https://kubernetes.github.io/dashboard/
$ helm upgrade --install kubernetes-dashboard kubernetes-dashboard/kubernetes-dashboard --create-namespace --namespace kubernetes-dashboard

创建Dashboard管理员用户并用token登陆

• Creating sample user

# 创建 ServiceAccount admin-user 并绑定集群管理员权限
$ kubectl apply -f https://raw.githubusercontent.com/gotok8s/gotok8s/master/dashboard-adminuser.yaml

# 获取登陆 token
$ kubectl get secret admin-user -n kubernetes-dashboard -o jsonpath={".data.token"} | base64 -d

访问Dashboard

$ kubectl -n kubernetes-dashboard port-forward service/kubernetes-dashboard 8443:443

通过下面的连接访问 Dashboard: https://127.0.0.1:8443/

输入上一步获取的token, 验证并登陆。

NGINX Ingress

# install by helm
$ helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
$ helm repo update

$ helm install ingress-nginx ingress-nginx/ingress-nginx --namespace ingress-nginx --create-namespace

Istio

下载并安装 Istio

$ curl -L https://istio.io/downloadIstio | sh -
# 进入下载的文件夹，这里以 `istio-1.18.1` 为例
$ cd istio-1.18.1
$ export PATH=$PWD/bin:$PATH
# 安装
$ istioctl install --set profile=demo -y
# 设置自动注入 Envoy sidecar proxies
$ kubectl label namespace default istio-injection=enabled

部署示例

# 部署
$ kubectl apply -f samples/bookinfo/platform/kube/bookinfo.yaml
# 查看示例返回
$ kubectl exec -it $(kubectl get pod -l app=ratings -o jsonpath='{.items[0].metadata.name}') -c ratings -- curl productpage:9080/productpage | grep -o "<title>.*</title>"

gotok8s's Issues

dashboard 无法获取 token

获取登陆 token
$ kubectl -n kubernetes-dashboard describe secret $(kubectl -n kubernetes-dashboard get secret | grep kubernetes-dashboard-admin | awk '{print $1}')

只有以下这个：

Name:         kubernetes-dashboard-certs
Namespace:    kubernetes-dashboard
Labels:       k8s-app=kubernetes-dashboard
Annotations:  <none>

Type:  Opaque

Data
====


Name:         kubernetes-dashboard-csrf
Namespace:    kubernetes-dashboard
Labels:       k8s-app=kubernetes-dashboard
Annotations:  <none>

Type:  Opaque

Data
====
csrf:  256 bytes


Name:         kubernetes-dashboard-key-holder
Namespace:    kubernetes-dashboard
Labels:       <none>
Annotations:  <none>

Type:  Opaque

Data
====
priv:  1675 bytes
pub:   459 bytes

README文档错误

README 文档错误

//# 测试安装 redis chart
$ helm install my-redis stable/redis

• # 删除 mysql -> 删除redis

$ helm uninstall my-redis

支持CentOS吗

Minor issues on 1.11.0

First of all, appreciate your work!

Want only to mention little minor issues I experienced setting up a master on aws china.

1. "kubeadm config images list" requires the attribute "--kubernetes-version" e.g.
   kubeadm config images list --kubernetes-version=v1.11.0
   otherwise it tries to go to https://dl.k8s.io/release/stable-1.11.txt what gives you a timeout

2. kubeadm config images list --kubernetes-version=v1.11.0
   lists "k8s.gcr.io/pause:3.1"
   but the images file includes "k8s.gcr.io/pause-amd64"
   that makes "kubeadm init" breaking with
   [preflight] Some fatal errors occurred:
   [ERROR ImagePull]: failed to pull image [k8s.gcr.io/pause:3.1]: exit status 1

pulling pause:3.1 from aliyun mirror or simply tagging pause-amd64 to pause solves second issue

kubeadm version
kubeadm version: &version.Info{Major:"1", Minor:"11", GitVersion:"v1.11.1", GitCommit:"b1b29978270dc22fecc592ac55d903350454310a", GitTreeState:"clean", BuildDate:"2018-07-17T18:50:16Z", GoVersion:"go1.10.3", Compiler:"gc", Platform:"linux/amd64"}

使用这个方法安装k8s后，无法在docker中映射到2379端口

• OS：Mac
  使用这个方法安装k8s，启动k8s后，任何一个容器都不能映射到2379端口，lsof查看2379没有被占用，只有docker无法映射到2379端口，提示错误error starting userland proxy: listen tcp 0.0.0.0:2379: bind: address already in use.

The connection to the server raw.githubusercontent.com was refused

kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/master/aio/deploy/recommended.yaml
The connection to the server raw.githubusercontent.com was refused - did you specify the right host or port?

Installing Kubernetes on ArchLinux

https://gist.github.com/StephenSorriaux/fa07afa57c931c84d1886b08c704acfe

upgrade

sudo kubeadm upgrade apply --config init.yml --ignore-preflight-errors=SystemVerification

Shared File System example

docker run -it --rm --privileged -v /lib/modules:/lib/modules  ubuntu bash
my_secret=AQDdQnhbVsZcOBAAiuXZ6tBSPciqvBwTHpPGXQ==
mon_endpoints=10.108.117.232:6790,10.103.83.90:6790,10.110.210.68:6790
mount -t ceph -o mds_namespace=myfs,name=admin,secret=$my_secret $mon_endpoints:/ /cephfs

安装rook失败 提示namespaces rook-ceph not found

安装完dashboard以后，想继续安装rook， 根据rook.md的指引，执行kubectl create -f https://raw.githubusercontent.com/rook/rook/master/cluster/examples/kubernetes/ceph/operator.yaml
提示 namespaces rook-ceph not found

拉不到coredns 1.8.0

拉不到coredns 1.8.0咋整。。
failed to pull image "gotok8s/coredns/coredns:v1.8.0": output: Error response from daemon: pull access denied for gotok8s/coredns/coredns

请教：如何修改kubelet的node-ip

您好，每个node是多网卡的话，需要在kubelet启动参数中指定--node-ip，请教该如何操作

en -> zh-cn

ref: maguowei/k8s-docker-desktop-for-mac#3

镜像同步时机优化

https://github.com/maguowei/gotok8s/actions

目前是每6小时同步一次最新的镜像，这种方式会频繁重复push相同的镜像。需要改为最新的发布版本，并与当前版本做比较，避免重复的push.

http proxy

https://docs.docker.com/config/daemon/systemd/

[Service]
Environment="HTTP_PROXY=http://192.168.31.52:6152" "NO_PROXY=localhost,127.0.0.1,registry.docker-cn.com"

export https_proxy=http://192.168.31.52:6152;kubeadm config images pull

Shared File System example

docker run -it --rm --privileged -v /lib/modules:/lib/modules  ubuntu bash
my_secret=AQDdQnhbVsZcOBAAiuXZ6tBSPciqvBwTHpPGXQ==
mon_endpoints=10.108.117.232:6790,10.103.83.90:6790,10.110.210.68:6790
mount -t ceph -o mds_namespace=myfs,name=admin,secret=$my_secret $mon_endpoints:/ /cephfs

sudo kubeadm init --config init.yml

unknown configuration schema.GroupVersionKind{Group:"kubeadm.k8s.io", Version:"v1beta2", Kind:"InitConfiguration"} for scheme definitions in "k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/scheme/scheme.go:31" and "k8s.io/kubernetes/cmd/kubeadm/app/componentconfigs/scheme.go:28"

Error: release my_wordpress failed: namespaces "default" is forbidden: User "system:serviceaccount:kube-system:default" cannot get namespaces in the namespace "default"

• helm/helm#3130

kubectl create serviceaccount --namespace kube-system tiller
  serviceaccount "tiller" created

kubectl create clusterrolebinding tiller-cluster-rule --clusterrole=cluster-admin --serviceaccount=kube-system:tiller
  clusterrolebinding "tiller-cluster-rule" created

kubectl patch deploy --namespace kube-system tiller-deploy -p '{"spec":{"template":{"spec":{"serviceAccount":"tiller"}}}}' 
  deployment "tiller-deploy" patched

Mac版本的K8S是否需要安装tiller？

想问一下楼主，mac安装helm是通过brew或者下载tar文件，但是没有看到tiller的下载安装呢？

helm是3.0的语法？

求标注

Support 1.13.0

[ERROR KubeletVersion]: the kubelet version is higher than the control plane version. This is not a supported version skew and may lead to a malfunctional cluster. Kubelet version: "1.13.0" Control plane version: "1.12.2"