k8s+docker:部署留言板php+redis
dhcpdns.lab.example.com 192.168.0.5 dhcp+dns+ntp
serverc.lab.example.com 192.168.0.30 as a master server
servera.lab.example.com 192.168.0.10
serverb.lab.example.com 192.168.0.20禁用防火墻
servera and serverb and serverc disable firewalld配置NTP
三臺服務器都安裝docker kubernetes
[root@server]# yum -y install docker
[root@server]# systemctl enable docker && systemctl start docker
配置阿裏代理
vim /etc/docker/daemon.json
{
"registry-mirrors": ["https://0i5z79j3.mirror.aliyuncs.com"]
}systemctl daemon-reload && systemctl restart docker
[root@serverc ~]# vi /etc/yum.repos.d/virt7-testing.repo
[virt7-testing]
name=virt7-testing
baseurl=http://cbs.centos.org/repos/virt7-docker-el-testing/x86_64/os/
gpgcheck=0[root@server]# yum -y install --enablerepo=virt7-testing kubernetes
安裝kubenetes的數據庫包
[root@server]# yum -y install http://cbs.centos.org/kojifiles/packages/etcd/0.4.6/7.el7.centos/x86_64/etcd-0.4.6-7.el7.centos.x86_64.rpm
這個在每個節點上都配置
[root@server]# vi /etc/kubernetes/config
KUBE_MASTER="--master=http://serverc.lab.example.com:8080"
KUBE_ETCD_SERVERS="--etcd_servers=http://serverc.lab.example.com:4001"serverc(master)主機上配置
[root@serverc yum.repos.d]# vi /etc/kubernetes/apiserver
KUBE_API_ADDRESS="--insecure-bind-address=0.0.0.0"
KUBE_API_PORT="--port=8080"
# KUBE_ETCD_SERVERS="--etcd-servers=http://127.0.0.1:2379"重啟服務 etcd kube-apiserver kube-controller-manager kube-scheduler
[root@serverc yum.repos.d]# ps -efw|grep kube
修改servera(node)上的配置
[root@servera ~]# vi /etc/kubernetes/kubelet
KUBELET_ADDRESS="--address=0.0.0.0"
KUBELET_PORT="--port=10250"
KUBELET_HOSTNAME="--hostname-override=servera.lab.example.com"
KUBELET_API_SERVER="--api_servers=http://serverc.lab.example.com:8080"重啟服務 docker kubelet kube-proxy
報錯解決方案
No API token found for service account "default", retry after the token is automatically created and added to the service account
解決辦法是去除認證編輯/etc/kubernetes/apiserver 去除 KUBE_ADMISSION_CONTROL中的SecurityContextDeny,ServiceAccount
並重啟kube-apiserver.service服務
[root@serverc ymal-pod]# systemctl restart kube-apiserver.service
[root@serverc pod-yaml]# kubectl get nodes
創建數據庫
創建redis的pod
apiVersion: v1
kind: ReplicationController
metadata:
name: redis-master
labels:
name: redis-master
spec:
replicas: 1
selector:
name: redis-master
template:
metadata:
labels:
name: redis-master
spec:
containers:
- name: master
image: kubeguide/redis-master
ports:
- containerPort: 6379創建redis的service
[root@serverc pod-yaml]# vi redis-master.yaml
apiVersion: v1
kind: Service
metadata:
name: redis-master
labels:
name: redis-master
spec:
ports:
- port: 6379
targetPort: 6379
selector:
name: redis-master排錯：
[root@serverc ymal-pod]# kubectl describe pod redis-master-jr638
需要在節點(node)上安裝
[root@serverc ymal-pod]# docker pull registry.access.redhat.com/rhel7/pod-infrastructure:latest
[root@serverc ymal-pod]# yum install *rhsm*[root@serverc ymal-pod]# vi redis-service.yaml
apiVersion: v1
kind: Service
metadata:
name: redis-master
labels:
name: redis-master
spec:
ports:
- port: 6379
targetPort: 6379
selector:
name: redis-master[root@serverc ymal-pod]# kubectl create -f redis-service.yaml
[root@serverc ymal-pod]# kubectl get pods -o wide
創建從數據庫
[root@serverc ymal-pod]# vi redis-slave.yaml
apiVersion: v1
kind: ReplicationController
metadata:
name: redis-slave
labels:
name: redis-slave
spec:
replicas: 2
selector:
name: redis-slave
template:
metadata:
labels:
name: redis-slave
spec:
containers:
- name: slave
image: kubeguide/guestbook-redis-slave
env:
- name: GET_HOSTS_FROM
value: env
ports:
- containerPort: 6379[root@serverc ymal-pod]# vi redis-slave-service.yaml
apiVersion: v1
kind: Service
metadata:
name: redis-slave
labels:
name: redis-slave
spec:
ports:
- port: 6379
selector:
name: redis-slave實現redis集群的主從數據同步， redis-slave需要知道redis-master的地址，所以在redis-slave鏡像的啟動命令/run.sh 中，可以看到如下內容：
redis-server --slaveof ${REDIS_MASTER_SERVICE_HOST} 6379
創建前端pod
[root@serverc ymal-pod]# vi frontend-pod.yaml
apiVersion: v1
kind: ReplicationController
metadata:
name: frontend
labels:
name: frontend
spec:
replicas: 3
selector:
name: frontend
template:
metadata:
labels:
name: frontend
spec:
containers:
- name: frontend
image: kubeguide/guestbook-php-frontend
env:
- name: GET_HOSTS_FROM
value: env
ports:
- containerPort: 80創建前端service
[root@serverc ymal-pod]# vi frontend-service.yaml
Version: v1
kind: Service
metadata:
name: frontend
labels:
name: frontend
spec:
type: NodePort
ports:
- port: 80
nodePort: 30001
selector:
name: frontend[root@serverc pod-yaml]# kubectl create -f frontend-service.yaml
[root@serverc ymal-pod]# kubectl get pod -o wide
NAME READY STATUS RESTARTS AGE IP NODE
frontend-22b67 1/1 Running 0 4m 172.17.0.3 servera.lab.example.com
frontend-lksvk 1/1 Running 0 4m 172.17.0.4 serverb.lab.example.com
frontend-v81wh 1/1 Running 0 4m 172.17.0.4 servera.lab.example.com
redis-master-xbkwj 1/1 Running 0 51m 172.17.0.2 serverb.lab.example.com
redis-slave-cqj43 1/1 Running 0 32m 172.17.0.2 servera.lab.example.com
redis-slave-q1q4j 1/1 Running 0 32m 172.17.0.3 serverb.lab.example.com[root@serverc ymal-pod]# kubectl get service
NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE
frontend 10.254.127.111 <nodes> 80:30001/TCP 21s
kubernetes 10.254.0.1 <none> 443/TCP 1h
redis-master 10.254.20.7 <none> 6379/TCP 42m
redis-slave 10.254.156.197 <none> 6379/TCP 29mfirefox：http://serverb.lab.example.com:30001/
k8s+docker:部署留言板php+redis