k8s入门

yum update 
curl -fsSL https://get.docker.com | bash -s docker --mirror Aliyun systemctl start docker # 启动docker 
systemctl enable docker # 开机自动启动
docker systemctl restart docker # 重启docker

firewall-cmd --zone=public --add-port=0-65535/udp --permanent
firewall-cmd --zone=public --add-port=0-65535/tcp --permanent
firewall-cmd --reload
firewall-cmd --query-port=6443/tcp

curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE="644" K3S_NODE_NAME="node1" sh -s -

k3s kubectl get node

cat /var/lib/rancher/k3s/server/node-token

systemctl restart k3s
systemctl restart k3s-agent

#云服务器
curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_KUBECONFIG_MODE="644" K3S_NODE_NAME="node1" sh -s - --node-external-ip public_ip

curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE="644" K3S_NODE_NAME="k8s-worker-01" K3S_URL=https://192.168.100.124:6443 K3S_TOKEN=mynodetoken sh -

#云服务器
curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_KUBECONFIG_MODE="644" K3S_NODE_NAME="node2" K3S_URL=https://内网ip:6443 K3S_TOKEN=token sh - 

# 部署
kubectl apply -f deployment.yml

kubectl apply -f service.yml
# 查看 pod
kubectl get po -o wide

# 查看 serivce
kubectl get svc


kubectl apply -f ingress.yml

#查看node的使用情况
kubectl top nodes
#查看 pod 的使用情况
kubectl top pod
kubectl top pod -n kube-system

kubectl get pods

kubectl get pods -o wide

kubectl get svc

kubectl get ingress

# 查看目前所有的pod
kubectl get po 
# 查看目前所有的replica set
kubectl get rs 
# 查看目前所有的deployment
kubectl get deployment
# 查看my-nginx pod的详细状态
kubectl describe po my-nginx 
# 查看my-nginx replica set的详细状态
kubectl describe rs my-nginx 
# 查看my-nginx deployment的详细状态
kubectl describe deployment my-nginx 

#安装
curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
#修改配置路径
export KUBECONFIG=/etc/rancher/k3s/k3s.yaml

#https://medium.com/@_jonas/traefik-kubernetes-ingress-and-x-forwarded-headers-82194d319b0e
# /var/lib/rancher/k3s/server/manifests/traefik-config.yaml
apiVersion: helm.cattle.io/v1
kind: HelmChartConfig
metadata:
  name: traefik
  namespace: kube-system
spec:
  valuesContent: |-
    additionalArguments:
      - "--serversTransport.insecureSkipVerify=true"
    dashboard:
      enabled: true
    ports:
      traefik:
        expose: true
      psql:
        port: 5432
        expose: true
        exposedPort: 5432
        protocol: TCP
      kafka:
        port: 9092
        expose: true
        exposedPort: 9092
        protocol: TCP
      redis:
        port: 6379
        expose: true
        exposedPort: 6379
        protocol: TCP
      elasticsearch:
        port: 9200
        expose: true
        exposedPort: 9200
        protocol: TCP

#配置节点不可调度
kubectl cordon <NODE_NAME>
#删除pod
kubectl delete pod -n <NAMESPACE> <POD_NAME>
#删除node
kubectl delete node <NODE_NAME>

//tls.crt
cat fullchain.cer | base64 -w0
//tls.key
cat cert.key | base64 -w0
kubectl get secret ooxo.cc-tls-secret
kubectl get secret ooxo.cc-tls-secret -o jsonpath='{.data.tls\.crt}' | base64 --decode
kubectl get secret ooxo.cc-tls-secret -o jsonpath='{.data.tls\.key}' | base64 --decode