【云原生 | Kubernetes 实战】03、手把手教你基于YAML文件运行pod应用
admin
2024-02-19 22:32:49
0次

目录

一、通过资源清单文件创建第一个Pod

二、Pod 资源清单字段解读

常见字段详情可参考官网帮助命令文档:

三、Pod 常用命令

3.1 通过 kubectl run 命令行创建pod(不使用yaml文件)

四、Pod资源清单编写技巧 

4.1 通过 kubectl explain 查看定义Pod资源包含哪些字段。

4.2 查看 pod.metadata 字段如何定义

4.3 查看pod.spec字段如何定义

4.4 查看 pod.spec.containers 字段如何定义

4.5 查看 pod.spec.container.ports 字段如何定义


一、通过资源清单文件创建第一个Pod

[root@k8s-master01 pod-yaml]# vi pod-first.yaml 
apiVersion: v1
kind: Pod
metadata:name: tomcat-testnamespace: defaultlabels:app:  tomcat
spec:containers:- name:  tomcat-javaimage: tomcat:latestimagePullPolicy: IfNotPresentports:- containerPort: 8080

二、Pod 资源清单字段解读

#1. 创建pod 的资源清单参数详细帮助命令
[root@k8s-master01 ~]# kubectl explain pod#2. pod 文件解读
# 注意:每个英文冒号后面必须有一个空格
[root@k8s-master01 pod-yaml]# vim pod-tomcat.yaml
apiVersion: v1  # api版本为V1。通过 kubectl explain pod 命令查看
kind: Pod       # 创建的资源类型。第一个 P 必须大写
metadata:       # 创建对象。通过 kubectl explain pod.metadata 查看包含有哪些字段name: tomcat-test    # Pod的名字namespace: default   # Pod所在的名称空间(default 是默认名称空间)labels:        app: tomcat     # Pod具有的标签
spec:               # 通过 kubectl explain pod.spec 查看包含的字段containers:       # 通过 kubectl explain pod.spec.containers 查看包含的字段;containers	<[]Object> -required- 是对象列表,下面包含的第一个字段需要加 '-'- name:  tomcat-java   # Pod里容器的名字    image: tomcat:latest  # 容器使用的镜像名称imagePullPolicy: IfNotPresent    # 镜像拉取策略(使用本地的镜像)ports:      # ports	<[]Object> 对象列表中的第一个字段要加 '-'- containerPort: 8080  # 容器暴露的端口#3. 创建 pod
[root@k8s-master01 pod-yaml]# kubectl apply -f pod-first.yaml 
pod/tomcat-test created
[root@k8s-master01 pod-yaml]# kubectl get pods
NAME                         READY   STATUS    RESTARTS        AGE
nginx-test-7767bdd4d-d5pqv   1/1     Running   1 (6h19m ago)   2d19h
nginx-test-7767bdd4d-rqrm5   1/1     Running   1 (6h19m ago)   2d19h
tomcat-test                  1/1     Running   0               2s

常见字段详情可参考官网帮助命令文档:

  • metadata.annotations:Annotations | Kubernetes
  • metadata.labels:Labels and Selectors | Kubernetes
  • metadata.name:Object Names and IDs | Kubernetes
  • metadata.namespace:Namespaces | Kubernetes
  • spec.containers.image:Images | Kubernetes
  • spec.containers.imagePullPolicy:Images | Kubernetes

三、Pod 常用命令

# 更新资源清单文件
[root@k8s-master01 pod-yaml]# kubectl apply -f pod-first.yaml# 查看pod是否创建成功
[root@k8s-master01 pod-yaml]# kubectl get pods -l app=tomcat
或者
[root@k8s-master01 pod-yaml]# kubectl get pods -A# 查看pod的ip和pod调度到哪个节点上
[root@k8s-master01 pod-yaml]# kubectl get pods -owide# 查看pod日志
[root@k8s-master01 pod-yaml]# kubectl logs tomcat-test# 进入到创建的pod
[root@k8s-master01 pod-yaml]# kubectl exec -it tomcat-test -- /bin/bash# 假如pod里有多个容器,进入到pod里的指定容器,-c 指定容器
[root@k8s-master01 pod-yaml]# kubectl exec -it tomcat-test -c tomcat-java -- /bin/bash# 查看k8s集群中的名称空间
[root@k8s-master01 pod-yaml]# kubectl get namespaces# 查看指定名称空间下的pod
[root@k8s-master01 pod-yaml]# kubectl get pods -n default# 查看pod详细信息
[root@k8s-master01 pod-yaml]# kubectl describe pods tomcat-test# 查看pod具有哪些标签:
[root@k8s-master01 pod-yaml]# kubectl get pods --show-labels# 删除pod
[root@k8s-master01 pod-yaml]# kubectl delete pods tomcat-test
或者
[root@k8s-master01 pod-yaml]# kubectl delete -f pod-first.yaml

3.1 通过 kubectl run 命令行创建pod(不使用yaml文件)

[root@k8s-master01 pod-yaml]# kubectl run tomcat --image=tomcat:latest --image-pull-policy='IfNotPresent' --port=8080
pod/tomcat created
您在 /var/spool/mail/root 中有新邮件
[root@k8s-master01 pod-yaml]# kubectl get pods -owide
NAME     READY   STATUS    RESTARTS   AGE   IP               NODE        NOMINATED NODE   READINESS GATES
tomcat   1/1     Running   0          15s   10.244.169.136   k8s-node2              

四、Pod资源清单编写技巧 

通过 kubectl explain 帮助指令查看每一个字段的含义,一步一步慢慢摸索下去。

4.1 通过 kubectl explain 查看定义Pod资源包含哪些字段。

[root@k8s-master01 pod-yaml]# kubectl explain pod
KIND:     Pod
VERSION:  v1# Pod是可以在主机上运行的容器的集合。这个资源是由客户端创建并调度到主机上。
DESCRIPTION:Pod is a collection of containers that can run on a host. This resource iscreated by clients and scheduled onto hosts.FIELDS:# APIVersion定义了对象,代表了一个版本为V1。apiVersion	APIVersion defines the versioned schema of this representation of anobject. Servers should convert recognized schemas to the latest internalvalue, and may reject unrecognized values. More info:https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources# Kind是字符串类型的值,代表了要创建的资源。服务器可以从客户端提交的请求推断出这个资源kind	Kind is a string value representing the REST resource this objectrepresents. Servers may infer this from the endpoint the client submitsrequests to. Cannot be updated. In CamelCase. More info:https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds# metadata是对象,定义元数据属性信息的metadata	Standard object's metadata. More info:https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata# spec制定了定义Pod的规格,里面包含容器的信息spec	Specification of the desired behavior of the pod. More info:https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status# status表示状态,这个不可以修改,定义pod的时候也不需要定义这个字段status	Most recently observed status of the pod. This data may not be up to date.Populated by the system. Read-only. More info:https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status 

4.2 查看 pod.metadata 字段如何定义

[root@k8s-master01 pod-yaml]# kubectl explain pod.metadata
KIND:     Pod
VERSION:  v1# metadata是对象,下面可以有多个字段
RESOURCE: metadata DESCRIPTION:Standard object's metadata. More info:https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataObjectMeta is metadata that all persisted resources must have, whichincludes all objects users must create.FIELDS:# annotations是注解,map类型表示对应的值是key-value键值对,表示 key 和value都是String类型的annotations	Annotations is an unstructured key value map stored with a resource thatmay be set by external tools to store and retrieve arbitrary metadata. Theyare not queryable and should be preserved when modifying objects. Moreinfo: http://kubernetes.io/docs/user-guide/annotations······# 创建的资源具有的标签。labels是标签,labels是map类型,map类型表示对应的值是key-value键值对,表示 key和value都是String类型的labels	Map of string keys and values that can be used to organize and categorize(scope and select) objects. May match selectors of replication controllersand services. More info: http://kubernetes.io/docs/user-guide/labelsmanagedFields	<[]Object>name	    # 创建pod资源的名字# 创建的资源所属的名称空间。namespaces划分了一个空间,在同一个namesace下的资源名字是唯一的,默认的名称空间是default。namespace	Namespace defines the space within which each name must be unique. An emptynamespace is equivalent to the "default" namespace, but "default" is thecanonical representation. Not all objects are required to be scoped to anamespace - the value of this field for those objects will be empty.Must be a DNS_LABEL. Cannot be updated. More info:http://kubernetes.io/docs/user-guide/namespaces······ 

4.3 查看pod.spec字段如何定义

[root@k8s-master01 pod-yaml]# kubectl explain pod.spec
KIND:     Pod
VERSION:  v1RESOURCE: spec # Pod的spec字段是用来描述Pod的
DESCRIPTION:Specification of the desired behavior of the pod. More info:https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-statusPodSpec is a description of a pod.FIELDS:# 表示Pod可以运行的最长时间,达到设置的值后,Pod会自动停止。activeDeadlineSeconds	Optional duration in seconds the pod may be active on the node relative toStartTime before the system will actively try to mark it failed and killassociated containers. Value must be a positive integer.affinity	# 定义亲和性的automountServiceAccountToken	AutomountServiceAccountToken indicates whether a service account tokenshould be automatically mounted.# containers是对象列表,用来定义容器的,是必须字段。对象列表,表示下面有很多对象,对象列表下面的内容用 - 连接。containers	<[]Object> -required-List of containers belonging to the pod. Containers cannot currently beadded or removed. There must be at least one container in a Pod. Cannot beupdated.······ 

4.4 查看 pod.spec.containers 字段如何定义

[root@k8s-master01 pod-yaml]# kubectl explain pod.spec.containers
KIND:     Pod
VERSION:  v1RESOURCE: containers <[]Object># container是定义在pod里面的,一个pod至少要有一个容器。
DESCRIPTION:List of containers belonging to the pod. Containers cannot currently beadded or removed. There must be at least one container in a Pod. Cannot beupdated.A single application container that you want to run within a pod.FIELDS:
······   # image是用来指定容器需要的镜像的 image	Container image name. More info:https://kubernetes.io/docs/concepts/containers/images This field isoptional to allow higher level config management to default or overridecontainer images in workload controllers like Deployments and StatefulSets.# 镜像拉取策略,pod是要调度到node节点的,那pod启动需要镜像,可以根据这个字段设置镜像拉取策略,支持如下三种:
Always:不管本地是否存在镜像,都要重新拉取镜像
Never: 从不拉取镜像
IfNotPresent:如果本地存在,使用本地的镜像,本地不存在,从官方拉取镜像imagePullPolicy	Image pull policy. One of Always, Never, IfNotPresent. Defaults to Alwaysif :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.More info:https://kubernetes.io/docs/concepts/containers/images#updating-imagesPossible enum values:- `"Always"` means that kubelet always attempts to pull the latest image.Container will fail If the pull fails.- `"IfNotPresent"` means that kubelet pulls if the image isn't present ondisk. Container will fail if the image isn't present and the pull fails.- `"Never"` means that kubelet never pulls an image, but only uses a localimage. Container will fail if the image isn't present······# name是必须字段,用来指定容器名字的name	 -required-Name of the container specified as a DNS_LABEL. Each container in a podmust have a unique name (DNS_LABEL). Cannot be updated.# port是端口,属于对象列表ports	<[]Object>List of ports to expose from the container. Not specifying a port here DOESNOT prevent that port from being exposed. Any port which is listening onthe default "0.0.0.0" address inside a container will be accessible fromthe network. Modifying this array with strategic merge patch may corruptthe data. For more information Seehttps://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated.······

4.5 查看 pod.spec.container.ports 字段如何定义

[root@k8s-master01 pod-yaml]# kubectl explain pod.spec.containers.ports
KIND:     Pod
VERSION:  v1RESOURCE: ports <[]Object>DESCRIPTION:List of ports to expose from the container. Not specifying a port here DOESNOT prevent that port from being exposed. Any port which is listening onthe default "0.0.0.0" address inside a container will be accessible fromthe network. Modifying this array with strategic merge patch may corruptthe data. For more information Seehttps://github.com/kubernetes/kubernetes/issues/108255. Cannot be updated.ContainerPort represents a network port in a single container.FIELDS:# containerPort是必须字段, pod中的容器需要暴露的端口。containerPort	 -required-Number of port to expose on the pod's IP address. This must be a valid portnumber, 0 < x < 65536.# 将容器中的服务暴露到宿主机的端口上时,可以指定绑定的宿主机 IP。hostIP	What host IP to bind the external port to.# 容器中的服务在宿主机上映射的端口hostPort	Number of port to expose on the host. If specified, this must be a validport number, 0 < x < 65536. If HostNetwork is specified, this must matchContainerPort. Most containers do not need this.# 端口的名字name	If specified, this must be an IANA_SVC_NAME and unique within the pod. Eachnamed port in a pod must have a unique name. Name for the port that can bereferred to by services.
······

 上一篇文章:【云原生 | Kubernetes 实战】02、k8s 核心资源 Pod 介绍_Stars.Sky的博客-CSDN博客

相关内容

热门资讯

蜻蜓订购APP贵金属订购非法期...   蜻蜓订购APP以"投资平台"名义对外宣传,主打贵金属期货(订购)交易。该平台一方面强调自身"正规...
悟空订购APP非法期货交易欺骗...   近期,有投资者反映,“悟空订购APP”等平台以白银、贵金属订购为名,宣传所谓“高收益”“低门槛”...
小赢淘金APP期货投资骗局,平...   “小赢淘金”之流,最擅长的就是用“注册送现金”、“充值返券”的糖衣炮弹来引流。别天真地以为那是福...
八方淘金APP非法期货交易欺骗...   警惕!八方生财、每日淘金、小赢淘金、悟空订购、蜻蜓订购、斗金订购等APP均涉嫌非法期货交易!  ...
智易购APP贵金属订购交易骗局...   很多人看到“3元起投”“充值送福利”“操作简单”“随时提现”这类宣传,很容易把智易购APP当成普...
喜玛银庄APP商品订购投资骗局...   喜玛银庄APP白银、铂金“现货订购”骗局警示:无资质平台涉嫌非法期货交易,投资者爆仓后如何维权?...
吉鑫乐享APP炒贵金属订购交易...   近期,多名投资者反映在“吉鑫乐享APP”进行贵金属投资时遭遇严重亏损,甚至血本无归。看似正规的“...
易掘金APP虚假期货投资骗局,...   “易掘金”的APP它打着“高收益、灵活投资”的旗号,宣称通过“商品订购”就能轻松赚钱,吸引了不少...
在大吉订购APP订购交易亏损被...   近期,不少投资者反映在“大吉订购App”上投资白银、铂金等商品遭遇严重亏损。该平台宣称提供现货订...
铂银壹号APP商品订购交易亏损...   许多中小投资者误以为网上的“商品现货订购”是合规合法的理财渠道,殊不知这背后隐藏着巨大的合规风险...
兴鑫淘金APP贵金属订购交易亏...   白银、贵金属或其他商品类投资,除国家批准的正规期货交易场所及持牌期货公司外,市面上大量第三方交易...
铂银掘金APP无资质的违规平台...   铂银掘金等平台的投资者,往往是被“注册送现金”“充值返现券”“首单免亏”等广告话术吸引,进而下载...
八方淘金APP订购交易不合规,...   “八方淘金APP”“铂银掘金APP”“铂银壹号APP”等软件被指以“现货订购”为名,实际采用高杠...
在指尖订购APP订购商品亏损被...   指尖订购APP这类平台,表面是“订购交易”,实则是披着电商外衣的非法期货陷阱。绝大多数投资者被蒙...
在犀贝易购APP做商品订购交易...   市面上打着“现货投资”“贵金属交易”旗号的APP并不少,但真正合规、受监管的平台并不多。犀贝易购...
易达淘金APP虚假商品订购交易...   易达淘金APP存在严重的虚假宣传与违规交易行为。该平台打着“商品订购”的旗号,实则通过不合规的交...
大浪淘金APP白银订购亏损被骗...   大浪淘金APP最隐蔽的套路,在于其完全封闭的内盘交易系统。表面上,它宣称与国际贵金属市场接轨;实...
一品好购APP上订购白银出现亏...   一品好购APP原名“一品订购”,运营方为上海宝智未来信息技术有限公司。近期不少投资者反映在该平台...
九州订购APP贵金属订购投资骗...   九州订购APP正通过抖.音、快手、今日头条等平台大量投放投资广告,用“5元起投”“充值返现”“0...
坚锅淘金APP交易软件并不正规...   当前,市面上大量所谓的“现货商城订购”交易软件,早已偏离了正常的实物商品买卖,演变为高杠杆、高手...