StatefulSet 部署 MySQL
在 node1 節(jié)點(diǎn)
在 node 節(jié)點(diǎn)安裝 MySQL
yum install mysql -y-
部署 MySQL StatefulSet
在
/tmp目錄下創(chuàng)建mysql文件夾cd ~vim 11-1-mysql.yamlapiVersion: v1 kind: Service metadata: name: mysql57 labels: app: mysql spec: ports: - port: 3306 name: mysql nodePort: 30306 type: NodePort selector: app: mysql --- apiVersion: apps/v1 kind: StatefulSet metadata: name: mysql spec: selector: matchLabels: app: mysql serviceName: "mysql" replicas: 1 template: metadata: labels: app: mysql spec: terminationGracePeriodSeconds: 10 containers: - name: mysql image: registry.cn-beijing.aliyuncs.com/qingfeng666/mysql:5.7 ports: - containerPort: 3306 name: mysql volumeMounts: - name: host-path mountPath: /var/lib/mysql env: - name: MYSQL_ROOT_PASSWORD value: "password" volumes: - name: host-path hostPath: path: /tmp/mysql type: DirectoryOrCreate創(chuàng)建
kubectl create -f 11-1-mysql.yamlkubectl get po可以看到：NAME READY STATUS RESTARTS AGE mysql-0 0/1 ContainerCreating 0 19
-
初始化 MySQL
mysql -uroot -P30306 -h127.0.0.1 -ppassword可以看到
Welcome to the MariaDB monitor. Commands end with ; or \g. Your MySQL connection id is 2 Server version: 5.7.32 MySQL Community Server (GPL) Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. MySQL [(none)]>
-
創(chuàng)建數(shù)據(jù)庫(kù)
create database blogDB DEFAULT CHARSET utf8 COLLATE utf8_general_ci;MySQL [(none)]> create database blogDB DEFAULT CHARSET utf8 COLLATE utf8_general_ci; Query OK, 1 row affected (0.01 sec) MySQL [(none)]> show databases; +--------------------+ | Database | +--------------------+ | information_schema | | blogDB | | mysql | | performance_schema | | sys | +--------------------+ 5 rows in set (0.01 sec) MySQL [(none)]> exit Bye
刪除
cd ~
kubectl delete -f 11-1-mysql.yaml
查看
kubectl get po
可以看到
No resources found in default namespace.
重新創(chuàng)建
kubectl create -f 11-1-mysql.yaml
啟動(dòng)數(shù)據(jù)庫(kù)
mysql -uroot -P30306 -h127.0.0.1 -ppassword
查看數(shù)據(jù)庫(kù)
show databases;
可以看到之前創(chuàng)建的數(shù)據(jù)庫(kù) blogDB 還在
編寫(xiě)應(yīng)用的 Service, Deployment 文件
在 node1 節(jié)點(diǎn)
vim 11-2-blog.yaml
apiVersion: v1
kind: Service
metadata:
name: kubeblog
spec:
selector:
app: kubeblog
type: NodePort
ports:
- port: 5000
targetPort: 5000
nodePort: 30002
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kubeblog
spec:
selector:
matchLabels:
app: kubeblog
template:
metadata:
labels:
app: kubeblog
spec:
containers:
- name: kubeblog
image: registry.cn-beijing.aliyuncs.com/qingfeng666/kubeblog:1.3
resources:
limits:
memory: "512Mi"
cpu: "500m"
ports:
- containerPort: 5000
env:
- name: MYSQL_PORT
value: "30306"
- name: MYSQL_SERVER
value: "192.168.190.132"
kubectl create -f 11-2-blog.yaml
kubectl get po
NAME READY STATUS RESTARTS AGE
kubeblog-866b655bdf-v879f 1/1 Running 0 35s
mysql-0 1/1 Running 0 14m
kubectl get svc
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubeblog NodePort 10.1.190.56 <none> 5000:30002/TCP 107s
kubernetes ClusterIP 10.1.0.1 <none> 443/TCP 15d
mysql57 NodePort 10.1.96.16 <none> 3306:30306/TCP 15m
稍等一會(huì)研儒，等待服務(wù)啟動(dòng)
瀏覽器訪問(wèn)
http://192.168.190.132:30002/
可以訪問(wèn)到博客應(yīng)用
使用私有鏡像中心拉取鏡像
在 master 節(jié)點(diǎn)
啟動(dòng)鏡像中心
docker start artifactory-jcr
配置 vim /etc/docker/daemon.json
{
"registry-mirrors": ["https://registry.docker-cn.com",
"https://dockerhub.azk8s.cn",
"https://reg-mirror.qiniu.com",
"http://hub-mirror.c.163.com",
"https://docker.mirrors.ustc.edu.cn"
],
"insecure-registries": ["art.local:8081","192.168.190.131:8081"]
}
重啟 docker 和 kubelet
systemctl restart docker
systemctl restart kubelet
查看
docker info
可以看到
Labels:
Experimental: false
Insecure Registries:
192.168.190.131:8081
art.local:8081
127.0.0.0/8
推送鏡像到鏡像中心（上一篇已推送）
創(chuàng)建鏡像倉(cāng)庫(kù)秘鑰
kubectl create secret docker-registry regcred-local --docker-server=192.168.190.131:8081 --docker-username=admin --docker-password=password123 --docker-email=test@163.com
拉取鏡像，在 master 節(jié)點(diǎn)或者 node 節(jié)點(diǎn)都可以独令。這里是在 node1 節(jié)點(diǎn)端朵。
vim 11-3-regsecret.yaml
apiVersion: v1
kind: Service
metadata:
name: kubeblog
spec:
selector:
app: kubeblog
type: NodePort
ports:
- port: 5000
targetPort: 5000
nodePort: 30002
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kubeblog
spec:
selector:
matchLabels:
app: kubeblog
template:
metadata:
labels:
app: kubeblog
spec:
hostAliases:
- ip: "192.168.190.131"
hostnames:
- "art.local"
containers:
- name: kubeblog
image: 192.168.190.131:8081/docker-local/kubeblog:1.0
resources:
limits:
memory: "512Mi"
cpu: "500m"
ports:
- containerPort: 5000
env:
- name: MYSQL_PORT
value: "30306"
- name: MYSQL_SERVER
value: "192.168.190.132"
imagePullSecrets:
- name: regcred-local
為博客應(yīng)用進(jìn)行配置分離
在 master 節(jié)點(diǎn)，創(chuàng)建 MySQL 秘鑰 secret
kubectl create secret generic mysql-password-test --from-literal=MYSQL_PASSWORD_TEST=password
可以看到
secret/mysql-password-test created
在 node1 節(jié)點(diǎn)燃箭，登錄 MySQL
mysql -h192.168.190.132 -uroot -P30306 -ppassword
創(chuàng)建數(shù)據(jù)庫(kù)
create database blogDBTest default charset utf8mb4;
在 master 節(jié)點(diǎn)冲呢，在 Deployment 使用該秘鑰
vim 11-4.yaml
apiVersion: v1
kind: Service
metadata:
name: kubeblog
spec:
selector:
app: kubeblog
type: NodePort
ports:
- port: 5000
targetPort: 5000
nodePort: 30002
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kubeblog
spec:
selector:
matchLabels:
app: kubeblog
template:
metadata:
labels:
app: kubeblog
spec:
hostAliases:
- ip: "192.168.190.131"
hostnames:
- "art.local"
containers:
- name: kubeblog
image: 192.168.190.131:8081/docker-local/kubeblog:1.1
ports:
- containerPort: 5000
env:
- name: MYSQL_PORT
value: "30306"
- name: MYSQL_SERVER
value: "192.168.190.132"
- name: MYSQL_DB_NAME
value: "blogDBTest"
- name: MYSQL_USER_TEST
value: "root"
- name: MYSQL_PASSWORD_TEST
valueFrom:
secretKeyRef:
name: mysql-password-test
key: MYSQL_PASSWORD_TEST
imagePullSecrets:
- name: regcred-local
kubectl create -f 11-4.yaml
空間隔離和鏡像晉級(jí)
查看命名空間
kubectl get ns
創(chuàng)建 test 和 prod 命名空間
kubectl create namespace test
kubectl create namespace prod
創(chuàng)建測(cè)試環(huán)境的秘鑰
kubectl create secret generic mysql-password-test --from-literal=MYSQL_PASSWORD_TEST=password -n test
查看測(cè)試環(huán)境的秘鑰
kubectl get secret -n test
可以看到
NAME TYPE DATA AGE
default-token-lwmdv kubernetes.io/service-account-token 3 3m2s
mysql-password-test Opaque 1 37s
創(chuàng)建測(cè)試環(huán)境的鏡像倉(cāng)庫(kù)秘鑰
kubectl create secret docker-registry regcred-local --docker-server=192.168.190.131:8081 --docker-username=admin --docker-password=password123 --docker-email=test@163.com -n test
再查看一下測(cè)試環(huán)境的秘鑰
kubectl get secret -n test
可以看到
NAME TYPE DATA AGE
default-token-lwmdv kubernetes.io/service-account-token 3 6m3s
mysql-password-test Opaque 1 3m38s
regcred-local kubernetes.io/dockerconfigjson 1 3s
vim 11-5-namespace.yaml
apiVersion: v1
kind: Service
metadata:
name: kubeblog
namespace: test
spec:
selector:
app: kubeblog
type: NodePort
ports:
- port: 5000
targetPort: 5000
nodePort: 30002
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kubeblog
namespace: test
spec:
selector:
matchLabels:
app: kubeblog
template:
metadata:
labels:
app: kubeblog
spec:
hostAliases:
- ip: "192.168.190.131"
hostnames:
- "art.local"
containers:
- name: kubeblog
image: 192.168.190.131:8081/docker/kubeblog:1.1
ports:
- containerPort: 5000
env:
- name: MYSQL_PORT
value: "30306"
- name: MYSQL_SERVER
value: "192.168.190.132"
- name: MYSQL_DB_NAME
value: "blogDBTest"
- name: MYSQL_USER_TEST
value: "root"
- name: MYSQL_PASSWORD_TEST
valueFrom:
secretKeyRef:
name: mysql-password-test
key: MYSQL_PASSWORD_TEST
imagePullSecrets:
- name: regcred-local
kubectl create -f 11-5-namespace.yaml
kubectl get po
NAME READY STATUS RESTARTS AGE
mysql-0 1/1 Running 3 5d3h
kubectl get po -n test
NAME READY STATUS RESTARTS AGE
kubeblog-747688d947-zggcl 1/1 Running 0 14m
瀏覽器訪問(wèn)：http://192.168.190.132:30002/
