Äú¿ÉÒÔ¾èÖú£¬Ö§³ÖÎÒÃǵĹ«ÒæÊÂÒµ¡£

1Ôª 10Ôª 50Ôª





ÈÏÖ¤Â룺  ÑéÖ¤Âë,¿´²»Çå³þ?Çëµã»÷Ë¢ÐÂÑéÖ¤Âë ±ØÌî



  ÇóÖª ÎÄÕ ÎÄ¿â Lib ÊÓÆµ iPerson ¿Î³Ì ÈÏÖ¤ ×Éѯ ¹¤¾ß ½²×ù Modeler   Code  
»áÔ±   
 
   
 
 
     
   
 ¶©ÔÄ
  ¾èÖú
»ùÓÚkubernetes¹¹½¨Docker¼¯Èº¹ÜÀíÏê½â
 
×÷Õߣº Mike Amundsen À´Ô´£ºInfoQ ·¢²¼ÓÚ£º 2015-02-05
  5036  次浏览      27
 

Ò»¡¢Ç°ÑÔ

Kubernetes ÊÇGoogle¿ªÔ´µÄÈÝÆ÷¼¯Èº¹ÜÀíϵͳ£¬»ùÓÚDocker¹¹½¨Ò»¸öÈÝÆ÷µÄµ÷¶È·þÎñ£¬Ìṩ×ÊÔ´µ÷¶È¡¢¾ùºâÈÝÔÖ¡¢·þÎñ×¢²á¡¢¶¯Ì¬À©ËõÈݵȹ¦ÄÜÌ×¼þ£¬Ä¿Ç°×îа汾Ϊ0.6.2¡£±¾ÎĽéÉÜÈçºÎ»ùÓÚCentos7.0¹¹½¨Kubernetesƽ̨£¬ÔÚÕýʽ½éÉÜ֮ǰ£¬´ó¼ÒÓбØÒªÏÈÀí½âKubernetes¼¸¸öºËÐĸÅÄî¼°Æä³Ðµ£µÄ¹¦ÄÜ¡£ÒÔÏÂΪKubernetesµÄ¼Ü¹¹Éè¼ÆÍ¼£º

1. Pods

ÔÚKubernetesϵͳÖУ¬µ÷¶ÈµÄ×îС¿ÅÁ£²»Êǵ¥´¿µÄÈÝÆ÷£¬¶øÊdzéÏó³ÉÒ»¸öPod£¬PodÊÇÒ»¸ö¿ÉÒÔ±»´´½¨¡¢Ïú»Ù¡¢µ÷¶È¡¢¹ÜÀíµÄ×îСµÄ²¿Êðµ¥Ôª¡£±ÈÈçÒ»¸ö»òÒ»×éÈÝÆ÷¡£

2. Replication Controllers

Replication ControllerÊÇKubernetesϵͳÖÐ×îÓÐÓõŦÄÜ£¬ÊµÏÖ¸´Öƶà¸öPod¸±±¾£¬ÍùÍùÒ»¸öÓ¦ÓÃÐèÒª¶à¸öPodÀ´Ö§³Å£¬²¢ÇÒ¿ÉÒÔ±£Ö¤Æä¸´ÖƵĸ±±¾Êý£¬¼´Ê¹¸±±¾Ëùµ÷¶È·ÖÅäµÄÖ÷ËÞ»ú³öÏÖÒì³££¬Í¨¹ýReplication Controller¿ÉÒÔ±£Ö¤ÔÚÆäËüÖ÷ËÞ»úÆôÓÃͬµÈÊýÁ¿µÄPod¡£Replication Controller¿ÉÒÔͨ¹ýrepconÄ£°åÀ´´´½¨¶à¸öPod¸±±¾£¬Í¬ÑùÒ²¿ÉÒÔÖ±½Ó¸´ÖÆÒÑ´æÔÚPod£¬ÐèҪͨ¹ýLabel selectorÀ´¹ØÁª¡£

3¡¢Services

ServicesÊÇKubernetes×îÍâΧµÄµ¥Ôª£¬Í¨¹ýÐéÄâÒ»¸ö·ÃÎÊIP¼°·þÎñ¶Ë¿Ú£¬¿ÉÒÔ·ÃÎÊÎÒÃǶ¨ÒåºÃµÄPod×ÊÔ´£¬Ä¿Ç°µÄ°æ±¾ÊÇͨ¹ýiptablesµÄnatת·¢À´ÊµÏÖ£¬×ª·¢µÄÄ¿±ê¶Ë¿ÚΪKube_proxyÉú³ÉµÄËæ»ú¶Ë¿Ú£¬Ä¿Ç°Ö»ÌṩGOOGLEÔÆÉϵķÃÎʵ÷¶È£¬ÈçGCE¡£Èç¹ûÓëÎÒÃÇ×Ô½¨µÄƽ̨½øÐÐÕûºÏ£¿Çë¹Ø×¢ÏÂÆª¡¶kubernetesÓëHECD¼Ü¹¹µÄÕûºÏ¡·ÎÄÕ¡£

4¡¢Labels

LabelsÊÇÓÃÓÚÇø·ÖPod¡¢Service¡¢Replication ControllerµÄkey/value¼üÖµ¶Ô£¬½öʹÓÃÔÚPod¡¢Service¡¢ Replication ControllerÖ®¼äµÄ¹ØÏµÊ¶±ð£¬µ«¶ÔÕâЩµ¥Ôª±¾Éí½øÐвÙ×÷ʱµÃʹÓÃname±êÇ©¡£

5¡¢Proxy

Proxy²»µ«½â¾öÁËͬһÖ÷ËÞ»úÏàͬ·þÎñ¶Ë¿Ú³åÍ»µÄÎÊÌ⣬»¹ÌṩÁËServiceת·¢·þÎñ¶Ë¿Ú¶ÔÍâÌṩ·þÎñµÄÄÜÁ¦£¬Proxyºó¶ËʹÓÃÁËËæ»ú¡¢ÂÖÑ­¸ºÔؾùºâËã·¨¡£

˵˵¸öÈËÒ»µã¿´·¨£¬Ä¿Ç°Kubernetes ±£³ÖÒ»ÖÜһС°æ±¾¡¢Ò»¸öÔÂÒ»´ó°æ±¾µÄ½Ú×࣬µü´úËٶȼ«¿ì£¬Í¬Ê±Ò²´øÀ´Á˲»Í¬°æ±¾²Ù×÷·½·¨µÄ²îÒ죬ÁíÍâ¹ÙÍøÎĵµ¸üÐÂËÙ¶ÈÏà¶ÔÖͺó¼°Ç·È±£¬¸ø³õѧÕß´øÀ´Ò»¶¨ÌôÕ½¡£ÔÚÉÏÓνÓÈë²ã¹Ù·½²àÖØµã»¹·ÅÔÚGCE£¨Google Compute Engine£©µÄ¶Ô½ÓÓÅ»¯£¬Õë¶Ô¸öÈË˽ÓÐÔÆ»¹Î´ÍƳöÒ»Ì׿ÉÐеĽÓÈë½â¾ö·½°¸¡£ÔÚv0.5°æ±¾ÖвÅÒýÓÃservice´úÀíת·¢µÄ»úÖÆ£¬ÇÒÊÇͨ¹ýiptablesÀ´ÊµÏÖ£¬Ôڸ߲¢·¢ÏÂÐÔÄÜÁîÈ˵£ÓÇ¡£µ«×÷ÕßÒÀÈ»¿´ºÃKubernetesδÀ´µÄ·¢Õ¹£¬ÖÁÉÙĿǰ»¹Î´¿´µ½ÁíÍâÒ»¸ö³ÉÌåϵ¡¢¾ß±¸Á¼ºÃÉú̬ȦµÄƽ̨£¬ÏàÐÅÔÚV1.0ʱ¾Í»á¾ß±¸Éú²ú»·¾³µÄ·þÎñÖ§³ÅÄÜÁ¦¡£

Ò»¡¢»·¾³²¿Êð

1¡¢Æ½Ì¨°æ±¾ËµÃ÷

1£©Centos7.0 OS

2£©Kubernetes V0.6.2

3£©etcd version 0.4.6

4£©Docker version 1.3.2

2¡¢Æ½Ì¨»·¾³ËµÃ÷

3¡¢»·¾³°²×°

1£©ÏµÍ³³õʼ»¯¹¤×÷£¨ËùÓÐÖ÷»ú£©

ϵͳ°²×°-Ñ¡Ôñ[×îС»¯°²×°]

# yum -y install wget ntpdate bind-utils
# wget http://mirror.centos.org/centos/7/extras/x86_64/Packages/epel-release-7-2.noarch.rpm
# yum update

CentOS 7.0ĬÈÏʹÓõÄÊÇfirewall×÷Ϊ·À»ðǽ£¬ÕâÀï¸ÄΪiptables·À»ðǽ£¨ÊìϤ¶È¸ü¸ß£¬·Ç±ØÐ룩¡£

1.1¡¢¹Ø±Õfirewall£º

# systemctl stop firewalld.service #Í£Ö¹firewall
# systemctl disable firewalld.service #½ûÖ¹firewall¿ª»úÆô¶¯

1.2¡¢°²×°iptables·À»ðǽ

# yum install iptables-services #°²×°
# systemctl start iptables.service #×îºóÖØÆô·À»ðǽʹÅäÖÃÉúЧ
# systemctl enable iptables.service #ÉèÖ÷À»ðǽ¿ª»úÆô¶¯

2£©°²×°Etcd£¨192.168.1.10Ö÷»ú£©

# mkdir -p /home/install && cd /home/install  
# wget https://github.com/coreos/etcd/releases/download/v0.4.6/etcd-v0.4.6-linux-amd64.tar.gz
# tar -zxvf etcd-v0.4.6-linux-amd64.tar.gz
# cd etcd-v0.4.6-linux-amd64
# cp etcd* /bin/
# /bin/etcd -version
etcd version 0.4.6

Æô¶¯·þÎñetcd·þÎñ£¬ÈçÓÐÌṩµÚÈý·½¹ÜÀíÐèÇó£¬ÁíÐèÔÚÆô¶¯²ÎÊýÖÐÌí¼Ó¡°-cors='*'¡±²ÎÊý¡£

# mkdir /data/etcd  
# /bin/etcd -name etcdserver -peer-addr 192.168.1.10:7001 -addr 192.168.1.10:4001 -data-dir /data/etcd -peer-bind-addr 0.0.0.0:7001 -bind-addr 0.0.0.0:4001 &

ÅäÖÃetcd·þÎñ·À»ðǽ£¬ÆäÖÐ4001Ϊ·þÎñ¶Ë¿Ú£¬7001Ϊ¼¯ÈºÊý¾Ý½»»¥¶Ë¿Ú¡£

# iptables -I INPUT -s 192.168.1.0/24 -p tcp --dport 4001 -j ACCEPT
# iptables -I INPUT -s 192.168.1.0/24 -p tcp --dport 7001 -j ACCEPT

3£©°²×°Kubernetes£¨Éæ¼°ËùÓÐMaster¡¢MinionÖ÷»ú£©

ͨ¹ýyumÔ´·½Ê½°²×°£¬Ä¬ÈϽ«°²×°etcd, docker, and cadvisorÏà¹Ø°ü¡£

# curl https://copr.fedoraproject.org/coprs/eparis/kubernetes-epel-7/repo/epel-7/
eparis-kubernetes-epel-7-epel-7.repo -o /etc/yum.repos.d/eparis-kubernetes-epel-7-epel-7.repo
#yum -y install kubernetes

Éý¼¶ÖÁv0.6.2£¬¸²¸ÇbinÎļþ¼´¿É£¬·½·¨ÈçÏ£º

# mkdir -p /home/install && cd /home/install
# wget https://github.com/GoogleCloudPlatform/kubernetes/releases/download/v0.6.2/kubernetes.tar.gz
# tar -zxvf kubernetes.tar.gz
# tar -zxvf kubernetes/server/kubernetes-server-linux-amd64.tar.gz
# cp kubernetes/server/bin/kube* /usr/bin

УÑé°²×°½á¹û£¬³ö°æÒÔÏÂÐÅϢ˵Ã÷°²×°Õý³£¡£

[root@SN2014-12-200 bin]# /usr/bin/kubectl version
Client Version: version.Info{Major:"0", Minor:"6+", GitVersion:"v0.6.2", GitCommit:"729fde276613eedcd99ecf5b93f095b8deb64eb4", GitTreeState:"clean"}
Server Version: &version.Info{Major:"0", Minor:"6+", GitVersion:"v0.6.2", GitCommit:"729fde276613eedcd99ecf5b93f095b8deb64eb4", GitTreeState:"clean"}

4£©KubernetesÅäÖ㨽öMasterÖ÷»ú£©

masterÔËÐÐÈý¸ö×é¼þ,°üÀ¨apiserver¡¢scheduler¡¢controller-manager£¬Ïà¹ØÅäÖÃÏîÒ²Ö»Éæ¼°ÕâÈý¿é¡£

4.1¡¢¡¾/etc/kubernetes/config¡¿

# Comma seperated list of nodes in the etcd cluster  
KUBE_ETCD_SERVERS="--etcd_servers=http://192.168.1.10:4001"

# logging to stderr means we get it in the systemd journal
KUBE_LOGTOSTDERR="--logtostderr=true"

# journal message level, 0 is debug
KUBE_LOG_LEVEL="--v=0"

# Should this cluster be allowed to run privleged docker containers
KUBE_ALLOW_PRIV="--allow_privileged=false"

4.2¡¢¡¾/etc/kubernetes/apiserver¡¿

# The address on the local server to listen to.  
KUBE_API_ADDRESS="--address=0.0.0.0"

# The port on the local server to listen on.
KUBE_API_PORT="--port=8080"

# How the replication controller and scheduler find the kube-apiserver
KUBE_MASTER="--master=192.168.1.200:8080"

# Port minions listen on
KUBELET_PORT="--kubelet_port=10250"

# Address range to use for services
KUBE_SERVICE_ADDRESSES="--portal_net=10.254.0.0/16"

# Add you own!
KUBE_API_ARGS=""

4.3¡¢¡¾/etc/kubernetes/controller-manager¡¿

# Comma seperated list of minions  
KUBELET_ADDRESSES="--machines= 192.168.1.201,192.168.1.202"

# Add you own!
KUBE_CONTROLLER_MANAGER_ARGS=""

4.4¡¢¡¾/etc/kubernetes/scheduler¡¿

# Add your own!  
KUBE_SCHEDULER_ARGS=""

Æô¶¯master²àÏà¹Ø·þÎñ

# systemctl daemon-reload
# systemctl start kube-apiserver.service kube-controller-manager.service kube-scheduler.service
# systemctl enable kube-apiserver.service kube-controller-manager.service kube-scheduler.service

5£©KubernetesÅäÖ㨽öminionÖ÷»ú£©

minionÔËÐÐÁ½¸ö×é¼þ,°üÀ¨kubelet¡¢proxy£¬Ïà¹ØÅäÖÃÏîÒ²Ö»Éæ¼°ÕâÁ½¿é¡£

DockerÆô¶¯½Å±¾¸üÐÂ

# vi /etc/sysconfig/docker

Ìí¼Ó£º-H tcp://0.0.0.0:2375£¬×îÖÕÅäÖÃÈçÏ£¬ÒÔ±ãÒÔºóÌṩԶ³ÌAPIά»¤¡£

OPTIONS=--selinux-enabled -H tcp://0.0.0.0:2375 -H fd://

ÐÞ¸Äminion·À»ðǽÅäÖã¬Í¨³£masterÕÒ²»µ½minionÖ÷»ú¶à°ëÊÇÓÉÓÚ¶Ë¿ÚûÓÐÁ¬Í¨¡£

iptables -I INPUT -s 192.168.1.200 -p tcp --dport 10250 -j ACCEPT

ÐÞ¸Äkubernetes minion¶ËÅäÖã¬ÒÔ192.168.1.201Ö÷»úΪÀý£¬ÆäËüminionÖ÷»úͬÀí¡£

5.1¡¢¡¾/etc/kubernetes/config¡¿

# Comma seperated list of nodes in the etcd cluster  
KUBE_ETCD_SERVERS="--etcd_servers=http://192.168.1.10:4001"

# logging to stderr means we get it in the systemd journal
KUBE_LOGTOSTDERR="--logtostderr=true"

# journal message level, 0 is debug
KUBE_LOG_LEVEL="--v=0"

# Should this cluster be allowed to run privleged docker containers
KUBE_ALLOW_PRIV="--allow_privileged=false"

5.2¡¢¡¾/etc/kubernetes/kubelet¡¿

###  
# kubernetes kubelet (minion) config

# The address for the info server to serve on (set to 0.0.0.0 or "" for all interfaces)
KUBELET_ADDRESS="--address=0.0.0.0"

# The port for the info server to serve on
KUBELET_PORT="--port=10250"

# You may leave this blank to use the actual hostname
KUBELET_HOSTNAME="--hostname_override=192.168.1.201"

# Add your own!
KUBELET_ARGS=""

5.3¡¢¡¾/etc/kubernetes/proxy¡¿

KUBE_PROXY_ARGS=""  

Æô¶¯kubernetes·þÎñ

# systemctl daemon-reload
# systemctl enable docker.service kubelet.service kube-proxy.service
# systemctl start docker.service kubelet.service kube-proxy.service

3¡¢Ð£Ñé°²×°(ÔÚmasterÖ÷»ú²Ù×÷£¬»ò¿É·ÃÎÊmasterÖ÷»ú8080¶Ë¿ÚµÄclient apiÖ÷»ú)

1) kubernetes³£ÓÃÃüÁî

# kubectl get minions    #²é²é¿´minionÖ÷»ú
# kubectl get pods #²é¿´podsÇåµ¥
# kubectl get services »ò kubectl get services -o json #²é¿´serviceÇåµ¥
# kubectl get replicationControllers #²é¿´replicationControllersÇåµ¥
# for i in `kubectl get pod|tail -n +2|awk '{print $1}'`; do kubectl delete pod $i; done #ɾ³ýËùÓÐpods

»òÕßͨ¹ýServer api for REST·½Ê½£¨ÍƼö£¬¼°Ê±ÐÔ¸ü¸ß£©£º

# curl -s -L http://192.168.1.200:8080/api/v1beta1/version | python -mjson.tool    #²é¿´kubernetes°æ±¾
# curl -s -L http://192.168.1.200:8080/api/v1beta1/pods | python -mjson.tool #²é¿´podsÇåµ¥
# curl -s -L http://192.168.1.200:8080/api/v1beta1/replicationControllers | python -mjson.tool #²é¿´replicationControllersÇåµ¥
# curl -s -L http://192.168.1.200:8080/api/v1beta1/minions | python -m json.tool #²é²é¿´minionÖ÷»ú
# curl -s -L http://192.168.1.200:8080/api/v1beta1/services | python -m json.tool #²é¿´serviceÇåµ¥

×¢£ºÔÚаækubernetesÖУ¬ËùÓеIJÙ×÷ÃüÁî¶¼ÕûºÏÖÁkubectl£¬°üÀ¨kubecfg¡¢kubectl.sh¡¢kubecfg.shµÈ

2£©´´½¨²âÊÔpodµ¥Ôª

# /home/kubermange/pods && cd /home/kubermange/pods
# vi apache-pod.json

{  
"id": "fedoraapache",
"kind": "Pod",
"apiVersion": "v1beta1",
"desiredState": {
"manifest": {
"version": "v1beta1",
"id": "fedoraapache",
"containers": [{
"name": "fedoraapache",
"image": "fedora/apache",
"ports": [{
"containerPort": 80,
"hostPort": 8080
}]
}]
}
},
"labels": {
"name": "fedoraapache"
}
}

 # kubectl create -f apache-pod.json
# kubectl get pod

NAME                IMAGE(S)            HOST                LABELS              STATUS
fedoraapache fedora/apache 192.168.1.202/ name=fedoraapache Running

Æô¶¯ä¯ÀÀÆ÷·ÃÎÊhttp://192.168.1.202:8080/£¬¶ÔÓ¦µÄ·þÎñ¶Ë¿ÚÇмÇÔÚiptablesÖÐÒÑÌí¼Ó¡£Ð§¹ûͼÈçÏ£º

¹Û²ìkubernetesÔÚetcdÖеÄÊý¾Ý´æ´¢½á¹¹

¹Û²ìµ¥¸öpodsµÄÊý¾Ý´æ´¢½á¹¹£¬ÒÔjsonµÄ¸ñʽ´æ´¢¡£

   
5036 ´Îä¯ÀÀ       27
Ïà¹ØÎÄÕÂ

ÆóÒµ¼Ü¹¹¡¢TOGAFÓëArchiMate¸ÅÀÀ
¼Ü¹¹Ê¦Ö®Â·-ÈçºÎ×öºÃÒµÎñ½¨Ä££¿
´óÐÍÍøÕ¾µçÉÌÍøÕ¾¼Ü¹¹°¸ÀýºÍ¼¼Êõ¼Ü¹¹µÄʾÀý
ÍêÕûµÄArchimateÊÓµãÖ¸ÄÏ£¨°üÀ¨Ê¾Àý£©
Ïà¹ØÎĵµ

Êý¾ÝÖÐ̨¼¼Êõ¼Ü¹¹·½·¨ÂÛÓëʵ¼ù
ÊÊÓÃArchiMate¡¢EA ºÍ iSpace½øÐÐÆóÒµ¼Ü¹¹½¨Ä£
ZachmanÆóÒµ¼Ü¹¹¿ò¼Ü¼ò½é
ÆóÒµ¼Ü¹¹ÈÃSOAÂ䵨
Ïà¹Ø¿Î³Ì

ÔÆÆ½Ì¨Óë΢·þÎñ¼Ü¹¹Éè¼Æ
ÖÐ̨սÂÔ¡¢ÖÐ̨½¨ÉèÓëÊý×ÖÉÌÒµ
ÒÚ¼¶Óû§¸ß²¢·¢¡¢¸ß¿ÉÓÃϵͳ¼Ü¹¹
¸ß¿ÉÓ÷ֲ¼Ê½¼Ü¹¹Éè¼ÆÓëʵ¼ù
×îл¼Æ»®
DeepSeekÔÚÈí¼þ²âÊÔÓ¦ÓÃʵ¼ù 4-12[ÔÚÏß]
DeepSeek´óÄ£ÐÍÓ¦Óÿª·¢Êµ¼ù 4-19[ÔÚÏß]
UAF¼Ü¹¹ÌåϵÓëʵ¼ù 4-11[±±¾©]
AIÖÇÄÜ»¯Èí¼þ²âÊÔ·½·¨Óëʵ¼ù 5-23[ÉϺ£]
»ùÓÚ UML ºÍEA½øÐзÖÎöÉè¼Æ 4-26[±±¾©]
ÒµÎñ¼Ü¹¹Éè¼ÆÓ뽨ģ 4-18[±±¾©]

ר¼ÒÊӽǿ´ITÓë¼Ü¹¹
Èí¼þ¼Ü¹¹Éè¼Æ
ÃæÏò·þÎñÌåϵ¼Ü¹¹ºÍÒµÎñ×é¼þ
ÈËÈËÍøÒÆ¶¯¿ª·¢¼Ü¹¹
¼Ü¹¹¸¯»¯Ö®ÃÕ
̸ƽ̨¼´·þÎñPaaS


ÃæÏòÓ¦Óõļܹ¹Éè¼ÆÊµ¼ù
µ¥Ôª²âÊÔ+ÖØ¹¹+Éè¼ÆÄ£Ê½
Èí¼þ¼Ü¹¹Ê¦¡ª¸ß¼¶Êµ¼ù
Èí¼þ¼Ü¹¹Éè¼Æ·½·¨¡¢°¸ÀýÓëʵ¼ù
ǶÈëʽÈí¼þ¼Ü¹¹Éè¼Æ¡ª¸ß¼¶Êµ¼ù
SOAÌåϵ½á¹¹Êµ¼ù


Èñ°²¿Æ¼¼ Èí¼þ¼Ü¹¹Éè¼Æ·½·¨
³É¶¼ ǶÈëʽÈí¼þ¼Ü¹¹Éè¼Æ
ÉϺ£Æû³µ ǶÈëʽÈí¼þ¼Ü¹¹Éè¼Æ
±±¾© Èí¼þ¼Ü¹¹Éè¼Æ
ÉϺ£ Èí¼þ¼Ü¹¹Éè¼Æ°¸ÀýÓëʵ¼ù
±±¾© ¼Ü¹¹Éè¼Æ·½·¨°¸ÀýÓëʵ¼ù
ÉîÛÚ ¼Ü¹¹Éè¼Æ·½·¨°¸ÀýÓëʵ¼ù
ǶÈëʽÈí¼þ¼Ü¹¹Éè¼Æ¡ª¸ß¼¶Êµ¼ù