devbox
盐析白兔
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

云原生|kubernetes|本地存储hostpath-provisioner部署以及无token密码方式登陆dashboard的部署_hostpath provisioner

作者：盐析白兔 | 2024-03-09 08:38:10

赞

踩

hostpath provisioner

前言：

kubernetes的存储类大家应该都知道，常用的有nfs-client-provisioner这样插件形式，其实还有一种本地存储类的插件，只是这个估计很冷门，生产上网络存储持久卷还是主流的，本文将介绍一种本地存储类插件。

dashboard是kubernetes的web管理界面，大家也是十分熟悉的，但一般的dashboard是需要使用token登陆或者自行设置密码登陆，这个对于开发人员来说是不友好的，那么，本文将采用另一种方式部署dashboard，只需要简单的部署就可以打开浏览器直接输入IP+端口就登陆dashboard，不需要任何的验证，在二进制集群以及kubeadm集群中均验证通过。

一，

本地存储类的部署

这个部署非常简单，两个文件就可以了

【A】

StorageClass.yaml

  1. cat >storageclass.yaml <<EOF
  2. kind: StorageClass
  3. apiVersion: storage.k8s.io/v1
  4. metadata:
  5.   namespace: kube-system
  6.   name: standard
  7.   annotations:
  8.     storageclass.kubernetes.io/is-default-class: "true"
  9.   labels:
  10.     addonmanager.kubernetes.io/mode: EnsureExists
  11. provisioner: k8s.io/minikube-hostpath
  12. EOF

【B】

storage-provisioner.yaml

  1. cat >storage-provisioner.yaml <<EOF
  2. ---
  3. apiVersion: v1
  4. kind: ServiceAccount
  5. metadata:
  6.   name: storage-provisioner
  7.   namespace: kube-system
  8.   labels:
  9.     addonmanager.kubernetes.io/mode: Reconcile
  11. ---
  12. apiVersion: rbac.authorization.k8s.io/v1
  13. kind: ClusterRoleBinding
  14. metadata:
  15.   name: storage-provisioner
  16.   labels:
  17.     addonmanager.kubernetes.io/mode: EnsureExists
  18. roleRef:
  19.   apiGroup: rbac.authorization.k8s.io
  20.   kind: ClusterRole
  21.   name: system:persistent-volume-provisioner
  22. subjects:
  23.   - kind: ServiceAccount
  24.     name: storage-provisioner
  25.     namespace: kube-system
  27. ---
  28. apiVersion: v1
  29. kind: Pod
  30. metadata:
  31.   name: storage-provisioner
  32.   namespace: kube-system
  33.   labels:
  34.     integration-test: storage-provisioner
  35.     addonmanager.kubernetes.io/mode: Reconcile
  36. spec:
  37.   serviceAccountName: storage-provisioner
  38.   hostNetwork: true
  39.   containers:
  40.   - name: storage-provisioner
  41.     image: registry.aliyuncs.com/google_containers/storage-provisioner:v1.8.1
  42.     command: ["/storage-provisioner"]
  43.     imagePullPolicy: IfNotPresent
  44.     volumeMounts:
  45.     - mountPath: /tmp
  46.       name: tmp
  47.   volumes:
  48.   - name: tmp
  49.     hostPath:
  50.       path: /tmp
  51.       type: Directory
  52. EOF

部署完成后，查看sc的状态：

  1. [root@node3 addons]# kubectl get sc
  2. NAME                 PROVISIONER                RECLAIMPOLICY   VOLUMEBINDINGMODE   ALLOWVOLUMEEXPANSION   AGE
  3. standard (default)   k8s.io/minikube-hostpath   Delete          Immediate           false                  9d

测试这个存储类：

  1. cat > nginx-pvc.yaml <<EOF
  2. kind: PersistentVolumeClaim
  3. apiVersion: v1
  4. metadata:
  5.   name: test-claim
  6.   annotations: 
  7.     volume.beta.kubernetes.io/storage-class: "standard"
  8. spec:
  9.   accessModes:
  10.     - ReadWriteMany
  11.   resources:
  12.     requests:
  13.       storage: 1Mi
  14. EOF
  1. cat >deploy-nginx.yaml <<EOF 
  2. apiVersion: apps/v1
  3. kind: Deployment
  4. metadata:
  5.   creationTimestamp: null
  6.   labels:
  7.     app: nginx
  8.   name: nginx
  9. spec:
  10.   replicas: 1
  11.   selector:
  12.     matchLabels:
  13.       app: nginx
  14.   strategy: {}
  15.   template:
  16.     metadata:
  17.       creationTimestamp: null
  18.       labels:
  19.         app: nginx
  20.     spec:
  21.       containers:
  22.       - image: nginx:1.18
  23.         name: nginx
  24.         volumeMounts:
  25.         - name: nginx-persistent-storage
  26.           mountPath: "/usr/share/nginx/html" #不需要修改，映射到镜像内部目录
  27.       volumes:
  28.       - name: nginx-persistent-storage
  29.         persistentVolumeClaim:
  30.           claimName: test-claim #对应到pvc的名字
  31. EOF

测试用pod部署完成后，查看该pod的clusterIP：

  1. [root@node3 nginx]# kubectl get po -A -owide
  2. NAMESPACE              NAME                                        READY   STATUS              RESTARTS   AGE    IP               NODE    NOMINATED NODE   READINESS GATES
  3. default                nginx-b7b6ff9f7-7hmqm                       1/1     Running             3          47h    10.244.0.47      node3   <none>           <none>

查看上面的pvc生成的pv，观察状态，可以看到部署正确无误：

  1. [root@node3 nginx]# kubectl get pv,pvc -A
  2. NAME                                                        CAPACITY   ACCESS MODES   RECLAIM POLICY   STATUS   CLAIM                STORAGECLASS   REASON   AGE
  3. persistentvolume/pvc-79fee6e2-e5a2-4fd6-8abc-ea4a1783f2c7   1Mi        RWX            Delete           Bound    default/test-claim   standard                47h
  4.  
  5. NAMESPACE   NAME                               STATUS   VOLUME                                     CAPACITY   ACCESS MODES   STORAGECLASS   AGE
  6. default     persistentvolumeclaim/test-claim   Bound    pvc-79fee6e2-e5a2-4fd6-8abc-ea4a1783f2c7   1Mi        RWX            standard       47h

到volume存储的目录下写入nginx的首页文件，查看前面的部署文件可以知道该目录在tmp目录下：

  1. root@node3 nginx]# cd /tmp/hostpath-provisioner/pvc-79fee6e2-e5a2-4fd6-8abc-ea4a1783f2c7/
  2. [root@node3 pvc-79fee6e2-e5a2-4fd6-8abc-ea4a1783f2c7]# pwd
  3. /tmp/hostpath-provisioner/pvc-79fee6e2-e5a2-4fd6-8abc-ea4a1783f2c7
  4. [root@node3 pvc-79fee6e2-e5a2-4fd6-8abc-ea4a1783f2c7]# ls
  5. index.html
  6. [root@node3 pvc-79fee6e2-e5a2-4fd6-8abc-ea4a1783f2c7]# cat index.html 
  7. this is a test page!!!!!!

curl访问这个pod的clusterIP，可以看到本地存储类完全正确：

  1. [root@node3 ~]# curl 10.244.0.47
  2. this is a test page!!!!!!

部署无token的开发专用dashboard：

我这里将各个模块分开了，总计10个文件，可以将这10个文件合并或者放置到一个空目录下，部署文件如下：

  1. cat >dashboard-sa.yaml <<EOF
  2. apiVersion: v1
  3. kind: ServiceAccount
  4. metadata:
  5.   labels:
  6.     k8s-app: kubernetes-dashboard
  7.     kubernetes.io/minikube-addons: dashboard
  8.     addonmanager.kubernetes.io/mode: Reconcile    
  9.   name: kubernetes-dashboard
  10.   namespace: kubernetes-dashboard
  11. EOF
  1. cat >dashboard-role.yaml <<EOF 
  2. kind: Role
  3. apiVersion: rbac.authorization.k8s.io/v1
  4. metadata:
  5.   labels:
  6.     k8s-app: kubernetes-dashboard
  7.     kubernetes.io/minikube-addons: dashboard
  8.     addonmanager.kubernetes.io/mode: Reconcile    
  9.   name: kubernetes-dashboard
  10.   namespace: kubernetes-dashboard
  11. rules:
  12.   # Allow Dashboard to get, update and delete Dashboard exclusive secrets.
  13.   - apiGroups: [""]
  14.     resources: ["secrets"]
  15.     resourceNames: ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs", "kubernetes-dashboard-csrf"]
  16.     verbs: ["get", "update", "delete"]
  17.     # Allow Dashboard to get and update 'kubernetes-dashboard-settings' config map.
  18.   - apiGroups: [""]
  19.     resources: ["configmaps"]
  20.     resourceNames: ["kubernetes-dashboard-settings"]
  21.     verbs: ["get", "update"]
  22.     # Allow Dashboard to get metrics.
  23.   - apiGroups: [""]
  24.     resources: ["services"]
  25.     resourceNames: ["heapster", "dashboard-metrics-scraper"]
  26.     verbs: ["proxy"]
  27.   - apiGroups: [""]
  28.     resources: ["services/proxy"]
  29.     resourceNames: ["heapster", "http:heapster:", "https:heapster:", "dashboard-metrics-scraper", "http:dashboard-metrics-scraper"]
  30.     verbs: ["get"]
  31. EOF
  1. cat >dashboard-rolebinding.yaml <<EOF
  2. apiVersion: rbac.authorization.k8s.io/v1
  3. kind: RoleBinding
  4. metadata:
  5.   labels:
  6.     k8s-app: kubernetes-dashboard
  7.     kubernetes.io/minikube-addons: dashboard
  8.     addonmanager.kubernetes.io/mode: Reconcile
  9.   name: kubernetes-dashboard
  10.   namespace: kubernetes-dashboard
  11. roleRef:
  12.   apiGroup: rbac.authorization.k8s.io
  13.   kind: Role
  14.   name: kubernetes-dashboard
  15. subjects:
  16.   - kind: ServiceAccount
  17.     name: kubernetes-dashboard
  18.     namespace: kubernetes-dashboard
  19. EOF
  1. cat >dashboard-clusterrole.yaml<<EOF 
  2. kind: ClusterRole
  3. apiVersion: rbac.authorization.k8s.io/v1
  4. metadata:
  5.   labels:
  6.     k8s-app: kubernetes-dashboard
  7.     kubernetes.io/minikube-addons: dashboard
  8.     addonmanager.kubernetes.io/mode: Reconcile    
  9.   name: kubernetes-dashboard
  10. rules:
  11.   # Allow Metrics Scraper to get metrics from the Metrics server
  12.   - apiGroups: ["metrics.k8s.io"]
  13.     resources: ["pods", "nodes"]
  14.     verbs: ["get", "list", "watch"]
  15. EOF
  1. cat >dashboard-clusterrolebinding.yaml<<EOF 
  2. apiVersion: rbac.authorization.k8s.io/v1
  3. kind: ClusterRoleBinding
  4. metadata:
  5.   name: kubernetes-dashboard
  6.   labels:
  7.     k8s-app: kubernetes-dashboard
  8.     kubernetes.io/minikube-addons: dashboard
  9.     addonmanager.kubernetes.io/mode: Reconcile    
  10. roleRef:
  11.   apiGroup: rbac.authorization.k8s.io
  12.   kind: ClusterRole
  13.   name: cluster-admin
  14. subjects:
  15. - kind: ServiceAccount
  16.   name: kubernetes-dashboard
  17.   namespace: kubernetes-dashboard
  18. EOF
  1. cat >dashboard-ns.yaml <<EOF
  2. apiVersion: v1
  3. kind: Namespace
  4. metadata:
  5.   name: kubernetes-dashboard
  6.   labels:
  7.     kubernetes.io/minikube-addons: dashboard
  8.     addonmanager.kubernetes.io/mode: Reconcile
  9. EOF
  1. cat >dashboard-configmap.yaml <<EOF
  2. kind: ConfigMap
  3. apiVersion: v1
  4. metadata:
  5.   labels:
  6.     k8s-app: kubernetes-dashboard
  7.     kubernetes.io/minikube-addons: dashboard
  8.     addonmanager.kubernetes.io/mode: Reconcile
  9.   name: kubernetes-dashboard-settings
  10.   namespace: kubernetes-dashboard
  11. EOF
  1. cat >dashboard-secret.yaml <<EOF
  2. apiVersion: v1
  3. kind: Secret
  4. metadata:
  5.   labels:
  6.     k8s-app: kubernetes-dashboard
  7.     kubernetes.io/minikube-addons: dashboard
  8.     addonmanager.kubernetes.io/mode: Reconcile    
  9.   name: kubernetes-dashboard-certs
  10.   namespace: kubernetes-dashboard
  11. type: Opaque
  13. ---
  15. apiVersion: v1
  16. kind: Secret
  17. metadata:
  18.   labels:
  19.     k8s-app: kubernetes-dashboard
  20.     kubernetes.io/minikube-addons: dashboard
  21.     addonmanager.kubernetes.io/mode: Reconcile    
  22.   name: kubernetes-dashboard-csrf
  23.   namespace: kubernetes-dashboard
  24. type: Opaque
  25. data:
  26.   csrf: ""
  28. ---
  30. apiVersion: v1
  31. kind: Secret
  32. metadata:
  33.   labels:
  34.     k8s-app: kubernetes-dashboard
  35.     kubernetes.io/minikube-addons: dashboard
  36.     addonmanager.kubernetes.io/mode: Reconcile    
  37.   name: kubernetes-dashboard-key-holder
  38.   namespace: kubernetes-dashboard
  39. type: Opaque
  40. EOF
  1. cat >dashboard-svc.yaml <<EOF
  2. kind: Service
  3. apiVersion: v1
  4. metadata:
  5.   labels:
  6.     k8s-app: kubernetes-dashboard
  7.     kubernetes.io/minikube-addons-endpoint: dashboard
  8.     kubernetes.io/minikube-addons: dashboard
  9.     addonmanager.kubernetes.io/mode: Reconcile    
  10.   name: kubernetes-dashboard
  11.   namespace: kubernetes-dashboard
  12. spec:
  13.   type: NodePort
  14.   ports:
  15.     - port: 80
  16.       targetPort: 9090
  17.       nodePort: 30001 
  18.   selector:
  19.     k8s-app: kubernetes-dashboard
  21. ---
  23. kind: Service
  24. apiVersion: v1
  25. metadata:
  26.   labels:
  27.     k8s-app: dashboard-metrics-scraper
  28.     kubernetes.io/minikube-addons: dashboard
  29.     addonmanager.kubernetes.io/mode: Reconcile    
  30.   name: dashboard-metrics-scraper
  31.   namespace: kubernetes-dashboard
  32. spec:
  33.   ports:
  34.     - port: 8000
  35.       targetPort: 8000
  36.   selector:
  37.     k8s-app: dashboard-metrics-scraper
  38. EOF
  1. cat >dashboard-dp.yaml <<EOF
  2. kind: Deployment
  3. apiVersion: apps/v1
  4. metadata:
  5.   labels:
  6.     k8s-app: dashboard-metrics-scraper
  7.     kubernetes.io/minikube-addons: dashboard
  8.     addonmanager.kubernetes.io/mode: Reconcile
  9.   name: dashboard-metrics-scraper
  10.   namespace: kubernetes-dashboard
  11. spec:
  12.   replicas: 1
  13.   revisionHistoryLimit: 10
  14.   selector:
  15.     matchLabels:
  16.       k8s-app: dashboard-metrics-scraper
  17.   template:
  18.     metadata:
  19.       labels:
  20.         k8s-app: dashboard-metrics-scraper
  21.       annotations:
  22.         seccomp.security.alpha.kubernetes.io/pod: 'runtime/default'
  23.     spec:
  24.       containers:
  25.         - name: dashboard-metrics-scraper
  26.           image: kubernetesui/metrics-scraper:v1.0.4
  27.           ports:
  28.             - containerPort: 8000
  29.               protocol: TCP
  30.           livenessProbe:
  31.             httpGet:
  32.               scheme: HTTP
  33.               path: /
  34.               port: 8000
  35.             initialDelaySeconds: 30
  36.             timeoutSeconds: 30
  37.           volumeMounts:
  38.           - mountPath: /tmp
  39.             name: tmp-volume
  40.           securityContext:
  41.             allowPrivilegeEscalation: false
  42.             readOnlyRootFilesystem: true
  43.             runAsUser: 1001
  44.             runAsGroup: 2001
  45.       serviceAccountName: kubernetes-dashboard
  46.       nodeSelector:
  47.         "beta.kubernetes.io/os": linux
  48.       # Comment the following tolerations if Dashboard must not be deployed on master
  49.       tolerations:
  50.         - key: node-role.kubernetes.io/master
  51.           effect: NoSchedule
  52.       volumes:
  53.         - name: tmp-volume
  54.           emptyDir: {}
  55. ---
  57. kind: Deployment
  58. apiVersion: apps/v1
  59. metadata:
  60.   labels:
  61.     k8s-app: kubernetes-dashboard
  62.     kubernetes.io/minikube-addons: dashboard
  63.     addonmanager.kubernetes.io/mode: Reconcile
  64.   name: kubernetes-dashboard
  65.   namespace: kubernetes-dashboard
  66. spec:
  67.   replicas: 1
  68.   revisionHistoryLimit: 10
  69.   selector:
  70.     matchLabels:
  71.       k8s-app: kubernetes-dashboard
  72.   template:
  73.     metadata:
  74.       labels:
  75.         k8s-app: kubernetes-dashboard
  76.     spec:
  77.       containers:
  78.         - name: kubernetes-dashboard
  79.           # WARNING: This must match pkg/minikube/bootstrapper/images/images.go
  80.           image: kubernetesui/dashboard:v2.0.1
  81.           ports:
  82.             - containerPort: 9090
  83.               protocol: TCP
  84.           args:
  85.             - --namespace=kubernetes-dashboard
  86.             - --enable-skip-login
  87.             - --disable-settings-authorizer
  88.           # Uncomment the following line to manually specify Kubernetes API server Host
  89.           # If not specified, Dashboard will attempt to auto discover the API server and connect
  90.           # to it. Uncomment only if the default does not work.
  91.           # - --apiserver-host=http://my-address:port
  92.           volumeMounts:
  93.             # Create on-disk volume to store exec logs
  94.             - mountPath: /tmp
  95.               name: tmp-volume
  96.           livenessProbe:
  97.             httpGet:
  98.               path: /
  99.               port: 9090
  100.             initialDelaySeconds: 30
  101.             timeoutSeconds: 30
  102.           securityContext:
  103.             allowPrivilegeEscalation: false
  104.             readOnlyRootFilesystem: true
  105.             runAsUser: 1001
  106.             runAsGroup: 2001
  107.       volumes:
  108.         - name: tmp-volume
  109.           emptyDir: {}
  110.       serviceAccountName: kubernetes-dashboard
  111.       nodeSelector:
  112.         "beta.kubernetes.io/os": linux
  113.       # Comment the following tolerations if Dashboard must not be deployed on master
  114.       tolerations:
  115.         - key: node-role.kubernetes.io/master
  116.           effect: NoSchedule
  117. EOF

假设以上10个文件放置在dashboard这个文件夹内，执行这些文件即可：

kubectl apply -f dashboard/

查看部署情况：

  1. [root@k8s-master ~]# kubectl get po,secret,cm,sa,svc -n kubernetes-dashboard 
  2. NAME                                            READY   STATUS    RESTARTS   AGE
  3. pod/dashboard-metrics-scraper-dc6947fbf-hf26p   1/1     Running   0          86m
  4. pod/kubernetes-dashboard-6dbb54fd95-795lj       1/1     Running   0          86m
  5.  
  6. NAME                                      TYPE                                  DATA   AGE
  7. secret/default-token-v6pkr                kubernetes.io/service-account-token   3      87m
  8. secret/kubernetes-dashboard-certs         Opaque                                0      87m
  9. secret/kubernetes-dashboard-csrf          Opaque                                1      87m
  10. secret/kubernetes-dashboard-key-holder    Opaque                                2      87m
  11. secret/kubernetes-dashboard-token-l22q6   kubernetes.io/service-account-token   3      87m
  12.  
  13. NAME                                      DATA   AGE
  14. configmap/kubernetes-dashboard-settings   0      86m
  15.  
  16. NAME                                  SECRETS   AGE
  17. serviceaccount/default                1         87m
  18. serviceaccount/kubernetes-dashboard   1         87m
  19.  
  20. NAME                                TYPE        CLUSTER-IP    EXTERNAL-IP   PORT(S)        AGE
  21. service/dashboard-metrics-scraper   ClusterIP   10.0.71.99    <none>        8000/TCP       87m
  22. service/kubernetes-dashboard        NodePort    10.0.133.27   <none>        80:30001/TCP   87m

打开任意一个浏览器，输入节点IP+30001 即可访问dashboard了：

 

这个版本还算可以，不是太低，用起来非常方便，十分适合开发人员适用哦。 

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/盐析白兔/article/detail/214286
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号