com/GoogleCloudPlatform/kubernetes [Service] EnvironmentFile=-/etc/kubernetes/config EnvironmentFile=-/etc/kubernetes/controller- … /GoogleCloudPlatform/kubernetes [Service] EnvironmentFile=-/etc/kubernetes/config EnvironmentFile=-/etc/kubernetes/scheduler

公共配置 /etc/kubernetes/config ### # kubernetes system config # # The following values … .com/GoogleCloudPlatform/kubernetes [Service] EnvironmentFile=-/etc/kubernetes/config EnvironmentFile=-/etc/kubernetes/controller-manager

关系 cluster: kubernetes user: kubernetes-admin name: kubernetes-admin@kubernetes # 集群名 … :6443 name: kubernetes contexts: - context: cluster: kubernetes user: kubernetes-admin name: kubernetes-admin@kubernetes - context

_configs: - job_name: 'kubernetes-apiservers' kubernetes_sd_configs: - role: endpoints … _labels: [__meta_kubernetes_namespace, __meta_kubernetes_service_name, __meta_kubernetes_endpoint_port_name

= kubernetes DNS.2 = kubernetes.default DNS.3 = kubernetes.default.svc DNS.4 = kubernetes.default … etcd.service [Service] #EnvironmentFile=/etc/kubernetes/apiserver ExecStart=/usr/bin/kube … etcd:2379 \\ --etcd-cafile=/etc/kubernetes/cert/ca.crt \\ --etcd-

prometheus-k8s namespace: monitoring annotations: kubernetes.io/ingress.class: nginx # … kind: Ingress metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | … , subnet-071e07e83dd5146f5 alb.ingress.kubernetes.io/target-type: ip

如下： https://github.com/kubernetes/kubernetes/tree/release-1.14/cluster … wget https://raw.githubusercontent.com/kubernetes/kubernetes/release-1.14/cluster/addons … -service: "true" addonmanager.kubernetes.io/mode: EnsureExists data: NannyConfiguration

describe secrets -n kubernetes-dashboard kubernetes-dashboard-token-dftj8 … config set-context k8s@kubernetes --cluster=kubernetes --user=k8s -- … kubernetes contexts: - context: cluster: kubernetes user: k8s name: k8s@kubernetes current-context: k8s@kubernetes

/v1beta1 kind: Ingress metadata: annotations: kubernetes.io/ingress.class: "nginx … -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/master/deploy/static … : name: test-ingress annotations: ingress.kubernetes.io/ssl-redirect: "false

kubernetes.repo <<EOF [kubernetes] name=Kubernetes baseurl=https://mirrors.aliyun.com/kubernetes … /yum/repos/kubernetes- … https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package

[Service] #EnvironmentFile=/etc/kubernetes/apiserver ExecStart=/usr/bin/kube … -controller-manager \ --kubeconfig=/etc/kubernetes/kubeconfig.yml \ --logtostderr=false \ … bin/kube-scheduler \ --kubeconfig=/etc/kubernetes/kubeconfig.yml \ --logtostderr=false

replace - separator: ; regex: __meta_kubernetes_pod_label_(.+) replacement: $1 action … : labelmap - source_labels: [__meta_kubernetes_namespace] separator: ; regex: (.*) … action: replace - source_labels: [__meta_kubernetes_pod_name] separator: ; regex:

: v1 ... preferences: {} users: - name: kubernetes-admin ... - name: qiyang user: client … config set-context qiyang@kubernetes --cluster=kubernetes --user=qiyang 此时再 … qiyang name: qiyang@kubernetes current-context: kubernetes-admin@kubernetes ... 切换访问

kubernetes.repo <<EOF [kubernetes] name=Kubernetes baseurl=https://mirrors.aliyun.com/kubernetes … /yum/repos/kubernetes … default_backend kubernetes backend kubernetes balance

githubusercontent.com/fluent/fluent-bit-kubernetes-logging/master/fluent-bit- … githubusercontent.com/fluent/fluent-bit-kubernetes-logging/master/output/elasticsearch/ … githubusercontent.com/fluent/fluent-bit-kubernetes-logging/master/output/elasticsearch/

QVFBNkx6VmViRXF2THhBQW82SDRUbGNYUHZsOFYvZWVhUmJXRGc9PQ== type: kubernetes.io/rbd apiVersion: … QVFBSnJqZGVTeE1ITGhBQU1EVEUvYWxMaUduR0lGYXhBVmFnUnc9PQ== type: kubernetes.io/rbd apiVersion: … name: cephfs-rw image: kubernetes/pause volumeMounts: - mountPath:

： kubectl config set-cluster kubernetes --kubeconfig=kubeconfig --server=" … kubectl config set-context jenkins@kubernetes --cluster=kubernetes --user=jenkins --kubeconfig= … config use-context jenkins@kubernetes --kubeconfig=kubeconfig 创建ClusterRole

annotations: seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*' … annotations: seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker … annotations: seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'

# - key: feature.node.kubernetes.io/pci-10de.present # operator … - key: feature.node.kubernetes.io/cpu-model.vendor_id … requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - key: kubernetes.io/hostname operator: NotIn values

QVFCK0ZnSmRqVzRPSEJBQUhhT3p3UkgxcjcrK01wZFNVUEtNcFE9PQ== type: kubernetes.io/rbd 创建user … : QVFENVJ3ZGRld0VIRWhBQTVaSjVNU1g0UmlJcnRpQTk5aEIvakE9PQ== type: kubernetes.io/rbd 创建StorageClass … dynamic annotations: storageclass.beta.kubernetes.io/is-default-class: