Tag: kubectl

如何使用没有Kubernetes的MQ创buildDocker集群

如何创build一个没有Kubernetes的MQdocker集群? 或与kubernetes也很好,但有任何一个configuration此之前? 如果是的话,你能帮我吗?

自动将新节点导出器添加到prometheus.yml的目标数组中

我有一个基本的prometheus.yml文件在我的环境,即.. ### apiVersion: v1 kind: ConfigMap metadata: creationTimestamp: null name: prometheus-core data: prometheus.yml: | global: scrape_interval: 10s scrape_timeout: 10s evaluation_interval: 10s rule_files: – '/etc/prometheus-rules/*.rules' scrape_configs: # The job name is added as a label `job=<job_name>` to any timeseries scraped from this config. – job_name: 'prometheus' # Override the global default and scrape targets from this […]

kubernetes不能从localhostregistry运行docker镜像

我正在尝试使用kubernetes运行一个单一的docker容器 cat /path/to/docker/docker.conf [Service] ExecStart= ExecStart=/usr/bin/dockerd -H fd:// –live-restore=true –iptables=false –log-opt max-size=100m –log-opt max-file=3 –bip ${FLANNEL_SUBNET} –mtu ${FLANNEL_MTU} DOCKER_OPTS="–insecure-registry localhost:5000" 我想创build一个本地registry,因为我不想让我的图像驻留在公共回购。 docker run -d -p 5050:5000 –restart=always –name registry registry:2 那么我只是build立我的形象 docker build -f "Dockerfile" -t localhost:5050/myImage . docker push localhost:5050/myImage 这两个工作,只是可以肯定,我也可以运行图像 docker run -d -p 5000:5000 –name myImage –hostname myImage -v /some/path/to/mount:/some/path/to/mount localhost:5050/myImage 现在我试着去做 […]

SELinux不支持覆盖graphics驱动程序

when i installed docker then i run `service docker start`i had this msg “docker.service的作业失败,因为控制进程退出了错误代码。有关详细信息,请参阅”systemctl status docker.service“和”journalctl -xe“。 我运行journalctl -xe我有这些消息 8月 02 20:42:11 centos-master systemd[1]: Unit docker-storage-setup.service entered failed state. 8月 02 20:42:11 centos-master systemd[1]: docker-storage-setup.service failed. 8月 02 20:42:11 centos-master systemd[1]: Starting Docker Application Container Engine… — Subject: Unit docker.service has begun start-up — Defined-By: […]

Kubernetes以部署+ rbd模式创build服务,同样configuration成在默认名称空间下成功,在非默认名称空间下失败?

Kubernetes以部署+ rbd模式创build服务,同样configuration成在默认名称空间下成功,在非默认名称空间下失败? configuration(json): { "kind": "Deployment", "spec": { "replicas": "1", "template": { "spec": { "volumes": [ { "rbd": { "secretRef": { "name": "ceph-secret" }, "image": "zhaosiyi.24", "fsType": "ext4", "readOnly": false, "user": "admin", "monitors": [ "xxx.xxx.xxx.6:6789", "xxx.xxx.xxx.7:6789", "xxx.xxx.xxx.8:6789" ], "pool": "rrkd.rbd" }, "name": "aa" } ], "imagePullSecrets": [ { "name": "registrykey-m3-1" } ], "containers": [ { […]

由于子网pipe理器的故障,法兰绒在kubernetes集群中失败

我在主节点上运行etcd , kube-apiserver , kube-scheduler和kube-controllermanager以及kubelet节点上的kubelet和kube-proxy ,如下所示(所有的kube二进制文件都来自kubernetes 1.7.4): # [master node] ./etcd ./kube-apiserver –logtostderr=true –etcd-servers=http://127.0.0.1:2379 –service-cluster-ip-range=10.10.10.0/24 –insecure-port 8080 –secure-port=0 –allow-privileged=true –insecure-bind-address 0.0.0.0 ./kube-scheduler –address=0.0.0.0 –master=http://127.0.0.1:8080 ./kube-controller-manager –address=0.0.0.0 –master=http://127.0.0.1:8080 # [minion node] ./kubelet –logtostderr=true –address=0.0.0.0 –api_servers=http://$MASTER_IP:8080 –allow-privileged=true ./kube-proxy –master=http://$MASTER_IP:8080 在此之后,如果我执行kubectl get all –all-namespaces和kubectl get nodes ,我会得到 NAMESPACE NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE default svc/kubernetes 10.10.10.1 <none> 443/TCP […]

我无法使用Vagrant和CoreOS进行单节点Kubernetes安装

我已经通过https://coreos.com/kubernetes/docs/latest/kubernetes-on-vagrant-single.html文档执行,但一直无法执行, kubectl获取节点到服务器的连接172.17.4.99:443被拒绝 – 你是否规定了正确的主机或端口? 我的configuration: myhtlsdeMacBook-Pro:single-node myhtls$ kubectl config set-cluster vagrant-single-cluster –server=https://172.17.4.99:443 –certificate-authority=${PWD}/ssl/ca.pem Cluster "vagrant-single-cluster" set. myhtlsdeMacBook-Pro:single-node myhtls$ kubectl config set-credentials vagrant-single-admin –certificate-authority=${PWD}/ssl/ca.pem –client-key=${PWD}/ssl/admin-key.pem –client-certificate=${PWD}/ssl/admin.pem User "vagrant-single-admin" set. myhtlsdeMacBook-Pro:single-node myhtls$ kubectl config set-context vagrant-single –cluster=vagrant-single-cluster –user=vagrant-single-admin Context "vagrant-single" set. myhtlsdeMacBook-Pro:single-node myhtls$ kubectl config use-context vagrant-single Switched to context "vagrant-single". 我的dockerps,看不到镜子运行。 我也没有看到下载的Kubernetes,dns,heapster等这些图像。

如何为kubernetes桌面UIconfiguration简单的login/传递身份validation

我在kubernetes中很新,我只是通过kubeadm安装kubernetes并运行仪表板UI,但是无法configuration对它的访问。 下面的文档中,我添加行–basic-auth-file=/etc/kubernetes/auth.csv到/etc/kubernetes/manifests/kube-apiserver.yaml,创build文件,并放入一个像pass,admin,adminstring。 但之后,API删除此string并重新启动服务器后,崩溃并恢复正常。 我怎么能通过这个参数到api服务器没有api服务器崩溃,也许别的什么需要添加或从这个文件中删除? 这是我的 KUBE-apiserver.yaml apiVersion: v1 kind: Pod metadata: annotations: scheduler.alpha.kubernetes.io/critical-pod: "" creationTimestamp: null labels: component: kube-apiserver tier: control-plane name: kube-apiserver namespace: kube-system spec: containers: – command: – kube-apiserver – –admission-control=Initializers,NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,DefaultTolerationSeconds,NodeRestriction,ResourceQuota – –tls-cert-file=/etc/kubernetes/pki/apiserver.crt – –tls-private-key-file=/etc/kubernetes/pki/apiserver.key – –secure-port=6443 – –kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname – –requestheader-allowed-names=front-proxy-client – –service-account-key-file=/etc/kubernetes/pki/sa.pub – –client-ca-file=/etc/kubernetes/pki/ca.crt – –enable-bootstrap-token-auth=true – –allow-privileged=true – –requestheader-username-headers=X-Remote-User – –advertise-address=236.273.51.124 […]

无法在互联网上访问AWS上暴露的k8s服务

我在我的AWS ECR上有一个名为hello-node的图像(在post底部有描述)。 如果我在本地运行它并转到localhost:8080我看到“hello world”。 在AWS上我的节点上运行: kubectl run hello-node –image=xxxxxxxxxx.dkr.ecr.us-east-1.amazonaws.com/hello-node:v1 –port=8080 (帐号被屏蔽) 然后: kubectl expose deployment hello-node –type="LoadBalancer" 如果我运行: kubectl describe service hello-node 我看到(信息编辑) Name: hello-node Namespace: default Labels: run=hello-node Annotations: <none> Selector: run=hello-node Type: LoadBalancer IP: xx.xx.xx.xx LoadBalancer Ingress: xxxxxxxxx-xxxxxx.us-east-1.elb.amazonaws.com Port: <unset> 8080/TCP NodePort: <unset> 32059/TCP Endpoints: xx.xx.xx.xx:8080 Session Affinity: None 我想在线访问我的hello-node服务。 我想在浏览器中访问一些url或IP地址,看看“hello world”。 我试过去上面列出的IP,LoadBalancer […]

无法在docker mongo initdb脚本中运行apt-get

我正在尝试在minikube上运行一个应用程序。 为了让蒙戈起来,我正在跑步 kubectl create configmap mongo-initdb –from-file=importdata.sh kubectl apply -f mongo.yaml 用importdata.sh作为: mongo myapp-dev –eval "db.dropDatabase()" apt-get update && apt-get install curl && apt-get install bzip2 curl https://cdn.filestackcontent.com/xxxxxxxx -o myapp-db.tar.bz2 bzip2 -dc myapp-db.tar.bz2 | tar xvf – mongorestore –db myapp-dev myapp-dev mongo myapp-dev –eval 'db.users.update({}, {$set: {hashedPassword: "fwaPwkoIpS4y4aWA+uljXWIlyjTxUzkU+IgK4+B8m+ZhyBrWwM/N/oGfUj0ERAcwnXCOImkOvbvDMH/BAmN8FA==", salt: "YfnL4jUxfbYY6Y3/w8P8KA=="}}, {multi: true})' mongo myapp-dev –eval […]