<var/lib/chrony/dri� makestep 1.0 3 rtcsync keyfile /etc/chrony.keys leapsectz right/UTC logdir /var/log/chrony EOF # �medatectl set-�mezone Asia/Shanghai unix:///var/run/dockershim.sock 要求docker<=20.10 k8s 1.24及之后版本： kubelet→cri-containerd→containerd→runC 后来cri-containerd重构进containerd中（CRI Plugin），合为一个containerd进程 默认调用的cri-socket： unix:///var/run/containerd/containerd InitConfigura�on localAPIEndpoint: adver�seAddress: 10.99.1.51 bindPort: 6443 nodeRegistra�on: criSocket: /var/run/dockershim.sock name: k8s-master1 taints: - effect: NoSchedule key: node-role.kubernetes

xfs -n ftype=1 /dev/mapper/centos-docker mkdir -p /var/lib/docker mount /dev/mapper/centos-docker /var/lib/docker echo "/dev/mapper/centos-docker /var/lib/docker xfs defaults 0 0" >> /etc/fstab xfs_growfs MaxBackups = 30 MaxAge = 15 Compress = true Level = debug apps.js: | var apps = { "iSurpassApp":"iSurpass2018", "testApp":"iSurpass20190801" }; ""; } } function getApps() { var result = ""; var applist = Object.keys(apps); for (var i=0; i < applist.length; i++) { if(i == 0)

-i '2 i\Environment="KUBELET_EXTRA_ARGS=--container- runtime=remote --container-runtime-endpoint=/var/run/xxx.sock -- feature-gates=AllAlpha=true"' /etc/systemd/system/kubelet.service.d/10- kubeadm.conf image: gcr.io/google_containers/testapp:v1 volumeMounts: - name: varlog mountPath: /var/log - name: logging-agent image: gcr.io/google_containers/fluentd:1.30 env: - name: FLUENTD_ARGS value: -c /etc/fluentd-config/fluentd.conf volumeMounts: - name: varlog mountPath: /var/log - name: config-volume mountPath: /etc/fluentd-config volumes: - name: varlog

mysql 61 volumeMounts: 62 - name: mysql-persistent-storage 63 mountPath: /var/lib/mysql 76 64 volumes: 65 - name: mysql-persistent-storage 66 persistentVolumeClaim: 52 volumeMounts: 53 - name: wordpress-persistent-storage 54 mountPath: /var/www/html 55 volumes: 56 - name: wordpress-persistent-storage 57 persistentVolumeClaim: mysql 61 volumeMounts: 62 - name: mysql-persistent-storage 63 mountPath: /var/lib/mysql 64 volumes: 65 - name: mysql-persistent-storage 66 persistentVolumeClaim:

容器： 打包 Nodejs 应⽤镜像 创建 Nodejs 应⽤程序 创建 hello-node ⽂件夹，添加以下⽂件以及代码： server.js var http = require('http'); var handleRequest = function(request, response) { console.log('Received request for for URL: ' + request.url); response.writeHead(200); response.end('Hello World!'); }; var www = http.createServer(handleRequest); www.listen(8080); Dockerfile FROM node:10.20.0 EXPOSE 8080 COPY

Tarballs that compose into a single filesystem Tarball A Tarball B Tarball C /bin /usr /tmp /var /jdk /app.jar github.com/GoogleContainerTools/jib Docker Image Format Tarballs that compose into single filesystem And a container configuration Tarball A Tarball B Tarball C /bin /usr /tmp /var /jdk /app.jar Environment variables, entrypoint, etc. Container configuration github.com/GoogleContainerTools/jib And a container configuration And a manifest Tarball A Tarball B Tarball C /bin /usr /tmp /var /jdk /app.jar Tarballs A, B, C, and the configuration Manifest Environment variables, entrypoint

volumeMounts: - name: varlog mountPath: /var/log - name: varlibdockercontainers mountPath: /var/lib/docker/containers readOnly: true termina varlog 18-Daemon Set 75 hostPath: path: /var/log - name: varlibdockercontainers hostPath: path: /var/lib/docker/containers 基于YAML⽂件创建DaemonSet： kubectl create Kubernetes 1.8版本引⼊了⼀种新的资源，⽤于管理本地临时存储的ephemeral-storage。 在每个Kubernetes Node中， kubelet的根⽬录（默认 /var/lib/kubelet ）和⽇志⽬录（ /var/log ）存储在Node的根分区上。 此分区也可由Pod 通过EmptyDir Volume、容器⽇志、镜像层以及容器可写层等进⾏共享和使⽤。 该分区是“短暂的”

Token（該 Token 來自 Service Account Secret）； (5) 透過添加“volumeSource＂的方式，將上面提到的“volume＂掛載到 Pod 中所 有容器的 /var/run/secrets/kubernetes.io/serviceaccount 目錄中。 Token Controller 和 Service AccountController 在其自動化過程中所起到的作用請參 Kubernetes Master 進行連線，所 以需要先進行 ServiceAccount 和 Secret 的建立。如果不使用 Secret，則 Heapster 啟 動時將會出現錯誤： /var/run/secret/kubernetes.io/serviceaccount/token no such file or directory 然後 Heapster 容器會被 ReplicationController

rbind������������������! • ������! • �������� /mnt/b! • rbind��� /mnt/c! 1. ��A� RO �����RBD volume: /var/lib/kubelet/plugins/xxxx! 2. node-exporter � make-private ����������! 3. ��A������RBD volume����rbd