k8s 1.25学习8 - 使用Ratel工具部署应用

https://github.com/dotbalo/ratel-doc
Ratel是一个Kubernetes多集群资源管理平台

#查看Dashboard登录的token
kubectl get secret -n kube-system | grep admin-user-token
kubectl describe secret admin-user-token-jszt4 -n kube-system #使用Edge浏览器访问，使用上一步的token值登录
kubectl get svc -n kubernetes-dashboard
https://192.168.56.101:30431

查看集群信息

kubectl cluster-info
#如Kubernetes control plane地址 https://192.168.56.101:6443

kube配置文件信息

ls -a ~/.kube/config
#/root/.kube/configmkdir -p /root/study/ratel
cp ~/.kube/config /root/study/ratel/study.config

编写Ratel配置文件

mkdir ratel && cd ratel
vi servers.yaml vi servers.yaml
- serverName: 'study'serverAddress: 'https://192.168.56.101:6443'#serverAdminUser: 'xxx'#serverAdminPassword: 'xxx#'serverAdminToken: 'null'serverDashboardUrl: "https://192.168.56.101:30431/#"production: 'false'kubeConfigPath: "/mnt/study.config"harborConfig: "HarborUrl, HarborUsername, HarborPassword, HarborEmail"

创建Secret，把配置信息放入到Secret中

kubectl create secret generic ratel-config  --from-file=/root/study/ratel/study.config --from-file=servers.yaml -n kube-systemkubectl create ns kube-users

创建RBAC
vi ratel-rbac.yaml

apiVersion: v1
items:
- apiVersion: rbac.authorization.k8s.io/v1kind: ClusterRolemetadata:annotations:rbac.authorization.kubernetes.io/autoupdate: "true"labels:kubernetes.io/bootstrapping: rbac-defaultsrbac.authorization.k8s.io/aggregate-to-edit: "true"name: ratel-namespace-readonlyrules:- apiGroups:- ""resources:- namespacesverbs:- get- list- watch- apiGroups:- metrics.k8s.ioresources:- podsverbs:- get- list- watch
- apiVersion: rbac.authorization.k8s.io/v1kind: ClusterRolemetadata:name: ratel-pod-deleterules:- apiGroups:- ""resources:- podsverbs:- get- list- delete
- apiVersion: rbac.authorization.k8s.io/v1kind: ClusterRolemetadata:name: ratel-pod-execrules:- apiGroups:- ""resources:- pods- pods/logverbs:- get- list- apiGroups:- ""resources:- pods/execverbs:- create
- apiVersion: rbac.authorization.k8s.io/v1kind: ClusterRolemetadata:annotations:rbac.authorization.kubernetes.io/autoupdate: "true"name: ratel-resource-editrules:- apiGroups:- ""resources:- configmaps- persistentvolumeclaims- services- services/proxyverbs:- patch- update- apiGroups:- appsresources:- daemonsets- deployments- deployments/rollback- deployments/scale- statefulsets- statefulsets/scaleverbs:- patch- update- apiGroups:- autoscalingresources:- horizontalpodautoscalersverbs:- patch- update- apiGroups:- batchresources:- cronjobs- jobsverbs:- patch- update- apiGroups:- extensionsresources:- daemonsets- deployments- deployments/rollback- deployments/scale- ingresses- networkpoliciesverbs:- patch- update- apiGroups:- networking.k8s.ioresources:- ingresses- networkpoliciesverbs:- patch- update
- apiVersion: rbac.authorization.k8s.io/v1kind: ClusterRolemetadata:name: ratel-resource-readonlyrules:- apiGroups:- ""resources:- configmaps- endpoints- persistentvolumeclaims- pods- replicationcontrollers- replicationcontrollers/scale- serviceaccounts- servicesverbs:- get- list- watch- apiGroups:- ""resources:- bindings- events- limitranges- namespaces/status- pods/log- pods/status- replicationcontrollers/status- resourcequotas- resourcequotas/statusverbs:- get- list- watch- apiGroups:- ""resources:- namespacesverbs:- get- list- watch- apiGroups:- appsresources:- controllerrevisions- daemonsets- deployments- deployments/scale- replicasets- replicasets/scale- statefulsets- statefulsets/scaleverbs:- get- list- watch- apiGroups:- autoscalingresources:- horizontalpodautoscalersverbs:- get- list- watch- apiGroups:- batchresources:- cronjobs- jobsverbs:- get- list- watch- apiGroups:- extensionsresources:- daemonsets- deployments- deployments/scale- ingresses- networkpolicies- replicasets- replicasets/scale- replicationcontrollers/scaleverbs:- get- list- watch- apiGroups:- policyresources:- poddisruptionbudgetsverbs:- get- list- watch- apiGroups:- networking.k8s.ioresources:- networkpolicies- ingressesverbs:- get- list- watch- apiGroups:- metrics.k8s.ioresources:- podsverbs:- get- list- watch
kind: List
metadata:resourceVersion: ""selfLink: ""

执行

kubectl create -f ratel-rbac.yaml

设置权限
vi ratel-rbac-binding.yaml

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:name: ratel-namespace-readonly-sa
roleRef:apiGroup: rbac.authorization.k8s.iokind: ClusterRolename: ratel-namespace-readonly
subjects:
- apiGroup: rbac.authorization.k8s.iokind: Groupname: system:serviceaccounts:kube-users

执行

kubectl create -f ratel-rbac-binding.yaml

部署Ratel

vi ratel-deploy.yaml

apiVersion: apps/v1
kind: Deployment
metadata:labels:app: ratelname: ratelnamespace: kube-system
spec:replicas: 1selector:matchLabels:app: ratelstrategy:rollingUpdate:maxSurge: 1maxUnavailable: 0type: RollingUpdatetemplate:metadata:creationTimestamp: nulllabels:app: ratelspec:containers:- command:- sh- -c- ./ratel -c /mnt/servers.yamlenv:- name: TZvalue: Asia/Shanghai- name: LANGvalue: C.UTF-8- name: ProRunModevalue: prod- name: ADMIN_USERNAMEvalue: admin- name: ADMIN_PASSWORDvalue: ratel_passwordimage: registry.cn-beijing.aliyuncs.com/dotbalo/ratel:latestimagePullPolicy: AlwayslivenessProbe:failureThreshold: 2initialDelaySeconds: 10periodSeconds: 60successThreshold: 1tcpSocket:port: 8888timeoutSeconds: 2name: ratelports:- containerPort: 8888name: webprotocol: TCPreadinessProbe:failureThreshold: 2initialDelaySeconds: 10periodSeconds: 60successThreshold: 1tcpSocket:port: 8888timeoutSeconds: 2resources:limits:cpu: 500mmemory: 512Mirequests:cpu: 500mmemory: 512MivolumeMounts:- mountPath: /mntname: ratel-configdnsPolicy: ClusterFirstimagePullSecrets:- name: myregistrykeyrestartPolicy: AlwaysschedulerName: default-schedulersecurityContext: {}terminationGracePeriodSeconds: 30volumes:- name: ratel-configsecret:defaultMode: 420secretName: ratel-config

执行

kubectl create -f ratel-deploy.yaml

配置Service
vi ratel-svc.yaml

apiVersion: v1
kind: Service
metadata:labels:app: ratelname: ratelnamespace: kube-system
spec:ports:- name: container-1-web-1port: 8888protocol: TCPtargetPort: 8888selector:app: rateltype: NodePort

执行

kubectl create -f ratel-svc.yamlkubectl get pods -n kube-system
kubectl get svc -n kube-system#访问
http://192.168.56.101:30472
admin
ratel_password

Ratel创建应用

Clustes -> study，查看集群运行信息

Deployments -> 创建一个deploy，选择集群study，Namespace默认default，副本数设置成2，Name: nginx-test
Labels配置，app: nginx-test
Pod Seleteors，app: nginx-test

Next，Pod 亲和力可以不设置
Next，Volumes可以挂载卷，如果主机中没有对应的目录，可以删除默认的hostpath挂载

Next，选择镜像地址 nginx:1.15.12-alpine，文件挂载按需求配置
Next，Next，创建一个Service，添加Service: nginx-test，注意端口映射
Next，添加一个Ingress，如 a.com

点击View Yaml可以查看刚才的配置信息
点击Create则会自动创建deploy、Service、Ingress

点击Service -> 查看，找到刚才创建的Service，使用ClusterIP访问一下

curl http://10.96.192.161 kubectl get pods
kubectl get deploy
kubectl get svc

菜单ConfigMap、Secrets，点击查看，可以直接在页面上修改配置值了