k8s 持久化存储及configmap、secret挂载
1、挂载主机目录,常用于日志文件挂载和hosts文件挂载volumeMounts:- mountPath: /etc/hostsname: hostssubPath: hosts- mountPath: /www/logs/name: clife-sleep-commons-web-push-business-logsvolumes:- hostPath:......
1、挂载主机目录,常用于日志文件挂载和hosts文件挂载
volumeMounts:
- mountPath: /etc/hosts
name: hosts
subPath: hosts
- mountPath: /www/logs/
name: clife-sleep-commons-web-push-business-logs
volumes:
- hostPath:
path: /etc/
type: ""
name: hosts
- hostPath:
path: /data/services/logs/new-county/
type: ""
name: clife-sleep-commons-web-push-business-logs
2、挂载configmap
创建configmap资源
apiVersion: v1
kind: ConfigMap
metadata:
name: mysql-config
data:
my.cnf: |
[mysqld]
datadir=/var/lib/mysql
log-error=/var/log/mysql/error.log
slow_query_log=ON
slow_query_log_file=/var/log/mysql/tmp_slow.log
default-storage-engine=INNODB
character_set_server=utf8
lower_case_table_names=1
table_open_cache=128
max_connections=2000
max_connect_errors=6000
innodb_file_per_table=1
innodb_buffer_pool_size=1G
max_allowed_packet=64M
transaction_isolation=READ-COMMITTED
innodb_flush_method=O_DIRECT
innodb_lock_wait_timeout=1800
innodb_flush_log_at_trx_commit=0
sync_binlog=0
sql_mode=STRICT_TRANS_TABLES,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
skip-name-resolve
[mysql]
default-character-set=utf8
[mysql.server]
default-character-set=utf8
init.sql: |
CREATE DATABASE `metersphere` /*!40100 DEFAULT CHARACTER SET utf8 */;
挂载配置:
volumeMounts:
- mountPath: /etc/mysql/conf.d/my.cnf
name: opt-metersphere-config
subPath: my.cnf
- mountPath: /docker-entrypoint-initdb.d/init.sql
name: init-mysql
subPath: init.sql
volumes:
- configMap:
defaultMode: 420
name: mysql-config
name: opt-metersphere-config
- configMap:
defaultMode: 420
name: mysql-config
name: init-mysql
3、挂载pvc
先创建pvc资源
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
name: mysql-data-pvc
spec:
accessModes:
- ReadWriteMany
resources:
requests:
storage: 20Gi
storageClassName: nfs-client
挂载配置:
volumeMounts:
- mountPath: /var/lib/mysql
name: mysql-data
volumes:
- name: mysql-data
persistentVolumeClaim:
claimName: mysql-data-pvc
若想把同一个pvc挂载多个文件或目录,可以使用 subPath,
同时挂载 mysql data和log目录
volumeMounts:
- mountPath: /var/lib/mysql
name: mysql
subPath: mysql
- mountPath: /var/log/mysql
name: mysql
subPath: log
volumes:
- name: mysql
persistentVolumeClaim:
claimName: mysql-data-pvc
4、挂载nfs文件系统
volumeMounts:
- mountPath: /usr/share/nginx/html
name: test-volume
volumes:
- name: test-volume
nfs:
server: 172.25.254.4
path: /nfsdata
5、挂载secert
创建secert资源
apiVersion: v1
kind: Secret
metadata:
name: mysecret
type: Opaque
data:
username: YWRtaW4=
password: YWRtaW4=
a.将Secret挂载到Volume中的配置:
volumeMounts:
- name: secrets
mountPath: "/secret"
readOnly: true
volumes:
- name: secrets
secret:
secretName: mysecret
b.将Secret设置为环境变量挂载配置:
spec:
containers:
- name: nginx
image: nginx
env:
- name: SECRET_USERNAME
valueFrom:
secretKeyRef:
name: mysecret
key: username
- name: SECRET_PASSWORD
valueFrom:
secretKeyRef:
name: mysecret
key: password
--------------------------------------------
将镜像仓库认证信息配置为Secret:
kubectl create secret docker-registry myharborkey --docker-server=https://10.8.16.16 --docker-username=admin --docker-password=Admin123
# kubectl get secrets myharborkey -o yaml
apiVersion: v1
data:
.dockerconfigjson: eyJhdXRocyI6eyJodHRwczovLzEwLjguMTYuMTYiOnsidXNlcm5hbWUiOiJhZG1pbiIsInBhc3N3b3JkIjoiQWRtaW4xMjMiLCJhdXRoIjoiWVdSdGFXNDZRV1J0YVc0eE1qTT0ifX19
kind: Secret
metadata:
creationTimestamp: "2022-05-12T02:51:40Z"
name: myharborkey
namespace: default
resourceVersion: "4252534"
selfLink: /api/v1/namespaces/default/secrets/myharborkey
uid: 2c4473a1-f548-4360-af36-3bc8065d3f7a
type: kubernetes.io/dockerconfigjson
挂载配置:
spec:
containers:
- name: game2048
image: https://10.8.16.16/private/game2048
imagePullSecrets:
- name: myharborkey
更多推荐
所有评论(0)