emptyDir: 默认的本地存储会随着pod删除而删除、只适合临时目录或缓存使用，没有任何持久性。
mydir实例
mkdir /volumes
cd /volumes
apiVersion: v1
kind: Pod
metadata:
name: volume-pod
namespace: default
labels:
app: myapp
spec:
containers:
- name: myvolume-pod
image: nginx
ports:
- name: http
containerPort: 80
volumeMounts: #容器挂载
- name: mydir
mountPath: /data/web/html/ #挂载路径
volumes:
- name: mydir
emptyDir: {} #大小不限制
kubectl apply -f pod-volume-pod.yaml
hostPath（不能跨节点）
#一、现在node节点上创建目录/data/pod
apiVersion: v1
kind: Pod
metadata:
name: hostpath-pod
namespace: default
spec:
containers:
- name: myhostpath
image: ikubernetes/myapp:v1
volumeMounts:
- name: html
mountPath: /usr/share/nginx/html/
volumes:
- name: html
hostPath:
path: /data/pod
type: DirectoryOrCreate
##kubectl apply -f pod-hostpath.yaml #启动
#在node节点的/data/pod目录下创建index.html 即可用curl访问pod的ip
NFS（）
#1、安装nfs yum install -y nfs-utils # mkdir /nfsdir [root@k8s-m volumes]# cat /etc/exports /nfsdir 10.0.0.0/24(rw,sync) chown -R nfsnobody.nfsnobody /nfsdir #[root@k8s-m volumes]# cat pod-nfs.yaml apiVersion: v1 kind: Pod metadata: name: nfs-pod namespace: default spec: containers: - name: myhostpath image: ikubernetes/myapp:v1 volumeMounts: - name: html mountPath: /usr/share/nginx/html/ volumes: - name: html nfs: path: /nfsdir server: k8s-m kubectl apply -f pod-nfs.y [root@k8s-m nfsdir]# echo nfs >index.html [root@k8s-m volumes]# kubectl get pod nfs-pod -o wide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE nfs-pod 1/1 Running 0 2m 10.244.1.55 node1 <none> [root@k8s-m volumes]# curl 10.244.1.55 nfs
PV
#创建目录 mkdir /nfsdir/{v1,v2,v3,v4,v5} -p [root@k8s-m gfs]# cat /etc/exports /nfsdir 10.0.0.0/24(rw,sync) /nfsdir/v1 10.0.0.0/24(rw,sync) /nfsdir/v2 10.0.0.0/24(rw,sync) /nfsdir/v3 10.0.0.0/24(rw,sync) /nfsdir/v4 10.0.0.0/24(rw,sync)
##下面是pv的yaml文件
apiVersion: v1 kind: PersistentVolume metadata: name: pv01 #不要加名称空间 spec: nfs: path: /data/v1 server: k8s-m accessModes: ["ReadWriteMany","ReadWriteOnce"] capacity: storage: 2Gi --- apiVersion: v1 kind: PersistentVolume metadata: name: pv02 #不要加名称空间 spec: nfs: path: /data/v2 server: k8s-m accessModes: ["ReadWriteMany","ReadWriteOnce"] capacity: storage: 5Gi --- apiVersion: v1 kind: PersistentVolume metadata: name: pv03 #不要加名称空间 spec: nfs: path: /data/v3 server: k8s-m accessModes: ["ReadWriteMany","ReadWriteOnce"] capacity: storage: 10Gi --- apiVersion: v1 kind: PersistentVolume metadata: name: pv04 #不要加名称空间 spec: nfs: path: /data/v4 server: k8s-m accessModes: ["ReadWriteMany","ReadWriteOnce"] capacity: storage: 20Gi
[root@k8s-m ~]# kubectl apply -f mypv.yaml persistentvolume/pv01 configured persistentvolume/pv02 created persistentvolume/pv03 created persistentvolume/pv04 created [root@k8s-m ~]# kubectl get pv NAME CAPACITY ACCESS MODES RECLAIM POLICY STATUS CLAIM STORAGECLASS REASON AGE pv01 2Gi RWO,RWX Retain Available 2m pv02 5Gi RWO,RWX Retain Available 1m pv03 10Gi RWO,RWX Retain Available 1m pv04 20Gi RWO,RWX Retain Available 1m
例子：
apiVersion: v1 kind: PersistentVolumeClaim metadata: name: mypvc namespace: default spec: accessModes: ["ReadWriteMany"] resources: requests: storage: 6Gi #要求pv至少大小 --- apiVersion: v1 kind: Pod metadata: name: pvc-pod namespace: default spec: containers: - name: pvc-pod image: ikubernetes/myapp:v2 volumeMounts: - name: html mountPath: /usr/share/nginx/html/ volumes: - name: html persistentVolumeClaim: claimName: mypvc #使用的pvc名字
[root@k8s-m volumes]# kubectl apply -f pod-pvc.yaml
persistentvolumeclaim/mypvc unchanged
pod/pvc-pod created
[root@k8s-m volumes]# kubectl get pvc
NAME STATUS VOLUME CAPACITY ACCESS MODES STORAGECLASS AGE
mypvc Bound pv03 10Gi RWO,RWX 1m
[root@k8s-m volumes]# kubectl get pv
NAME CAPACITY ACCESS MODES RECLAIM POLICY STATUS CLAIM STORAGECLASS REASON AGE
pv01 2Gi RWO,RWX Retain Available 9h
pv02 5Gi RWO,RWX Retain Available 9h
pv03 10Gi RWO,RWX Retain Bound default/mypvc 9h
pv04 20Gi RWO,RWX Retain Available 9h
配置容器应用的方式：
1、之定义命令行 参数
args:[]
2、把配置文件直接写入镜像中
3、环境变量
（1）cloud Native的应用程序一般可直接通过环境变量加载配置
（2）通过entrypoint脚本来预处理变量为配置文件中的配置信息
4、存储卷
#configmap(配置中心）
configmap通过key，valomu数据存储
命令创建
[root@k8s-m ~]# kubectl create configmap nginx-config --from-literal=nginx_port=80 --from-literal=server_name=test.configmap.com [root@k8s-m ~]# kubectl get cm nginx-config -o wide NAME DATA AGE nginx-config 2 54m ###文件创建 [root@k8s-m nfsdir]# cat config_map.conf server { server_name test.textcon.conm; listen 80; root /mnt/html; } kubectl create configmap text-nginx --from-file=./config_map.conf [root@k8s-m nfsdir]# kubectl get cm NAME DATA AGE nginx-config 2 56m text-nginx 1 50m ###使用configmap注入pod [root@k8s-m ~]# cat config-pod-nginx.yaml apiVersion: v1 kind: Pod metadata: name: cm-pod-nginx namespace: default labels: app: my-pod annotations: zhushi: "lalala dsadsadasdasasd" spec: containers: - name: my-configmap-nginx image: ikubernetes/myapp:v1 ports: - name: http containerPort: 80 env: - name: NGINX_SERVER_PORT #定义的变量名 valueFrom: #从哪获取值 configMapKeyRef: #引用configmap name: nginx-config #引用这个configmap(之前创建的) key: nginx_port #引用这个的值 - name: NGINX_SERVER_NAME #定义第二个变量（多个） valueFrom: configMapKeyRef: name: nginx-config key: server_name [root@k8s-m ~]# kubectl apply -f config-pod-nginx.yaml pod/cm-pod-nginx created [root@k8s-m ~]# kubectl get pod cm-pod-nginx -o wide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE cm-pod-nginx 1/1 Running 0 37s 10.244.1.70 node1 <none> ##进入容器中查看 [root@k8s-m ~]# kubectl exec -it cm-pod-nginx -- /bin/sh ##查看变量 / # printenv |grep -i nginx_server NGINX_SERVER_PORT=80 NGINX_SERVER_NAME=test.configmap.com
###在线编辑变量congidfmap配置
[root@k8s-m ~]# kubectl edit cm nginx-conf
# and an empty file will abort the edit. If an error occurs while saving this file will be
# reopened with the relevant failures.
#
apiVersion: v1
data:
nginx_port: "9999" ##改成了9999
server_name: test.configmap.com
kind: ConfigMap
metadata:
creationTimestamp: 2018-09-06T12:31:26Z
name: nginx-config
namespace: default
resourceVersion: "168906"
selfLink: /api/v1/namespaces/default/configmaps/nginx-config
uid: c58c7185-b1d0-11e8-96d6-000c2924d722
##查看
[root@k8s-m ~]# kubectl describe cm nginx-config
Name: nginx-config
Namespace: default
Labels: <none>
Annotations: <none>
Data
====
nginx_port:
----
9999
server_name:
----
test.configmap.com
Events: <none>
##查看容器变量
[root@k8s-m ~]# kubectl exec -it cm-pod-nginx -- /bin/sh
/ # printenv |grep -i nginx_server
NGINX_SERVER_PORT=80
NGINX_SERVER_NAME=test.configmap.com
##结果没变(证明使用环境变量注入配置的方案，只有容器创建时更新)
###configmap挂载卷
[root@k8s-m ~]# cat config-pod-2.yaml
apiVersion: v1
kind: Pod
metadata:
name: cm-pod-2
namespace: default
labels:
app: my-pod
spec:
containers:
- name: my-configmap-nginx-2
image: ikubernetes/myapp:v1
ports:
- name: http
containerPort: 80
volumeMounts:
- name: vlou-conf
mountPath: /etc/nginx/config.d/
readOnly: true #不允许容器改变挂载中的内容
volumes: #挂载存储卷
- name: vlou-conf
configMap:
name: nginx-config
[root@k8s-m ~]# kubectl apply -f config-pod-2.yaml
pod/cm-pod-2 created
[root@k8s-m ~]# kubectl get pod cm-pod-2
NAME READY STATUS RESTARTS AGE
cm-pod-2 1/1 Running 0 1m
##测试
#进入容器查看
[root@k8s-m ~]# kubectl exec -it cm-pod-2 -- /bin/sh
/ # ls /etc/nginx/config.d/
nginx_port server_name
/ # cat /etc/nginx/config.d/nginx_port
9999/ # ###这是之前定义的配置
##动态修改后再查看
[root@k8s-m ~]# kubectl edit cm nginx-config
# Please edit the object below. Lines beginning with a '#' will be ignored,
# and an empty file will abort the edit. If an error occurs while saving this file will be
# reopened with the relevant failures.
#
apiVersion: v1
data:
nginx_port: "8888" ###改成8888端口
server_name: test.configmap.com
kind: ConfigMap
metadata:
creationTimestamp: 2018-09-06T12:31:26Z
name: nginx-config
namespace: default
resourceVersion: "174082"
selfLink: /api/v1/namespaces/default/configmaps/nginx-config
uid: c58c7185-b1d0-11e8-96d6-000c2924d722
###查看容器中的变量值（需要等一会）
/ # cat /etc/nginx/config.d/nginx_port
8888/ #
###测试将nginx配置传入容器中
[root@k8s-m ~]# cat config-pod-3.yaml
apiVersion: v1
kind: Pod
metadata:
name: cm-pod-3
namespace: default
labels:
app: my-pod
spec:
containers:
- name: my-ng-conf
image: ikubernetes/myapp:v1
ports:
- name: http
containerPort: 80
volumeMounts:
- name: vlou-conf
mountPath: /etc/nginx/conf.d/
readOnly: true #不允许容器改变挂载中的内容
volumes: #挂载存储卷
- name: vlou-conf
configMap:
name: text-nginx
[root@k8s-m ~]# kubectl get pod
NAME READY STATUS RESTARTS AGE
cm-pod-3 1/1 Running 0 3s
[root@k8s-m ~]# kubectl exec -it cm-pod-3 -- /bin/sh
/ # ls /etc/nginx/conf.d/
..2018_09_07_12_45_59.366917455/ ..data/ config_map.conf
/ # ls /etc/nginx/conf.d/config_map.conf
/etc/nginx/conf.d/config_map.conf
/ # cat /etc/nginx/conf.d/config_map.conf
server {
server_name test.textcon.conm;
listen 80;
root /mnt/html;
}
###成功
###secret （值通过bash64编码加密）使用bash64命令可以轻松获取数据
##创建一个secret ##命令行 [root@k8s-m ~]# kubectl create secret generic mysql-root-password --from-literal=password=123456 secret/mysql-root-password created [root@k8s-m ~]# kubectl get secret NAME TYPE DATA AGE mysql-root-password Opaque 1 38s [root@k8s-m ~]# kubectl describe secret mysql-root-password Name: mysql-root-password Namespace: default Labels: <none> Annotations: <none> Type: Opaque Data ==== password: 6 bytes ##只显示密码长度
[root@k8s-m ~]# kubectl get secret mysql-root-password -o yaml
apiVersion: v1
data:
password: MTIzNDU2 ##值使用的是bash64进行的编码
kind: Secret
metadata:
creationTimestamp: 2018-09-08T00:22:12Z
name: mysql-root-password
namespace: default
resourceVersion: "198879"
selfLink: /api/v1/namespaces/default/secrets/mysql-root-password
uid: 3b839912-b2fd-11e8-9a6e-000c2924d722
type: Opaque
###使用base64解码
[root@k8s-m ~]# echo MTIzNDU2|base64 -d
123456[root@k8s-m ~]#
##secret使用（环境变量注入）
[root@k8s-m ~]# cat config-secret.yaml
apiVersion: v1
kind: Pod
metadata:
name: cm-pod-secret
namespace: default
labels:
app: my-pod
spec:
containers:
- name: my-secret-nginx
image: ikubernetes/myapp:v1
ports:
- name: http
containerPort: 80
env:
- name: MYSQL_ROOT_PASSWORD #定义的变量名
valueFrom: #从哪获取值
secretKeyRef: #引用configmap
name: mysql-root-password #引用这个secret(之前创建的)
key: password #引用这个的值
#查看
[root@k8s-m ~]# kubectl exec -it cm-pod-secret -- printenv|grep -i mysql
MYSQL_ROOT_PASSWORD=123456 #已解码