【openshift】在Openshift上經過yaml部署應用

在Openshift上經過yaml部署應用

1.經過直接執行yaml

經過以下命令直接執行

oc create -f nginx.yml

nginx.yml

apiVersion: v1
items:
- apiVersion: apps.openshift.io/v1
  # okd 部署配置(dc)，與 k8s Deployment 資源對象相似，以啓動多個容器的方式生成 pod
  kind: DeploymentConfig
  metadata:
    # 標籤，在查詢時具體資源對象時很是重要，如：>oc get dc -l app=nginx
    labels:
      app: nginx
    name: nginx
    # 選定項目空間
    namespace: test
  spec:
    # 副本數，即 nginx app 部署的實例數
    replicas: 1
    # pod 的計算資源配額
    resources:
      # pod 能分配的最大計算資源
      limits:
        cpu: 300m
        memory: 1024Mi
      # pod 分配的最少計算資源
      requests:
        cpu: 100m
        memory: 200Mi
    # 選擇器 Service 根據此項來綁定到 dc
    selector:
      name: nginx
    strategy:
    #   type: Recreate
      type: Rolling
    # dc 根據模板裏內容建立 pod
    template:
      metadata:
        labels:
          app: nginx
          name: nginx
          deploymentconfig: nginx
      spec:
        # 容器集合
        containers:
        - capabilities: {}
          # 容器內環境變量，下文給這個容器設置了時區和語言的環境變量
          env:
          - name: TZ
            value: Asia/Shanghai
          - name: LANG
            value: en_US.UTF-8
          # 容器使用什麼鏡像部署，在建立時須要替換成實際要部署的鏡像
          image: nginx:1.16
          # 鏡像下載策略，老是下載最新的(Always)
          imagePullPolicy: IfNotPresent
          ports: 
            - containerPort: 80
              protocol: TCP          

          # 健康檢查-pod 是否存活
          livenessProbe:
            failureThreshold: 2
            # http get 請求的方式驗證 pod-ip:80/
            httpGet:
              path: /
              port: 80
            initialDelaySeconds: 60
            periodSeconds: 60
            timeoutSeconds: 5
          name: nginx
          # 健康檢查-pod 是否就緒
          readinessProbe:
            httpGet:
              path: /
              port: 80
            initialDelaySeconds: 3
            timeoutSeconds: 5
          # 容器計算資源配額，與 pod 配額相似
          resources:
            limits:
              cpu: 300m
              memory: 1024Mi
            requests:
              cpu: 100m
              memory: 200Mi
          securityContext:
            capabilities: {}
            # privileged: true
          terminationMessagePath: /dev/termination-log
          # 將 pod 中配置的卷掛載到容器內
        #   volumeMounts:
        #   - mountPath: /data
        #     name: nginx
        dnsPolicy: ClusterFirst
        # 使用節點選擇器將應用固定部署到 node1 計算節點上
        # nodeSelector:
        #   kubernetes.io/hostname: node1.app.com
        restartPolicy: Always
        # 配置和定義使用實際計算節點主機文件夾地址這種類型的卷
        # volumes:
        # - persistentVolumeClaim:
        #     claimName: nginx
        #   name: nginx
    # pod 觸發器--配置變更觸發更新
    triggers:
    - type: ConfigChange
- apiVersion: v1
  # 服務，與 k8s 中 service 同樣，將 dc 上部署的應用暴露給內部(多)或外部(少)
  kind: Service
  metadata:
    labels:
      app: nginx
    name: nginx
  spec:
    # 應用中要暴露的端口信息
    ports:
    - name: http
      # 對外暴露的端口
      port: 80
      protocol: TCP
      # 應用實際端口
      targetPort: 80
    # 經過選擇器選擇 dc
    selector:
      name: nginx
    sessionAffinity: None
    type: ClusterIP
    
- apiVersion: route.openshift.io/v1
  # OKD 平臺特有資源，與 k8s 中 ingress 相似，用於將 service 正真暴露給外部使用，但只能使用域名訪問
  kind: Route
  metadata:
    labels:
      app: nginx
    name: nginx
  spec:
    # 配置域名
    host: xinchen.app.com
    to:
      kind: Service
      name: nginx
kind: List
metadata: {}

---

2. 經過建立template

參考文檔: https://docs.okd.io/latest/dev_guide/templates.html#writing-templates

相關指令

# 上傳模板
oc create -f <filename> -n <project>

# 使用模板
oc process -f nginx-template -p IMAGE_NAME=nginx:1.6 -p REPLICA_COUNT=1

# 編輯模板
oc edit template <templateName>

# 導出模板
oc get -o yaml --export all > <yaml_filename>

nginx-template.yml

kind: Template
apiVersion: v1
metadata:
  name: nginx-template
objects: 
  - kind: DeploymentConfig
    apiVersion: v1
    metadata: 
      name: nginx
      namespace: xinchen
      labels: 
        app: nginx
    spec:
      replicas: ${REPLICA_COUNT}
      selector:
        name: nginx
        
      resources:
        limits:
          cpu: 300m
          memory: 1024Mi
        requests:
          cpu: 100m
          memory: 200Mi
    
      strategy:
        type: Rolling
    
      template:
        metadata:
          labels:
            app: nginx
            name: nginx
            deploymentconfig: nginx
        spec:
        
          containers:
          - capabilities: {}
          
            env:
            - name: TZ
              value: Asia/Shanghai
            - name: LANG
              value: en_US.UTF-8

            image: ${IMAGE_NAME}
  
            imagePullPolicy: IfNotPresent

            ports: 
              - containerPort: 80
                protocol: TCP          
          
            livenessProbe:
              failureThreshold: 2
              httpGet:
                path: /
                port: 80
              initialDelaySeconds: 60
              periodSeconds: 60
              timeoutSeconds: 5
            name: nginx
          
            readinessProbe:
              httpGet:
                path: /
                port: 80
              initialDelaySeconds: 3
              timeoutSeconds: 5
          
            resources:
              limits:
                cpu: 300m
                memory: 1024Mi
              requests:
                cpu: 100m
                memory: 200Mi

            securityContext:
              capabilities: {}
              # privileged: true
            terminationMessagePath: /dev/termination-log
          
          #   volumeMounts:
          #   - mountPath: /data
          #     name: nginx
          dnsPolicy: ClusterFirst
        
          restartPolicy: Always
        
          # volumes:
          # - persistentVolumeClaim:
          #     claimName: nginx
          #   name: nginx
    # pod 觸發器--配置變更觸發更新
      triggers:
      - type: ConfigChange  

  - kind: Service
    apiVersion: v1
    metadata:
      name: nginx
      labels:
        app: nginx    
    spec:
      ports: 
      - name: 80-tcp
        port : 80
        protocol: TCP
        targetPort: 80
      selector:
        name: nginx
      sessionAffinity: None
      type: ClusterIP

- apiVersion: route.openshift.io/v1
  kind: Route
  metadata:
    labels:
      app: nginx
    name: nginx
  spec:
    host: ${HOST_NAME}
    port:
      targetPort: 80-tcp
    to:
      kind: Service
      name: nginx
      weight: 100

parameters:
  - name: HOST_NAME
    displayName: Host Name
    required: true  
  - name: IMAGE_NAME
    displayName: Image Name
    required: true
  - name: REPLICA_COUNT
    displayName: Replica Count
    value: "1"
    required: true

---

3. 進入運行的容器

參考: https://docs.okd.io/latest/dev_guide/ssh_environment.html

# 查看pod名
oc get pods

# 進入容器
oc rsh <pod>

# 或者直接進入dc
oc rsh dc/nginx

4. 刪除全部

# 刪除全部
oc delete all -l app=nginx