Kubernetes kubectl 命令行总结

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

# 命令行创建 nginx pod
kubectl run nginx --image=nginx --restart=Never --dry-run=client -n mynamespace -o yaml > pod.yaml
# 获取所有命名空间的 pod
kubectl get po --all-namespaces
# 运行 busybox 的同时打印 hello world
kubectl run busybox --image=busybox -it --restart=Never -- echo 'hello world'
# 进入容器
kubectl exec -it podName -n nsName /bin/sh
# 列出 pod container 里面的 env variable
kubectl exec podName -- printenv
# 创建 pod 同时为 pod 添加标签
kubectl run nginx1 --image=nginx --restart=Never --labels=app=v1
# 列出所有添加标签的 pods
kubectl get po --show-labels
# 列出标有 app=v2 的 pods
kubectl get po -l app=v2
# 更改 nginx2 的标签为 app=v2
kubectl label po nginx2 app=v2 --overwrite
# 移除 nginx1 标有app的标签
kubectl label po nginx1 app-

1
2
3
4

# 输出为yaml文件（推荐）
kubectl expose deployment nginx --port=80 --type=NodePort --target-port=80 --name=web1 -o yaml > web1.yaml
# 暴露端口
kubectl expose deployment nginx -n bigdata --port=80 --type=NodePort

1
2
3
4
5
6

# 更新 nginx 版本
kubectl set image deployment/nginx nginx=nginx:1.15
# 滚动更新
kubectl rolling-update frontend --image=image:v2
# 扩缩容
kubectl scale deployment nginx --replicas=10

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

# 查看更新过程
kubectl rollout status deployment/nginx --namespace=nsName
# 如果更新成功, 返回值为0 
kubectl rollout status deployment nginx-deployment --watch=false | grep -ic waiting

# 查看变更历史版本信息
kubectl rollout history deployment/nginx
kubectl rollout history deployment/nginx --revision=3 --namespace=nsName

# 终止升级
kubectl rollout pause deployment/nginx --namespace=nsName

# 继续升级
kubectl rollout resume deployment/review-demo --namespace=nsName

# 回滚版本
kubectl rollout undo deployment/nginx --namespace=nsName
kubectl rollout undo deployment/nginx --to-revision=3  --namespace=nsName

1
2
3

kubectl run nginx --image=nginx --restart=Never --dry-run=client -o yaml > pod.yaml
# 然后编辑 pod.yaml 下的(containers -> livenessProbe -> exec -> command -> - 命令) 并保存
kubectl describe pod nginx | grep -i liveness # 检测是否 nginx 存活

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

# 创建 secret
kubectl create secret generic test-secret --from-literal='username=my-app' --from-literal='password=39528$vdg7Jb'
# 创建 configMap
echo -e "DB_URL=localhost:3306\nDB_USERNAME=postgres" > config.txt
kubectl create cm db-config --from-env-file=config.txt
# 创建 UID = 101
kubectl run nginx --image=nginx --restart=Never --dry-run=client -o yaml > pod.yaml
vi pod.yaml
# spec -> securityContext -> runAsUser -> 101

# requests 和 limits
kubectl run nginx --image=nginx --restart=Never --requests='cpu=100m,memory=256Mi' --limits='cpu=200m,memory=512Mi'
# 创建名字为 myuser 的 serviceAccount 并将它用在 nginx pod 上
kubectl create sa myuser
kubectl run nginx --image=nginx --restart=Never --serviceaccount=myuser -o yaml --dry-run=client > pod.yaml
kubectl apply -f pod.yaml

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

# pv 模板
apiVersion: v1
kind: PersistentVolume
metadata:
  name: task-pv-volume
  labels:
    type: local
spec:
  storageClassName: manual
  capacity:
    storage: 10Gi
  accessModes:
    - ReadWriteOnce
  hostPath:
    path: "/mnt/data"
--
# pvc 模板
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: task-pv-claim
spec:
  storageClassName: manual
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 3Gi
# 区别在于:
# pv: spec -> capacity -> storage 和 spec -> hostPath -> path
# pvc: spec -> resources -> requests -> storage