Differences

This shows you the differences between two versions of the page.

--- система_kubernetes [2025/07/29 16:09]
val [Service]
+++ система_kubernetes [2025/10/31 14:49] (current)
val [Kubernetes Dashboard]
@@ Line 1: / Line 1: @@
 ====== Система Kubernetes ======
+  * [[https://habr.com/ru/companies/vk/articles/645985/|Почему Kubernetes — это новый Linux: 4 аргумента]]
   * [[https://kubernetes.io/ru/docs/home/|Документация по Kubernetes (на русском)]]
@@ Line 11: / Line 13: @@
   * [[https://habr.com/ru/companies/domclick/articles/566224/|Различия между Docker, containerd, CRI-O и runc]]
   * [[https://daily.dev/blog/kubernetes-cni-comparison-flannel-vs-calico-vs-canal|Kubernetes CNI Comparison: Flannel vs Calico vs Canal]]
+  * [[https://habr.com/ru/companies/slurm/articles/464987/|Хранилища в Kubernetes: OpenEBS vs Rook (Ceph) vs Rancher Longhorn vs StorageOS vs Robin vs Portworx vs Linstor]]
+  * [[https://parshinpn.ru/ru/blog/external-connectivity-kubernetes-calico|Настраиваем сетевую связность внешнего узла с кластером Kubernetes (route reflector)]]
   * [[https://habr.com/ru/company/vk/blog/542730/|11 факапов PRO-уровня при внедрении Kubernetes и как их избежать]]
@@ Line 61: / Line 65: @@
 ...
 </code><code>
+kubectl version
 kubectl get all -o wide --all-namespaces
 kubectl get all -o wide -A
@@ Line 99: / Line 105: @@
   * [[https://minikube.sigs.k8s.io/docs/start/|Documentation/Get Started/minikube start]]
+  * [[https://stackoverflow.com/questions/42564058/how-can-i-use-local-docker-images-with-minikube|How can I use local Docker images with Minikube?]]
 <code>
@@ Line 648: / Line 655: @@
 $ ### kubectl delete deployment my-webd -n my-ns
-$ mkdir gowebd-k8s/; cd $_
+$ mkdir ??webd-k8s/; cd $_
 $ cat my-webd-deployment.yaml
@@ Line 961: / Line 968: @@
   * [[https://kubernetes.github.io/ingress-nginx/deploy/#quick-start|NGINX ingress controller quick-start]]
+  * [[#Работа с готовыми Charts]]
 === Minikube ingress-nginx-controller ===
@@ Line 1149: / Line 1157: @@
 $ ###kubectl delete secret/gowebd-tls -n my-ns
 </code>
+=== cert-manager ===
+  * [[Letsencrypt Certbot]]
+  * [[https://cert-manager.io/docs/tutorials/acme/nginx-ingress/|cert-manager Securing NGINX-ingress]]
+  * [[Сервис Keepalived]] для 443-го порта
+  * [[Решение HAProxy]] для 80-го (cert-manager проверяет ссылку изнутри кластера)
+<code>
+увидеть ссылку
+student@debian:~/gowebd-k8s$ kubectl -n my-ns get ingress -o yaml | less
+увидеть обработчик
+student@debian:~/gowebd-k8s$ kubectl -n my-ns get pods
+NAME                        READY   STATUS    RESTARTS   AGE
+cm-acme-http-solver-5j2pr   1/1     Running   0          28s
+my-webd-78ffd6cc5f-4qplt    1/1     Running   0          4d14h
+my-webd-78ffd6cc5f-zpcsh    1/1     Running   0          4d14h
+</code>
 ==== Volumes ====
@@ Line 1769: / Line 1793: @@
 #    use-forwarded-headers: true
 #    allow-snippet-annotations: true
+#  service:
+#    type: LoadBalancer
+#    loadBalancerIP: "192.168.X.64"
 </code><code>
 $ helm template ingress-nginx -f values.yaml --repo https://kubernetes.github.io/ingress-nginx -n ingress-nginx | tee t2.yaml
@@ Line 2087: / Line 2114: @@
 ===== Kubernetes Dashboard =====
+  * https://www.bytebase.com/blog/top-open-source-kubernetes-dashboard/
   * https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/
   * https://github.com/kubernetes/dashboard/blob/master/docs/user/access-control/creating-sample-user.md
+  * [[https://kubernetes.io/docs/reference/kubectl/generated/kubectl_create/kubectl_create_token/]]
+  * [[https://www.jwt.io/|JSON Web Token (JWT) Debugger]]
 <code>
@@ Line 2102: / Line 2134: @@
   name: admin-user
   namespace: kubernetes-dashboard
+  #namespace: default
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ Line 2115: / Line 2148: @@
   name: admin-user
   namespace: kubernetes-dashboard
----
+  #namespace: default
+</code><code>
+$ kubectl apply -f dashboard-user-role.yaml
+$ kubectl create token admin-user -n kubernetes-dashboard #--duration=1h
+$ ###ps aux | grep kube-apiserver | grep service-account-key-file
+$ ###echo ... | jq -R 'split(".") | .[1] | @base64d | fromjson'
+$ ###echo ... | awk -F'.' '{print $2}' | base64 -d | jq -r '.exp | todate'
+cmder$ kubectl proxy
+</code>
+  * http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/
+<code>
+$ cat dashboard-secret.yaml
+</code><code>
 apiVersion: v1
 kind: Secret
@@ Line 2121: / Line 2171: @@
   name: admin-user
   namespace: kubernetes-dashboard
+  #namespace: default
   annotations:
     kubernetes.io/service-account.name: "admin-user"
 type: kubernetes.io/service-account-token
 </code><code>
-$ kubectl apply -f dashboard-user-role.yaml
+$ kubectl apply -f dashboard-secret.yaml
-$ kubectl -n kubernetes-dashboard create token admin-user
 $ kubectl get secret admin-user -n kubernetes-dashboard -o jsonpath={".data.token"} | base64 -d ; echo
-cmder$ kubectl proxy
 </code>
-  * http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/
 ===== Мониторинг =====

Методические материалы Лохтурова Вячеслава

User Tools

Site Tools

Differences

Page Tools