This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
система_kubernetes [2026/03/22 10:36] val [Deployment] |
система_kubernetes [2026/03/23 19:38] (current) val [Deployment, Replica Sets, Pods] |
||
|---|---|---|---|
| Line 697: | Line 697: | ||
| </code> | </code> | ||
| * [[#Настройка автодополнения]] | * [[#Настройка автодополнения]] | ||
| + | * [[https://stackoverflow.com/questions/76258905/redirect-manual-process-logs-to-kubernetes-pod-log]] | ||
| <code> | <code> | ||
| $ kubectl attach my-debian-NNNNNNNNN-NNNNN | $ kubectl attach my-debian-NNNNNNNNN-NNNNN | ||
| $ kubectl exec -ti my-debian-NNNNNNNNN-NNNNN -- bash | $ kubectl exec -ti my-debian-NNNNNNNNN-NNNNN -- bash | ||
| + | |||
| + | $ echo Hello >/proc/1/fd/1 | ||
| Ctrl-D | Ctrl-D | ||
| </code> | </code> | ||
| Line 997: | Line 1000: | ||
| <code> | <code> | ||
| + | $ ### kubectl -n my-ns expose pod my-debian --port=80 | ||
| $ ### kubectl expose deployment my-webd --type=NodePort --port=80 -n my-ns | $ ### kubectl expose deployment my-webd --type=NodePort --port=80 -n my-ns | ||
| - | |||
| $ ### kubectl delete svc my-webd -n my-ns | $ ### kubectl delete svc my-webd -n my-ns | ||
| Line 1501: | Line 1504: | ||
| === HTTPRoute === | === HTTPRoute === | ||
| + | |||
| + | * [[https://gateway-api.sigs.k8s.io/guides/http-request-mirroring/]] | ||
| + | |||
| <code> | <code> | ||
| kube1:~/webd-k8s# cat my-httproute.yaml | kube1:~/webd-k8s# cat my-httproute.yaml | ||
| Line 1518: | Line 1524: | ||
| - matches: | - matches: | ||
| - path: | - path: | ||
| - | type: Exact | + | type: PathPrefix |
| value: / | value: / | ||
| - | # filters: | ||
| - | # - type: RequestHeaderModifier | ||
| - | # requestHeaderModifier: | ||
| - | # add: | ||
| - | # - name: X-Gateway-ID | ||
| - | # value: "external-gw-prod" | ||
| backendRefs: | backendRefs: | ||
| - name: my-webd | - name: my-webd | ||
| Line 1533: | Line 1533: | ||
| # port: 80 | # port: 80 | ||
| # weight: 30 | # weight: 30 | ||
| + | # filters: | ||
| + | # - type: RequestHeaderModifier | ||
| + | # requestHeaderModifier: | ||
| + | # add: | ||
| + | # - name: X-Gateway-ID | ||
| + | # value: "external-gw-prod" | ||
| + | # - type: RequestMirror # not work in traefic | ||
| + | # requestMirror: | ||
| + | # backendRef: | ||
| + | # name: my-ubuntu # service in same ns | ||
| + | # port: 80 | ||
| </code> | </code> | ||
| ==== Volumes ==== | ==== Volumes ==== | ||
| Line 2658: | Line 2668: | ||
| + | |||
| + | |||
| + | |||
| + | ===== Использование SecurityContext ===== | ||
| + | |||
| + | * [[https://gitlab.com/k11s-os/k8s-lessons/-/tree/main/SecurityContext]] | ||
| + | |||
| + | ===== Использование NetworkPolicy ===== | ||
| + | |||
| + | * [[https://gitlab.com/k11s-os/k8s-lessons/-/tree/main/NetworkPolicy]] | ||
| + | |||
| + | <code> | ||
| + | kube1:~/my-pgcluster# cat my-pgcluster-policy.yaml | ||
| + | </code><code> | ||
| + | apiVersion: networking.k8s.io/v1 | ||
| + | kind: NetworkPolicy | ||
| + | metadata: | ||
| + | name: my-pgcluster-policy | ||
| + | spec: | ||
| + | podSelector: | ||
| + | matchLabels: | ||
| + | cnpg.io/cluster: my-pgcluster | ||
| + | policyTypes: | ||
| + | - Ingress | ||
| + | ingress: | ||
| + | - from: | ||
| + | - namespaceSelector: | ||
| + | matchLabels: | ||
| + | kubernetes.io/metadata.name: my-keycloak-ns | ||
| + | ports: | ||
| + | - protocol: TCP | ||
| + | port: 5432 | ||
| + | - from: | ||
| + | - namespaceSelector: | ||
| + | matchLabels: | ||
| + | kubernetes.io/metadata.name: cnpg-system | ||
| + | ports: | ||
| + | - protocol: TCP | ||
| + | port: 5432 | ||
| + | </code><code> | ||
| + | kube1:~/my-pgcluster# kubectl -n my-pgcluster-ns apply -f my-pgcluster-policy.yaml | ||
| + | </code> | ||
| ===== cert-manager ===== | ===== cert-manager ===== | ||
| Line 3065: | Line 3117: | ||
| </code> | </code> | ||
| - | ==== NetworkPolicy ==== | ||
| - | * [[https://gitlab.com/k11s-os/k8s-lessons/-/tree/main/NetworkPolicy]] | ||
| - | ==== SecurityContext ==== | ||
| - | * [[https://gitlab.com/k11s-os/k8s-lessons/-/tree/main/SecurityContext]] | ||
| ==== Установка kubelet kubeadm kubectl в ubuntu20 ==== | ==== Установка kubelet kubeadm kubectl в ubuntu20 ==== | ||