Kubernetes for Developers: LFD259 实验手册

4星 · 超过85%的资源需积分: 13 72 浏览量更新于2024-07-15 收藏 846KB PDF 举报

"LFD259-labs_V2020-06-18 官方实验手册是针对Kubernetes for Developers的培训材料，由Linux Foundation于2020年6月18日发布。这份手册包含了受版权保护的内容，并可能包含其他开源代码，遵循相应的开源许可协议。手册仅供参与者个人使用，未经Linux Foundation事先书面同意，不得复制、修改、分发给非参与者或用于提供培训。" 《LFD259 Kubernetes for Developers 实验手册》详细解读：本手册是Linux Foundation为开发者提供的Kubernetes实践教程，主要关注如何在实际开发环境中应用Kubernetes（K8s）这一容器编排系统。Kubernetes是目前最流行的开源容器管理平台，它允许开发者和运维人员高效地管理和部署分布式应用。 Kubernetes核心概念： 1. **Pod**：Kubernetes的基本执行单元，可以包含一个或多个紧密耦合的容器。 2. **Service**：定义了访问Pods的逻辑方式，确保即使Pods动态变化，服务仍然可用。 3. **Deployment**：用于声明式地更新和管理Pods的配置，保证应用的高可用性。 4. **ReplicaSet**：保证集群中有固定数量的Pod副本，实现负载均衡和容错。 5. **ConfigMap**和**Secrets**：用于存储配置数据和敏感信息，以便安全地注入到Pod中。 6. **Volume**：提供Pod间共享存储的能力，持久化数据不受Pod生命周期影响。实验手册内容概览： 1. **Kubernetes基础**：介绍Kubernetes架构、组件以及如何设置本地开发环境，如使用minikube。 2. **应用部署**：演示如何创建Deployment，管理Pods的生命周期，以及滚动更新等操作。 3. **服务发现与网络**：讲解如何定义Service，实现内部和外部对应用的访问。 4. **持久化存储**：介绍如何使用Volume进行数据持久化，包括使用PVC（Persistent Volume Claim）和PV（Persistent Volume）。 5. **自动化运维**：涵盖自动扩展、健康检查、日志和监控等方面，提升系统的可维护性。 6. **DevOps实践**：讨论CI/CD（持续集成/持续交付）在Kubernetes中的实现，如Jenkins和GitOps。 7. **安全与策略**：涉及RBAC（Role-Based Access Control）、网络策略和其他安全性实践。通过这些实验，开发者将掌握Kubernetes的核心功能和最佳实践，能够在实际项目中有效地利用Kubernetes来部署、扩展和管理分布式应用。同时，了解并遵循开源许可协议，尊重知识产权，是每个技术从业者应有的素养。《LFD259 Kubernetes for Developers 实验手册》是一份全面且实用的教程，对于希望深入了解和运用Kubernetes的开发者来说，是一份宝贵的参考资料。学习者不仅可以从中获取理论知识，还能通过实际操作加深理解，提高技能。

12 CHAPTER 2. KUBERNETES ARCHITECTURE

Creating a pod does not take advantage of orchestration abilities of Kubernetes. We will now create a Deployment

which gives us scalability, reliability, and updates.

1. Now run a containerized webserver nginx. Use kubectl create to create a simple, single replica deployment running

the nginx web server. It will create a single pod as we did previously but with new controllers to ensure it runs as well as

other features.

student@ckad-1:˜$ kubectl create deployment firstpod --image=nginx

deployment.apps/firstpod created

2. Verify the new deployment exists and the desired number of pods matches the current number. Using a comma, you

can request two resource types at once. The Tab key can be helpful. Type enough of the word to be unique and press

the Tab key, it should complete the word. The deployment should show a number 1 for each value, such that the desired

number of pods matches the up-to-date and running number. The pod should show zero restarts.

student@ckad-1:˜$ kubectl get deployment,pod

NAME READY UP-TO-DATE AVAILABLE AGE

deployment.apps/firstpod 1/1 1 1 2m42s

NAME READY STATUS RESTARTS AGE

pod/firstpod-7d88d7b6cf-lrsbk 1/1 Running 0 2m42s

3. View the details of the deployment, then the pod. Work through the output slowly. Knowing what a healthy deployment

and looks like can be helpful when troubleshooting issues. Again the Tab key can be helpful when using long auto-

generated object names. You should be able to type ﬁrstpodTab and the name will complete when viewing the pod.

student@ckad-1:˜$ kubectl describe deployment firstpod

Name: firstpod

Namespace: default

CreationTimestamp: Wed, 15 Arp 2020 17:17:25 +0000

Labels: app=firstpod

Annotations: deployment.kubernetes.io/revision=1

Selector: app=firstpod

Replicas: 1 desired | 1 updated | 1 total | 1 available....

StrategyType: RollingUpdate

MinReadySeconds: 0

<output_omitted>

student@ckad-1:˜$ kubectl describe pod firstpod-6bb4574d94-rqk76

Name: firstpod-6bb4574d94-rqk76

Namespace: default

Priority: 0

PriorityClassName: <none>

Node: ckad-1/10.128.0.2

Start Time: Wed, 15 Apr 2020 17:17:25 +0000

Labels: pod-template-hash=2660130850

app=firstpod

Annotations: cni.projectcalico.org/podIP: 192.168.200.65/32

Status: Running

IP: 192.168.200.65

Controlled By: ReplicaSet/firstpod-6bb4574d94

<output_omitted>

4. Note that the resources are in the default namespace. Get a list of available namespaces.

student@ckad-1:˜$ kubectl get namespaces

NAME STATUS AGE

default Active 20m

kube-node-lease Active 20m

kube-public Active 20m

kube-system Active 20m

5. There are four default namespaces. Look at the pods in the kube-system namespace.

student@ckad-1:˜$ kubectl get pod -n kube-system

NAME READY STATUS RESTARTS AGE

calico-node-5ftrr 2/2 Running 0 24m

calico-node-f7zrw 2/2 Running 0 21m

coredns-fb8b8dccf-cmkds 1/1 Running 0 24m

coredns-fb8b8dccf-grltk 1/1 Running 0 24m

etcd-v141-r24p 1/1 Running 0 23m

<output_omitted>

6. Now look at the pods in a namespace that does not exist. Note you do not receive an error.

student@ckad-1:˜$ kubectl get pod -n fakenamespace

No resources found in fakenamespaces namespace.

7. You can also view resources in all namespaces at once. Use the --all-namespaces options to select objects in all

namespaces at once.

student@ckad-1:˜$ kubectl get pod --all-namespaces

NAMESPACE NAME READY STATUS RESTARTS AGE

default firstpod-69cfdfd8d9-kj6ql 1/1 Running 0 44m

kube-system calico-node-5ftrr 2/2 Running 0 92m

kube-system calico-node-f7zrw 2/2 Running 0 89m

kube-system coredns-fb8b8dccf-cmkds 1/1 Running 0 92m

<output_omitted>

8. View several resources at once. Note that most resources have a short name such as rs for ReplicaSet, po for Pod,

svc for Service, and ep for endpoint. Note the endpoint still exists after we deleted the pod.

student@ckad-1:˜$ kubectl get deploy,rs,po,svc,ep

NAME READY UP-TO-DATE AVAILABLE AGE

deployment.apps/firstpod 1/1 1 1 4m

NAME DESIRED CURRENT READY....

replicaset.apps/firstpod-6bb4574d94-rqk76 1 1 1 ....

NAME READY STATUS RESTARTS AGE

pod/firstpod-6bb4574d94-rqk76 1/1 Running 0 4m

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE

service/basicservice NodePort 10.108.147.76 <none> 80:31601/TCP 21m

service/kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 21m

NAME ENDPOINTS AGE

endpoints/basicservice <none> 21m

endpoints/kubernetes 10.128.0.3:6443 21m

9. Delete the ReplicaSet and view the resources again. Note that the age on the ReplicaSet and the pod it controls

is now less than a minute of age. The deployment operator started a new ReplicaSet operator when we deleted the

existing one. The new ReplicaSet started another pod when the desired spec did not match the current status.

student@ckad-1:˜$ kubectl delete rs firstpod-6bb4574d94-rqk76

14 CHAPTER 2. KUBERNETES ARCHITECTURE

replicaset.apps "firstpod-6bb4574d94-rqk76" deleted

student@ckad-1:˜$ kubectl get deployment,rs,po,svc,ep

NAME READY UP-TO-DATE AVAILABLE AGE

deployment.apps/firstpod 1/1 1 1 7m

NAME DESIRED CURRENT....

replicaset.apps/firstpod-6bb4574d94-rqk76 1 1 ....

NAME READY STATUS RESTARTS AGE

pod/firstpod-7d99ffc75-p9hbw 1/1 Running 0 12s

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE

service/kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 24m

NAME ENDPOINTS AGE

endpoints/kubernetes 10.128.0.2:6443 80m

endpoints/basicservice <none> 21m

10. This time delete the top-level controller. After about 30 seconds for everything to shut down you should only see the

cluster service and endpoint remain for the cluster and the service we created.

student@ckad-1:˜$ kubectl delete deployment firstpod

deployment.apps "firstpod" deleted

student@ckad-1:˜$ kubectl get deployment,rs,po,svc,ep

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE

service/basicservice NodePort 10.108.147.76 <none> 80:31601/TCP 35m

kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 24m

NAME ENDPOINTS AGE

endpoints/basicservice <none> 21m

kubernetes 10.128.0.3:6443 24m

11. As we won’t need it for a while, delete the basicservice service as well.

student@ckad-1:˜$ kubectl delete svc basicservice

service "basicservice" deleted

Exercise 2.6: Domain Review

Very Important

The source pages and content in this review could change at any time. IT IS YOUR RESPONSIBILITY TO CHECK

THE CURRENT INFORMATION.

1. Using a browser go to https://www.cncf.io/certification/ckad/ and read through the program description.

2. In the Exam Resources section open the Curriculum Overview and Candidate-handbook in new tabs. Both of these

should be read and understood prior to sitting for the exam.

3. Navigate to the Curriculum Overview tab. You should see links for domain information for various versions of the exam.

Select the latest version, such as CKAD Curriculum V1.15.0.pdf. The versions you see may be different. You should

see a new page showing a PDF.

4. Read through the document. Be aware that the term Understand, such as Understand Services, is more than just

knowing they exist. In this case expect it to also mean create, update, and troubleshoot.

剩余105页未读，继续阅读

gaoyidong

粉丝: 2
资源: 29

Kubernetes for Developers: LFD259 实验手册

LFD259-labs_V2019-06-27 官方实验手册

LFD259-labs_V2019-05-16 官方实验手册

如何下载pycuda-2022.1+cuda116-cp38-cp38-win_amd64.whl

opencv_python-4.5.3.56-cp38-cp38-win_amd64.whl下载地址

ERROR: pygame-2.5.2-cp310-cp310-win_amd64.whl is not a supported wheel on this platform.

GDAL-3.4.3-cp39-cp39-win_amd64.whl下载

pycuda-2022.1 (3)没有pycuda-2022.1+cuda116-cp38-cp38-win_amd64.whl这个文件

python3.7安装pyqt5报错 Could not build wheels for PyQt5-sip, which is required to install pyproject.toml-based projects

能不能提供预编译好的pysqlcipher3安装包，通过本地方式进行安装，如果没有下载地址，那应该如何找到靠谱的下载链接

怎么下载scikit-learn

最新资源