K8S on Learning Notes

Codes

Mon, 01 Jan 0001 00:00:00 +0000

Codes Structure: #

Command Name for k8s components	Cobra Client	Real Code	Note
kube-apiserver	cmd/kube-apiserver/apiserver.go	cmd/kube-apiserver/app/server.go	kubeAPIServer, APIExtensionsServer, AggregatorServer
kube-controller-manager	cmd/kube-controller-manager/controller-manager.go
kube-scheduler	cmd/kube-scheduler/scheduler.go	pkg/scheduler/scheduler.go
Etcd
Cloud Controller Manager	cmd/cloud-controller-manager/main.go

kubelet	cmd/kubelet/kubelet.go	pkg/kubelet/kubelet.go
kube-proxy	cmd/kube-proxy/proxy.go	pkg/proxy/service.go

kubectl	cmd/kubectl/kubectl.go

Commands #

kube-apiserver

kube-apiserver
--advertise-address=172.20.0.2
--allow-privileged=true
--authorization-mode=Node,RBAC
--client-ca-file=/etc/kubernetes/pki/ca.crt
--enable-admission-plugins=NodeRestriction
--enable-bootstrap-token-auth=true
--etcd-cafile=/etc/kubernetes/pki/etcd/ca.crt --etcd-certfile=/etc/kubernetes/pki/apiserver-etcd-client.crt
--etcd-keyfile=/etc/kubernetes/pki/apiserver-etcd-client.key --etcd-servers=https://127.0.0.1:2379
--kubelet-client-certificate=/etc/kubernetes/pki/apiserver-kubelet-client.crt
--kubelet-client-key=/etc/kubernetes/pki/apiserver-kubelet-client.key
--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
--proxy-client-cert-file=/etc/kubernetes/pki/front-proxy-client.crt --proxy-client-key-file=/etc/kubernetes/pki/front-proxy-client.key
--requestheader-allowed-names=front-proxy-client
--requestheader-client-ca-file=/etc/kubernetes/pki/front-proxy-ca.crt
--requestheader-extra-headers-prefix=X-Remote-Extra-
--requestheader-group-headers=X-Remote-Group
--requestheader-username-headers=X-Remote-User
--runtime-config=
--secure-port=6443
--service-account-issuer=https://kubernetes.default.svc.cluster.local
--service-account-key-file=/etc/kubernetes/pki/sa.pub --service-account-signing-key-file=/etc/kubernetes/pki/sa.key
--service-cluster-ip-range=10.96.0.0/16
--tls-cert-file=/etc/kubernetes/pki/apiserver.crt --tls-private-key-file=/etc/kubernetes/pki/apiserver.key

kube-controller-manager

kube-controller-manager
--allocate-node-cidrs=true
--authentication-kubeconfig=/etc/kubernetes/controller-manager.conf
--authorization-kubeconfig=/etc/kubernetes/controller-manager.conf
--bind-address=127.0.0.1
--client-ca-file=/etc/kubernetes/pki/ca.crt
--cluster-cidr=10.244.0.0/16
--cluster-name=kind
--cluster-signing-cert-file=/etc/kubernetes/pki/ca.crt --cluster-signing-key-file=/etc/kubernetes/pki/ca.key
--controllers=*,bootstrapsigner,tokencleaner
--enable-hostpath-provisioner=true
--kubeconfig=/etc/kubernetes/controller-manager.conf
--leader-elect=true
--requestheader-client-ca-file=/etc/kubernetes/pki/front-proxy-ca.crt
--root-ca-file=/etc/kubernetes/pki/ca.crt
--service-account-private-key-file=/etc/kubernetes/pki/sa.key
--service-cluster-ip-range=10.96.0.0/16
--use-service-account-credentials=true

kube-scheduler

kube-scheduler
--authentication-kubeconfig=/etc/kubernetes/scheduler.conf --authorization-kubeconfig=/etc/kubernetes/scheduler.conf
--bind-address=127.0.0.1
--kubeconfig=/etc/kubernetes/scheduler.conf
--leader-elect=true

etcd

etcd
--advertise-client-urls=https://172.20.0.2:2379
--cert-file=/etc/kubernetes/pki/etcd/server.crt
--client-cert-auth=true
--data-dir=/var/lib/etcd
--experimental-initial-corrupt-check

kubelet

/usr/bin/kubelet
--bootstrap-kubeconfig=/etc/kubernetes/bootstrap-kubelet.conf
--kubeconfig=/etc/kubernetes/kubelet.conf
--config=/var/lib/kubelet/config.yaml
--container-runtime-endpoin

kube-proxy

/usr/local/bin/kube-proxy
--config=/var/lib/kube-proxy/config.conf
--hostname-override=kind-control-plane

Customer Resource Definition (CRD) #

Kuberenetes Design&Architecture Pictures

CRI

Mon, 01 Jan 0001 00:00:00 +0000

CRI #

Tools #

Name	Doc	Github	Note
containerd	Docs	Github	行业标准的容器运行时，强调简单、健壮和可移植性，可管理容器的完整生命周期。
runc	Docs	Github	OCI (Open Container Initiative) 规范的命令行客户端，用于根据规范生成和运行容器。
Docker	Docs	Github	最广为人知的容器平台，提供完整的容器化解决方案，包含构建、分享和运行应用的工具。
CRI-O	Docs	Github	一个轻量级的、专门为 Kubernetes 设计的容器运行时，实现了 Kubernetes CRI (Container Runtime Interface) 接口。

Reference #

CRI, Container-Runtimes

OCI - Open Container Initiative

Container Runtime Interface (CRI): Past, Present, and Future

containerd - Architecture

CSI

Mon, 01 Jan 0001 00:00:00 +0000

CSI #

Need Read First #

https://ceph.io/en/users/getting-started/

CSI Drivers #

Name	CSI Driver Name	Compatible with CSI Version(s)	Description	Persistence (Beyond Pod Lifetime)	Supported Access Modes	Dynamic Provisioning	Other Features
CephFS	`cephfs.csi.ceph.com`	v0.3, >=v1.0.0	A Container Storage Interface (CSI) Driver for CephFS	Persistent	Read/Write Multiple Pods	Yes	Expansion, Snapshot, Cloning
Ceph RBD	`rbd.csi.ceph.com`	v0.3, >=v1.0.0	A Container Storage Interface (CSI) Driver for Ceph RBD	Persistent	Read/Write Single Pod	Yes	Raw Block, Snapshot, Expansion, Topology, Cloning,In-tree plugin migration

Reference #

CSI-Doc, Github

CNI

Mon, 01 Jan 0001 00:00:00 +0000

CNI #

Reference #

CNI, CNI-Github

sig-network

eBPF

Mon, 01 Jan 0001 00:00:00 +0000

eBPF & Cilium #

eBPF

Cilium, Github, Trainings

Security

Mon, 01 Jan 0001 00:00:00 +0000

Kubernetes Security #

https://www.anquanke.com/post/id/287522

Install

Mon, 01 Jan 0001 00:00:00 +0000

Tools #

Tools	Doc	Github	Note
minikube	Doc	Github	Run Kubernetes locally
k3s	Doc	Github	Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB.
kind	Doc	Github	Kubernetes IN Docker - local clusters for testing Kubernetes

kwok

kubectl

crictl, podman

Commands #

minikube

minikube start --kubernetes-version=v1.28.4 minikube node add minikube config view kubernetes-version #Open K8s Dashboard minikube dashboard http://127.0.0.1:56740/api/v1/namespaces/kubernetes-dashboard/services/http:kubernetes-dashboard:/proxy/#/workloads?namespace=default

kind

kind create cluster --image=kindest/node:v1.28.0 -n kind2 kind build node-image /path/to/kubernetes/source --image=kindest/node:v1.28.4

Reference #

k0s、MicroK8s、kind、k3s 和 Minikube

Podman

Mon, 01 Jan 0001 00:00:00 +0000

podman #

Chinese #

podman.org.cn

Commands #

podman commands
 
 
podman run --rm hello

podman run --rm m.daocloud.io/docker.io/library/hello-world

Reference #

Quay.io

Docker

Mon, 01 Jan 0001 00:00:00 +0000

Tools (docker/containerd/…) #

Install Tools/Configurations #

The mirrors for Docker images #

m.daocloud.io
 
 
DaoCloud
源站：docker pull k8s.gcr.io/metrics-server/metrics-server:v0.6.1
改为：docker pull m.daocloud.io/k8s.gcr.io/metrics-server/metrics-server:v0.6.1

 



kubeadm config images list
 
 

docker pull m.daocloud.io/registry.k8s.io/kube-apiserver:v1.28.4
docker pull m.daocloud.io/registry.k8s.io/kube-controller-manager:v1.28.4
docker pull m.daocloud.io/registry.k8s.io/kube-scheduler:v1.28.4
docker pull m.daocloud.io/registry.k8s.io/kube-proxy:v1.28.4
docker pull m.daocloud.io/registry.k8s.io/pause:3.9
docker pull m.daocloud.io/registry.k8s.io/etcd:3.5.9-0
docker pull m.daocloud.io/registry.k8s.io/coredns/coredns:v1.10.1

docker tag m.daocloud.io/registry.k8s.io/kube-apiserver:v1.28.4 registry.k8s.io/kube-apiserver:v1.28.4
docker tag m.daocloud.io/registry.k8s.io/kube-controller-manager:v1.28.4 registry.k8s.io/kube-controller-manager:v1.28.4
docker tag m.daocloud.io/registry.k8s.io/kube-scheduler:v1.28.4 registry.k8s.io/kube-scheduler:v1.28.4 
docker tag m.daocloud.io/registry.k8s.io/kube-proxy:v1.28.4 registry.k8s.io/kube-proxy:v1.28.4
docker tag m.daocloud.io/registry.k8s.io/pause:3.9 registry.k8s.io/pause:3.9
docker tag m.daocloud.io/registry.k8s.io/etcd:3.5.9-0 registry.k8s.io/etcd:3.5.9-0
docker tag m.daocloud.io/registry.k8s.io/coredns/coredns:v1.10.1 registry.k8s.io/coredns/coredns:v1.10.1

DaoCloud