Kubernetes 강의

apiVersion: v1kind: Podmetadata: name: pod-4 labels: type: web lo: devspec: nodeSel

PodapiVersion: v1kind: Podmetadata: name: pod-1 labels: app: podspec: nodeSelector: kubernetes.io/hostname: k8s-node1 containers:name: cont

EmptyDirapiVersion: v1kind: Podmetadata: name: pod-volume-1spec: containers:name: container1image: kubetm/initvolumeMounts:name: empty-dirmountPath:

1 EnvConfigMapapiVersion: v1kind: ConfigMapmetadata: name: cm-devdata: SSH: 'false' User: devSecretapiVersion: v1kind: Secretmetadata: name: sec-d

apiVersion: batch/v1kind: CronJobmetadata: name: cron-jobspec: schedule: "/1 \* \* \*" jobTemplate: spec: template: spec:

readnessProbekubectl get events -w | grep pod-readiness-exec1kubectl describe pod pod-readiness-exec1 | grep -A5 Conditionskubectl describe endpoints

Node Affinity1-1) Node Labeling kubectl label nodes k8s-node1 kr=az-1kubectl label nodes k8s-node2 us=az-11-2) MatchExpressions1-3) Required Pod Affin

자신의 Namespace 내에 Pod들만 조회할 수 있는 권한1-1) Role1-2) RoleBinding1-3) Service모든 Namespace 내에 Object들에 대해 모든 권한을 부여 2-1) Namespaces2-2) ServiceAccount

X509 Client Certs1-1) kubeconfig 인증서 확인Path : /etc/kubernetes/admin.confcluster.certificate-authority-data : CA.crt (Base64)user.client-certificate-da

stateless App분산목적으로 app 실패 후 재생성 과정에서app3 -> app4 변경 가능 하나의 볼륨 공유 가능stateful App각각 app마다 고유 지정 역할이 있기 때문에각 volume 존재 , app1 -> app1 재생성 규칙StatefulSet

Nginx ControllerService Loadbalancing2-1) Shopping PageapiVersion: v12-2) Customer CenterapiVersion: v12-4) Ingresscurl 192.168.56.30:30431/curl 192.1

Metrics Server 설치kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/download/v0.5.0/components.yamlkubectl edit deployme

Pod Network - Pause Container1-1) Pause ContainerPause Container 확인docker ps | grep pod-pausePause Container 인터페이스 확인docker ps | grep pod-pausedocker

FTP Server 구축1-1) NFS 패키지 다운 및 설치설치yum -y install nfs-utils rpcbindsystemctl start rpcbindsystemctl start nfs-serversystemctl start rpc-statdsystemctl

Basic Logging Construction1-1) Deployment 생성api 호출curl :8080/hostnamecurl :8080/version1-2) Container Log 확인kubectl exec로 Container 내부 로그파일 확인kubectl