# 安装kubeadm、kubelet、kubectl
$ dnf install -y kubeadm kubelet kubectl
$ systemctl enable kubelet
$ systemctl start kubelet

# 初始化Kubernetes master节点
$ kubeadm init –pod-network-cidr=10.244.0.0/16

# 配置kubectl
$ mkdir -p $HOME/.kube
$ cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
$ chown $(id -u):$(id -g) $HOME/.kube/config

# 安装网络插件（Calico）
$ kubectl apply -f https://docs.projectcalico.org/manifests/calico.yaml

# 加入worker节点
$ kubeadm join :6443 –token –discovery-token-ca-cert-hash

# 验证部署
$ kubectl get nodes
$ kubectl get pods -n kube-system

# 安装OpenShift CLI
$ dnf install -y openshift-clients

# 下载OpenShift安装程序
$ wget https://mirror.openshift.com/pub/openshift-v4/clients/ocp/latest/openshift-install-linux.tar.gz
$ tar -xzf openshift-install-linux.tar.gz

# 配置安装
$ mkdir -p ~/openshift-install
$ cd ~/openshift-install

# 创建安装配置文件
$ vi install-config.yaml
—
baseDomain: fgedu.net.cn
metadata:
name: openshift-cluster
controlPlane:
name: master
replicas: 3
platform:
none:
worker:
name: worker
replicas: 3
platform:
none:
networking:
clusterNetwork:
– cidr: 10.128.0.0/14
hostPrefix: 23
machineNetwork:
– cidr: 192.168.1.0/24
serviceNetwork:
– 172.30.0.0/16
networkType: OpenShiftSDN
—

# 执行安装
$ ./openshift-install create cluster –dir=./

# 验证部署
$ oc get nodes
$ oc get pods -n openshift-system

## 1. 配置Kubernetes资源
$ vi deployment.yaml
—
apiVersion: apps/v1
kind: Deployment
metadata:
name: myapp
namespace: default
spec:
replicas: 3
selector:
matchLabels:
app: myapp
template:
metadata:
labels:
app: myapp
spec:
containers:
– name: myapp
image: myapp:latest
ports:
– containerPort: 80
resources:
requests:
memory: “512Mi”
cpu: “500m”
limits:
memory: “1Gi”
cpu: “1”
—

$ kubectl apply -f deployment.yaml

## 2. 配置Service和Ingress
$ vi service.yaml
—
apiVersion: v1
kind: Service
metadata:
name: myapp-service
namespace: default
spec:
selector:
app: myapp
ports:
– port: 80
targetPort: 80
type: ClusterIP
—

$ kubectl apply -f service.yaml

$ vi ingress.yaml
—
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: myapp-ingress
namespace: default
spec:
rules:
– host: myapp.fgedu.net.cn
http:
paths:
– path: /
pathType: Prefix
backend:
service:
name: myapp-service
port:
number: 80
—

$ kubectl apply -f ingress.yaml

## 3. 配置Horizontal Pod Autoscaler
$ vi hpa.yaml
—
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
name: myapp-hpa
namespace: default
spec:
scaleTargetRef:
apiVersion: apps/v1
kind: Deployment
name: myapp
minReplicas: 3
maxReplicas: 10
metrics:
– type: Resource
resource:
name: cpu
target:
type: Utilization
averageUtilization: 50
—

$ kubectl apply -f hpa.yaml

## 4. 配置PersistentVolume
$ vi pv.yaml
—
apiVersion: v1
kind: PersistentVolume
metadata:
name: myapp-pv
namespace: default
spec:
capacity:
storage: 10Gi
accessModes:
– ReadWriteOnce
persistentVolumeReclaimPolicy: Retain
storageClassName: standard
hostPath:
path: /data
—

$ kubectl apply -f pv.yaml

$ vi pvc.yaml
—
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: myapp-pvc
namespace: default
spec:
accessModes:
– ReadWriteOnce
resources:
requests:
storage: 10Gi
storageClassName: standard
—

$ kubectl apply -f pvc.yaml

# 验证系统容器编排平台进阶策略
# 检查Deployment
$ kubectl get deployment

# 检查Service
$ kubectl get service

# 检查Ingress
$ kubectl get ingress

# 检查HPA
$ kubectl get hpa

# 检查PersistentVolume
$ kubectl get pv
$ kubectl get pvc

## 1. 创建Jenkinsfile
$ vi Jenkinsfile
—
pipeline {
agent any

stages {
stage(‘Checkout’) {
steps {
git branch: ‘main’, url: ‘https://github.com/example/container-orchestration.git’
}
}

stage(‘Build Image’) {
steps {
sh ‘docker build -t myapp:latest .’
sh ‘docker push myapp:latest’
}
}

stage(‘Deploy to Kubernetes’) {
steps {
sh ‘kubectl apply -f kubernetes/deployment.yaml’
sh ‘kubectl apply -f kubernetes/service.yaml’
sh ‘kubectl apply -f kubernetes/ingress.yaml’
sh ‘kubectl ap学习交流加群风哥微信: itpux-comply -f kubernetes/hpa.yaml’
sh ‘kubectl apply -f kubernetes/pvc.yaml’
}
}

stage(‘Verify’) {
steps {
sh ‘kubectl get pods’
sh ‘kubectl get service’
sh ‘kubectl get ingress’
}
}
}

post {
always {
archiveArtifacts artifacts: ‘**/kubernetes/*.yaml’, fingerprint: true
}
success {
echo ‘Container orchestration pipeline completed successfully!’
}
failure {
echo ‘Container orchestration pipeline failed!’
mail to: ‘admin@fgedu.net.cn’, subject: ‘Container orchestration pipeline failure’, body: ‘Container orchestration pipeline failed in Jenkins’
}
}
}
—

# 集成系统容器编排平台进阶与监控系统
# 配置Prometheus + Grafana

## 1. 配置Prometheus监控
$ vi /etc/prometheus/prometheus.yml
—
global:
scrape_interval: 15s

scrape_configs:
– job_name: ‘kubernetes-pods’
kubernetes_sd_configs:
– role: pod
relabel_configs:
– source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scrape]
action: keep
regex: true
– source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_path]
action: replace
target_label: __metrics_path__
regex: (.+)
– source_labels: [__address__, __meta_kubernetes_pod_annotation_prometheus_io_port]
action: replace
regex: ([^:]+)(?::\d+)?;(\d+)
replacement: $1:$2
target_label: __address__
—

## 2. 配置Grafana仪表盘
# 导入Kubernetes监控仪表盘

# 集成系统容器编排平台进阶与存储系统
# 配置Ceph

## 1. 配置Ceph CSI
$ vi ceph-csi.yaml
—
apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
name: ceph-rbd
provisioner: rbd.csi.ceph.com
parameters:
clusterID:
pool: kubernetes
imageFeatures: layering
csi.storage.k8s.io/provisioner-secret-name: csi-rbd-provisioner
csi.storage.k8s.io/provisioner-secret-namespace: default
csi.storage.k8s.io/controller-expand-secret-name: csi-rbd-provisioner
csi.storage.k8s.io/controller-expand-secret-namespace: default
csi.storage.k8s.io/node-stage-secret-name: csi-rbd-node
csi.storage.k8s.io/node-stage-secret-namespace: default
reclaimPolicy: Delete
allowVolumeExpansion: true
—

$ kubectl apply -f ceph-csi.yaml

# 验证系统容器编排平台进阶集成
# 检查CI/CD集成
# 运行Jenkins Pipeline

# 检查监控集成
$ curl http://prometheus-server:9090/targets

# 检查存储集成
$ kubectl get storageclass
风哥提示：