# 安装Kubernetes
$ dnf install -y kubelet kubeadm kubectl
$ systemctl start kubelet
$ systemctl enable kubelet

# 初始化Kubernetes集群
$ kubeadm init –pod-network-cidr=192.168.0.0/16

# 安装Calico网络插件
$ kubectl apply -f https://docs.projectcalico.org/manifests/calico.yaml

# 安装Ceph存储
$ dnf install -y ceph

# 验证部署
$ kubectl get nodes
$ kubectl get pods -n kube-system

# 安装OpenShift
$ wget https://mirror.openshift.com/pub/openshift-v4/clients/ocp/latest/openshift-install-linux.tar.gz
$ tar -xzf openshift-install-linux.tar.gz
$ ./openshift-install create cluster

# 安装Cilium网络插件
$ kubectl apply -f https://raw.githubusercontent.com/cilium/cilium/v1.11/install/kubernetes/quick-install.yaml

# 配置NFS存储
$ dnf install -y nfs-utils
$ systemctl start nfs-server
$ systemctl enable nfs-server

# 验证部署
$ oc get nodes
$ oc get pods -n openshift-system

## 1. 配置Kubernetes
$ vi deployment.yaml
—
apiVersion: apps/v1
kind: Deployment
metadata:
name: app
namespace: default
spec:
replicas: 3
selector:
matchLabels:
app: app
template:
metadata:
labels:
app: app
spec:
containers:
– name: app
image: app:latest
ports:
– containerPort: 8080
resources:
requests:
memory: “512Mi”
cpu: “500m”
limits:
memory: “1Gi”
cpu: “1”
—

$ kubectl apply -f deployment.yaml

## 2. 配置服务
$ vi service.yaml
—
apiVersion: v1
kind: Service
metadata:
name: app
namespace: default
spec:
selector:
app: app
ports:
– port: 80
targetPort: 8080
type: LoadBalancer
—

$ kubectl apply -f service.yaml

## 3. 配置Ingress
$ vi ingress.yaml
—
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: app
namespace: default
spec:
rules:
– host: app.fgedu.net.cn
http:
paths:
– path: /
pathType: Prefix
backend:
service:
name: app
port:
number: 80
—

$ kubectl apply -f ingress.yaml

## 4. 配置HPA
$ vi hpa.yaml
—
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
name: app
namespace: default
spec:
scaleTargetRef:
apiVersion: apps/v1
kind: Deployment
name: app
minReplicas: 3
maxReplicas: 10
metrics:
– type: Resource
resource:
name: cpu
target:
type: Utilization
averageUtilization: 50
—

$ kubectl apply -f hpa.yaml

# 验证系统容器编排平台进阶策略
# 检查Deployment状态
$ kubectl get deployments

# 检查Service状态
$ kubectl get services

# 检查Ingress状态
$ kubectl get ingresses

# 检查HPA状态
$ kubectl get hpa

## 1. 配置Prometheus监控
$ vi /etc/prometheus/prometheus.yml
—
global:
scrape_interval: 15s

scrape_configs:
– job_name: ‘kubernetes-apiservers’
kubernetes_sd_configs:
– role: endpoints
scheme: https
tls_config:
ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token

– job_name: ‘kubernetes-nodes’
kubernetes_sd_configs:
– role: node
scheme: https
tls_config:
ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token

– job_name: ‘kubernetes-pods’
kubernetes_sd_configs:
– role: pod
—

## 2. 配置Grafana仪表盘
# 导入Kubernetes监控仪表盘

# 集成系统容器编排平台进阶与CI/CD系统
# 配置Jenkins Pipeline

## 1. 创建Jenkinsfile
$ vi Jenkinsfile
—
pipeline {
agent any

stages {
stage(‘Checkout’) {
steps {
git branch: ‘main’, url: ‘https://github.com/example/container-orchestration.git’
}
}

stage(‘Build’) {
steps {
sh ‘docker build -t app:latest .’
sh ‘docker push app:latest’
}
}

stage(‘Deploy’) {
steps {
sh ‘kubectl apply -f deployment.yaml’
sh ‘kubectl apply -f service.yaml’
sh ‘kubectl apply -f ingress.yaml’
sh ‘kubectl apply -f hpa.yaml’
}
}

stage(‘Verify’) {
steps {
sh ‘kubectl get pods’
sh ‘kubectl get services’
sh ‘kubectl get ingresses’
sh ‘kubectl get hpa’
}
}

stage(‘Monitor’) {
steps {
sh ‘curl http://prometheus-server:9090/targets’
}
}
}

post {
always {
archiveArtifacts artifacts: ‘**/deployment.yaml’, fingerprint: true
}
success {
echo ‘Container orchestration pipeline completed successfully!’
}
failure {
echo ‘Container orchestration pipeline failed!’
mail to: ‘admin@fgedu.net.cn’, subject: ‘Container orchestration pipeline failure’, body: ‘Container orchestration pipeline failed in Jenkins’
}
}
}
—

# 集成系统容器编排平台进阶与存储系统
# 配置Ceph存储

## 1. 配置StorageClass
$ vi ceph-storageclass.yaml
—
apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
name: ceph-rbd
provisioner: kubernetes.io/rbd
parameters:
monitors: 192.168.1.10:6789,192.168.1.11:6789,192.168.1.12:6789
adminId: admin
adminSecretName: ceph-secret
adminSecretNamespace: kube-system
pool: kubernetes
userId: kubernetes
userSecretName: ceph-secret-user
userSecretNamespace: default
fsType: ext4
imageFormat: “2”
imageFeatures: layering
—

$ kubectl apply -f ceph-storageclass.yaml

# 验证系统容器编排平台进阶集成
# 检查监控集成
$ curl http://prometheus-server:9090/targets

# 检查CI/CD集成
# 运行Jenkins Pipeline

# 检查存储集成
$ kubectl get storageclasses
风哥提示：