# 2. 实施步骤
# 步骤1：部署Kubernetes集群
# 步骤2：优化Kubernetes配置
# 步骤3：配置网络插件
# 步骤4：配置存储插件
# 步骤5：优化调度策略
# 步骤6：验证集群性能

# 3. 应用效果
# 提高了集群的性能和可靠性
# 减少了容器调度的时间
# 提高了服务的可用性

# 部署Kubernetes集群
kubeadm init –pod-network-cidr=10.244.0.0/16

# 配置kubectl
mkdir -p $HOME/.kube
cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
chown $(id -u):$(id -g) $HOME/.kube/config

# 安装Calico网络插件
kubectl apply -f https://docs.projectcalico.org/manifests/calico.yaml

# 优化Kubernetes配置
# 编辑kubelet配置
cat > /etc/kubernetes/kubelet.conf << 'EOF' kubelet: imageGCHighThresholdPercent: 85 imageGCLowThresholdPercent: 80 maxPods: 100 podsPerCore: 10 cpuManagerPolicy: static cpuCFSQuota: true cpuCFSQuotaPeriod: 100ms memoryManagerPolicy: static topologyManagerPolicy: best-effort EOF # 重启kubelet服务 systemctl restart kubelet # 配置调度策略 cat > /etc/kubernetes/scheduler-policy.yaml << 'EOF' {"kind": "Policy", "apiVersion": "v1", "predicates": [{"name": "PodFitsHostPorts"}, {"name": "PodFitsResources"}, {"name": "NoDiskConflict"}, {"name": "PodToleratesNodeTaints"}, {"name": "PodAffinity"}], "priorities": [{"name": "LeastRequestedPriority", "weight": 1}, {"name": "BalancedResourceAllocation", "weight": 1}, {"name": "ServiceSpreadingPriority", "weight": 1}, {"name": "NodeAffinityPriority", "weight": 1}]} EOF # 编辑调度器配置 cat > /etc/kubernetes/scheduler.conf << 'EOF' scheduler: algorithmProvider: DefaultProvider policyConfigFile: /etc/kubernetes/scheduler-policy.yaml leaderElection: leaderElect: true leaseDuration: 15s renewDeadline: 10s retryPeriod: 2s EOF # 重启调度器 systemctl restart kube-scheduler # 部署应用 cat > app.yaml << 'EOF' apiVersion: apps/v1 kind: Deployment metadata: name: fgedu-app namespace: default spec: replicas: 10 selector: matchLabels: app: fgedu-app template: metadata: labels: app: fgedu-app spec: containers: - name: fgedu-app image: nginx:latest resources: requests: memory: 256Mi cpu: 200m limits: memory: 512Mi cpu: 400m ports: - containerPort: 80 readinessProbe: httpGet: path: / port: 80 initialDelaySeconds: 5 periodSeconds: 10 livenessProbe: httpGet: path: / port: 80 initialDelaySeconds: 15 periodSeconds: 20 --- apiVersion: v1 kind: Service metadata: name: fgedu-app namespace: default spec: selector: app: fgedu-app ports: - port: 80 targetPort: 80 type: LoadBalancer EOF kubectl apply -f app.yaml # 验证集群性能 kubectl get nodes kubectl get pods kubectl get services

# 2. 实施步骤
# 步骤1：部署Docker Swarm集群
# 步骤2：优化Docker配置
# 步骤3：配置网络
# 步骤4：配置服务
# 步骤5：验证集群性能

# 3. 应用效果
# 提高了集群的性能和可靠性
# 减少了服务部署的时间
# 提高了服务的可用性

# 安装Docker
dnf install -y docker-ce docker-ce-cli containerd.io

# 启动Docker服务
systemctl start docker
systemctl enable docker

# 初始化Docker Swarm
docker swarm init –advertise-addr 192.168.1.100

# 加入工作节点
# 在工作节点上执行docker swarm join命令

# 优化Docker配置
cat > /etc/docker/daemon.json << 'EOF' { "default-shm-size": "256m", "live-restore": true, "max-concurrent-downloads": 10, "max-concurrent-uploads": 10, "log-driver": "json-file", "log-opts": { "max-size": "10m", "max-file": "3" }, "storage-driver": "overlay2", "storage-opts": [ "overlay2.override_kernel_check=true" ] } EOF # 重启Docker服务 systemctl restart docker # 配置网络 docker network create --driver overlay --subnet 10.0.0.0/24 fgedu-network # 部署服务 docker service create --name fgedu-app --replicas 10 --network fgedu-network --publish 80:80 --limit-cpu 0.4 --limit-memory 512m --reserve-cpu 0.2 --reserve-memory 256m nginx:latest # 验证集群性能 docker node ls docker service ls docker service ps fgedu-app

# 2. 实施步骤
# 步骤1：部署Kubernetes集群
# 步骤2：安装Calico网络插件
# 步骤3：优化Calico配置
# 步骤4：配置BGP
# 步骤5：配置网络策略
# 步骤6：验证网络性能

# 3. 应用效果
# 提高了容器网络的性能
# 减少了网络延迟
# 提高了网络的安全性

# 部署Kubernetes集群
kubeadm init –pod-network-cidr=192.168.0.0/16

# 配置kubectl
mkdir -p $HOME/.kube
cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
chown $(id -u):$(id -g) $HOME/.kube/config

# 安装Calico网络插件
kubectl apply -f https://docs.projectcalico.org/manifests/calico.yaml

# 优化Calico配置
cat > calico-config.yaml << 'EOF' apiVersion: operator.tigera.io/v1 kind: Installation metadata: name: default spec: calicoNetwork: bgp: enabled: true ipPools: - blockSize: 26 cidr: 192.168.0.0/16 encapsulation: VXLANCrossSubnet natOutgoing: true nodeSelector: all() controlPlaneReplicas: 3 flexVolumePath: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/ nodeUpdateStrategy: rollingUpdate: maxUnavailable: 1 type: RollingUpdate variant: Calico EOF kubectl apply -f calico-config.yaml # 配置BGP cat > bgp-config.yaml << 'EOF' apiVersion: projectcalico.org/v3 kind: BGPConfiguration metadata: name: default spec: logSeverityScreen: Info nodeToNodeMeshEnabled: true asNumber: 64512 EOF kubectl apply -f bgp-config.yaml # 配置网络策略 cat > network-policy.yaml << 'EOF' apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: fgedu-network-policy namespace: default spec: podSelector: matchLabels: app: fgedu-app policyTypes: - Ingress - Egress ingress: - from: - podSelector: matchLabels: app: fgedu-frontend ports: - protocol: TCP port: 80 egress: - to: - podSelector: matchLabels: app: fgedu-db ports: - protocol: TCP port: 3306 EOF kubectl apply -f network-policy.yaml # 部署应用 cat > app.yaml << 'EOF' apiVersion: apps/v1 kind: Deployment metadata: name: fgedu-app namespace: default spec: replicas: 5 selector: matchLabels: app: fgedu-app template: metadata: labels: app: fgedu-app spec: containers: - name: fgedu-app image: nginx:latest ports: - containerPort: 80 --- apiVersion: v1 kind: Service metadata: name: fgedu-app namespace: default spec: selector: app: fgedu-app ports: - port: 80 targetPort: 80 type: ClusterIP EOF kubectl apply -f app.yaml # 验证网络性能 kubectl get pods kubectl get services kubectl get networkpolicies # 测试网络延迟 kubectl exec -it $(kubectl get pods -l app=fgedu-app -o jsonpath='{.items[0].metadata.name}') -- ping -c 5 fgedu-app