# 部署Pod
# kubectl apply -f pod.yaml
pod/nginx-pod created

# 查看Pod状态
# kubectl get pods
NAME READY STATUS RESTARTS AGE
nginx-pod 1/1 Running 0 1m

# 查看Pod详情
# kubectl describe pod nginx-pod
Name: nginx-pod
Namespace: default
Priority: 0
Node: server/192.168.1.100
Start Time: Wed, 30 Mar 2026 10:00:00 +0800
Labels: app=nginx
Annotations:
Status: Running
IP: 10.244.0.2
IPs:
IP: 10.244.0.2
Containers:
nginx:
Container ID: docker://1234567890abcdefghijklmnopqrstuvwxyz
Image: nginx:latest
Image ID: docker-pullable://nginx@sha256:626ffe58f6e7566e00254b638eb7e0f3b11d4da9675088f4781a50ae288f3322
Port: 80/TCP
Host Port: 0/TCP
State: Running
Started: Wed, 30 Mar 2026 10:00:00 +0800
Ready: True
Restart Count: 0
Environment:
Mounts:
/var/run/secrets/kubernetes.io/serviceaccount from default-token-5x78k (ro)
Conditions:
Type Status
Initialized True
Ready True
ContainersReady True
PodScheduled True
Volumes:
default-token-5x78k:
Type: Secret (a volume populated by a Secret)
SecretName: default-token-5x78k
Optional: false
QoS Class: BestEffort
Node-Selectors:
Tolerations: node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
Type Reason Age From Message
—- —— —- —- ——-
Normal Scheduled 1m default-scheduler Successfully assigned default/nginx-pod to server
Normal Pulling 1m kubelet Pulling image “nginx:latest”
Normal Pulled 1m kubelet Successfully pulled image “nginx:latest” in 5.234s
Normal Created 1m kubelet Created container nginx
Normal Started 1m kubelet Started container nginx

# 删除Pod
# kubectl delete pod nginx-pod
pod “nginx-pod” deleted

# 部署Service
# kubectl apply -f service.yaml
service/nginx-service created

# 查看Service状态
# kubectl get services
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes ClusterIP 10.96.0.1 443/TCP 15m
nginx-service NodePort 10.100.200.100 80:30080/TCP 1m

# 查看Service详情
# kubectl describe service nginx-service
Name: nginx-service
Namespace: default
Labels:
Annotations:
Selector: app=nginx
Type: NodePort
IP Family Policy: SingleStack
IP Families: IPv4
IP: 10.100.200.100
IPs: 10.100.200.100
Port: 80/TCP
TargetPort: 80/TCP
NodePort: 30080/TCP
Endpoints: 10.244.0.2:80
Session Affinity: None
External Traffic Policy: Cluster
Events:

# 访问Service
# curl http://192.168.1.100:30080

Welcome to nginx!

If you see this page, the nginx web server is successfully installed and
working. Further configuration is required.

For online documentation and support please refer to
nginx.org.
Commercial support is available at
nginx.com.

Thank you for using nginx.

# 部署Deployment
# kubectl apply -f deployment.yaml
deployment.apps/nginx-deployment created

# 查看Deployment状态
# kubectl get deployments
NAME READY UP-TO-DATE AVAILABLE AGE
nginx-deployment 3/3 3 3 1m

# 查看Pod状态
# kubectl get pods
NAME READY STATUS RESTARTS AGE
nginx-deployment-1234567890-abcde 1/1 Running 0 1m
nginx-deployment-1234567890-fghij 1/1 Running 0 1m
nginx-deployment-1234567890-klmno 1/1 Running 0 1m

# 扩展Deployment
# kubectl scale deployment nginx-deployment –replicas=5

deployment.apps/nginx-deployment scaled

# 查看扩展后的状态
# kubectl get deployments
NAME READY UP-TO-DATE AVAILABLE AGE
nginx-deployment 5/5 5 5 2m

# 更新Deployment
# kubectl set image deployment nginx-deployment nginx=nginx:1.19.10
deployment.apps/nginx-deployment image updated

# 查看更新状态
# kubectl rollout status deployment nginx-deployment
Waiting for deployment “nginx-deployment” rollout to finish: 3 of 5 updated replicas are available…
deployment “nginx-deployment” successfully rolled out

events {
worker_connections 1024;
}

http {
include /etc/nginx/mime.types;
default_type application/octet-stream;

log_format main ‘$remote_addr – $remote_user [$time_local] “$request” ‘
‘$status $body_bytes_sent “$http_referer” ‘
‘”$http_user_agent” “$http_x_forwarded_for”‘;

access_log /var/log/nginx/access.log main;

sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;

server {
listen 80;
server_name fgedudb;

location / {
root /usr/share/nginx/html;
index index.html index.htm;
}
}
}

# 部署ConfigMap
# kubectl apply -f configmap.yaml
configmap/nginx-config created

# 查看ConfigMap
# kubectl get configmaps
NAME DATA AGE
nginx-config 1 1m

# 在Pod中使用ConfigMap
# cat pod-with-configmap.yaml
apiVersion: v1
kind: Pod
metadata:
name: nginx-with-configmap
spec:
containers:
– name: nginx
image: nginx:latest
ports:
– containerPort: 80
volumeMounts:
– name: nginx-config-volume
mountPath: /etc/nginx/nginx.conf
subPath: nginx.conf
volumes:
– name: nginx-config-volume
configMap:
name: nginx-config

# 部署Pod
# kubectl apply -f pod-with-configmap.yaml
pod/nginx-with-configmap created

# 查看Secret
# kubectl get secrets
NAME TYPE DATA AGE
default-token-5x78k kubernetes.io/service-account-token 3 20m
my-secret Opaque 2 1m

# 查看Secret详情
# kubectl describe secret my-secret
Name: my-secret
Namespace: default
Labels:
Annotations:

Type: Opaque

Data
====
password: 8 bytes
username: 5 bytes

# 在Pod中使用Secret
# cat pod-with-secret.yaml
apiVersion: v1
kind: Pod
metadata:
name: pod-with-secret
spec:
containers:
– name: nginx
image: nginx:latest
ports:
– containerPort: 80
env:
– name: USERNAME
valueFrom:
secretKeyRef:
name: my-secret
key: username
– name: PASSWORD
valueFrom:
secretKeyRef:
name: my-secret
key: password

# 部署Pod
# kubectl apply -f pod-with-secret.yaml
pod/pod-with-secret created

# 验证环境变量
# kubectl exec pod-with-secret — env | grep -E “USERNAME|PASSWORD”
USERNAME=admin
PASSWORD=secret123

# 部署PersistentVolume
# kubectl apply -f pv.yaml
persistentvolume/my-pv created

# 查看PersistentVolume
# kubectl get pv
NAME CAPACITY ACCESS MODES RECLAIM POLICY STATUS CLAIM STORAGECLASS REASON AGE
my-pv 1Gi RWO Retain Available 1m

# 创建PersistentVolumeClaim
# cat pvc.yaml
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: my-pvc
spec:
accessModes:
– ReadWriteOnce
resources:
requests:
storage: 1Gi

# 部署PersistentVolumeClaim
# kubectl apply -f pvc.yaml
persistentvolumeclaim/my-pvc created

# 查看PersistentVolumeClaim
# kubectl get pvc
NAME STATUS VOLUME CAPACITY ACCESS MODES STORAGECLASS AGE
my-pvc Bound my-pv 1Gi RWO 1m

# 在Pod中使用PersistentVolumeClaim
# cat pod-with-pvc.yaml
apiVersion: v1
kind: Pod
metadata:
name: pod-with-pvc
spec:
containers:
– name: nginx
image: nginx:latest
ports:
– containerPort: 80
volumeMounts:
– name: data-volume
mountPath: /usr/share/nginx/html
volumes:
– name: data-volume
persistentVolumeClaim:
claimName: my-pvc

# 部署Pod
# kubectl apply -f pod-with-pvc.yaml
pod/pod-with-pvc created

# 使用资源限制
# cat deployment-with-resources.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: nginx-deployment
namespace: production
spec:
replicas: 3
selector:
matchLabels:
app: nginx
template:
metadata:
labels:
app: nginx
spec:
containers:
– name: nginx
image: nginx:latest
ports:
– containerPort: 80
resources:
requests:
cpu: 100m
memory: 128Mi
limits:
cpu: 500m
memory: 256Mi

# 部署Deployment
# kubectl apply -f deployment-with-resources.yaml

# 使用健康检查
# cat deployment-with-healthchecks.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: nginx-deployment
namespace: production
spec:
replicas: 3
selector:
matchLabels:
app: nginx
template:
metadata:
labels:
app: nginx
spec:
containers:
– name: nginx
image: nginx:latest
ports:
– containerPort: 80
readinessProbe:
httpGet:
path: /
port: 80
initialDelaySeconds: 5
periodSeconds: 10
livenessProbe:
httpGet:
path: /
port: 80
initialDelaySeconds: 15
periodSeconds: 20

# 部署Deployment
# kubectl apply -f deployment-with-healthchecks.yaml

# 使用水平自动缩放
# kubectl autoscale deployment nginx-deployment –namespace=production –min=3 –max=10 –cpu-percent=80
horizontalpodautoscaler.autoscaling/nginx-deployment autoscaled

# 查看水平自动缩放状态
# kubectl get hpa -n production
NAME REFERENCE TARGETS MINPODS MAXPODS REPLICAS AGE
nginx-deployment Deployment/nginx-deployment 0%/80% 3 10 3 1m