# 单集群部署架构
# – KubeSphere集群
# – 应用商店组件
# – 应用实例
# – 持久化存储

# 多集群部署架构
# – 主集群（Host Cluster）
# – 应用商店组件
# – Helm Chart仓库
# – 成员集群（Member Cluster）
# – 应用实例
# – 持久化存储

# 应用商店组件资源需求
# – 应用商店前端：2 CPU, 4GB RAM
# – 应用商店后端：4 CPU, 8GB RAM
# – Helm Chart仓库：2 CPU, 4GB RAM
# – 数据库：4 CPU, 8GB RAM
# – 存储：100GB

# 网络规划
# – 应用商店服务端口：30880
# – Helm Chart仓库端口：8080
# – 数据库端口：3306
# – 内部网络：10.233.0.0/16

# 存储类型
# – 应用商店数据：ReadWriteOnce
# – Helm Chart仓库：ReadWriteMany
# – 应用数据：ReadWriteOnce

# 存储容量规划
# – 应用商店数据：20GB
# – Helm Chart仓库：50GB
# – 应用数据：根据应用需求

# 下载KubeSphere安装包
wget https://github.com/kubesphere/kubekey/releases/download/v3.4.1/kubekey-v3.4.1-linux-amd64.tar.gz
–2026-01-15 10:00:00– https://github.com/kubesphere/kubekey/releases/download/v3.4.1/kubekey-v3.4.1-linux-amd64.tar.gz
Resolving github.com… 140.82.112.4
Connecting to github.com|140.82.112.4|:443… connected.
HTTP request sent, awaiting response… 200 OK
Length: 12345678 (12M) [application/octet-stream]
Saving to: ‘kubekey-v3.4.1-linux-amd64.tar.gz’

# 解压安装包
tar -xzf kubekey-v3.4.1-linux-amd64.tar.gz

# 创建集群配置文件
./kk create config –with-kubesphere v3.4.1 –with-kubernetes v1.26.5
Generate cluster config file successfully

# 创建集群
./kk create cluster -f config-sample.yaml
_ __ _ _ __
| | / / | | | | / /
| |/ / _ _| |__ ___| |/ / ___ _ _
| \| | | | ‘_ \ / _ \ \ / _ \ | | |
| |\ \ |_| | |_) | __/ |\ \ __/ |_| |
\_| \_/\__,_|_.__/ \___|_| \_/\___|\__, |
__/ |
|___/

KubeSphere v3.4.1
KubeKey v3.4.1

Cluster creation started!

# 启用应用商店
kubectl edit cm ks-installer -n kubesphere-system
# 在配置文件中添加以下内容
# openpitrix:
# store:
# enabled: true

# 重启安装器
kubectl rollout restart deployment ks-installer -n kubesphere-system
deployment.apps/ks-installer restarted

# 查看安装状态
kubectl logs -n kubesphere-system deployment/ks-installer -f
I0115 10:10:00.000000 1 controller.go:114] OpenPitrix store component is enabled

# 添加Helm仓库
helm repo add chartmuseum https://chartmuseum.github.io/charts
helm repo update
“chartmuseum” has been added to your repositories
Hang tight while we grab the latest from your chart repositories…
…Successfully got an update from the “chartmuseum” chart repository
…Successfully got an update from the “kubesphere” chart repository

# 创建命名空间
kubectl create namespace chartmuseum
namespace/chartmuseum created

# 部署ChartMuseum
helm install chartmuseum chartmuseum/chartmuseum \
–namespace chartmuseum \
–set env.open.DISABLE_API=false \
–set env.open.STORAGE=local \
–set env.open.STORAGE_LOCAL_ROOTDIR=/charts \
–set persistence.enabled=true \
–set persistence.size=50Gi
NAME: chartmuseum
LAST DEPLOYED: Thu Jan 15 10:15:00 2026
NAMESPACE: chartmuseum
STATUS: deployed
REVISION: 1
NOTES:
1. Get the application URL by running these commands:
export POD_NAME=$(kubectl get pods –namespace chartmuseum -l “app.kubernetes.io/name=chartmuseum,app.kubernetes.io/instance=chartmuseum” -o jsonpath=”{.items[0].metadata.name}”)
export CONTAINER_PORT=$(kubectl get pod –namespace chartmuseum $POD_NAME -o jsonpath=”{.spec.containers[0].ports[0].containerPort}”)
echo “Visit http://127.0.0.1:8080 to use your application”
kubectl –namespace chartmuseum port-forward $POD_NAME 8080:$CONTAINER_PORT

# 创建Helm Chart
helm create myapp-chart
Creating myapp-chart

# 查看Chart结构
tree myapp-chart
myapp-chart/
├── Chart.yaml
├── charts/
├── templates/
│ ├── deployment.yaml
│ ├── _helpers.tpl
│ ├── hpa.yaml
│ ├── ingress.yaml
│ ├── NOTES.txt
│ ├── serviceaccount.yaml
│ ├── service.yaml
│ └── tests/
│ └── test-connection.yaml
├── .helmignore
，
└── values.yaml

# 编辑Chart.yaml
cat myapp-chart/Chart.yaml
apiVersion: v2
name: myapp-chart
description: A Helm chart for myapp
type: application
version: 0.1.0
appVersion: “1.0.0”
keywords:
– myapp
– web
maintainers:
– name: admin
email: admin@example.com

# 打包Chart
helm package myapp-chart
Successfully packaged chart and saved it to: myapp-chart-0.1.0.tgz

# 上传Chart到ChartMuseum
curl –data-binary “@myapp-chart-0.1.0.tgz” http://chartmuseum.chartmuseum.svc.cluster.local:8080/api/charts
{“saved”:true}

# 验证Chart
curl http://chartmuseum.chartmuseum.svc.cluster.local:8080/api/charts/myapp-chart
[
{
“name”: “myapp-chart”,
“version”: “0.1.0”,
“description”: “A Helm chart for myapp”,
“urls”: [
“charts/myapp-chart-0.1.0.tgz”
],
“created”: “2026-01-15T10:20:00.000Z”,
“digest”: “abc123def456”
}
]

# 在KubeSphere中添加Chart仓库
# 访问KubeSphere控制台 -> 应用商店 -> 仓库管理 -> 添加仓库
# 仓库名称：chartmuseum
# 仓库URL：http://chartmuseum.chartmuseum.svc.cluster.local:8080
# 认证方式：无需认证

# 同步Chart
# 在KubeSphere控制台中点击”同步”按钮
# 系统会自动从Chart仓库中同步所有Chart

# 通过应用商店部署应用
# 1. 访问KubeSphere控制台 -> 应用商店
# 2. 选择要部署的应用
# 3. 点击”安装”按钮
# 4. 配置应用参数
# 5. 选择部署位置
# 6. 点击”确定”开始部署

# 通过Helm命令部署应用
helm install myapp chartmuseum/myapp-chart \
–namespace myapp \
–create-namespace \
–set image.repository=nginx \
–set image.tag=latest \
–set service.type=ClusterIP \
–set replicaCount=3
NAME: myapp
LAST DEPLOYED: Thu Jan 15 10:25:00 2026
NAMESPACE: myapp
STATUS: deployed
REVISION: 1
NOTES:
1. Get the application URL by running these commands:
export POD_NAME=$(kubectl get pods –namespace myapp -l “app.kubernetes.io/name=myapp,app.kubernetes.io/instance=myapp” -o jsonpath=”{.items[0].metadata.name}”)
export CONTAINER_PORT=$(kubectl get pod –namespace myapp $POD_NAME -o jsonpath=”{.spec.containers[0].ports[0].containerPort}”)
echo “Visit http://127.0.0.1:8080 to use your application”
kubectl –namespace myapp port-forward $POD_NAME 8080:$CONTAINER_PORT

# 查看部署状态
helm list -n myapp
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
myapp myapp 1 2026-01-15 10:25:00.000Z +0000 UTC deployed myapp-chart-0.1.0 1.0.0

# 查看Pod状态
kubectl get pods -n myapp
NAME READY STATUS RESTARTS AGE
myapp-7d6f8b9c5d-abc123 1/1 Running 0 2m
myapp-7d6f8b9c5d-def456 1/1 Running 0 2m
myapp-7d6f8b9c5d-ghi789 1/1 Running 0 2m

# 升级应用
helm upgrade myapp chartmuseum/myapp-chart \
–namespace myapp \
–set image.tag=1.0.1 \
–set replicaCount=5
Release “myapp” has been upgraded. Happy Helming!
NAME: myapp
LAST DEPLOYED: Thu Jan 15 10:30:00 2026
NAMESPACE: myapp
STATUS: deployed
REVISION: 2
NOTES:
1. Get the application URL by running these commands:
export POD_NAME=$(kubectl get pods –namespace myapp -l “app.kubernetes.io/name=myapp,app.kubernetes.io/instance=myapp” -o jsonpath=”{.items[0].metadata.name}”)
export CONTAINER_PORT=$(kubectl get pod –namespace myapp $POD_NAME -o jsonpath=”{.spec.containers[0].ports[0].containerPort}”)
echo “Visit http://127.0.0.1:8080 to use your application”
kubectl –namespace myapp port-forward $POD_NAME 8080:$CONTAINER_PORT

# 查看升级历史
helm history myapp -n myapp
REVISION UPDATED STATUS CHART APP VERSION DESCRIPTION
1 Thu Jan 15 10:25:00 2026 superseded myapp-chart-0.1.0 1.0.0 Install complete
2 Thu Jan 15 10:30:00 2026 deployed myapp-chart-0.1.0 1.0.1 Upgrade complete

# 回滚应用
helm rollback myapp 1 -n myapp
Rollback was a success! Happy Helming!

# 查看回滚状态
helm list -n myapp
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
myapp myapp 3 2026-01-15 10:35:00.000Z +0000 UTC deployed myapp-chart-0.1.0 1.0.0

# 卸载应用
helm uninstall myapp -n myapp
release “myapp” uninstalled

# 验证卸载
kubectl get pods -n myapp
No resources found in myapp namespace.

# 删除命名空间
kubectl delete namespace myapp
namespace “myapp” deleted

# 创建MySQL Chart
helm create mysql-chart
Creating mysql-chart

# 编辑values.yaml
cat mysql-chart/values.yaml
replicaCount: 1

image:
repository: mysql
pullPolicy: IfNotPresent
tag: “8.0”

service:
type: ClusterIP
port: 3306

persistence:
enabled: true
size: 20Gi
storageClass: “standard”

mysqlRootPassword: “root123”
mysqlDatabase: “mydb”
mysqlUser: “myuser”
mysqlPassword: “mypassword”

# 编辑deployment.yaml
cat mysql-chart/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: {{ include “mysql-chart.fullname” . }}
labels:
{{- include “mysql-chart.labels” . | nindent 4 }}
spec:
replicas: {{ .Values.replicaCount }}
selector:
matchLabels:
{{- include “mysql-chart.selectorLabels” . | nindent 6 }}
template:
metadata:
labels:
{{- include “mysql-chart.selectorLabels” . | nindent 8 }}
spec:
containers:
– name: mysql
image: “{{ .Values.image.repository }}:{{ .Values.image.tag }}”
，
ports:
– containerPort: {{ .Values.service.port }}
env:
– name: MYSQL_ROOT_PASSWORD
value: {{ .Values.mysqlRootPassword }}
– name: MYSQL_DATABASE
value: {{ .Values.mysqlDatabase }}
– name: MYSQL_USER
value: {{ .Values.mysqlUser }}
– name: MYSQL_PASSWORD
value: {{ .Values.mysqlPassword }}
volumeMounts:
– name: mysql-data
mountPath: /var/lib/mysql
volumes:
– name: mysql-data
persistentVolumeClaim:
claimName: {{ include “mysql-chart.fullname” . }}

# 编辑service.yaml
cat mysql-chart/templates/service.yaml
apiVersion: v1
kind: Service
metadata:
name: {{ include “mysql-chart.fullname” . }}
labels:
{{- include “mysql-chart.labels” . | nindent 4 }}
spec:
type: {{ .Values.service.type }}
ports:
– port: {{ .Values.service.port }}
targetPort: {{ .Values.service.port }}
protocol: TCP
name: mysql
selector:
{{- include “mysql-chart.selectorLabels” . | nindent 6 }}

# 编辑pvc.yaml
cat mysql-chart/templates/pvc.yaml
{{- if .Values.persistence.enabled }}
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: {{ include “mysql-chart.fullname” . }}
labels:
{{- include “mysql-chart.labels” . | nindent 4 }}
spec:
accessModes:
– ReadWriteOnce
storageClassName: {{ .Values.persistence.storageClass }}
resources:
requests:
storage: {{ .Values.persistence.size }}
{{- end }}

# 打包MySQL Chart
helm package mysql-chart
Successfully packaged chart and saved it to: mysql-chart-0.1.0.tgz

# 上传Chart到ChartMuseum
curl –data-binary “@mysql-chart-0.1.0.tgz” http://chartmuseum.chartmuseum.svc.cluster.local:8080/api/charts
{“saved”:true}

# 部署MySQL
helm install mysql chartmuseum/mysql-chart \
–namespace mysql \
–create-namespace
NAME: mysql
LAST DEPLOYED: Thu Jan 15 10:40:00 2026
NAMESPACE: mysql
STATUS: deployed
REVISION: 1
NOTES:
1. Get the application URL by running these commands:
export POD_NAME=$(kubectl get pods –namespace mysql -l “app.kubernetes.io/name=mysql-chart,app.kubernetes.io/instance=mysql” -o jsonpath=”{.items[0].metadata.name}”)
export CONTAINER_PORT=$(kubectl get pod –namespace mysql $POD_NAME -o jsonpath=”{.spec.containers[0].ports[0].containerPort}”)
echo “Visit http://127.0.0.1:3306 to use your application”
kubectl –namespace mysql port-forward $POD_NAME 3306:$CONTAINER_PORT

# 查看Pod状态
kubectl get pods -n mysql
NAME READY STATUS RESTARTS AGE
mysql-7d6f8b9c5d-abc123 1/1 Running 0 1m

# 查看Service
kubectl get svc -n mysql
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
mysql ClusterIP 10.233.123.456 3306/TCP 1m

# 测试MySQL连接
kubectl run -it –rm mysql-client –image=mysql:8.0 –restart=Never -n mysql — mysql -h mysql -u myuser -pmypassword
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 8
Server version: 8.0.35 MySQL Community Server – GPL

Copyright (c) 2000, 2026, Oracle and/or its affiliates.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the current input statement.

mysql> SHOW DATABASES;
+——————–+
| Database |
+——————–+
，
| information_schema |
| mydb |
| mysql |
| performance_schema |
| sys |
+——————–+
5 rows in set (0.00 sec)

mysql> exit
Bye

# 创建Redis Chart
helm create redis-chart
Creating redis-chart

# 编辑values.yaml
cat redis-chart/values.yaml
replicaCount: 1

image:
repository: redis
pullPolicy: IfNotPresent
tag: “7.0”

service:
type: ClusterIP
port: 6379

persistence:
enabled: true
size: 10Gi
storageClass: “standard”

redisPassword: “redis123”

# 编辑deployment.yaml
cat redis-chart/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: {{ include “redis-chart.fullname” . }}
labels:
{{- include “redis-chart.labels” . | nindent 4 }}
spec:
replicas: {{ .Values.replicaCount }}
selector:
matchLabels:
{{- include “redis-chart.selectorLabels” . | nindent 6 }}
template:
metadata:
labels:
{{- include “redis-chart.selectorLabels” . | nindent 8 }}
spec:
containers:
– name: redis
image: “{{ .Values.image.repository }}:{{ .Values.image.tag }}”
ports:
– containerPort: {{ .Values.service.port }}
command:
– redis-server
– –requirepass
– {{ .Values.redisPassword }}
volumeMounts:
– name: redis-data
mountPath: /data
volumes:
– name: redis-data
persistentVolumeClaim:
claimName: {{ include “redis-chart.fullname” . }}

# 打包Redis Chart
helm package redis-chart
Successfully packaged chart and saved it to: redis-chart-0.1.0.tgz

# 上传Chart到ChartMuseum
curl –data-binary “@redis-chart-0.1.0.tgz” http://chartmuseum.chartmuseum.svc.cluster.local:8080/api/charts
{“saved”:true}

# 部署Redis
helm install redis chartmuseum/redis-chart \
–namespace redis \
–create-namespace
NAME: redis
LAST DEPLOYED: Thu Jan 15 10:45:00 2026
NAMESPACE: redis
STATUS: deployed
REVISION: 1
NOTES:
1. Get the application URL by running these commands:
export POD_NAME=$(kubectl get pods –namespace redis -l “app.kubernetes.io/name=redis-chart,app.kubernetes.io/instance=redis” -o jsonpath=”{.items[0].metadata.name}”)
export CONTAINER_PORT=$(kubectl get pod –namespace redis $POD_NAME -o jsonpath=”{.spec.containers[0].ports[0].containerPort}”)
echo “Visit http://127.0.0.1:6379 to use your application”
kubectl –namespace redis port-forward $POD_NAME 6379:$CONTAINER_PORT

# 查看Pod状态
kubectl get pods -n redis
NAME READY STATUS RESTARTS AGE
redis-7d6f8b9c5d-abc123 1/1 Running 0 1m

# 测试Redis连接
kubectl run -it –rm redis-client –image=redis:7.0 –restart=Never -n redis — redis-cli -h redis -a redis123
Warning: Using a password with ‘-a’ or ‘-u’ option on the command line interface may not be safe.
redis> PING
，
PONG
redis> SET mykey “Hello World”
OK
redis> GET mykey
“Hello World”
redis> exit