給所有master taint ,禁止所有pod 運行在master 節點。
kubectl taint nodes dl-demo-k8s-master-01 node.kubernetes.io=unschedulable:NoSchedule
kubectl taint nodes dl-demo-k8s-master-02 node.kubernetes.io=unschedulable:NoSchedule
kubectl taint nodes dl-demo-k8s-master-03 node.kubernetes.io=unschedulable:NoSchedule
master
kubectl taint nodes k8s-master03.ali.jccfc.io node-role.kubernetes.io/master=unschedulable:NoSchedule
刪除 taint 規則
kubectl taint node --all node.kubernetes.io:NoSchedule-
給一個 Deployment 添加 tolerations 策略允許 在污染節點創建pod.
spec:
tolerations:
- key: "node.kubernetes.io"
effect: "NoSchedule"
value: "unschedulable"
operator: "Equal"
[參考鏈接:Kubernetes之Taints與Tolerations 污點和容忍](https://cloud.tencent.com/info/21f27eb131873f979d6275f085dfabdc.html)
- 方案設計
- 使用kubespray部署k8s集群
- 使用ingress 訪問dashboard v1.8.3
- 在 Kubernetes 中配置私有 DNS 和上游域名服務器(coredns forward)
- master 節點添加taint
- limitrang
- 配置私有倉庫
- 利用NFS動態提供Kubernetes后端存儲卷
- ingress 添加https 客戶端雙向認證
- 應用日采集
- eureka 遷移 k8s 集群
- 鏡像下載地址
- helm install
- Install istio
- zookeeper 集群部署
- 基于prometheus自定義rabbitmq—exporter指標HPA彈性伸縮
- nacos huaweicloud