a ctfer on the load

1
kubectl get pods
2
NAME                                  READY   STATUS    RESTARTS   AGE
3
redis-c479dfb5-wcj8g                  1/1     Running   0          45h
4
yunjisuan-backend-5fbbd85dd8-kkqq7    1/1     Running   0          43h
5
yunjisuan-frontend-56fd559cbd-gjf2b   1/1     Running   0          43h

1
kubectl get deployments
2
NAME                 READY   UP-TO-DATE   AVAILABLE   AGE
3
redis                1/1     1            1           45h
4
yunjisuan-backend    1/1     1            1           43h
5
yunjisuan-frontend   1/1     1            1           43h

1
Deployment
2
   └── ReplicaSet（自动管理）
3
         └── Pod（实际运行）

1
apiVersion: apps/v1
2
kind: Deployment
3
metadata:
4
  name: my-backend
5
spec:
6
  replicas: 3
7
  selector:
8
    matchLabels:
9
      app: my-backend
10
  template:
11
    metadata:
12
      labels:
13
        app: my-backend
14
    spec:
15
      containers:
16
        - name: app
17
          image: my-backend:latest
18
          ports:
19
            - containerPort: 8080

1
apiVersion: v1
2
kind: Service
3
metadata:
4
  name: my-backend-service
5
spec:
6
  type: ClusterIP
7
  selector:
8
    app: my-backend
9
  ports:
10
    - port: 80           # Service 暴露的端口
11
      targetPort: 8080   # 容器实际监听的端口

1
apiVersion: v1
2
kind: Pod
3
metadata:
4
  name: my-backend-pod
5
  labels:
6
    app: my-backend
7
    tier: backend
8
spec:
9
  containers:
10
    - name: backend
11
      image: my-backend:latest
12
      ports:
13
        - containerPort: 8080

1
apiVersion: v1
2
kind: Service
3
metadata:
4
  name: my-backend-service
5
spec:
6
  selector:
7
    app: my-backend
8
  ports:
9
    - port: 80
10
      targetPort: 8080

1
[ Service ]
2
   |
3
   └── selector: app=xxx
4
         ↓（匹配标签）
5
   ┌───────────────┐
6
   │    Pod 1      │ ← labels: app=xxx
7
   ├───────────────┤
8
   │    Pod 2      │ ← labels: app=xxx
9
   └───────────────┘
10

11
Service 自动负载均衡访问这两个 Pod！

1
kind: Role
2
metadata:
3
  namespace: dev
4
rules:
5
  - apiGroups: [""]
6
    resources: ["pods"]
7
    verbs: ["get", "list", "create"]

1
apiVersion: v1
2
kind: ResourceQuota
3
metadata:
4
  name: mem-cpu-limit
5
  namespace: dev
6
spec:
7
  hard:
8
    requests.cpu: "2"
9
    requests.memory: 4Gi
10
    limits.cpu: "4"
11
    limits.memory: 8Gi

1
apiVersion: v1
2
kind: ConfigMap
3
metadata:
4
  name: my-config
5
  namespace: default
6
data:
7
  APP_NAME: "MyApp"
8
  APP_ENV: "dev"
9
  CONFIG_JSON: |
10
    {
11
      "logLevel": "debug",
12
      "maxConn": 100
13
    }

1
env:
2
  - name: APP_NAME
3
    valueFrom:
4
      configMapKeyRef:
5
        name: my-config
6
        key: APP_NAME

1
env:
2
  - name: APP_NAME
3
    valueFrom:
4
      configMapKeyRef:
5
        name: my-config
6
        key: APP_NAME

1
apiVersion: v1
2
kind: Secret
3
metadata:
4
  name: my-secret
5
  namespace: default
6
type: Opaque
7
data:
8
  DB_PASSWORD: bXlwYXNzd29yZA==

1
env:
2
  - name: DB_PASSWORD
3
    valueFrom:
4
      secretKeyRef:
5
        name: my-secret
6
        key: DB_PASSWORD

1
volumes:
2
  - name: secret-vol
3
    secret:
4
      secretName: my-secret
5
volumeMounts:
6
  - name: secret-vol
7
    mountPath: "/etc/secret"

1
[ 开发者 ]
2
    ↓ docker build
3
[ 本地镜像 ]
4
    ↓ docker push
5
[ 镜像仓库（如 Harbor / Docker Hub） ]
6
    ↓ kubectl apply
7
[ K8s 控制器 ]
8
    ↓ 调度到 Node
9
[ kubelet ]
10
    ↓ container runtime（Containerd）
11
[ Pod 中容器运行 ]

1
containers:
2
  - name: myapp
3
    image: registry.example.com/myapp:v1