Karɓar gungu na Kubernetes ta amfani da tiller Helm v2

Helm manajan kunshin ne na Kubernetes, wani abu kamar apt-get don Ubuntu. A cikin wannan bayanin za mu ga sigar baya ta helm (v2) tare da shigar da sabis na tiller ta tsohuwa, ta inda za mu sami damar gungu.

Bari mu shirya gungu; don yin wannan, gudanar da umarni:

kubectl run --rm --restart=Never -it --image=madhuakula/k8s-goat-helm-tiller -- bash

Zanga-zanga

• Idan baku saita wani ƙarin wani abu ba, helm v2 yana fara sabis ɗin tiller, wanda ke da RBAC tare da cikakken haƙƙin gudanarwar gungu.
• Bayan shigarwa a cikin filin suna kube-system ya bayyana tiller-deploy, kuma yana buɗe tashar jiragen ruwa 44134, daure zuwa 0.0.0.0. Ana iya bincika wannan ta amfani da telnet.

$ telnet tiller-deploy.kube-system 44134

• Yanzu zaku iya haɗawa zuwa sabis na tiller. Za mu yi amfani da binary helm don aiwatar da ayyuka yayin sadarwa tare da sabis na tiller:

$ helm --host tiller-deploy.kube-system:44134 version

• Bari mu yi ƙoƙarin samun sirrin gungu na Kubernetes daga sararin suna kube-system:

$ kubectl get secrets -n kube-system

• Yanzu za mu iya ƙirƙirar namu ginshiƙi, a cikinsa za mu ƙirƙiri wani rawa tare da haƙƙin gudanarwa da kuma sanya wannan rawar zuwa tsoho asusun sabis. Yin amfani da alamar daga wannan asusun sabis, mun sami cikakken damar shiga gungu namu.

$ helm --host tiller-deploy.kube-system:44134 install /pwnchart

• Yanzu yaushe pwnchart tura, tsohuwar asusun sabis yana da cikakken damar gudanarwa. Bari mu sake duba yadda ake samun sirri daga kube-system

kubectl get secrets -n kube-system

Nasarar aiwatar da wannan rubutun ya dogara da yadda aka tura tiller; wani lokaci masu gudanar da aiki suna tura shi a wani wurin suna daban tare da gata daban-daban. Helm 3 ba shi da saukin kamuwa da irin wannan raunin saboda ... babu nono a ciki.

Bayanan fassarar: Yin amfani da manufofin cibiyar sadarwa don tace zirga-zirga a cikin gungu yana taimakawa kariya daga irin wannan lahani.

source: www.habr.com