容器编排系统K8s之包管理器Helm基础使用(二)

  前文我们介绍了helm的相关术语和使用helm安装和卸载应用,回顾请参考:https://www.cnblogs.com/qiuhom-1874/p/14305902.html;今天我们来介绍下自定义chart以及打包chart,helm其他命令使用和私有helm仓库搭建相关话题;

  继上一篇博客,我们了解了使用helm在k8s上安装应用,卸载应用,以及仓库的添加删除更新等等操作;对于helm chart来说,它就是一个打包文件,把我们需要用到的配置清单,以模板的形式发布出来,用户使用时,可以根据values.yaml文件来自行定义对应的属性的值,当然也可以使用--set选项来指定个别配置清单的属性的值;那么我们使用helm命令从仓库中安装应用,它对应的打包文件放在那里的呢?默认情况我们使用helm命令安装应用,它会把对应应用的chart 打包文件存放在当前用户的家目录中的.cache/helm/repository/目录下,以.tgz结尾的一个压缩包;如下

容器编排系统K8s之包管理器Helm基础使用(二)

  提示:上述目录只要我们使用过helm install命令安装应用,对应的chart 打包文件都会下载到此处;

  查看对应打包目录结构

[root@master01 ~]# ll .cache/helm/repository/
total 6520
-rw-r--r-- 1 root root     865 Jan 21 02:23 bitnami-charts.txt
-rw-r--r-- 1 root root 6555926 Jan 21 02:23 bitnami-index.yaml
-rw-r--r-- 1 root root    4381 Jan 20 23:19 redis
-rw-r--r-- 1 root root   31909 Jan 20 22:54 redis-10.5.7.tgz
-rw-r--r-- 1 root root   72791 Jan 21 02:26 redis-12.6.2.tgz
[root@master01 ~]# cp .cache/helm/repository/redis-12.6.2.tgz .
[root@master01 ~]# ls
redis-12.6.2.tgz
[root@master01 ~]# tar xf redis-12.6.2.tgz 
[root@master01 ~]# ls
redis  redis-12.6.2.tgz
[root@master01 ~]# tree redis
redis
├── Chart.lock
├── charts
│   └── common
│       ├── Chart.yaml
│       ├── README.md
│       ├── templates
│       │   ├── _affinities.tpl
│       │   ├── _capabilities.tpl
│       │   ├── _errors.tpl
│       │   ├── _images.tpl
│       │   ├── _ingress.tpl
│       │   ├── _labels.tpl
│       │   ├── _names.tpl
│       │   ├── _secrets.tpl
│       │   ├── _storage.tpl
│       │   ├── _tplvalues.tpl
│       │   ├── _utils.tpl
│       │   ├── validations
│       │   │   ├── _cassandra.tpl
│       │   │   ├── _mariadb.tpl
│       │   │   ├── _mongodb.tpl
│       │   │   ├── _postgresql.tpl
│       │   │   ├── _redis.tpl
│       │   │   └── _validations.tpl
│       │   └── _warnings.tpl
│       └── values.yaml
├── Chart.yaml
├── ci
│   ├── default-values.yaml
│   ├── extra-flags-values.yaml
│   └── production-sentinel-values.yaml
├── img
│   ├── redis-cluster-topology.png
│   └── redis-topology.png
├── README.md
├── templates
│   ├── configmap-scripts.yaml
│   ├── configmap.yaml
│   ├── headless-svc.yaml
│   ├── health-configmap.yaml
│   ├── _helpers.tpl
│   ├── metrics-prometheus.yaml
│   ├── metrics-svc.yaml
│   ├── networkpolicy.yaml
│   ├── NOTES.txt
│   ├── pdb.yaml
│   ├── prometheusrule.yaml
│   ├── psp.yaml
│   ├── redis-master-statefulset.yaml
│   ├── redis-master-svc.yaml
│   ├── redis-node-statefulset.yaml
│   ├── redis-rolebinding.yaml
│   ├── redis-role.yaml
│   ├── redis-serviceaccount.yaml
│   ├── redis-slave-statefulset.yaml
│   ├── redis-slave-svc.yaml
│   ├── redis-with-sentinel-svc.yaml
│   └── secret.yaml
├── values.schema.json
└── values.yaml

7 directories, 53 files
[root@master01 ~]# 

  提示:charts目录主要用来存放对应chart所依赖的其他chart文件;chart.yaml文件主要用来描述对应chart的元数据信息,比如chart 的版本,名字,简介信息等等;ci目录用于存放各种环境的values.yaml文件,默认情况不指定values文件,对应生效的是values.yaml文件;img目录主要用于存放对应chart在仓库中对应的图标;README.md文件用于描述该chart的使用方式,部署手册等等信息;template目录主要用来存放该chart部署为release所需的所有资源清单文件,该目录下的资源清单文件不是我们前边使用的资源清单文件,它里面的格式是通过go模板语言写的资源清单,在使用时,我们必须结合values.yaml中定义的值,通过模板引擎将其渲染以后才能正常使用;values.yaml文件主要用来描述对应资源模板清单中对应属性的默认值,一般不指定values文件,chart应用的值都来自于values.yaml文件,当然用户可以通过--set 来指定对应属性的值,也可以手动编辑values文件,用--values或者-f选项指定对应的值文件也行;

  创建自定义chart命令帮助

[root@master01 ~]# helm create -h

This command creates a chart directory along with the common files and
directories used in a chart.

For example, 'helm create foo' will create a directory structure that looks
something like this:

    foo/
    ├── .helmignore   # Contains patterns to ignore when packaging Helm charts.
    ├── Chart.yaml    # Information about your chart
    ├── values.yaml   # The default values for your templates
    ├── charts/       # Charts that this chart depends on
    └── templates/    # The template files
        └── tests/    # The test files

'helm create' takes a path for an argument. If directories in the given path
do not exist, Helm will attempt to create them as it goes. If the given
destination exists and there are files in that directory, conflicting files
will be overwritten, but other files will be left alone.

Usage:
  helm create NAME [flags]

Flags:
  -h, --help             help for create
  -p, --starter string   the name or absolute path to Helm starter scaffold

Global Flags:
      --debug                       enable verbose output
      --kube-apiserver string       the address and the port for the Kubernetes API server
      --kube-as-group stringArray   group to impersonate for the operation, this flag can be repeated to specify multiple groups.
      --kube-as-user string         username to impersonate for the operation
      --kube-ca-file string         the certificate authority file for the Kubernetes API server connection
      --kube-context string         name of the kubeconfig context to use
      --kube-token string           bearer token used for authentication
      --kubeconfig string           path to the kubeconfig file
  -n, --namespace string            namespace scope for this request
      --registry-config string      path to the registry config file (default "/root/.config/helm/registry.json")
      --repository-cache string     path to the file containing cached repository indexes (default "/root/.cache/helm/repository")
      --repository-config string    path to the file containing repository names and URLs (default "/root/.config/helm/repositories.yaml")
[root@master01 ~]# 

  示例:创建一个myapp的chart

[root@master01 ~]# helm create myapp
Creating myapp
[root@master01 ~]# ls
myapp  redis  redis-12.6.2.tgz
[root@master01 ~]# tree myapp/
myapp/
├── charts
├── Chart.yaml
├── templates
│   ├── deployment.yaml
│   ├── _helpers.tpl
│   ├── hpa.yaml
│   ├── ingress.yaml
│   ├── NOTES.txt
│   ├── serviceaccount.yaml
│   ├── service.yaml
│   └── tests
│       └── test-connection.yaml
└── values.yaml

3 directories, 10 files
[root@master01 ~]# 

  查看chart.yaml文件内容

[root@master01 ~]# cat myapp/Chart.yaml 
apiVersion: v2
name: myapp
description: A Helm chart for Kubernetes

# A chart can be either an 'application' or a 'library' chart.
#
# Application charts are a collection of templates that can be packaged into versioned archives
# to be deployed.
#
# Library charts provide useful utilities or functions for the chart developer. They're included as
# a dependency of application charts to inject those utilities and functions into the rendering
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
type: application

# This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version.
# Versions are expected to follow Semantic Versioning (https://semver.org/)
version: 0.1.0

# This is the version number of the application being deployed. This version number should be
# incremented each time you make changes to the application. Versions are not expected to
# follow Semantic Versioning. They should reflect the version the application is using.
# It is recommended to use it with quotes.
appVersion: "1.16.0"
[root@master01 ~]# 

  提示:Chart.yaml文件主要用来描述对应chart的相关属性信息,其中apiVersion字段用于描述对应chart使用的api版本,默认是v2版本;name字段用于描述对应chart的名称;description字段用于描述对应chart的说明简介;type字段用户描述对应chart是应用程序还是库文件,应用程序类型的chart,它可以运行为一个release,但库类型的chart不能运行为release,它只能作为依赖被application类型的chart所使用;version字段用于描述对应chart版本;appVersion字段用于描述对应chart内部程序的版本信息;

  查看模板文件

[root@master01 ~]# ll myapp/templates/
total 28
-rw-r--r-- 1 root root 1826 Jan 21 14:44 deployment.yaml
-rw-r--r-- 1 root root 1762 Jan 21 14:44 _helpers.tpl
-rw-r--r-- 1 root root  910 Jan 21 14:44 hpa.yaml
-rw-r--r-- 1 root root 1052 Jan 21 14:44 ingress.yaml
-rw-r--r-- 1 root root 1739 Jan 21 14:44 NOTES.txt
-rw-r--r-- 1 root root  316 Jan 21 14:44 serviceaccount.yaml
-rw-r--r-- 1 root root  355 Jan 21 14:44 service.yaml
drwxr-xr-x 2 root root   34 Jan 21 14:44 tests
[root@master01 ~]# cat myapp/templates/deployment.yaml 
apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ include "myapp.fullname" . }}
  labels:
    {{- include "myapp.labels" . | nindent 4 }}
spec:
  {{- if not .Values.autoscaling.enabled }}
  replicas: {{ .Values.replicaCount }}
  {{- end }}
  selector:
    matchLabels:
      {{- include "myapp.selectorLabels" . | nindent 6 }}
  template:
    metadata:
      {{- with .Values.podAnnotations }}
      annotations:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      labels:
        {{- include "myapp.selectorLabels" . | nindent 8 }}
    spec:
      {{- with .Values.imagePullSecrets }}
      imagePullSecrets:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      serviceAccountName: {{ include "myapp.serviceAccountName" . }}
      securityContext:
        {{- toYaml .Values.podSecurityContext | nindent 8 }}
      containers:
        - name: {{ .Chart.Name }}
          securityContext:
            {{- toYaml .Values.securityContext | nindent 12 }}
          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
          imagePullPolicy: {{ .Values.image.pullPolicy }}
          ports:
            - name: http
              containerPort: 80
              protocol: TCP
          livenessProbe:
            httpGet:
              path: /
              port: http
          readinessProbe:
            httpGet:
              path: /
              port: http
          resources:
            {{- toYaml .Values.resources | nindent 12 }}
      {{- with .Values.nodeSelector }}
      nodeSelector:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.affinity }}
      affinity:
        {{- toYaml . | nindent 8 }}
      {{- end }}
      {{- with .Values.tolerations }}
      tolerations:
        {{- toYaml . | nindent 8 }}
      {{- end }}
[root@master01 ~]# 

  提示:该部署清单模板文件,主要用go模板语言来写的,其中{{ include "myapp.fullname" . }}就表示取myapp的全名;{{ .Values.image.repository }}这段代码表示读取当前目录下的values文件中的image.repository字段的值;{{ .Values.image.tag | default .Chart.AppVersion }}表示对于values文件中image.tag的值或者读取default.chart文件中的AppVersion字段的值;简单讲go模板就是应用对应go模板语法来定义关属性的的值;一般都是从values.yaml文件中加载对应字段的值作为模板文件相关属性的值;

  values文件中的值引用

[root@master01 ~]# cat myapp/values.yaml 
# Default values for myapp.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

image:
  repository: nginx
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: ""

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

service:
  type: ClusterIP
  port: 80

ingress:
  enabled: false
  annotations: {}
    # kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
  hosts:
    - host: chart-example.local
      paths: []
  tls: []
  #  - secretName: chart-example-tls
  #    hosts:
  #      - chart-example.local

resources: {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #   cpu: 100m
  #   memory: 128Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

autoscaling:
  enabled: false
  minReplicas: 1
  maxReplicas: 100
  targetCPUUtilizationPercentage: 80
  # targetMemoryUtilizationPercentage: 80

nodeSelector: {}

tolerations: []

affinity: {}
[root@master01 ~]# 

  提示:比如我们要引用values.yaml文件中的image字段下的tag字段的值,我们可以在模板文件中写成{{ .Values.image.tag }};如果在命令行使用--set选项来应用我们可以写成 image.tag;修改对应的值可以直接编辑对应values.yaml文件中对应字段的值,也可以直接使用--set 指定对应字段的对应值即可;默认情况在命令行使用--set选项给出的值,都会直接被替换,没有给定的值,默认还是使用values.yaml文件中给定的默认值;

  示例:修改values.yaml文件中的值

[root@master01 ~]# cat myapp/values.yaml
# Default values for myapp.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

image:
  repository: ikubernetes/myapp
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: "v1"

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

service:
  type: ClusterIP
  port: 80

ingress:
  enabled: false
  annotations: {}
    # kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
  hosts:
    - host: chart-example.local
      paths: []
  tls: []
  #  - secretName: chart-example-tls
  #    hosts:
  #      - chart-example.local

resources: {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  limits:
    cpu: 100m
    memory: 128Mi
  requests:
    cpu: 100m
    memory: 128Mi

autoscaling:
  enabled: false
  minReplicas: 1
  maxReplicas: 100
  targetCPUUtilizationPercentage: 80
  # targetMemoryUtilizationPercentage: 80

nodeSelector: {}

tolerations: []

affinity: {}
[root@master01 ~]# 

  提示:上述values.yaml文件,我们修改了image.repository的值为ikubernetes/myapp和image.tag为v1;这表示对应chart使用程序的镜像仓库为ikubernetes/myapp仓库;版本为v1;然后修改了resources字段;添加了对应的资源限制配置;

  检查对应values文件的语法是否正确?

[root@master01 ~]# helm  lint ./myapp/
==> Linting ./myapp/
[INFO] Chart.yaml: icon is recommended
[ERROR] values.yaml: unable to parse YAML: error converting YAML to JSON: yaml: line 60: did not find expected key
[ERROR] templates/: cannot load values.yaml: error converting YAML to JSON: yaml: line 60: did not find expected key
[ERROR] : unable to load chart
        cannot load values.yaml: error converting YAML to JSON: yaml: line 60: did not find expected key

Error: 1 chart(s) linted, 1 chart(s) failed
[root@master01 ~]# 

  提示:检查values文件的配置语法,可以使用helm lint命令指定对应chart的目录即可;上述检查结果告诉我们所values.yaml的60配置有问题;

容器编排系统K8s之包管理器Helm基础使用(二)

  提示:上述values文件中,resource字段后面给定了对应的配置,对应{}就不能再使用,使用{}表示把resource字段留空;所以我们只需把对应的大括号删除即可;

  删除resource字段的大括号,再次检查values的语法

[root@master01 ~]# helm  lint ./myapp/  
==> Linting ./myapp/
[INFO] Chart.yaml: icon is recommended

1 chart(s) linted, 0 chart(s) failed
[root@master01 ~]# 

  提示:只要上述检查过程中没有出现错误的类信息,表示values语法正确;到此我们就可以使用我们手动创建的chart来部署为一个release了;

  修改Chart.yaml中的信息,将myapp chart 部署为一个release

[root@master01 ~]# cat ./myapp/Chart.yaml
apiVersion: v2
name: myapp
description: web server

# A chart can be either an 'application' or a 'library' chart.
#
# Application charts are a collection of templates that can be packaged into versioned archives
# to be deployed.
#
# Library charts provide useful utilities or functions for the chart developer. They're included as
# a dependency of application charts to inject those utilities and functions into the rendering
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
type: application

# This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version.
# Versions are expected to follow Semantic Versioning (https://semver.org/)
version: 0.1.0

# This is the version number of the application being deployed. This version number should be
# incremented each time you make changes to the application. Versions are not expected to
# follow Semantic Versioning. They should reflect the version the application is using.
# It is recommended to use it with quotes.
appVersion: "v1"
[root@master01 ~]# 

  应用myapp chart

[root@master01 ~]# helm install myapp-v1 ./myapp/ 
NAME: myapp-v1
LAST DEPLOYED: Thu Jan 21 15:15:52 2021
NAMESPACE: default
STATUS: deployed
REVISION: 1
NOTES:
1. Get the application URL by running these commands:
  export POD_NAME=$(kubectl get pods --namespace default -l "app.kubernetes.io/name=myapp,app.kubernetes.io/instance=myapp-v1" -o jsonpath="{.items[0].metadata.name}")
  export CONTAINER_PORT=$(kubectl get pod --namespace default $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
  echo "Visit http://127.0.0.1:8080 to use your application"
  kubectl --namespace default port-forward $POD_NAME 8080:$CONTAINER_PORT
[root@master01 ~]#

  提示:部署自定义chart 使用helm install 指定对应release名称,以及chart所在目录即可;

  查看release

[root@master01 ~]# helm list
NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART           APP VERSION
myapp-v1        default         1               2021-01-21 15:15:52.57286036 +0800 CST  deployed        myapp-0.1.0     v1         
redis           default         1               2021-01-21 02:26:26.13324987 +0800 CST  deployed        redis-12.6.2    6.0.10     
redis-demo      default         1               2021-01-21 01:58:18.20798703 +0800 CST  deployed        redis-12.6.2    6.0.10     
[root@master01 ~]# 

  查看对应pod是否正常运行?对应service是否正常创建?

容器编排系统K8s之包管理器Helm基础使用(二)

  提示:可以看到对应pod和svc都正常创建;

  升级release

  更改Chart.yaml文件中的内容

[root@master01 ~]# cat myapp/Chart.yaml
apiVersion: v2
name: myapp
description: web server

# A chart can be either an 'application' or a 'library' chart.
#
# Application charts are a collection of templates that can be packaged into versioned archives
# to be deployed.
#
# Library charts provide useful utilities or functions for the chart developer. They're included as
# a dependency of application charts to inject those utilities and functions into the rendering
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
type: application

# This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version.
# Versions are expected to follow Semantic Versioning (https://semver.org/)
version: 0.2.0

# This is the version number of the application being deployed. This version number should be
# incremented each time you make changes to the application. Versions are not expected to
# follow Semantic Versioning. They should reflect the version the application is using.
# It is recommended to use it with quotes.
appVersion: "v2"
[root@master01 ~]# 

  更改values.yaml文件中对应镜像的版本

[root@master01 ~]# cat myapp/values.yaml
# Default values for myapp.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

image:
  repository: ikubernetes/myapp
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: "v2"

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

service:
  type: ClusterIP
  port: 80

ingress:
  enabled: false
  annotations: {}
    # kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
  hosts:
    - host: chart-example.local
      paths: []
  tls: []
  #  - secretName: chart-example-tls
  #    hosts:
  #      - chart-example.local

resources: 
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  limits:
    cpu: 100m
    memory: 128Mi
  requests:
    cpu: 100m
    memory: 128Mi

autoscaling:
  enabled: false
  minReplicas: 1
  maxReplicas: 100
  targetCPUUtilizationPercentage: 80
  # targetMemoryUtilizationPercentage: 80

nodeSelector: {}

tolerations: []

affinity: {}
[root@master01 ~]# 

  使用upgrade命令升级release

[root@master01 ~]# helm list
NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART           APP VERSION
myapp-v1        default         1               2021-01-21 15:15:52.57286036 +0800 CST  deployed        myapp-0.1.0     v1         
redis           default         1               2021-01-21 02:26:26.13324987 +0800 CST  deployed        redis-12.6.2    6.0.10     
redis-demo      default         1               2021-01-21 01:58:18.20798703 +0800 CST  deployed        redis-12.6.2    6.0.10     
[root@master01 ~]# helm upgrade --set service.type="NodePort" myapp-v1 ./myapp/ 
Release "myapp-v1" has been upgraded. Happy Helming!
NAME: myapp-v1
LAST DEPLOYED: Thu Jan 21 15:24:22 2021
NAMESPACE: default
STATUS: deployed
REVISION: 2
NOTES:
1. Get the application URL by running these commands:
  export NODE_PORT=$(kubectl get --namespace default -o jsonpath="{.spec.ports[0].nodePort}" services myapp-v1)
  export NODE_IP=$(kubectl get nodes --namespace default -o jsonpath="{.items[0].status.addresses[0].address}")
  echo http://$NODE_IP:$NODE_PORT
[root@master01 ~]# helm list
NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART           APP VERSION
myapp-v1        default         2               2021-01-21 15:24:22.882236621 +0800 CST deployed        myapp-0.2.0     v2         
redis           default         1               2021-01-21 02:26:26.13324987 +0800 CST  deployed        redis-12.6.2    6.0.10     
redis-demo      default         1               2021-01-21 01:58:18.20798703 +0800 CST  deployed        redis-12.6.2    6.0.10     
[root@master01 ~]# kubectl get pods
NAME                        READY   STATUS        RESTARTS   AGE
myapp-v1-7c9d7c999f-8k6rm   0/1     Terminating   0          8m47s
myapp-v1-866b6d4cc6-nx87c   1/1     Running       0          16s
redis-demo-master-0         1/1     Running       1          13h
redis-demo-slave-0          1/1     Running       2          13h
redis-demo-slave-1          1/1     Running       7          13h
redis-master-0              1/1     Running       1          12h
redis-slave-0               1/1     Running       1          12h
redis-slave-1               1/1     Running       1          12h
[root@master01 ~]# kubectl get svc
NAME                  TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)        AGE
kubernetes            ClusterIP   10.96.0.1        <none>        443/TCP        15h
myapp-v1              NodePort    10.110.153.241   <none>        80:32434/TCP   8m53s
redis-demo-headless   ClusterIP   None             <none>        6379/TCP       13h
redis-demo-master     ClusterIP   10.109.45.70     <none>        6379/TCP       13h
redis-demo-slave      ClusterIP   10.111.222.218   <none>        6379/TCP       13h
redis-headless        ClusterIP   None             <none>        6379/TCP       12h
redis-master          ClusterIP   10.108.35.165    <none>        6379/TCP       12h
redis-slave           ClusterIP   10.99.96.166     <none>        6379/TCP       12h
[root@master01 ~]# 

  提示:可以看到对应myapp-v1pod和svc都发生了变化;

  验证:查看对应pod的版本信息

[root@master01 ~]# kubectl describe pods myapp-v1-866b6d4cc6-nx87c |grep Image
    Image:          ikubernetes/myapp:v2
    Image ID:       docker-pullable://ikubernetes/myapp@sha256:85a2b81a62f09a414ea33b74fb8aa686ed9b168294b26b4c819df0be0712d358
[root@master01 ~]# 

  当然如果更新操作改动的信息较少,我们也可以直接在命令使用--set选项来指定对应的属性的值进行更新也行,如下

[root@master01 ~]# helm list
NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART           APP VERSION
myapp-v1        default         2               2021-01-21 15:24:22.882236621 +0800 CST deployed        myapp-0.2.0     v2         
redis           default         1               2021-01-21 02:26:26.13324987 +0800 CST  deployed        redis-12.6.2    6.0.10     
redis-demo      default         1               2021-01-21 01:58:18.20798703 +0800 CST  deployed        redis-12.6.2    6.0.10     
[root@master01 ~]# helm upgrade --set image.tag="v3" myapp-v1 ./myapp/
Release "myapp-v1" has been upgraded. Happy Helming!
NAME: myapp-v1
LAST DEPLOYED: Thu Jan 21 15:29:46 2021
NAMESPACE: default
STATUS: deployed
REVISION: 3
NOTES:
1. Get the application URL by running these commands:
  export POD_NAME=$(kubectl get pods --namespace default -l "app.kubernetes.io/name=myapp,app.kubernetes.io/instance=myapp-v1" -o jsonpath="{.items[0].metadata.name}")
  export CONTAINER_PORT=$(kubectl get pod --namespace default $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
  echo "Visit http://127.0.0.1:8080 to use your application"
  kubectl --namespace default port-forward $POD_NAME 8080:$CONTAINER_PORT
[root@master01 ~]# helm list
NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART           APP VERSION
myapp-v1        default         3               2021-01-21 15:29:46.491467084 +0800 CST deployed        myapp-0.2.0     v2         
redis           default         1               2021-01-21 02:26:26.13324987 +0800 CST  deployed        redis-12.6.2    6.0.10     
redis-demo      default         1               2021-01-21 01:58:18.20798703 +0800 CST  deployed        redis-12.6.2    6.0.10     
[root@master01 ~]# 

  提示:手动使用命令行选项--set更新,对应我们需要把对应的Chart中的信息要提前修改了,否则像上面我们没有修改对应文件中的信息,它保留的还是原来的信息;

  验证:查看对应pod是否更新了版本?

[root@master01 ~]# kubectl get pods
NAME                        READY   STATUS    RESTARTS   AGE
myapp-v1-675d685ddf-nn2zd   1/1     Running   0          106s
redis-demo-master-0         1/1     Running   1          13h
redis-demo-slave-0          1/1     Running   2          13h
redis-demo-slave-1          1/1     Running   7          13h
redis-master-0              1/1     Running   1          13h
redis-slave-0               1/1     Running   1          13h
redis-slave-1               1/1     Running   1          13h
[root@master01 ~]# kubectl describe pods/myapp-v1-675d685ddf-nn2zd |grep Image
    Image:          ikubernetes/myapp:v3
    Image ID:       docker-pullable://ikubernetes/myapp@sha256:b8d74db2515d3c1391c78c5768272b9344428035ef6d72158fd9f6c4239b2c69
[root@master01 ~]# kubectl get svc
NAME                  TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)    AGE
kubernetes            ClusterIP   10.96.0.1        <none>        443/TCP    15h
myapp-v1              ClusterIP   10.110.153.241   <none>        80/TCP     16m
redis-demo-headless   ClusterIP   None             <none>        6379/TCP   13h
redis-demo-master     ClusterIP   10.109.45.70     <none>        6379/TCP   13h
redis-demo-slave      ClusterIP   10.111.222.218   <none>        6379/TCP   13h
redis-headless        ClusterIP   None             <none>        6379/TCP   13h
redis-master          ClusterIP   10.108.35.165    <none>        6379/TCP   13h
redis-slave           ClusterIP   10.99.96.166     <none>        6379/TCP   13h
[root@master01 ~]# 

  提示:上面用命令行选项指定对应镜像的版本更新是成功的;对应svc没有指定其类型,也是使用的默认类型;

  回滚release

[root@master01 ~]# helm list       
NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART           APP VERSION
myapp-v1        default         3               2021-01-21 15:29:46.491467084 +0800 CST deployed        myapp-0.2.0     v2         
redis           default         1               2021-01-21 02:26:26.13324987 +0800 CST  deployed        redis-12.6.2    6.0.10     
redis-demo      default         1               2021-01-21 01:58:18.20798703 +0800 CST  deployed        redis-12.6.2    6.0.10     
[root@master01 ~]# helm rollback myapp-v1 2
Rollback was a success! Happy Helming!
[root@master01 ~]# helm list
NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART           APP VERSION
myapp-v1        default         4               2021-01-21 15:33:58.389015959 +0800 CST deployed        myapp-0.2.0     v2         
redis           default         1               2021-01-21 02:26:26.13324987 +0800 CST  deployed        redis-12.6.2    6.0.10     
redis-demo      default         1               2021-01-21 01:58:18.20798703 +0800 CST  deployed        redis-12.6.2    6.0.10     
[root@master01 ~]# helm rollback myapp-v1 2
Rollback was a success! Happy Helming!
[root@master01 ~]# helm rollback myapp-v1 1
Rollback was a success! Happy Helming!
[root@master01 ~]# helm history myapp-v1
REVISION        UPDATED                         STATUS          CHART           APP VERSION     DESCRIPTION     
1               Thu Jan 21 15:15:52 2021        superseded      myapp-0.1.0     v1              Install complete
2               Thu Jan 21 15:24:22 2021        superseded      myapp-0.2.0     v2              Upgrade complete
3               Thu Jan 21 15:29:46 2021        superseded      myapp-0.2.0     v2              Upgrade complete
4               Thu Jan 21 15:33:58 2021        superseded      myapp-0.2.0     v2              Rollback to 2   
5               Thu Jan 21 15:36:08 2021        superseded      myapp-0.2.0     v2              Rollback to 2   
6               Thu Jan 21 15:36:26 2021        deployed        myapp-0.1.0     v1              Rollback to 1   
[root@master01 ~]# helm rollback myapp-v1 1
Rollback was a success! Happy Helming!
[root@master01 ~]# helm history myapp-v1   
REVISION        UPDATED                         STATUS          CHART           APP VERSION     DESCRIPTION     
1               Thu Jan 21 15:15:52 2021        superseded      myapp-0.1.0     v1              Install complete
2               Thu Jan 21 15:24:22 2021        superseded      myapp-0.2.0     v2              Upgrade complete
3               Thu Jan 21 15:29:46 2021        superseded      myapp-0.2.0     v2              Upgrade complete
4               Thu Jan 21 15:33:58 2021        superseded      myapp-0.2.0     v2              Rollback to 2   
5               Thu Jan 21 15:36:08 2021        superseded      myapp-0.2.0     v2              Rollback to 2   
6               Thu Jan 21 15:36:26 2021        superseded      myapp-0.1.0     v1              Rollback to 1   
7               Thu Jan 21 15:38:21 2021        deployed        myapp-0.1.0     v1              Rollback to 1   
[root@master01 ~]# helm rollback myapp-v1 3
Rollback was a success! Happy Helming!
[root@master01 ~]# helm history myapp-v1   
REVISION        UPDATED                         STATUS          CHART           APP VERSION     DESCRIPTION     
1               Thu Jan 21 15:15:52 2021        superseded      myapp-0.1.0     v1              Install complete
2               Thu Jan 21 15:24:22 2021        superseded      myapp-0.2.0     v2              Upgrade complete
3               Thu Jan 21 15:29:46 2021        superseded      myapp-0.2.0     v2              Upgrade complete
4               Thu Jan 21 15:33:58 2021        superseded      myapp-0.2.0     v2              Rollback to 2   
5               Thu Jan 21 15:36:08 2021        superseded      myapp-0.2.0     v2              Rollback to 2   
6               Thu Jan 21 15:36:26 2021        superseded      myapp-0.1.0     v1              Rollback to 1   
7               Thu Jan 21 15:38:21 2021        superseded      myapp-0.1.0     v1              Rollback to 1   
8               Thu Jan 21 15:40:38 2021        deployed        myapp-0.2.0     v2              Rollback to 3   
[root@master01 ~]# 

  提示:回滚操作我们需要指定对应回滚的位置,这个位置用一个数字表示,这个数字就是对应的历史版本的序号;比如回滚到序号为2的版本上,就使用helm rollback myapp-v1 2;如果回滚到版本序号为3的版本上,就把对应后面的版本序号更改为3即可;依此逻辑进行回滚;查看对应release的版本历史,可以使用helm history RELEASE_NAME来查看;上述命令最后我们会滚到序号为3的版本上,该版本对应应用程序的版本为v3;

  验证:查看对应pod程序版本是否v3?

[root@master01 ~]# kubectl get pods
NAME                        READY   STATUS    RESTARTS   AGE
myapp-v1-675d685ddf-7c8zd   1/1     Running   0          11m
redis-demo-master-0         1/1     Running   1          13h
redis-demo-slave-0          1/1     Running   2          13h
redis-demo-slave-1          1/1     Running   7          13h
redis-master-0              1/1     Running   1          13h
redis-slave-0               1/1     Running   1          13h
redis-slave-1               1/1     Running   1          13h
[root@master01 ~]# kubectl describe pods/myapp-v1-675d685ddf-7c8zd |grep Image
    Image:          ikubernetes/myapp:v3
    Image ID:       docker-pullable://ikubernetes/myapp@sha256:b8d74db2515d3c1391c78c5768272b9344428035ef6d72158fd9f6c4239b2c69
[root@master01 ~]# 

  提示:可以看到对应pod使用的镜像版本是v3;

  查看myapp-v1的状态

[root@master01 ~]# helm status myapp-v1
NAME: myapp-v1
LAST DEPLOYED: Thu Jan 21 15:40:38 2021
NAMESPACE: default
STATUS: deployed
REVISION: 8
NOTES:
1. Get the application URL by running these commands:
  export POD_NAME=$(kubectl get pods --namespace default -l "app.kubernetes.io/name=myapp,app.kubernetes.io/instance=myapp-v1" -o jsonpath="{.items[0].metadata.name}")
  export CONTAINER_PORT=$(kubectl get pod --namespace default $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
  echo "Visit http://127.0.0.1:8080 to use your application"
  kubectl --namespace default port-forward $POD_NAME 8080:$CONTAINER_PORT
[root@master01 ~]# 

  提示:helm status命令就相当于是把对应chart中的template目录下NOTES.txt文件进行渲染以后,输出给用户;这个内容主要告诉用户对应chart怎么连接使用,对应chart的状态信息等等;

  使用命令查看readme文件内容,chart.yaml文件内容和values文件内容

[root@master01 ~]# helm show readme 
[root@master01 ~]# helm show readme myapp/
[root@master01 ~]# helm show chart myapp/ 
apiVersion: v2
appVersion: v2
description: web server
name: myapp
type: application
version: 0.2.0

[root@master01 ~]# helm show values myapp/
# Default values for myapp.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

image:
  repository: ikubernetes/myapp
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: "v2"

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

service:
  type: ClusterIP
  port: 80

ingress:
  enabled: false
  annotations: {}
    # kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
  hosts:
    - host: chart-example.local
      paths: []
  tls: []
  #  - secretName: chart-example-tls
  #    hosts:
  #      - chart-example.local

resources: 
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  limits:
    cpu: 100m
    memory: 128Mi
  requests:
    cpu: 100m
    memory: 128Mi

autoscaling:
  enabled: false
  minReplicas: 1
  maxReplicas: 100
  targetCPUUtilizationPercentage: 80
  # targetMemoryUtilizationPercentage: 80

nodeSelector: {}

tolerations: []

affinity: {}

[root@master01 ~]# 

  提示:对应chart中没有README.md文件,对应使用helm show readme命令也是无法获取到对应内容;

  查看template目录下的模板文件内容

[root@master01 ~]# helm template myapp/
---
# Source: myapp/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
  name: RELEASE-NAME-myapp
  labels:
    helm.sh/chart: myapp-0.2.0
    app.kubernetes.io/name: myapp
    app.kubernetes.io/instance: RELEASE-NAME
    app.kubernetes.io/version: "v2"
    app.kubernetes.io/managed-by: Helm
---
# Source: myapp/templates/service.yaml
apiVersion: v1
kind: Service
metadata:
  name: RELEASE-NAME-myapp
  labels:
    helm.sh/chart: myapp-0.2.0
    app.kubernetes.io/name: myapp
    app.kubernetes.io/instance: RELEASE-NAME
    app.kubernetes.io/version: "v2"
    app.kubernetes.io/managed-by: Helm
spec:
  type: ClusterIP
  ports:
    - port: 80
      targetPort: http
      protocol: TCP
      name: http
  selector:
    app.kubernetes.io/name: myapp
    app.kubernetes.io/instance: RELEASE-NAME
---
# Source: myapp/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: RELEASE-NAME-myapp
  labels:
    helm.sh/chart: myapp-0.2.0
    app.kubernetes.io/name: myapp
    app.kubernetes.io/instance: RELEASE-NAME
    app.kubernetes.io/version: "v2"
    app.kubernetes.io/managed-by: Helm
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: myapp
      app.kubernetes.io/instance: RELEASE-NAME
  template:
    metadata:
      labels:
        app.kubernetes.io/name: myapp
        app.kubernetes.io/instance: RELEASE-NAME
    spec:
      serviceAccountName: RELEASE-NAME-myapp
      securityContext:
        {}
      containers:
        - name: myapp
          securityContext:
            {}
          image: "ikubernetes/myapp:v2"
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
              containerPort: 80
              protocol: TCP
          livenessProbe:
            httpGet:
              path: /
              port: http
          readinessProbe:
            httpGet:
              path: /
              port: http
          resources:
            limits:
              cpu: 100m
              memory: 128Mi
            requests:
              cpu: 100m
              memory: 128Mi
---
# Source: myapp/templates/tests/test-connection.yaml
apiVersion: v1
kind: Pod
metadata:
  name: "RELEASE-NAME-myapp-test-connection"
  labels:
    helm.sh/chart: myapp-0.2.0
    app.kubernetes.io/name: myapp
    app.kubernetes.io/instance: RELEASE-NAME
    app.kubernetes.io/version: "v2"
    app.kubernetes.io/managed-by: Helm
  annotations:
    "helm.sh/hook": test
spec:
  containers:
    - name: wget
      image: busybox
      command: ['wget']
      args: ['RELEASE-NAME-myapp:80']
  restartPolicy: Never
[root@master01 ~]# 

  提示:上述清单是通过模板引擎结合values文件中定义的值进行渲染以后的结果;

  从仓库中下载chart文件到本地

容器编排系统K8s之包管理器Helm基础使用(二)

  提示:如果要下载对应chart文件,我们可以使用pull命令,该命令会到对应仓库把对应chart的打包文件下载到本地;你的服务器不能正常连接仓库,请使用代理;如上;

  获取已经安装的release的扩展信息

[root@master01 ~]# helm list
NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART           APP VERSION
myapp-v1        default         8               2021-01-21 15:40:38.060295891 +0800 CST deployed        myapp-0.2.0     v2         
redis           default         1               2021-01-21 02:26:26.13324987 +0800 CST  deployed        redis-12.6.2    6.0.10     
redis-demo      default         1               2021-01-21 01:58:18.20798703 +0800 CST  deployed        redis-12.6.2    6.0.10     
[root@master01 ~]# helm get values myapp-v1
USER-SUPPLIED VALUES:
image:
  tag: v3
[root@master01 ~]# helm get notes myapp-v1 
NOTES:
1. Get the application URL by running these commands:
  export POD_NAME=$(kubectl get pods --namespace default -l "app.kubernetes.io/name=myapp,app.kubernetes.io/instance=myapp-v1" -o jsonpath="{.items[0].metadata.name}")
  export CONTAINER_PORT=$(kubectl get pod --namespace default $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
  echo "Visit http://127.0.0.1:8080 to use your application"
  kubectl --namespace default port-forward $POD_NAME 8080:$CONTAINER_PORT

[root@master01 ~]# helm get hooks myapp-v1
---
# Source: myapp/templates/tests/test-connection.yaml
apiVersion: v1
kind: Pod
metadata:
  name: "myapp-v1-test-connection"
  labels:
    helm.sh/chart: myapp-0.2.0
    app.kubernetes.io/name: myapp
    app.kubernetes.io/instance: myapp-v1
    app.kubernetes.io/version: "v2"
    app.kubernetes.io/managed-by: Helm
  annotations:
    "helm.sh/hook": test
spec:
  containers:
    - name: wget
      image: busybox
      command: ['wget']
      args: ['myapp-v1:80']
  restartPolicy: Never
[root@master01 ~]# helm get manifest myapp-v1
---
# Source: myapp/templates/serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
  name: myapp-v1
  labels:
    helm.sh/chart: myapp-0.2.0
    app.kubernetes.io/name: myapp
    app.kubernetes.io/instance: myapp-v1
    app.kubernetes.io/version: "v2"
    app.kubernetes.io/managed-by: Helm
---
# Source: myapp/templates/service.yaml
apiVersion: v1
kind: Service
metadata:
  name: myapp-v1
  labels:
    helm.sh/chart: myapp-0.2.0
    app.kubernetes.io/name: myapp
    app.kubernetes.io/instance: myapp-v1
    app.kubernetes.io/version: "v2"
    app.kubernetes.io/managed-by: Helm
spec:
  type: ClusterIP
  ports:
    - port: 80
      targetPort: http
      protocol: TCP
      name: http
  selector:
    app.kubernetes.io/name: myapp
    app.kubernetes.io/instance: myapp-v1
---
# Source: myapp/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: myapp-v1
  labels:
    helm.sh/chart: myapp-0.2.0
    app.kubernetes.io/name: myapp
    app.kubernetes.io/instance: myapp-v1
    app.kubernetes.io/version: "v2"
    app.kubernetes.io/managed-by: Helm
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: myapp
      app.kubernetes.io/instance: myapp-v1
  template:
    metadata:
      labels:
        app.kubernetes.io/name: myapp
        app.kubernetes.io/instance: myapp-v1
    spec:
      serviceAccountName: myapp-v1
      securityContext:
        {}
      containers:
        - name: myapp
          securityContext:
            {}
          image: "ikubernetes/myapp:v3"
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
              containerPort: 80
              protocol: TCP
          livenessProbe:
            httpGet:
              path: /
              port: http
          readinessProbe:
            httpGet:
              path: /
              port: http
          resources:
            limits:
              cpu: 100m
              memory: 128Mi
            requests:
              cpu: 100m
              memory: 128Mi

[root@master01 ~]# 

  提示:如果要一次获取上述所有内容,可以使用helm get all 命令进行获取;

  打包自定义chart

[root@master01 ~]# ls
logstash-3.0.2.tgz  myapp  redis  redis-12.6.2.tgz
[root@master01 ~]# helm package ./myapp/
Successfully packaged chart and saved it to: /root/myapp-0.2.0.tgz
[root@master01 ~]# ls
logstash-3.0.2.tgz  myapp  myapp-0.2.0.tgz  redis  redis-12.6.2.tgz
[root@master01 ~]# 

  提示:打包好chart文件以后,我们就可以把对应文件放到对应的仓库中共享给别人使用;

  helm私有仓库搭建

  helm私有仓库本质上就是一个http文件服务器,我们只需要将对应的chart打包文件,以及对应仓库的元数据信息放到对应目录即可

  找一台服务器安装nginx作为helm 私有仓库

[root@docker_registry ~]# yum install -y nginx

  生成仓库元数据信息

[root@master01 ~]# mkdir repo-test
[root@master01 ~]# mv *.tgz repo-test/
[root@master01 ~]# ls
myapp  redis  repo-test
[root@master01 ~]# cd repo-test/
[root@master01 repo-test]# helm repo index . --url http://192.168.0.99/repo-test
[root@master01 repo-test]# ls
index.yaml  logstash-3.0.2.tgz  myapp-0.2.0.tgz  redis-12.6.2.tgz
[root@master01 repo-test]# cat index.yaml 
apiVersion: v1
entries:
  logstash:
  - annotations:
      category: LogManagement
    apiVersion: v2
    appVersion: 7.10.2
    created: "2021-01-21T16:43:51.585642435+08:00"
    dependencies:
    - name: common
      repository: https://charts.bitnami.com/bitnami
      tags:
      - bitnami-common
      version: 1.x.x
    description: Logstash is an open source, server-side data processing pipeline that ingests data from a multitude of sources simultaneously, transforms it, and then sends it to your favorite "stash".
    digest: b60ccc7d48acfbfafd6a226b32316fff173f7e17112cee8367c5680012bc37a1
    home: https://github.com/bitnami/charts/tree/master/bitnami/logstash
    icon: https://bitnami.com/assets/stacks/logstash/img/logstash-stack-220x234.png
    keywords:
    - logstash
    - logging
    - elk
    maintainers:
    - email: containers@bitnami.com
      name: Bitnami
    name: logstash
    sources:
    - https://github.com/bitnami/bitnami-docker-logstash
    - https://www.elastic.co/products/logstash
    urls:
    - http://192.168.0.99/repo-test/logstash-3.0.2.tgz
    version: 3.0.2
  myapp:
  - apiVersion: v2
    appVersion: v2
    created: "2021-01-21T16:43:51.586100842+08:00"
    description: web server
    digest: 55710394a8f2a8b0770c7212aaa92477adefebfbe72640d8c84e42c7999dd1d9
    name: myapp
    type: application
    urls:
    - http://192.168.0.99/repo-test/myapp-0.2.0.tgz
    version: 0.2.0
  redis:
  - annotations:
      category: Database
    apiVersion: v2
    appVersion: 6.0.10
    created: "2021-01-21T16:43:51.589712477+08:00"
    dependencies:
    - name: common
      repository: https://charts.bitnami.com/bitnami
      tags:
      - bitnami-common
      version: 1.x.x
    description: Open source, advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets.
    digest: 4208a6eae05c9486dbecc55db3bc6e04960708e0b389adfa1f7e309d3937a451
    home: https://github.com/bitnami/charts/tree/master/bitnami/redis
    icon: https://bitnami.com/assets/stacks/redis/img/redis-stack-220x234.png
    keywords:
    - redis
    - keyvalue
    - database
    maintainers:
    - email: containers@bitnami.com
      name: Bitnami
    - email: cedric@desaintmartin.fr
      name: desaintmartin
    name: redis
    sources:
    - https://github.com/bitnami/bitnami-docker-redis
    - http://redis.io/
    urls:
    - http://192.168.0.99/repo-test/redis-12.6.2.tgz
    version: 12.6.2
generated: "2021-01-21T16:43:51.568008766+08:00"
[root@master01 repo-test]# 

  复制repo-test目录到web服务器nginx的网页根目录

[root@master01 repo-test]# cd ..
[root@master01 ~]# scp -r repo-test 192.168.0.99:/usr/share/nginx/html/
root@192.168.0.99's password: 
logstash-3.0.2.tgz                                                                                      100%   26KB   8.8MB/s   00:00    
myapp-0.2.0.tgz                                                                                         100% 3584   406.3KB/s   00:00    
redis-12.6.2.tgz                                                                                        100%   71KB  10.5MB/s   00:00    
index.yaml                                                                                              100% 2548   348.1KB/s   00:00    
[root@master01 ~]# ssh 192.168.0.99
root@192.168.0.99's password: 
Last login: Thu Jan 21 16:35:28 2021 from 192.168.0.232
[root@docker_registry ~]# ll /usr/share/nginx/html/
total 12
-rw-r--r-- 1 root root 3650 Nov  1 10:01 404.html
-rw-r--r-- 1 root root 3693 Nov  1 10:01 50x.html
lrwxrwxrwx 1 root root   20 Jan 21 16:36 en-US -> ../../doc/HTML/en-US
drwxr-xr-x 2 root root   27 Jan 21 16:36 icons
lrwxrwxrwx 1 root root   18 Jan 21 16:36 img -> ../../doc/HTML/img
lrwxrwxrwx 1 root root   25 Jan 21 16:36 index.html -> ../../doc/HTML/index.html
-rw-r--r-- 1 root root  368 Nov  1 10:01 nginx-logo.png
lrwxrwxrwx 1 root root   14 Jan 21 16:36 poweredby.png -> nginx-logo.png
drwxr-xr-x 2 root root   97 Jan 21 16:45 repo-test
[root@docker_registry ~]# 

  启动nginx服务

[root@docker_registry ~]# systemctl start nginx
[root@docker_registry ~]# ss -tnl
State      Recv-Q Send-Q                        Local Address:Port                                       Peer Address:Port              
LISTEN     0      128                                       *:111                                                   *:*                  
LISTEN     0      128                                       *:80                                                    *:*                  
LISTEN     0      128                                       *:20048                                                 *:*                  
LISTEN     0      5                             192.168.122.1:53                                                    *:*                  
LISTEN     0      128                                       *:22                                                    *:*                  
LISTEN     0      128                            192.168.0.99:631                                                   *:*                  
LISTEN     0      100                               127.0.0.1:25                                                    *:*                  
LISTEN     0      64                                        *:45725                                                 *:*                  
LISTEN     0      128                                       *:36254                                                 *:*                  
LISTEN     0      64                                        *:2049                                                  *:*                  
LISTEN     0      128                                      :::111                                                  :::*                  
LISTEN     0      128                                      :::80                                                   :::*                  
LISTEN     0      128                                      :::20048                                                :::*                  
LISTEN     0      128                                      :::22                                                   :::*                  
LISTEN     0      100                                     ::1:25                                                   :::*                  
LISTEN     0      128                                      :::52761                                                :::*                  
LISTEN     0      64                                       :::2049                                                 :::*                  
LISTEN     0      64                                       :::43907                                                :::*                  
[root@docker_registry ~]# 

  验证:使用helm添加私有仓库

[root@master01 ~]# helm repo add repo-test http://192.168.0.99/repo-test
"repo-test" has been added to your repositories
[root@master01 ~]# helm repo list
NAME            URL                               
bitnami         https://charts.bitnami.com/bitnami
repo-test       http://192.168.0.99/repo-test     
[root@master01 ~]# helm search repo repo-test
NAME                    CHART VERSION   APP VERSION     DESCRIPTION                                       
repo-test/logstash      3.0.2           7.10.2          Logstash is an open source, server-side data pr...
repo-test/myapp         0.2.0           v2              web server                                        
repo-test/redis         12.6.2          6.0.10          Open source, advanced key-value store. It is of...
[root@master01 ~]# 

  提示:可以看到对应仓库中的chart都可以正常列出来;

  安装私有仓库中的chart

[root@master01 ~]# helm install myapp-test repo-test/myapp
NAME: myapp-test
LAST DEPLOYED: Thu Jan 21 16:54:06 2021
NAMESPACE: default
STATUS: deployed
REVISION: 1
NOTES:
1. Get the application URL by running these commands:
  export POD_NAME=$(kubectl get pods --namespace default -l "app.kubernetes.io/name=myapp,app.kubernetes.io/instance=myapp-test" -o jsonpath="{.items[0].metadata.name}")
  export CONTAINER_PORT=$(kubectl get pod --namespace default $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
  echo "Visit http://127.0.0.1:8080 to use your application"
  kubectl --namespace default port-forward $POD_NAME 8080:$CONTAINER_PORT
[root@master01 ~]# helm list
NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART           APP VERSION
myapp-test      default         1               2021-01-21 16:54:06.041883984 +0800 CST deployed        myapp-0.2.0     v2         
myapp-v1        default         8               2021-01-21 15:40:38.060295891 +0800 CST deployed        myapp-0.2.0     v2         
redis           default         1               2021-01-21 02:26:26.13324987 +0800 CST  deployed        redis-12.6.2    6.0.10     
redis-demo      default         1               2021-01-21 01:58:18.20798703 +0800 CST  deployed        redis-12.6.2    6.0.10     
[root@master01 ~]# kubectl get pods 
NAME                          READY   STATUS    RESTARTS   AGE
myapp-test-58c57d75fc-s22cn   1/1     Running   0          31s
myapp-v1-675d685ddf-7c8zd     1/1     Running   0          73m
redis-demo-master-0           1/1     Running   1          14h
redis-demo-slave-0            1/1     Running   2          14h
redis-demo-slave-1            1/1     Running   7          14h
redis-master-0                1/1     Running   1          14h
redis-slave-0                 1/1     Running   1          14h
redis-slave-1                 1/1     Running   1          14h
[root@master01 ~]# kubectl get svc
NAME                  TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)    AGE
kubernetes            ClusterIP   10.96.0.1        <none>        443/TCP    17h
myapp-test            ClusterIP   10.108.7.220     <none>        80/TCP     39s
myapp-v1              ClusterIP   10.110.153.241   <none>        80/TCP     98m
redis-demo-headless   ClusterIP   None             <none>        6379/TCP   14h
redis-demo-master     ClusterIP   10.109.45.70     <none>        6379/TCP   14h
redis-demo-slave      ClusterIP   10.111.222.218   <none>        6379/TCP   14h
redis-headless        ClusterIP   None             <none>        6379/TCP   14h
redis-master          ClusterIP   10.108.35.165    <none>        6379/TCP   14h
redis-slave           ClusterIP   10.99.96.166     <none>        6379/TCP   14h
[root@master01 ~]# curl 10.108.7.220
Hello MyApp | Version: v2 | <a href="hostname.html">Pod Name</a>
[root@master01 ~]# 

  提示:可以看到使用私有仓库中的chart能够正常运行为一个release,对应生成的svc也能正常访问;

  使用阿里云云效私有helm仓库

  1、进入:https://repomanage.rdc.aliyun.com/my/repo?spm=a2c4g.11186623.2.7.7b646b06Zv1cAd,登录阿里云账号,并注册开通云效服务,创建一个企业;

  2、创建名称空间

 容器编排系统K8s之包管理器Helm基础使用(二)

  3、添加仓库

容器编排系统K8s之包管理器Helm基础使用(二)

  4、helm push 插件

[root@master01 ~]# helm plugin install https://github.com/chartmuseum/helm-push 
Downloading and installing helm-push v0.9.0 ...
https://github.com/chartmuseum/helm-push/releases/download/v0.9.0/helm-push_0.9.0_linux_amd64.tar.gz
Installed plugin: push
[root@master01 ~]# 

  5、发布chart目录

[root@master01 ~]# cat myapp/Chart.yaml 
apiVersion: v2
name: myapp
description: web server

# A chart can be either an 'application' or a 'library' chart.
#
# Application charts are a collection of templates that can be packaged into versioned archives
# to be deployed.
#
# Library charts provide useful utilities or functions for the chart developer. They're included as
# a dependency of application charts to inject those utilities and functions into the rendering
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
type: application

# This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version.
# Versions are expected to follow Semantic Versioning (https://semver.org/)
version: 0.2.0

# This is the version number of the application being deployed. This version number should be
# incremented each time you make changes to the application. Versions are not expected to
# follow Semantic Versioning. They should reflect the version the application is using.
# It is recommended to use it with quotes.
appVersion: "v2"
[root@master01 ~]# helm push myapp/ $NAMESPACE
Pushing myapp-0.2.0.tgz to 136529-test...
Done.
[root@master01 ~]# 

  6、发布chart打包文件

[root@master01 ~]#  helm push repo-test/myapp-0.2.0.tgz $NAMESPACE
Pushing myapp-0.2.0.tgz to 136529-test...
Done.
[root@master01 ~]# 

  提示:如果没有将自定义chart打包,请先使用helm package CHART_DIR打包;

  7、更新本地仓库索引

[root@master01 ~]# helm repo update
Hang tight while we grab the latest from your chart repositories...
...Successfully got an update from the "repo-test" chart repository
...Successfully got an update from the "bitnami" chart repository
...Successfully got an update from the "136529-test" chart repository
Update Complete. ⎈Happy Helming!⎈
[root@master01 ~]# 

  验证:搜索myapp,看看对应仓库是否能够列出对应的chart?

[root@master01 ~]# helm search repo myapp
NAME                    CHART VERSION   APP VERSION     DESCRIPTION
136529-test/myapp       0.2.0           v2              web server 
repo-test/myapp         0.2.0           v2              web server 
[root@master01 ~]# 

  在阿里云云效网站上查看上传的chart

容器编排系统K8s之包管理器Helm基础使用(二)

  验证:安装myapp,看看对应chart是否能够运行为一个release?

容器编排系统K8s之包管理器Helm基础使用(二)

  提示:可以看到可以从对应helm仓库下载对应的chart,并在k8s上运行为一个release;

发表评论

评论已关闭。

相关文章