1
`三台机器都要做优化`
2
1)关闭swap分区
3
swapoff -a && sysctl -w vm.swappiness=0  # 临时关闭
4
sed -ri '/^[^#]*swap/s@^@#@' /etc/fstab     # 永久关闭，重启生效
5
'两者都要做，临时+永久'
6

7
2)确保MAC地址或product_uuid唯一
8
ifconfig enp1s0 | grep ether | awk '{print $2}'
9
cat /sys/class/dmi/id/product_uuid
10
'虚拟机克隆可能导致重复，需要检查'
11

12
3)检查网络互通
13
ping -W2 -c4 www.baidu.com
14

15
4)允许iptables检查桥接流量
16
cat <<EOF | tee /etc/modules-load.d/k8s.conf
17
br_netfilter
18
EOF
19
'br_netfilter是内核模块，开机自动加载'
20
'sysctl参数统一在步骤6配置，这里不重复写'
21

22
5)检查端口占用
23
ss -tulnp | grep -E "6443|2379|2380|10250|10257|10259|10256"
24
# 参考serverless占用端口参考官网文档：https://kubernetes.io/zh-cn/docs/reference/networking/ports-and-protocols/
25

26
6)Linux内核优化
27
cat > /etc/sysctl.d/k8s.conf <<'EOF'
28
net.ipv4.ip_forward = 1
29
net.bridge.bridge-nf-call-iptables = 1
30
net.bridge.bridge-nf-call-ip6tables = 1
31
net.ipv6.conf.all.disable_ipv6 = 1
32
fs.may_detach_mounts = 1
33
vm.overcommit_memory=1
34
vm.panic_on_oom=0
35
fs.inotify.max_user_watches=89100
36
fs.file-max=52706963
37
fs.nr_open=52706963
38
net.netfilter.nf_conntrack_max=2310720
39
net.ipv4.tcp_keepalive_time = 600
40
net.ipv4.tcp_keepalive_probes = 3
41
net.ipv4.tcp_keepalive_intvl =15
42
net.ipv4.tcp_max_tw_buckets = 36000
43
net.ipv4.tcp_tw_reuse = 1
44
net.ipv4.tcp_max_orphans = 327680
45
net.ipv4.tcp_orphan_retries = 3
46
net.ipv4.tcp_syncookies = 1
47
net.ipv4.tcp_max_syn_backlog = 16384
48
net.ipv4.ip_conntrack_max = 65536
49
net.ipv4.tcp_max_syn_backlog = 16384
50
net.ipv4.tcp_timestamps = 0
51
net.core.somaxconn = 16384
52
EOF
53

54
sysctl --system    # 让内核参数立即生效
55

56
7)安装ipvsadm等相关工具
57
apt -y update && apt -y upgrade
58
apt -y install ipvsadm ipset sysstat conntrack
59

60
8)创建开机自动加载的模块配置文件
61
cat > /etc/modules-load.d/ipvs.conf << 'EOF'
62
ip_vs
63
ip_vs_lc
64
ip_vs_wlc
65
ip_vs_rr
66
ip_vs_wrr
67
ip_vs_lblc
68
ip_vs_lblcr
69
ip_vs_dh
70
ip_vs_sh
71
ip_vs_fo
72
ip_vs_nq
73
ip_vs_sed
74
ip_vs_ftp
75
ip_vs_sh
76
nf_conntrack
77
ip_tables
78
ip_set
79
xt_set
80
ipt_set
81
ipt_rpfilter
82
ipt_REJECT
83
ipip
84
EOF
85

86
9)安装containerd
87
unzip /tmp/autoinstall-containerd-v2.3.4.zip -d /server/scripts/
88
cd /server/scripts/autoinstall-containerd-v2.3.4/ && bash install-containerd.sh i
89
'脚本会自动: 下载二进制/配置systemd服务/开启SystemdCgroup/替换阿里云镜像源'
90

91
10)验证containerd安装
92
root@Master ~# ctr version | grep -i version
93
  Version:  v2.3.4
94
  Go version: go1.26.5
95
  Version:  v2.3.4
96

97
root@Master ~# runc -v | grep -i version
98
runc version 1.5.1
99
✅️ containerd 和 runc 都安装成功
100

101
root@Master ~# ctr images ls
102
REF TYPE DIGEST SIZE PLATFORMS LABELS
103
`默认是 defautl 命名空间`
104
'K8s的命名空间为 k8s.io'  # k8s的镜像都在这里面
105
root@Master ~# ctr -n k8s.io images ls
106
'必须指定命名空间（-n k8s.io）'
107
# 输出比较复杂！
108

109
11)安装crictl工具
110
# Kubernetes 专用，连 CRI socket，自动识别命名空间，输出简洁
111
root@Master ~# apt install -y cri-tools
112
Get:1 https://prod-cdn.packages.k8s.io/repositories/isv:/kubernetes:/core:/stable:/v1.37/deb  cri-tools 1.37.0-1.1 [16.6 MB]
113
'看来源'
114
root@Master ~# cat <<EOF >/etc/crictl.yaml
115
runtime-endpoint: unix:///run/containerd/containerd.sock
116
image-endpoint: unix:///run/containerd/containerd.sock
117
EOF
118
root@Master ~# echo "source <(crictl completion bash)" >> ~/.bashrc
119
'Bash自动补全命令'
120
root@Master ~# source ~/.bashrc
121
root@Master ~# crictl --version
122
crictl version v1.37.0

1
1)所有节点配置软件源
2
apt-get install -y apt-transport-https
3
# 让 apt 支持从 HTTPS 源下载软件包
4
K8s_Version=v1.37
5
curl -fsSL https://pkgs.k8s.io/core:/stable:/${K8s_Version}/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg
6

7
echo "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/${K8s_Version}/deb/ /" | sudo tee /etc/apt/sources.list.d/kubernetes.list
8

9
apt-get -y update
10

11
2)查看支持的k8s版本
12
root@Master ~# apt-cache madison kubeadm
13
   kubeadm | 1.37.0-1.1 | https://pkgs.k8s.io/core:/stable:/v1.37/deb  Packages
14

15
3)所有节点安装最新版
16
apt-get -y install kubelet kubeadm kubectl
17
'不指定版本，默认安装最新版'
18

19
4)检查各组件版本
20
root@Master ~# kubeadm version
21
kubeadm version: &version.Info{Major:"1", Minor:"37", ... GitVersion:"v1.37.0", BuildDate:"2026-08-26T10:47:17Z", GoVersion:"go1.26.6" ...
22

23
root@Master ~# kubectl version
24
Client Version: v1.37.0
25
Kustomize Version: v5.8.1
26
The connection to the server localhost:8080 was refused - did you specify the right host or port?
27
# 这是正常的，因为集群还没初始化完成
28

29
root@Master ~# kubelet --version
30
Kubernetes v1.37.0
31
`另外三个节点也要进行验证`
32
✅️ 三个节点版本一致

1
1)设置时区
2
root@Master ~# ls -lh /etc/localtime
3
lrwxrwxrwx 1 root root 33 Aug 31 21:00 /etc/localtime -> /usr/share/zoneinfo/Asia/Shanghai
4
# 如果没有，则执行以下命令
5
ln -svf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
6

7
root@Master ~# date -R
8
Tue, 01 Sep 2026 14:52:28 +0800
9
✅️ 时区已设置为东八区
10

11
2)验证CPU核心数
12
root@Master ~# lscpu | grep ^CPU\(s\)
13
CPU(s):      2
14
'2核满足K8s最低要求'
15

16
3)重启操作系统
17
reboot
18

19
4)验证加载的模块
20
lsmod | grep --color=auto -e ip_vs -e nf_conntrack
21
free -h
22

23
5)关机拍快照
24
init 0
25
'建议快照名称: k8s基础优化环境准备就绪'
26
jiuzhao@Ubuntu ~$ virsh snapshot-list Master
27
 名称                    生成时间                    状态
28
--------------------------------------------------------------
29
 init                    2026-08-31 21:02:35 +0800   shutoff
30
 K8s-environment-ready   2026-09-01 19:22:26 +0800   shutoff

1
1)使用kubeadm初始化master节点
2
root@Master ~# kubeadm init \
3
    --kubernetes-version=v1.37.0 \
4
    --cri-socket unix:///run/containerd/containerd.sock \
5
    --image-repository registry.aliyuncs.com/google_containers \
6
    --pod-network-cidr=10.100.0.0/16 \
7
    --service-cidr=10.200.0.0/16 \
8
    --service-dns-domain=kpyun.com
9
--cri-socket:       # 指定容器运行时为containerd
10
--pod-network-cidr:     # 指定Pod网段
11
--service-cidr:       # 指定SVC网段
12
--service-dns-domain:     # 指定service域名后缀，默认cluster.local
13
...
14
Your Kubernetes control-plane has initialized successfully!
15
...
16
Alternatively, if you are the root user, you can run:
17

18
  export KUBECONFIG=/etc/kubernetes/admin.conf
19

20
You should now deploy a pod network to the cluster.
21
Run "kubectl apply -f [podnetwork].yaml" with one of the options listed at:
22
  https://kubernetes.io/docs/concepts/cluster-administration/addons/
23

24
Then you can join any number of worker nodes by running the following on each as root:
25

26
kubeadm join 10.0.0.13:6443 --token 5s0wfu.yh9un8ziwctf73of \
27
  --discovery-token-ca-cert-hash sha256:dab8cbe2ab8d06c980190fa3b4a65c33babfa658a97a06041ecf6130501d6748

1
root@Master ~# crictl images
2
`后续再安装的时候，可以save导出为tar包，方便导入`
3
IMAGE                                                             TAG
4
registry.aliyuncs.com/google_containers/coredns                   v1.14.6
5
registry.aliyuncs.com/google_containers/etcd                      3.7.0-0
6
registry.aliyuncs.com/google_containers/kube-apiserver            v1.37.0
7
registry.aliyuncs.com/google_containers/kube-controller-manager   v1.37.0
8
registry.aliyuncs.com/google_containers/kube-proxy                v1.37.0
9
registry.aliyuncs.com/google_containers/kube-scheduler            v1.37.0
10
registry.aliyuncs.com/google_containers/pause                     3.10.2
11

12
3)拷贝授权文件，用于管理K8S集群
13
root@Master ~# mkdir -p $HOME/.kube
14
root@Master ~# sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
15
root@Master ~# sudo chown $(id -u):$(id -g) $HOME/.kube/config
16

17
4)查看master组件是否正常工作
18
root@Master ~# kubectl get cs
19
Warning: v1 ComponentStatus is deprecated in v1.19+
20
NAME                 STATUS    MESSAGE   ERROR
21
controller-manager   Healthy   ok
22
scheduler            Healthy   ok
23
etcd-0               Healthy   ok
24
✅️ 三个组件都是Healthy
25
# ⚠️ 只能看 controller-manager、scheduler、etcd，看不到 apiserver 本身
26
# cs 这个 API 从 K8s 1.19 开始就标记为"已弃用"，官方提示"以后可能移除"
27

28
5)查看工作节点
29
root@Master ~# kubectl get no
30
NAME     STATUS     ROLES           AGE    VERSION
31
master   NotReady   control-plane   2m29s  v1.37.0
32
# ROLES 只显示 control-plane
33
'NotReady是正常的，还没装CNI网络插件'
34

35
root@Master ~# kubectl get no -o wide
36
NAME     STATUS     ROLES           AGE     VERSION   INTERNAL-IP   EXTERNAL-IP   OS-IMAGE             KERNEL-VERSION              CONTAINER-RUNTIME
37
master   NotReady   control-plane   2m54s   v1.37.0   10.0.0.13     <none>        Ubuntu 24.04.4 LTS   6.8.0-138-generic (amd64)   containerd://2.3.4
38

39
6)master初始化失败的解决方案
40
'可能原因: swap未关 / CPU核心不够 / 镜像下载超时'
41
free -h    # 检查swap
42
lscpu      # 检查CPU
43

44
'重置环境重新初始化'
45
kubeadm reset -f
46
rm -rf /etc/kubernetes/ $HOME/.kube/

1
1)将worker节点加入master集群
2
'注意: 使用你自己master生成的token，不要照搬下面的'
3
root@Worker01 ~# kubeadm join 10.0.0.13:6443 --token 5s0wfu.yh9un8ziwctf73of \
4
  --discovery-token-ca-cert-hash sha256:dab8cbe2ab8d06c980190fa3b4a65c33babfa658a97a06041ecf6130501d6748
5

6
root@Worker02 ~# kubeadm join 10.0.0.13:6443 --token 5s0wfu.yh9un8ziwctf73of \
7
  --discovery-token-ca-cert-hash sha256:dab8cbe2ab8d06c980190fa3b4a65c33babfa658a97a06041ecf6130501d6748
8

9
2)验证worker节点是否加入成功
10
root@Worker01 ~# crictl images
11
IMAGE                                                TAG
12
registry.aliyuncs.com/google_containers/kube-proxy   v1.37.0
13
registry.aliyuncs.com/google_containers/pause        3.10.2
14
# kubeadm join 时，kubeadm 会预拉取 worker 节点必须的镜像，正好就是这两个
15

16
root@Master ~# kubectl get no
17
NAME       STATUS     ROLES           AGE     VERSION
18
master     NotReady   control-plane   37m     v1.37.0
19
worker01   NotReady   <none>          4m15s   v1.37.0
20
worker02   NotReady   <none>          4m11s   v1.37.0
21
✅️ 三个节点都已加入集群
22

23
root@Master ~# kubectl get no -o wide
24
NAME       STATUS     ROLES           AGE     VERSION   INTERNAL-IP   EXTERNAL-IP   OS-IMAGE             KERNEL-VERSION              CONTAINER-RUNTIME
25
master     NotReady   control-plane   37m     v1.37.0   10.0.0.13     <none>        Ubuntu 24.04.4 LTS   6.8.0-138-generic (amd64)   containerd://2.3.4
26
worker01   NotReady   <none>          4m37s   v1.37.0   10.0.0.14     <none>        Ubuntu 24.04.4 LTS   6.8.0-138-generic (amd64)   containerd://2.3.4
27
worker02   NotReady   <none>          4m33s   v1.37.0   10.0.0.15     <none>        Ubuntu 24.04.4 LTS   6.8.0-138-generic (amd64)   containerd://2.3.4
28

29
3)关机拍快照
30
# 可以删除无用的软件包后再关机拍快照
31
'建议快照名称: k8s未安装CNI插件'
32
jiuzhao@Ubuntu ~$ virsh snapshot-list Master
33
 名称                    生成时间                    状态
34
--------------------------------------------------------------
35
 Before-install-CNI      2026-09-01 23:45:34 +0800   shutoff
36
 init                    2026-08-31 21:02:35 +0800   shutoff
37
 K8s-environment-ready   2026-09-01 22:57:43 +0800   shutoff

1
1)编辑资源清单
2
root@Master ~# vim network-cni-test.yaml
3
apiVersion: v1
4
kind: Pod
5
metadata:
6
  name: xiuxian-v1
7
spec:
8
  nodeName: worker01
9
  containers:
10
  - image: registry.cn-hangzhou.aliyuncs.com/yinzhengjie-k8s/apps:v1
11
    name: xiuxian
12
---
13
apiVersion: v1
14
kind: Pod
15
metadata:
16
  name: xiuxian-v2
17
spec:
18
  nodeName: worker02
19
  containers:
20
  - image: registry.cn-hangzhou.aliyuncs.com/yinzhengjie-k8s/apps:v2
21
    name: xiuxian
22

23
root@Master ~# kubectl apply -f network-cni-test.yaml
24
pod/xiuxian-v1 created
25
pod/xiuxian-v2 created
26

27
3)访问测试
28
root@Master ~# kubectl get pods -o wide
29
NAME         READY   STATUS    RESTARTS   AGE   IP           NODE
30
xiuxian-v1   1/1     Running   0          12s   10.100.1.2   worker01
31
xiuxian-v2   1/1     Running   0          12s   10.100.2.2   worker02
32
'分配到不同节点的Pod，IP在Pod网段10.100.0.0/16内'
33

34
root@Master ~# curl 10.100.1.2
35
<!DOCTYPE html>
36
<html>
37
  <head>
38
    <meta charset="utf-8"/>
39
    <title>yinzhengjie apps v1</title>
40
    ...
41
  </head>
42
  <body>
43
    <h1 style="color: green">凡人修仙传 v1 </h1>
44
    ...
45
  </body>
46
</html>
47
✅️ Worker01上的Pod可以正常访问
48

49
root@Master ~# curl 10.100.2.2
50
<!DOCTYPE html>
51
<html>
52
  <head>
53
    <meta charset="utf-8"/>
54
    <title>yinzhengjie apps v2</title>
55
    ...
56
  </head>
57
  <body>
58
    <h1 style="color: red">凡人修仙传 v2 </h1>
59
    ...
60
  </body>
61
</html>
62
✅️ Worker02上的Pod可以正常访问
63

64
4)删除pod
65
root@Master ~# kubectl delete -f network-cni-test.yaml
66
pod "xiuxian-v1" deleted from default namespace
67
pod "xiuxian-v2" deleted from default namespace
68
'清理环境，还原干净状态'

1
1)添加环境变量
2
root@Master ~# apt install -y bash-completion
3
# 装 bash-completion 框架包
4
root@Master ~# kubectl completion bash > ~/.kube/completion.bash.inc
5
root@Master ~# echo source '$HOME/.kube/completion.bash.inc' >> ~/.bashrc
6
root@Master ~# source ~/.bashrc
7
`开启 /etc/bash.bashrc 的框架加载（关键！默认是注释掉的）`
8
root@Master ~# vim /etc/bash.bashrc
9
# enable bash completion in interactive shells
10
'⬆️ 说明注释（原本就是注释，保留）'
11
#if ! shopt -oq posix; then
12
#  if [ -f /usr/share/bash-completion/bash_completion ]; then
13
#    . /usr/share/bash-completion/bash_completion
14
#  elif [ -f /etc/bash_completion ]; then
15
#    . /etc/bash_completion
16
#  fi
17
#fi
18

19
2)验证自动补全
20
root@Master ~# kubectl # 连续按2次tab键
21
annotate       (Update the annotations on a resource)
22
api-resources  (Print the supported API resources on the server)
23
api-versions   (Print the supported API versions on the server, in the form of "group/version")
24
apply          (Apply a configuration to a resource by file name or stdin)
25
✅️ 自动补全已生效
26

27
3)关机拍快照
28
'建议快照名称: k8s使用Flannel网络插件'
29

30
history -c      # 清空内存中的历史
31
> ~/.bash_history  # 清空历史文件
32
history -w      # 立即将空历史写入文件（防止退出时重新写入）
33

34
jiuzhao@Ubuntu ~$ virsh snapshot-list Master
35
 名称                    生成时间                    状态
36
--------------------------------------------------------------
37
 Before-install-CNI      2026-09-01 23:45:34 +0800   shutoff
38
 init                    2026-08-31 21:02:35 +0800   shutoff
39
 K8s-environment-ready   2026-09-01 22:57:43 +0800   shutoff
40
 K8s-use-Flannel         2026-09-02 10:11:59 +0800   shutoff

1
root@Master ~# kubectl run --help
2
Create and run a particular image in a pod.
3
Examples:  `实例`
4
  # Start a nginx pod
5
  kubectl run nginx --image=nginx
6
......
7
Options:  `选项`
8
    --image='':
9
  The image for the container to run.
10

11
    --port='':
12
  The port that this container exposes.
13
......
14
Usage:    `用法`  '中间有个 -- 分割符'  # 用来明确区分 kubectl 自己的参数和你要传给容器执行的命令及参数
15
  kubectl run NAME --image=image [--env="key=value"] [--port=port] ... -- [COMMAND] [args...] [options]
16
# 要学会看帮助信息！
17

18

19
1)响应式管理Pod
20
# 创建时指定pod名称和镜像
21
root@Master ~# kubectl run c1 --image=registry.cn-hangzhou.aliyuncs.com/yinzhengjie-k8s/apps:v1
22
pod/c1 created
23

24
2)查看pod信息
25
root@Master ~# kubectl get po
26
NAME   READY   STATUS    RESTARTS   AGE
27
c1     1/1     Running   0          25s
28
root@Master ~# kubectl get po -o wide
29
NAME   READY   STATUS    RESTARTS   AGE   IP           NODE       NOMINATED NODE   READINESS GATES
30
c1     1/1     Running   0          35s   10.100.2.3   worker02   <none>           <none>

1
root@Master ~# curl -s 10.100.2.3 | grep h1
2
    <h1 style="color: green">凡人修仙传 v1 </h1>
3
✅️ c1返回正常，nginx服务可用
4

5

6
3)创建时修改pod的启动命令
7
root@Master ~# kubectl run c2 --image=registry.cn-hangzhou.aliyuncs.com/yinzhengjie-k8s/apps:v1 -- sleep 300
8
'当你要传给容器执行的命令及参数，必须用 -- 分隔符区分 kubectl 自己的参数'
9
`Nginx容器默认执行 CMD 启动参数是 "nginx" "-g" "daemon off;" 改参数容易被 run 后的参数覆盖`
10
# c2启动后执行sleep 300而不是默认的 nginx -g daemon off;
11

12
root@Master ~# kubectl get po -o wide
13
NAME   READY   STATUS    RESTARTS   AGE   IP           NODE
14
c1     1/1     Running   0          35s   10.100.2.3   worker02
15
c2     1/1     Running   0          19s   10.100.1.3   worker01
16

17
root@Master ~# curl 10.100.1.3
18
curl: (7) Failed to connect to 10.100.1.3 port 80 after 0 ms: Couldn't connect to server
19
# ❌️ c2连接被拒绝，因为它的启动命令是sleep 300，没有Web服务
20

21
4)交互式执行命令
22
root@Master ~# kubectl exec -it c2 -- sh
23
/ # ps -ef
24
PID   USER     TIME  COMMAND
25
    1 root      0:00 sleep 300
26
    7 root      0:00 sh
27
   13 root      0:00 ps -ef
28
'c2里只有sleep进程，验证了启动命令'
29

30
root@Master ~# kubectl exec -it c1 -- sh
31
/ # ps -ef
32
PID   USER     TIME  COMMAND
33
    1 root      0:00 nginx: master process nginx -g daemon off;
34
   32 nginx     0:00 nginx: worker process
35
   33 nginx     0:00 nginx: worker process
36
   34 root      0:00 sh
37
   40 root      0:00 ps -ef
38
'c1里跑了nginx的master和worker进程'
39

40

41
5)非交互执行命令
42
root@Master ~# kubectl exec c1 -- ps -ef
43
PID   USER     TIME  COMMAND
44
    1 root      0:00 nginx: master process nginx -g daemon off;
45
   32 nginx     0:00 nginx: worker process
46
   33 nginx     0:00 nginx: worker process
47
   41 root      0:00 ps -ef
48

49
root@Master ~# kubectl exec c2 -- ps -ef
50
PID   USER     TIME  COMMAND
51
    1 root      0:00 sleep 300
52
    7 root      0:00 ps -ef
53

54
6)再次查看容器
55
root@Master ~# kubectl get pods -o wide
56
NAME   READY   STATUS    RESTARTS      AGE
57
c1     1/1     Running   0             7m1s
58
c2     1/1     Running   1 (92s ago)   6m33s
59
'c2重启了1次，因为sleep 300秒后进程退出，kubelet自动重建'
60

61

62
7)删除指定名称的pod
63
root@Master ~# kubectl delete po c1
64
pod "c1" deleted from default namespace
65

66
root@Master ~# kubectl get pods -o wide
67
NAME   READY   STATUS    RESTARTS
68
c2     1/1     Running   3 (4m36s ago)
69
`kubelet 一直在自动重建`  # c1已删除，只剩c2
70

71

72
8)删除所有pod
73
root@Master ~# kubectl delete pods --all
74
# 当前名称空间下的所有pod都删除掉！
75
pod "c2" deleted from default namespace
76

77
root@Master ~# kubectl get pods -o wide
78
No resources found in default namespace.
79
'环境已清空'

1
1)创建测试pod
2
root@Master ~# kubectl run c1 --image=registry.cn-hangzhou.aliyuncs.com/yinzhengjie-k8s/apps:v1
3
pod/c1 created
4
root@Master ~# kubectl run c2 --image=registry.cn-hangzhou.aliyuncs.com/yinzhengjie-k8s/apps:v1
5
pod/c2 created
6
root@Master ~# kubectl run c3 --image=registry.cn-hangzhou.aliyuncs.com/yinzhengjie-k8s/apps:v1
7
pod/c3 created
8

9
2)查看pod的标签
10
root@Master ~# kubectl get po --show-labels
11
--show-labels    # 在最后一列显示所有标签
12
NAME   READY   STATUS    RESTARTS   AGE     LABELS
13
c1     1/1     Running   0          3m14s   run=c1
14
c2     1/1     Running   0          115s    run=c2
15
c3     1/1     Running   0          111s    run=c3
16
'默认标签是run=Pod名称'
17

18
3)为所有pod打标签
19
root@Master ~# kubectl label pod --all apps=xiuxian
20
pod/c1 labeled
21
pod/c2 labeled
22
pod/c3 labeled
23
root@Master ~# kubectl get pods --show-labels
24
NAME   READY   STATUS    RESTARTS   AGE     LABELS
25
c1     1/1     Running   0          5m45s   apps=xiuxian,run=c1
26
c2     1/1     Running   0          4m26s   apps=xiuxian,run=c2
27
c3     1/1     Running   0          4m22s   apps=xiuxian,run=c3
28
✅️ 所有pod都加上了apps=xiuxian标签
29

30
4)为指定pod打标签
31
root@Master ~# kubectl label pod c1 version=v1
32
pod/c1 labeled
33
root@Master ~# kubectl label pod c2 school=kpyun class=Redhat
34
'多个键值 空格 隔开'
35
pod/c2 labeled
36
root@Master ~# kubectl get pod --show-labels
37
NAME   READY   STATUS    RESTARTS   AGE   LABELS
38
c1     1/1     Running   0          16m   apps=xiuxian,run=c1,version=v1
39
c2     1/1     Running   0          15m   apps=xiuxian,class=Redhat,run=c2,school=kpyun
40
c3     1/1     Running   0          15m   apps=xiuxian,run=c3
41

42
5)基于标签过滤pod
43
-l     # Label Selector（标签选择器），用于按标签过滤资源，只返回符合你指定条件的对象

1
root@Master ~# kubectl get pods -l school -o wide --show-labels
2
'只显示有school标签的pod，没有限定值'  # 这些权限可以叠在一起使用
3
NAME   READY   STATUS    RESTARTS   AGE   IP           NODE       NOMINATED NODE   READINESS GATES   LABELS
4
c2     1/1     Running   0          23m   10.100.2.5   worker02   <none>           <none>            apps=xiuxian,class=Redhat,run=c2,school=kpyun
5

6
root@Master ~# kubectl get pods -l "run in (c1,c3)" -o wide --show-labels
7
'集合选择器: 显示run=c1或run=c3的pod'
8
NAME   READY   STATUS    RESTARTS   AGE   IP           NODE       NOMINATED NODE   READINESS GATES   LABELS
9
c1     1/1     Running   0          26m   10.100.1.4   worker01   <none>           <none>            apps=xiuxian,run=c1,version=v1
10
c3     1/1     Running   0          25m   10.100.1.5   worker01   <none>           <none>            apps=xiuxian,run=c3
11

12
root@Master ~# kubectl get pods -l class=Redhat,run=c2 --show-labels
13
NAME   READY   STATUS    RESTARTS   AGE   LABELS
14
c2     1/1     Running   0          32m   apps=xiuxian,class=Redhat,run=c2,school=kpyun
15

16

17
6)修改指定pod标签的值
18
root@Master ~# kubectl label pod c3 apps=kpyun --overwrite
19
pod/c3 labeled
20
'--overwrite 表示允许覆盖已存在的标签'
21
root@Master ~# kubectl get pod -l apps=kpyun --show-labels
22
NAME   READY   STATUS    RESTARTS   AGE   LABELS
23
c3     1/1     Running   0          28m   apps=kpyun,run=c3
24
✅️ apps标签已改为kpyun
25

26

27
7)删除标签
28
'减号删除法'
29
root@Master ~# kubectl label pod c3 apps-
30
pod/c3 unlabeled
31
# 键名后面加 "-" 即删除该标签
32
root@Master ~# kubectl get pod c3 --show-labels
33
NAME   READY   STATUS    RESTARTS   AGE    LABELS
34
c3     1/1     Running   0          2m9s   run=c3
35
✅️ apps标签已被删除
36

37

38
8)基于标签删除pod
39
root@Master ~# kubectl delete pods -l "run notin (c1,c3)"
40
pod "c2" deleted from default namespace
41
'删除所有 run 标签的值 不在 c1 和 c3 这个集合中的 Pod'
42

43
root@Master ~# kubectl delete pods -l version=v1
44
pod "c1" deleted from default namespace
45
'删除标签 version=v1 的pod'
46

47
root@Master ~# kubectl delete pods --all && kubectl get pods
48
pod "c3" deleted from default namespace
49
'所有pod已清空'
50
No resources found in default namespace.

1
1)查看master组件
2
root@Master ~# kubectl get cs
3
Warning: v1 ComponentStatus is deprecated in v1.19+
4
NAME                 STATUS    MESSAGE   ERROR
5
controller-manager   Healthy   ok
6
scheduler            Healthy   ok
7
etcd-0               Healthy   ok
8

9
2)查看worker节点
10
root@Master ~# kubectl get no
11
NAME       STATUS   ROLES           AGE   VERSION
12
master     Ready    control-plane   12h   v1.37.0
13
worker01   Ready    <none>          11h   v1.37.0
14
worker02   Ready    <none>          11h   v1.37.0
15

16
3)查看内置资源
17
root@Master ~# kubectl api-resources | wc -l
18
72
19
'K8s内置的资源类型'
20

21
root@Master ~# kubectl api-resources
22
NAME                        SHORTNAMES   APIVERSION       NAMESPACED   KIND
23
bindings                                 v1               true         Binding
24
componentstatuses           cs           v1               false        ComponentStatus
25
configmaps                  cm           v1               true         ConfigMap
26
endpoints                   ep           v1               true         Endpoints
27
events                      ev           v1               true         Event
28
limitranges                 limits       v1               true         LimitRange
29
namespaces                  ns           v1               false        Namespace
30
nodes                       no           v1               false        Node
31
...