{"id":35484,"date":"2023-03-15T18:01:05","date_gmt":"2023-06-22T23:27:40","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b\/"},"modified":"2024-04-29T19:01:30","modified_gmt":"2024-04-29T11:01:30","slug":"%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b\/","title":{"rendered":"\u5c1d\u8bd5\u81ea\u5df1\u7ec4\u5efa Kubernetes \u96c6\u7fa4\u5e76\u8fdb\u884c\u6545\u969c\u6392\u9664\u3010The Hard Way\u3011\u3010\u30cb\u30d5\u30af\u30e9\u3011"},"content":{"rendered":"<p>\u672c\u6587\u662f\u5bcc\u58eb\u901a\u4e91\u6280\u672f\u76842021\u5e74\u5723\u8bde\u65e5\u5386\u7684\u7b2c\u516b\u7bc7\u6587\u7ae0\u3002<\/p>\n<p>7\u65e5\u76ee\u662f\u7531@HanchA\u8fdb\u884c\u7684&#8221;\u5b89\u88c5Postfix\uff0cDovecot\u548cZabbix\u6765\u76d1\u63a7\u670d\u52a1\u5668&#8221;\u6d3b\u52a8\u3002\u4ed6\u5229\u7528\u5728\u5206\u914d\u5de5\u4f5c\u4e2d\u5b66\u5230\u7684\u64cd\u4f5c\u77e5\u8bc6\u4ece\u96f6\u5f00\u59cb\u5efa\u7acb\u4e86\u73af\u5883\uff0c\u6211\u8ba4\u4e3a\u8fd9\u975e\u5e38\u4e86\u4e0d\u8d77\u3002\u6211\u4e5f\u5e0c\u671b\u81ea\u5df1\u80fd\u591f\u52aa\u529b\u4e0d\u61c8\u3002<\/p>\n<p>\u4eca\u5929\uff0c\u662f2021\u5e74\u5ea6\u65b0\u5458\u5de5\u52a0\u85e4\u4e3a\u60a8\u5e26\u6765\u7684\u3002\u5728\u65b0\u4eba\u57f9\u8bad\u671f\u95f4\uff0c\u6211\u6709\u5e78\u4f53\u9a8c\u4e86\u6211\u4eec\u516c\u53f8\u7684\u6258\u7ba1Kubernetes\u670d\u52a1- Hatoba\uff0c\u5e76\u5bf9Kubernetes\u8fdb\u884c\u4e86\u6df1\u5165\u5b66\u4e60\u3002\u867d\u7136\u6211\u4ecd\u5728\u52aa\u529b\u5b66\u4e60\u4e2d\uff0c\u4e3a\u4e86\u83b7\u53d6CKA\uff0c\u4f46\u4eca\u5929\u6211\u60f3\u5728\u8fd9\u91cc\u5206\u4eab\u5176\u4e2d\u4e4b\u4e00\uff0c\u5373KubernetesThe Hard Way\u7684\u76f8\u5173\u5185\u5bb9\uff01<\/p>\n<h2>\u76ee\u6807\u8bfb\u8005<\/h2>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Kubernetes \u805e\u3044\u305f\u3053\u3068\u3042\u308b\u3051\u3069\u5168\u7136\u5206\u304b\u3093\u306a\u3044\uff01\u3068\u3044\u3046\u4eba<\/ul>\n<\/li>\n<\/ul>\n<p>CKA (Certified Kubernetes Administrator) \u306e\u8cc7\u683c\u53d6\u5f97\u3092\u8003\u3048\u3066\u3044\u308b\u4eba<br \/>\nKubeadm \u3068\u304b\u3067\u30af\u30e9\u30b9\u30bf\u30fc\u306f\u4f5c\u3063\u305f\u3053\u3068\u3042\u308b\u3051\u3069\u4e2d\u8eab\u3092\u3061\u3083\u3093\u3068\u77e5\u308a\u305f\u3044\u4eba<\/p>\n<h2>Kubernetes The Hard Way \u662f\u4ec0\u4e48\u610f\u601d\uff1f<\/h2>\n<p>Kubernetes The Hard Way \u662f\u4e00\u4e2a\u7528\u4e8e\u624b\u52a8\u642d\u5efa Kubernetes \u96c6\u7fa4\u7684\u6559\u7a0b\u3002\u5b83\u88ab\u5b9a\u4f4d\u4e3a\u521d\u5b66\u8005\u7684\u5b66\u4e60\u4efb\u52a1\uff0c\u5e76\u4e14\u901a\u8fc7\u6309\u7167\u6b65\u9aa4\u4e00\u6b65\u4e00\u6b65\u5730\u6784\u5efa Kubernetes \u96c6\u7fa4\u7684\u7ec4\u4ef6\u6765\u7406\u89e3\u96c6\u7fa4\u5185\u90e8\u7684\u7ed3\u6784\u3002<\/p>\n<p>\u5f53\u5148\u8f88\u6559\u7ec3\u544a\u8bc9\u6211\u8981\u53bb\u5b66\u4e60\u300c\u4ee5\u6700\u8270\u96be\u7684\u65b9\u5f0f\u638c\u63e1 Kubernetes \uff01\u300d\u7684\u65f6\u5019\uff0c\u6211\u5bf9 Kubernetes \u7684\u77e5\u8bc6\u4e00\u65e0\u6240\u77e5\uff0c\u611f\u89c9\u975e\u5e38\u56f0\u96be\u3002\u4f46\u5230\u6700\u540e\u5b8c\u6210\u7684\u65f6\u5019\uff0c\u6211\u6709\u4e00\u79cd\u300c\u554a\uff5e\u5b8c\u5168\u7406\u89e3\u4e86 Kubernetes \u54c8\u300d\u7684\u5fc3\u60c5\u3002<\/p>\n<h2>\u63d0\u524d\u51c6\u5907\uff1a\u5c06Kubernetes\u7684\u914d\u7f6e\u56fe\u6df1\u6df1\u94ed\u523b\u5728\u8111\u6d77\u4e2d\u3002<\/h2>\n<p>\u6211\u53d1\u73b0\u6709\u4e00\u4e2a\u540d\u4e3aKubernetes\u7ec4\u4ef6\u7684\u9875\u9762\uff0c\u901a\u8fc7\u63d0\u524d\u9605\u8bfb\u8be5\u9875\u9762\uff0c\u6211\u5728\u8fdb\u884c\u6559\u7a0b\u65f6\u5bf9\u5176\u6709\u4e86\u66f4\u6df1\u5165\u7684\u7406\u89e3\u3002<\/p>\n<p>\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30d7\u30ec\u30fc\u30f3\u306b\u306f etcd \u3084 kube-apiserver \u304c\u3044\u3066\u3001\u30ef\u30fc\u30ab\u30fc\u30ce\u30fc\u30c9\u306b\u306f kubelet \u304c\u3044\u308b\u2026\u2026\u3002 kube-apiserver \u306f\u30e6\u30fc\u30b6\u30fc\u304c kubectl \u306a\u3069\u306e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304b\u3089\u9001\u3063\u3066\u304d\u305f\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u53d7\u3051\u4ed8\u3051\u3066\u3044\u3066\u3001 kubelet \u306f\u30ef\u30fc\u30ab\u30fc\u30ce\u30fc\u30c9\u3067\u5b9f\u969b\u306e\u30b3\u30f3\u30c6\u30ca\u306e\u6307\u63ee\u3092\u3057\u305f\u308a\u3001 kube-apiserver \u3068\u306e\u901a\u4fe1\u3092\u3057\u3066\u3044\u308b\u3093\u3060\u2026\u2026\u307f\u305f\u3044\u306a\u611f\u3058\u3067\u30a4\u30e1\u30fc\u30b8\u3092\u3064\u3051\u3066\u3044\u304d\u307e\u3057\u305f\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d23c137434c4406c2be80\/11-0.png\" alt=\"components-of-kubernetes\" \/><\/div>\n<h2>The Hard Way \u3092\u5f80\u304f<\/h2>\n<p>\u4f5c\u696d\u30ed\u30b0\u306f\u3042\u307e\u308a\u306b\u3082\u9577\u3044\u306e\u3067\u3001 GitHub \u306e\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u306b\u307e\u3068\u3081\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>\u4ee5 NIFCLOUD \u65b9\u5f0f\u8fdb\u884c Kubernetes \u7684\u56f0\u96be\u4e4b\u65c5<\/p>\n<h3>\u73af\u5883<\/h3>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u30cb\u30d5\u30af\u30e9 VM (e-medium4)<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8LAN<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u30de\u30eb\u30c1\u30ed\u30fc\u30c9\u30d0\u30e9\u30f3\u30b5\u30fc<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Ubuntu 20.04<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">Kubernetes 1.21.1<\/ul>\n<h2>\u82e6\u52b4\u3057\u305f\u30dd\u30a4\u30f3\u30c8<\/h2>\n<p>\u6065\u3092\u5fcd\u3073\u3064\u3064\u3001\u8e93\u304d\u304b\u3089\u5f97\u305f\u6559\u8a13\u3084\u5b66\u3073\u3092\u3044\u304f\u3064\u304b\u3054\u7d39\u4ecb\u3057\u3088\u3046\u3068\u601d\u3044\u307e\u3059\u3002\u521d\u5fc3\u8005\u306a\u306e\u3067\u9593\u9055\u3063\u3066\u3044\u308b\u3053\u3068\u304c\u3042\u308a\u307e\u3057\u305f\u3089\u3054\u6307\u6458\u3044\u305f\u3060\u3051\u308b\u3068\u5b09\u3057\u3044\u3067\u3059\u3002<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u69cb\u6210<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">kube-apiserver \u304b\u3089 kubelet \u3078\u306e\u901a\u4fe1 (kube-apiserver \u306e\u8a2d\u5b9a)<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">CoreDNS \u304c\u30eb\u30fc\u30d7\u3057\u3066\u3057\u307e\u3044\u540d\u524d\u89e3\u6c7a\u306b\u5931\u6557\u3059\u308b\u554f\u984c<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">Pod \u304c\u540d\u524d\u89e3\u6c7a\u306b\u5931\u6557\u3059\u308b\u554f\u984c (kube-proxy)<\/ul>\n<h3>\u7f51\u7edc\u914d\u7f6e<\/h3>\n<p>Kubernetes \u662f\u4e00\u4e2a\u80fd\u591f\u534f\u8c03\u591a\u4e2a\u8282\u70b9\uff08\u7269\u7406\u670d\u52a1\u5668\u6216\u865a\u62df\u673a\uff09\u4ee5\u4fbf\u90e8\u7f72\u5e94\u7528\u7a0b\u5e8f\u7684\u5de5\u5177\uff0c\u56e0\u6b64\u7f51\u7edc\u914d\u7f6e\u662f\u81f3\u5173\u91cd\u8981\u7684\u4e00\u90e8\u5206\u3002<\/p>\n<p>\u5728\u6784\u5efa\u96c6\u7fa4\u7684\u6700\u540e\u9636\u6bb5\uff0c\u542f\u52a8\u63a7\u5236\u5e73\u9762\u4e0a\u7684\u7ec4\u4ef6\u4ee5\u53ca\u542f\u52a8\u5de5\u4f5c\u8282\u70b9\u4e0a\u7684\u7ec4\u4ef6\u540e\uff0c\u68c0\u67e5\u8282\u70b9\u7684\u72b6\u6001\u65f6\u53ef\u80fd\u4f1a\u53d1\u73b0\u5176\u4e3a NotReady\uff08\u672a\u51c6\u5907\u5c31\u7eea\uff09\u72b6\u6001\u3002<br \/>\n\u68c0\u67e5 kubelet \u7684\u65e5\u5fd7\u540e\u53d1\u73b0\uff0c\u6ce8\u518c\u8282\u70b9\u5230 kube-apiserver \u4e2d\u5931\u8d25\u4e86\u3002\u5efa\u8bae\u91cd\u65b0\u68c0\u67e5\u9632\u706b\u5899\u548c\u8def\u7531\u8bbe\u7f6e\uff0c\u5e76\u786e\u8ba4\u7f51\u7edc\u901a\u4fe1\u662f\u5426\u6b63\u5e38\uff0c\u8fd9\u662f\u57fa\u672c\u7684\u6545\u969c\u6392\u9664\u6b65\u9aa4\u3002<\/p>\n<p>\u79c1\u306e\u5834\u5408\u306f\u3001\u30ef\u30fc\u30ab\u30fc\u304b\u3089\u30ed\u30fc\u30c9\u30d0\u30e9\u30f3\u30b5\u30fc\u7d4c\u7531\u3067 kube-apiserver \u306b\u5230\u9054\u3057\u305f\u901a\u4fe1\u304c\u3001\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u306e\u8a2d\u5b9a\u304c\u304a\u304b\u3057\u304f\u306a\u3063\u3066\u3044\u305f\u3053\u3068\u3067\u3001\u30ed\u30fc\u30c9\u30d0\u30e9\u30f3\u30b5\u30fc\u3092\u7d4c\u7531\u305b\u305a\u306b\u8fd4\u3063\u3066\u304f\u308b\u3053\u3068\u304c\u539f\u56e0\u3067\u3057\u305f2\u3002<\/p>\n<p>\u79c1\u306f\u30cb\u30d5\u30af\u30e9\u4e0a\u3067\u69cb\u7bc9\u3057\u307e\u3057\u305f\u304c\u3001\u79c1\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u77e5\u8b58\u304c\u5c11\u306a\u304b\u3063\u305f\u3053\u3068\u3082\u76f8\u307e\u3063\u3066\u3001 GCP \u304b\u3089\u30cb\u30d5\u30af\u30e9\u3078\u306e\u8aad\u307f\u66ff\u3048\u306b\u82e6\u52b4\u3057\u3066\u3001\u4f55\u5ea6\u3082\u8a66\u884c\u932f\u8aa4\u3092\u7e70\u308a\u8fd4\u3057\u307e\u3057\u305f\u3002<br \/>\n\u3057\u304b\u3057\u305d\u306e\u304a\u304b\u3052\u3067\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5168\u822c\u306b\u304a\u3044\u3066\u3082\u30cb\u30d5\u30af\u30e9\u306e\u4f7f\u3044\u65b9\u306b\u304a\u3044\u3066\u3082\u3001\u77e5\u8b58\u304c\u3060\u3044\u3076\u5897\u3048\u305f\u306e\u3067\u7d50\u679c\u30aa\u30fc\u30e9\u30a4\u3067\u3059 ^^<\/p>\n<h3>kube-apiserver \u304b\u3089 kubelet \u3078\u306e\u901a\u4fe1 (kube-apiserver \u306e\u8a2d\u5b9a)<\/h3>\n<p>kubectl \u3067\u30af\u30e9\u30b9\u30bf\u30fc\u64cd\u4f5c\u3092\u3057\u3066\u3044\u308b\u3068\u304d\u306f\u3001 kubectl \u304c kube-apiserver \u306b\u30a2\u30af\u30bb\u30b9\u3057\u3001 kube-apiserver \u304c kubelet \u306b\u5bfe\u3057\u3066\u6307\u793a\u3092\u9001\u3063\u3066\u3044\u307e\u3059\u3002\u306a\u306e\u3067\u4f8b\u3048\u3070\u3001 kubectl exec \u3092\u3057\u305f\u3068\u304d\u306b\u3046\u307e\u304f\u30b3\u30f3\u30c6\u30ca\u306b\u63a5\u7d9a\u3067\u304d\u306a\u3051\u308c\u3070\u3001\u307e\u305a kube-apiserver \u3068 kubelet \u9593\u306e\u63a5\u7d9a\u3092\u7591\u3063\u3066\u307f\u308b\u3053\u3068\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n<p>\u79c1\u306e\u74b0\u5883\u306e\u5834\u5408\u306f \/etc\/hosts \u306a\u3069\u3092\u8a2d\u5b9a\u3057\u3066\u3044\u306a\u304b\u3063\u305f\u306e\u3067 kube-apiserver \u304c worker0 \u306a\u3069\u306e\u30db\u30b9\u30c8\u540d\u3067 kubelet \u306b\u30a2\u30af\u30bb\u30b9\u3057\u3088\u3046\u3068\u3059\u308b\u3068\u540d\u524d\u89e3\u6c7a\u304c\u3067\u304d\u305a\u306b\u5931\u6557\u3057\u307e\u3059\u3002<br \/>\n\u3053\u308c\u306f kube-apiserver \u306e\u8a2d\u5b9a\u3092\u5909\u66f4\u3059\u308b\u3053\u3068\u3067\u56de\u907f\u3067\u304d\u307e\u3059\u3002 Kubernetes The Hard Way \u3067\u306f systemd \u306e\u30b5\u30fc\u30d3\u30b9\u3068\u3057\u3066 kube-apiserver \u3092\u8d77\u52d5\u3057\u3066\u3044\u308b\u305f\u3081\u3001\u7b2c8\u7ae0\u3067\u4f5c\u6210\u3057\u3066\u3044\u308b systemd \u306e unit \u30d5\u30a1\u30a4\u30eb\u306b\u9805\u76ee\u3092\u8ffd\u52a0\u3059\u308b\u3053\u3068\u3067\u5909\u66f4\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>\u6211\u5011\u5c07\u6dfb\u52a0 &#8211;kubelet-preferred-address-types=InternalIP,ExternalIP \u9078\u9805\uff0c\u4f7f\u5176\u4f7f\u7528 IP \u5730\u5740\u800c\u975e\u540d\u7a31\u3002<\/p>\n<pre class=\"post-pre\"><code>cat &lt;&lt;EOF | sudo tee \/etc\/systemd\/system\/kube-apiserver.service\r\n[Unit]\r\nDescription=Kubernetes API Server\r\nDocumentation=https:\/\/github.com\/kubernetes\/kubernetes\r\n\r\n[Service]\r\nExecStart=\/usr\/local\/bin\/kube-apiserver \\\\\r\n  --advertise-address=${INTERNAL_IP} \\\\\r\n  --allow-privileged=true \\\\\r\n  --apiserver-count=3 \\\\\r\n  --audit-log-maxage=30 \\\\\r\n  --audit-log-maxbackup=3 \\\\\r\n  --audit-log-maxsize=100 \\\\\r\n  --audit-log-path=\/var\/log\/audit.log \\\\\r\n  --authorization-mode=Node,RBAC \\\\\r\n  --bind-address=0.0.0.0 \\\\\r\n  --client-ca-file=\/var\/lib\/kubernetes\/ca.pem \\\\\r\n  --enable-admission-plugins=NamespaceLifecycle,NodeRestriction,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota \\\\\r\n  --etcd-cafile=\/var\/lib\/kubernetes\/ca.pem \\\\\r\n  --etcd-certfile=\/var\/lib\/kubernetes\/kubernetes.pem \\\\\r\n  --etcd-keyfile=\/var\/lib\/kubernetes\/kubernetes-key.pem \\\\\r\n  --etcd-servers=https:\/\/10.240.0.10:2379,https:\/\/10.240.0.11:2379,https:\/\/10.240.0.12:2379 \\\\\r\n  --event-ttl=1h \\\\\r\n  --encryption-provider-config=\/var\/lib\/kubernetes\/encryption-config.yaml \\\\\r\n  --kubelet-certificate-authority=\/var\/lib\/kubernetes\/ca.pem \\\\\r\n  --kubelet-client-certificate=\/var\/lib\/kubernetes\/kubernetes.pem \\\\\r\n  --kubelet-client-key=\/var\/lib\/kubernetes\/kubernetes-key.pem \\\\\r\n  --kubelet-preferred-address-types=InternalIP,ExternalIP \\\\\r\n  --runtime-config='api\/all=true' \\\\\r\n  --service-account-key-file=\/var\/lib\/kubernetes\/service-account.pem \\\\\r\n  --service-account-signing-key-file=\/var\/lib\/kubernetes\/service-account-key.pem \\\\\r\n  --service-account-issuer=https:\/\/${KUBERNETES_PUBLIC_ADDRESS}:6443 \\\\\r\n  --service-cluster-ip-range=10.32.0.0\/24 \\\\\r\n  --service-node-port-range=30000-32767 \\\\\r\n  --tls-cert-file=\/var\/lib\/kubernetes\/kubernetes.pem \\\\\r\n  --tls-private-key-file=\/var\/lib\/kubernetes\/kubernetes-key.pem \\\\\r\n  --v=2\r\nRestart=on-failure\r\nRestartSec=5\r\n\r\n[Install]\r\nWantedBy=multi-user.target\r\nEOF\r\n<\/code><\/pre>\n<h3>CoreDNS \u5faa\u73af\u5e76\u5bfc\u81f4\u540d\u79f0\u89e3\u6790\u5931\u8d25\u7684\u95ee\u9898\u3002<\/h3>\n<p>\u79c1\u306e\u5834\u5408\u306f\u4e0a\u306e\u5bfe\u51e6\u3067 kube-apiserver \u304b\u3089 kubelet \u3078\u306e\u901a\u4fe1\u306b\u6210\u529f\u3057\u3066\u3082\u306a\u304a\u3001\u7b2c12\u7ae0\u3067\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u3057\u305f DNS \u30a2\u30c9\u30aa\u30f3\u306e\u691c\u8a3c\u304c\u3046\u307e\u304f\u3044\u304d\u307e\u305b\u3093\u3067\u3057\u305f\u3002<\/p>\n<p>\u5728\u68c0\u67e5CoreDNS\u7684\u72b6\u6001\u65f6\uff0c\u6211\u4eec\u53d1\u73b0\u5b83\u6301\u7eed\u542f\u52a8\u5931\u8d25\uff0c\u5e76\u663e\u793aCrashLoopBackOff\u9519\u8bef\u3002\u8fd9\u662f\u56e0\u4e3a\u4eceUbuntu 18.04\u5f00\u59cb\uff0c\u9ed8\u8ba4\u4f7f\u7528\u672c\u5730DNS stub\u89e3\u6790\u5668\uff08systemd-resolved\uff09\uff0c\u800c\u8fd9\u5c31\u662f\u95ee\u9898\u7684\u6839\u6e90\u3002<\/p>\n<p>Kubernetes The Hard Way \u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u306e\u8a2d\u5b9a\u5024\u3067\u306f\u3001 kubelet \u304c\u540d\u524d\u89e3\u6c7a\u306e\u305f\u3081\u306b \/run\/systemd\/resolve\/resolv.conf \u3092\u898b\u306b\u884c\u304f\u3088\u3046\u8a2d\u5b9a\u3055\u308c\u3066\u3044\u307e\u3059\u3002 kubelet \u306f\u305d\u306e\u8a2d\u5b9a\u5024\u306b\u57fa\u3065\u304d\u3001\u8a72\u5f53\u30d5\u30a1\u30a4\u30eb\u3092 CoreDNS \u306e\u30b3\u30f3\u30c6\u30ca\u306b\u6e21\u3057\u307e\u3059\u3002\u3067\u3059\u304c\u3001\u305d\u306e\u30d5\u30a1\u30a4\u30eb\u306b\u306f 127.0.0.1 \u304c\u6307\u5b9a\u3055\u308c\u3066\u3044\u308b\u305f\u3081\u3001\u7d50\u679c\u7684\u306b\u30eb\u30fc\u30d7\u3057\u3066\u3057\u307e\u3044\u30af\u30e9\u30c3\u30b7\u30e5\u3057\u307e\u3059\u3002\u3064\u307e\u308a\u3001 127.0.0.1 \u3067\u306f\u306a\u304f 8.8.8.8 \u306a\u3069\u306e\u5916\u90e8 DNS \u3092\u53c2\u7167\u3059\u308b\u3088\u3046\u306b\u3059\u308c\u3070\u30eb\u30fc\u30d7\u306e\u767a\u751f\u3092\u6291\u3048\u3089\u308c\u305d\u3046\u3067\u3059\u3002<\/p>\n<p>\/run\/systemd\/resolve\/resolv.conf \u306f systemd-resolved \u306b\u3088\u3063\u3066\u751f\u6210\u3055\u308c\u308b\u30d5\u30a1\u30a4\u30eb\u306e\u305f\u3081\u76f4\u63a5\u7de8\u96c6\u3057\u3066\u306f\u3044\u3051\u306a\u3044\u306e\u3067\u3001 \/etc\/systemd\/resolved.conf \u3092\u7de8\u96c6\u3057\u3066\u304b\u3089\u3001 systemd-resolved \u306e\u30c7\u30fc\u30e2\u30f3\u3092\u518d\u8d77\u52d5\u3059\u308b\u3053\u3068\u3067 \/run\/systemd\/resolve\/resolv.conf \u3092\u518d\u751f\u6210\u3055\u305b\u307e\u3059\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">{<\/span>\r\n  <span class=\"nv\">NAMESERVER_ADDRESSES<\/span><span class=\"o\">=<\/span>8.8.8.8\r\n  <span class=\"nb\">sed<\/span> <span class=\"nt\">-i<\/span> <span class=\"s2\">\"s\/^DNS=127.0.0.1<\/span><span class=\"nv\">$\/<\/span><span class=\"s2\">DNS=<\/span><span class=\"k\">${<\/span><span class=\"nv\">NAMESERVER_ADDRESSES<\/span><span class=\"k\">}<\/span><span class=\"s2\">\/\"<\/span> \/etc\/systemd\/resolved.conf\r\n  <span class=\"nb\">sudo <\/span>systemctl restart systemd-resolved\r\n<span class=\"o\">}<\/span>\r\n<\/code><\/pre>\n<p>\u5728\u8fd0\u884c\u4e0a\u8ff0\u811a\u672c\u540e\uff0c\u6267\u884c sudo systemctl restart kubelet \u4ee5\u91cd\u65b0\u542f\u52a8 kubelet\uff0c\u5c31\u53ef\u4ee5\u5c06 CoreDNS \u6210\u529f\u7f6e\u4e8e Running \u7684\u72b6\u6001\u4e86\u3002<\/p>\n<p>\u8ffd\u8a18\uff1a\u6211\u5df2\u7ecf\u64b0\u5199\u4e86\u4e00\u7bc7\u5173\u4e8e\u6b64\u4e8b\u7684\u72ec\u7acb\u6587\u7ae0\u3002<br \/>\nhttps:\/\/sogo.dev\/posts\/2022\/12\/kubernetes-coredns-loop<\/p>\n<h3>Pod \u7684\u540d\u5b57\u89e3\u6790\u5931\u8d25\u95ee\u9898\uff08kube-proxy\uff09<\/h3>\n<p>\u8fd9\u662f\u5728\u6559\u7a0b\u7ed3\u675f\u540e\uff0c\u5728\u6211\u521b\u5efa\u7684\u96c6\u7fa4\u4e2d\u8fdb\u884c\u9a8c\u8bc1\u65f6\u53d1\u73b0\u7684\u95ee\u9898\uff0c\u6211\u521b\u5efa\u7684\u96c6\u7fa4\u5c45\u7136\u51fa\u73b0\u4e86 Pod \u5728 CoreDNS \u4e2d\u65e0\u6cd5\u89e3\u6790\u540d\u79f0\u7684\u5931\u8d25\uff01\uff08\u6211\u5728\u7b2c12\u7ae0\u4e2d\u5df2\u9a8c\u8bc1\u4e86\u8bbe\u7f6e\u7684 DNS \u63d2\u4ef6\uff0c\u6240\u4ee5\u53ef\u80fd\u662f\u5728\u73a9\u800d\u65f6\u5f04\u574f\u4e86\u2026\u2026\u3002\uff09<\/p>\n<p>\u691c\u8a3c\u7528\u306e Pod \u5185\u3067 kubectl exec -ti dnsutils &#8212; dig kubernetes \u3067\u540d\u524d\u89e3\u6c7a\u3092\u8a66\u3057\u3066\u3044\u305f\u3068\u304d\u306b\u3001\u4ee5\u4e0b\u306e\u30a8\u30e9\u30fc\u304c\u8fd4\u3063\u3066\u304d\u307e\u3057\u305f3\u3002<\/p>\n<pre class=\"post-pre\"><code>;; reply from unexpected source: 10.200.2.177#53, expected 10.32.0.10#53\r\n<\/code><\/pre>\n<p>\u30b3\u30f3\u30c6\u30ca\u5185\u306e \/etc\/resolv.conf \u306b nameserver 10.32.0.10 \u304c\u8a2d\u5b9a\u3055\u308c\u3066\u304a\u308a\u3001\u3053\u308c\u304c kube-dns \u306e Cluster IP \u306a\u306e\u3067\u3059\u304c\u3001\u5b9f\u969b\u306b Pod \u304c\u7f6e\u304b\u308c\u3066\u3044\u308b\u30ce\u30fc\u30c9\u306e IP (10.200.2.177) \u3067\u8fd4\u3063\u3066\u304d\u3066\u3044\u308b\u305f\u3081\u30a8\u30e9\u30fc\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>\u3053\u306e\u554f\u984c\u306f GitHub \u306e Issue \u306b\u3082\u5831\u544a\u3055\u308c\u3066\u304a\u308a\u3001\u540c\u4e00\u306e\u30ce\u30fc\u30c9\u4e0a\u306b Pod \u3068 KubeDNS \u304c\u3042\u308b\u3068\u3046\u307e\u304f\u52d5\u304b\u306a\u3044\u3068\u3044\u3046\u554f\u984c\u306e\u3088\u3046\u3067\u3059\u3002<br \/>\nmodprobe br_netfilter \u3092\u3059\u308b\u3053\u3068\u3067\u76f4\u308a\u307e\u3059\u3002\u8a73\u3057\u304f\u306a\u3044\u306e\u3067\u3088\u304f\u308f\u304b\u308a\u307e\u305b\u3093\u304c\u3001\u3053\u306e\u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u30ed\u30fc\u30c9\u3059\u308b\u3053\u3068\u3067\u3044\u3044\u611f\u3058\u306b NAT \u3057\u3066\u304f\u308c\u308b\u3088\u3046\u306b\u306a\u308b\u3093\u3060\u3068\u601d\u3044\u307e\u3059\u3002<br \/>\n\u3061\u306a\u307f\u306b\u3001 kube-proxy \u306e\u30aa\u30d7\u30b7\u30e7\u30f3\u306b\u3042\u308b &#8211;masquerade-all \u3092\u3064\u3051\u308b\u65b9\u6cd5\u306f\u3046\u307e\u304f\u3044\u304d\u307e\u305b\u3093\u3067\u3057\u305f\u3002<\/p>\n<h2>\u603b\u7ed3<\/h2>\n<p>\u5f53\u5bf9\u8fd9\u4e9b\u95ee\u9898\u8fdb\u884c\u603b\u7ed3\u7684\u65f6\u5019\uff0c\u53d1\u73b0\u5168\u90e8\u90fd\u662f\u4e0e\u7f51\u7edc\u6709\u5173\u7684\u95ee\u9898\uff0c\u6bd4\u5982\u8def\u7531\u548cDNS\u3002\u867d\u7136\u5f88\u5e73\u5e38\uff0c\u4f46\u662f\u6211\u7684\u611f\u89c9\u662f &#8220;Kubernetes\u7f51\u7edc\u771f\u96be\u554a\uff5e\uff5e&#8221;\u3002\u53e6\u5916\uff0c\u7531\u4e8eKubernetes\u5728\u5404\u4e2a\u5730\u65b9\u90fd\u4f7f\u7528\u8bc1\u4e66\uff0c\u6240\u4ee5\u6bcf\u5f53\u8d1f\u8f7d\u5747\u8861\u5668\u7684IP\u53d1\u751f\u53d8\u5316\u65f6\uff0c\u5c31\u5fc5\u987b\u91cd\u65b0\u751f\u6210\u548c\u91cd\u65b0\u5206\u53d1\u6240\u6709\u8bc1\u4e66\uff0c\u8fd9\u771f\u7684\u5f88\u9ebb\u70e6\u3002<\/p>\n<p>\u5e0c\u671b\u8fd9\u4e2a\u7ed3\u6784\u590d\u6742\u7684\u957f\u6587\u80fd\u5bf9\u6253\u7b97\u4f7f\u7528 Kubernetes The Hard Way \u7684\u4eba\u4eec\u6709\u6240\u5e2e\u52a9\uff01<\/p>\n<p>\u660e\u5929\u662f @ablengawa \u7684\u201c\u4f7f\u7528 Blender \u751f\u6210\u76f8\u5bf9\u903c\u771f\u7684\u56fe\u50cf\u201d\u3002\u671f\u5f85\u5427\uff01<\/p>\n<h2>\u989d\u5916: \u6211\u60f3\u8981\u901a\u8fc7Sonobuoy\uff01\u7f16\u8f91<\/h2>\n<p>\u6709\u4e00\u79cd\u540d\u4e3aSonobuoy\uff08\u8bfb\u4f5c\u30bd\u30ce\u30d6\u30a4\uff09\u7684\u5de5\u5177\uff0c\u53ef\u7528\u4e8e\u5bf9Kubernetes\u96c6\u7fa4\u8fdb\u884c\u7aef\u5230\u7aef\u6d4b\u8bd5\u3002\u901a\u8fc7\u8fd0\u884c\u8be5\u5de5\u5177\uff0c\u6211\u4eec\u53ef\u4ee5\u5c06\u65b0\u5efa\u7684\u96c6\u7fa4\u89c6\u4e3a\u4e0eCertified Kubernetes\u76f8\u7b49\u7684\u96c6\u7fa4\u3002\u56e0\u6b64\uff0c\u6211\u4eec\u5c06\u5bf9\u8fd9\u4e2a\u65b0\u5efa\u7684\u96c6\u7fa4\u8fdb\u884c\u6d4b\u8bd5\u3002<\/p>\n<p>\u7ed3\u679c\u5f88\u7cdf\u7cd5<\/p>\n<p>\u30c7\u30d0\u30c3\u30b0\u3057\u305f\u308a\u3057\u3066\u8272\u3005\u9811\u5f35\u3063\u305f\u306e\u3067\u3059\u304c\u3001\u4f55\u3082\u5206\u304b\u3089\u305a\u306b\u7d42\u308f\u308a\u307e\u3057\u305f\u3002\u5f0a\u793e\u306e\u30de\u30cd\u30fc\u30b8\u30c9 Kubernetes \u306e Hatoba \u3067\u4f5c\u3063\u305f\u30af\u30e9\u30b9\u30bf\u30fc\u3092\u540c\u30c6\u30b9\u30c8\u306b\u304b\u3051\u3066\u307f\u305f\u3089\u3001\u3042\u3063\u3055\u308a\u30af\u30ea\u30a2\u3057\u305f\u306e\u3067\u3001\u300c\u3055\u3059\u304c Certified Kubernetes \u306f\u9055\u3046\u308f\u301c\u300d\u3068\u601d\u3044\u307e\u3057\u305f\u3002<\/p>\n<p>\u8fd8\u6709\u5f88\u957f\u7684\u8def\u8981\u8d70\u5462\u2026\u2026<\/p>\n<h2>\u6587\u732e\u5f15\u7528<\/h2>\n<p>kelseyhightower\/kubernetes-the-hard-way<br \/>\nKubernetes \u7ec4\u4ef6<br \/>\n\u96c6\u7fa4\u7f51\u7edc<br \/>\nkube-apiserver<br \/>\nkube-proxy<br \/>\ncoredns\/coredns\/plugin\/loop<br \/>\n\u5f53 pod \u5185\u7684\u5bb9\u5668\u4e0e kube-dns \u5bb9\u5668\u5728\u540c\u4e00\u8282\u70b9\u4e0a\u65f6\uff0cKubeDNS \u5728 pod \u5185\u90e8\u65e0\u6cd5\u5de5\u4f5c\u3002<\/p>\n<section>\u4ed6\u8fd8\u5728\u5185\u90e8\u535a\u5ba2\u4e0a\u5199\u4e86\u4e00\u7bc7\u6587\u7ae0\uff0c\u6807\u9898\u4e3a\u201c\u5c1d\u8bd5\u4f7f\u7528Nifcloud Kubernetes Service\u7684\u65b0\u529f\u80fdLoadBalancer\u90e8\u7f72Elasticsearch \/ Kibana\u201d\u3002\u21a9\u5f53\u65f6\uff0c\u591a\u8def\u8d1f\u8f7d\u5747\u8861\u5668\u662f\u5168\u7403\u548c\u7528\u4e8eKubernetes\u7684\u79c1\u6709LAN\u76842-\u53e3\u67b6\u6784\uff0c\u5e76\u4e14\u8fde\u63a5\u5230\u4e0e\u9ed8\u8ba4\u7f51\u5173\u8bbe\u7f6e\u7684\u8def\u7531\u5668\u4e5f\u8fde\u63a5\u5230\u4e86\u5168\u7403\u3002\u5f53Worker\u8282\u70b9\u901a\u8fc7\u591a\u8def\u8d1f\u8f7d\u5747\u8861\u5668\u8bbf\u95eekube-apiserver\u65f6\uff0c\u8fd4\u56de\u7684\u901a\u4fe1\u4e0d\u4f1a\u901a\u8fc7\u8d1f\u8f7d\u5747\u8861\u5668\u6d41\u56de\uff0c\u800c\u662f\u901a\u8fc7\u8def\u7531\u5668\u8fd4\u56de\uff0c\u5bfc\u81f4\u901a\u4fe1\u5931\u8d25\u3002\u89e3\u51b3\u65b9\u6cd5\u662f\u5c06\u591a\u8def\u8d1f\u8f7d\u5747\u8861\u5668\u6539\u4e3a1-\u53e3\u67b6\u6784\uff08\u4ec5\u5168\u7403\uff09\u3002\u21a9<\/p>\n<p>\u53c2\u89c1\u8c03\u8bd5DNS\u89e3\u6790kubectl apply -f https:\/\/k8s.io\/examples\/admin\/dns\/dnsutils.yaml\u3002\u21a9<\/p>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>\u672c\u6587\u662f\u5bcc\u58eb\u901a\u4e91\u6280\u672f\u76842021\u5e74\u5723\u8bde\u65e5\u5386\u7684\u7b2c\u516b\u7bc7\u6587\u7ae0\u3002 7\u65e5\u76ee\u662f\u7531@HanchA\u8fdb\u884c\u7684&#8221;\u5b89\u88c5Post [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-35484","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u5c1d\u8bd5\u81ea\u5df1\u7ec4\u5efa Kubernetes \u96c6\u7fa4\u5e76\u8fdb\u884c\u6545\u969c\u6392\u9664\u3010The Hard Way\u3011\u3010\u30cb\u30d5\u30af\u30e9\u3011 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5c1d\u8bd5\u81ea\u5df1\u7ec4\u5efa-kubernetes-\u96c6\u7fa4\u5e76\u8fdb\u884c\u6545\u969c\u6392\u9664\u3010the-hard-way\u3011\u3010\u30cb\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u5c1d\u8bd5\u81ea\u5df1\u7ec4\u5efa Kubernetes \u96c6\u7fa4\u5e76\u8fdb\u884c\u6545\u969c\u6392\u9664\u3010The Hard Way\u3011\u3010\u30cb\u30d5\u30af\u30e9\u3011\" \/>\n<meta property=\"og:description\" content=\"\u672c\u6587\u662f\u5bcc\u58eb\u901a\u4e91\u6280\u672f\u76842021\u5e74\u5723\u8bde\u65e5\u5386\u7684\u7b2c\u516b\u7bc7\u6587\u7ae0\u3002 7\u65e5\u76ee\u662f\u7531@HanchA\u8fdb\u884c\u7684&#8221;\u5b89\u88c5Post [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5c1d\u8bd5\u81ea\u5df1\u7ec4\u5efa-kubernetes-\u96c6\u7fa4\u5e76\u8fdb\u884c\u6545\u969c\u6392\u9664\u3010the-hard-way\u3011\u3010\u30cb\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-06-22T23:27:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-29T11:01:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d23c137434c4406c2be80\/11-0.png\" \/>\n<meta name=\"author\" content=\"\u97f5, \u79d1\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u97f5, \u79d1\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b\/\",\"name\":\"\u5c1d\u8bd5\u81ea\u5df1\u7ec4\u5efa Kubernetes \u96c6\u7fa4\u5e76\u8fdb\u884c\u6545\u969c\u6392\u9664\u3010The Hard Way\u3011\u3010\u30cb\u30d5\u30af\u30e9\u3011 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-06-22T23:27:40+00:00\",\"dateModified\":\"2024-04-29T11:01:30+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u5c1d\u8bd5\u81ea\u5df1\u7ec4\u5efa Kubernetes \u96c6\u7fa4\u5e76\u8fdb\u884c\u6545\u969c\u6392\u9664\u3010The Hard Way\u3011\u3010\u30cb\u30d5\u30af\u30e9\u3011\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e\",\"name\":\"\u97f5, \u79d1\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g\",\"caption\":\"\u97f5, \u79d1\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/yunke\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u5c1d\u8bd5\u81ea\u5df1\u7ec4\u5efa Kubernetes \u96c6\u7fa4\u5e76\u8fdb\u884c\u6545\u969c\u6392\u9664\u3010The Hard Way\u3011\u3010\u30cb\u30d5\u30af\u30e9\u3011 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u5c1d\u8bd5\u81ea\u5df1\u7ec4\u5efa-kubernetes-\u96c6\u7fa4\u5e76\u8fdb\u884c\u6545\u969c\u6392\u9664\u3010the-hard-way\u3011\u3010\u30cb\/","og_locale":"zh_CN","og_type":"article","og_title":"\u5c1d\u8bd5\u81ea\u5df1\u7ec4\u5efa Kubernetes \u96c6\u7fa4\u5e76\u8fdb\u884c\u6545\u969c\u6392\u9664\u3010The Hard Way\u3011\u3010\u30cb\u30d5\u30af\u30e9\u3011","og_description":"\u672c\u6587\u662f\u5bcc\u58eb\u901a\u4e91\u6280\u672f\u76842021\u5e74\u5723\u8bde\u65e5\u5386\u7684\u7b2c\u516b\u7bc7\u6587\u7ae0\u3002 7\u65e5\u76ee\u662f\u7531@HanchA\u8fdb\u884c\u7684&#8221;\u5b89\u88c5Post [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u5c1d\u8bd5\u81ea\u5df1\u7ec4\u5efa-kubernetes-\u96c6\u7fa4\u5e76\u8fdb\u884c\u6545\u969c\u6392\u9664\u3010the-hard-way\u3011\u3010\u30cb\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-06-22T23:27:40+00:00","article_modified_time":"2024-04-29T11:01:30+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d23c137434c4406c2be80\/11-0.png"}],"author":"\u97f5, \u79d1","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u97f5, \u79d1","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"2 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b\/","name":"\u5c1d\u8bd5\u81ea\u5df1\u7ec4\u5efa Kubernetes \u96c6\u7fa4\u5e76\u8fdb\u884c\u6545\u969c\u6392\u9664\u3010The Hard Way\u3011\u3010\u30cb\u30d5\u30af\u30e9\u3011 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-06-22T23:27:40+00:00","dateModified":"2024-04-29T11:01:30+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u5c1d\u8bd5\u81ea\u5df1\u7ec4\u5efa Kubernetes \u96c6\u7fa4\u5e76\u8fdb\u884c\u6545\u969c\u6392\u9664\u3010The Hard Way\u3011\u3010\u30cb\u30d5\u30af\u30e9\u3011"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e","name":"\u97f5, \u79d1","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g","caption":"\u97f5, \u79d1"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/yunke\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%b0%9d%e8%af%95%e8%87%aa%e5%b7%b1%e7%bb%84%e5%bb%ba-kubernetes-%e9%9b%86%e7%be%a4%e5%b9%b6%e8%bf%9b%e8%a1%8c%e6%95%85%e9%9a%9c%e6%8e%92%e9%99%a4%e3%80%90the-hard-way%e3%80%91%e3%80%90%e3%83%8b\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35484","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=35484"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35484\/revisions"}],"predecessor-version":[{"id":87065,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35484\/revisions\/87065"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=35484"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=35484"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=35484"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}