- ELB integration for Kubernetes Services allows for traffic ingress to selected microservices<\/ul>\n<\/li>\n<\/ul>\n
- \n
- Worker machines are deployed in an Auto Scaling group for effortless scaling<\/ul>\n<\/li>\n<\/ul>\n
- \n
- CoreOS-alpha-891.0.0<\/ul>\n<\/li>\n<\/ul>\n
- \n
- Docker version 1.9.1, build 4419fdb-dirty<\/ul>\n<\/li>\n<\/ul>\n
<\/p>\n
- kubernetes v1.1.2<\/ul>\n
![\"01.png\"](\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d24ac37434c4406c2fb44\/8-0.png\" "\\"\\"")
<\/div>\n\u5c06\u4f1a\u521b\u5efa\u4e00\u4e2a\u4e3b\u8282\u70b9\u4ee5\u53ca\u4f7f\u7528AutoScalingGroup\u521b\u5efa\u7684\u5de5\u4f5c\u8282\u70b9\u3002<\/p>\n
\u6b65\u9a5f<\/h1>\n
kube-aws \u3092\u9069\u5f53\u306a\u5834\u6240\u306b\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u3066\u89e3\u51cd<\/p>\n
$ wget https:\/\/github.com\/coreos\/coreos-kubernetes\/releases\/download\/v0.3.0\/kube-aws-linux-amd64.tar.gz\r\n$ tar zxvf kube-aws-linux-amd64.tar.gz\r\n<\/code><\/pre>\nkube-aws\u7684\u4f7f\u7528\u65b9\u6cd5<\/p>\n
$ .\/kube-aws --help\r\nManage Kubernetes clusters on AWS\r\n\r\nUsage:\r\n kube-aws [command]\r\n\r\nAvailable Commands:\r\n destroy Destroy an existing Kubernetes cluster\r\n render Render a CloudFormation template\r\n status Describe an existing Kubernetes cluster\r\n up Create a new Kubernetes cluster\r\n version Print version information and exit\r\n help Help about any command\r\n\r\nFlags:\r\n --aws-debug[=false]: Log debug information from aws-sdk-go library\r\n --config=\"cluster.yaml\": Location of kube-aws cluster config file\r\n\r\n\r\nUse \"kube-aws [command] --help\" for more information about a command.\r\n<\/code><\/pre>\n\u8bbe\u7f6e AWS \u51ed\u8bc1<\/p>\n
$ export AWS_ACCESS_KEY_ID=\"AKXXXXXXXXXXXXXXXXXX\"\r\n$ export AWS_SECRET_ACCESS_KEY=\"XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX\"\r\n<\/code><\/pre>\n\u4e0b\u8f7d\u793a\u4f8b\u7684 Kubernetes \u96c6\u7fa4\u914d\u7f6e\u6587\u4ef6\u3002<\/p>\n
$ curl --silent --location https:\/\/raw.githubusercontent.com\/coreos\/coreos-kubernetes\/master\/multi-node\/aws\/cluster.yaml.example > cluster.yaml\r\n<\/code><\/pre>\n\u96c6\u7fa4\u914d\u7f6e<\/p>\n
$ vi cluster.yaml\r\n<\/code><\/pre>\n# Unique name of Kubernetes cluster. In order to deploy\r\n# more than one cluster into the same AWS account, this\r\n# name must not conflict with an existing cluster.\r\nclusterName: \"kubernetes\"\r\n\r\n# Name of the SSH keypair already loaded into the AWS\r\n# account being used to deploy this cluster.\r\nkeyName: \"\uff5bAWS\u306b\u767b\u9332\u3057\u305f Key pair name\uff5d\"\r\n\r\n# Region to provision Kubernetes cluster\r\nregion: \"ap-northeast-1\"\r\n\r\n# Availability Zone to provision Kubernetes cluster\r\navailabilityZone: \"ap-northeast-1a\"\r\n\r\n# DNS name routable to the Kubernetes controller nodes\r\n# from worker nodes and external clients. The deployer\r\n# is responsible for making this name routable\r\nexternalDNSName: \"\uff5bKubernetes API \u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u969b\u306e\u30c9\u30e1\u30a4\u30f3\u540d\uff5d\"\r\n\r\n# Instance type for controller node\r\ncontrollerInstanceType: \"t2.micro\"\r\n\r\n# Disk size (GiB) for controller node\r\ncontrollerRootVolumeSize: 10\r\n\r\n# Number of worker nodes to create\r\nworkerCount: 3\r\n\r\n# Instance type for worker nodes\r\nworkerInstanceType: \"t2.micro\"\r\n\r\n# Disk size (GiB) for worker nodes\r\nworkerRootVolumeSize: 10\r\n\r\n# Location of kube-aws artifacts used to deploy a new\r\n# Kubernetes cluster. The necessary artifacts are already\r\n# available in a public S3 bucket matching the version\r\n# of the kube-aws tool. This parameter is typically\r\n# overwritten only for development purposes.\r\n#artifactURL: https:\/\/coreos-kubernetes.s3.amazonaws.com\/<VERSION>\r\n\r\n# CIDR for Kubernetes VPC\r\nvpcCIDR: \"10.0.0.0\/16\"\r\n\r\n# CIDR for Kubernetes subnet\r\ninstanceCIDR: \"10.0.0.0\/24\"\r\n\r\n# IP Address for controller in Kubernetes subnet\r\ncontrollerIP: 10.0.0.50\r\n\r\n# CIDR for all service IP addresses\r\nserviceCIDR: \"10.3.0.0\/24\"\r\n\r\n# CIDR for all pod IP addresses\r\npodCIDR: \"10.2.0.0\/16\"\r\n\r\n# IP address of Kubernetes controller service (must be contained by serviceCIDR)\r\nkubernetesServiceIP: \"10.3.0.1\"\r\n\r\n# IP address of Kubernetes dns service (must be contained by serviceCIDR)\r\ndnsServiceIP: \"10.3.0.10\"\r\n<\/code><\/pre>\n4\u53f0\u3067\u30af\u30e9\u30b9\u30bf\u69cb\u7bc9
\n– master :1\u53f0
\n– worker node:3\u53f0 (AutoScalingGroup)<\/p>\n\u30c7\u30d7\u30ed\u30a4<\/p>\n
$ .\/kube-aws up\r\nInitialized TLS infrastructure\r\nWrote kubeconfig to \/home\/***\/kube-aws\/clusters\/kubernetes\/kubeconfig\r\nWaiting for cluster creation...\r\nSuccessfully created cluster\r\n\r\nCluster Name: kubernetes\r\nController IP: xxx.xxx.xxx.xxx(EIP \u304c\u8868\u793a\u3055\u308c\u308b)\r\n<\/code><\/pre>\n\u8bf7\u6ce8\u610f\uff0c\u7531kube-aws\u521b\u5efa\u7684\u7528\u4e8eKubernetes\u8ba4\u8bc1\u7684\u5bc6\u94a5\u548c\u8bc1\u4e66\u53ea\u80fd\u4f7f\u752890\u5929\u3002<\/p>\n
PRODUCTION NOTE: the TLS keys and certificates generated by kube-aws should not be used to deploy a production Kubernetes cluster. Each component certificate is only valid for 90 days, while the CA is valid for 365 days. If deploying a production Kubernetes cluster, consider establishing PKI independently of this tool first.<\/p>\n
\u4f7f\u57df\u540d\u80fd\u5920\u9032\u884c\u8a2a\u554f<\/p>\n
$ sudo vi \/etc\/hosts\r\n<\/code><\/pre>\n\u8ffd\u52a0\u4e8b\u9805\u5982\u4e0b<\/p>\n
\uff5bController IP\uff5d \uff5bcluster.yaml \u306b\u8a2d\u5b9a\u3057\u305f externalDNSName\uff5d\r\n<\/code><\/pre>\n\u4f7f\u7528kubectl\u547d\u4ee4\u65f6\uff0c\u8bf7\u6307\u5b9a\u5df2\u521b\u5efa\u7684clusters\/\uff5bclusterName\uff5d\/kubeconfig\u6587\u4ef6\u8fdb\u884c\u6267\u884c\u3002<\/p>\n
$ kubectl --kubeconfig=clusters\/kubernetes\/kubeconfig cluster-info\r\nKubernetes master is running at https:\/\/\uff5bexternalDNSName\uff5d\r\nKubeDNS is running at https:\/\/\uff5bexternalDNSName\uff5d\/api\/v1\/proxy\/namespaces\/kube-system\/services\/kube-dns\r\n<\/code><\/pre>\nnode \u78ba\u8a8d<\/p>\n
$ kubectl --kubeconfig=clusters\/kubernetes\/kubeconfig get nodes\r\nNAME LABELS STATUS AGE\r\nip-10-0-0-171.ap-northeast-1.compute.internal kubernetes.io\/hostname=ip-10-0-0-171.ap-northeast-1.compute.internal Ready 7m\r\nip-10-0-0-172.ap-northeast-1.compute.internal kubernetes.io\/hostname=ip-10-0-0-172.ap-northeast-1.compute.internal Ready 7m\r\nip-10-0-0-173.ap-northeast-1.compute.internal kubernetes.io\/hostname=ip-10-0-0-173.ap-northeast-1.compute.internal Ready 7m\r\n<\/code><\/pre>\n\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u5373\u53ef\u67e5\u770b CloudFormation \u6a21\u677f\u3002<\/p>\n
$ .\/kube-aws render\r\n<\/code><\/pre>\n{\r\n \"AWSTemplateFormatVersion\": \"2010-09-09\",\r\n \"Conditions\": {\r\n \"EmptyAvailabilityZone\": {\r\n \"Fn::Equals\": [\r\n {\r\n \"Ref\": \"AvailabilityZone\"\r\n },\r\n \"\"\r\n ]\r\n }\r\n },\r\n \"Description\": \"kube-aws Kubernetes cluster\",\r\n \"Mappings\": {\r\n \"RegionMap\": {\r\n \"ap-northeast-1\": {\r\n\r\n...snip...\r\n<\/code><\/pre>\n\u5c1d\u8bd5\u4f7f\u7528Kubernetes \u6784\u5efaWordPress<\/h1>\n
\u6839\u636e\u793a\u4f8b\u521b\u5efa\u5ba3\u8a00\u6587\u4ef6\u3002<\/p>\n
mysql \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u7528\u306e EBS Volume \u4f5c\u6210<\/p>\n
$ aws ec2 create-volume --availability-zone ap-northeast-1a --size 10 --volume-type gp2\r\n<\/code><\/pre>\n\u8bb0\u4e0b\u663e\u793a\u7684VolumeId<\/p>\n
\u521b\u5efa MySQL Pod<\/p>\n
apiVersion: v1\r\nkind: Pod\r\nmetadata:\r\n name: mysql\r\n labels:\r\n name: mysql\r\nspec:\r\n containers:\r\n - resources:\r\n limits :\r\n cpu: 0.5\r\n image: mysql:5.6\r\n name: mysql\r\n env:\r\n - name: MYSQL_ROOT_PASSWORD\r\n value: yourpassword\r\n ports:\r\n - containerPort: 3306\r\n name: mysql\r\n volumeMounts:\r\n - name: mysql-persistent-storage\r\n mountPath: \/var\/lib\/mysql\r\n volumes:\r\n - name: mysql-persistent-storage\r\n awsElasticBlockStore:\r\n volumeID: aws:\/\/ap-northeast-1a\/\uff5b\u4e0a\u3067\u4f5c\u6210\u3057\u305f VolumeID\uff5d\r\n fsType: ext4\r\n<\/code><\/pre>\n\u521b\u5efaPod<\/p>\n
$ kubectl --kubeconfig=clusters\/kubernetes\/kubeconfig create -f mysql.yaml\r\npod \"mysql\" created\r\n<\/code><\/pre>\n$ kubectl --kubeconfig=clusters\/kubernetes\/kubeconfig get pod\r\nNAME READY STATUS RESTARTS AGE\r\nmysql 1\/1 Running 0 5m\r\n<\/code><\/pre>\n\u521b\u5efaMySQL\u670d\u52a1<\/p>\n
apiVersion: v1\r\nkind: Service\r\nmetadata:\r\n labels:\r\n name: mysql\r\n name: mysql\r\nspec:\r\n ports:\r\n - port: 3306\r\n selector:\r\n name: mysql\r\n<\/code><\/pre>\n\u63d0\u4f9b\u670d\u52a1<\/p>\n
$ kubectl --kubeconfig=clusters\/kubernetes\/kubeconfig create -f mysql-service.yaml\r\nservice \"mysql\" created\r\n<\/code><\/pre>\n$ kubectl --kubeconfig=clusters\/kubernetes\/kubeconfig get svc\r\nNAME CLUSTER_IP EXTERNAL_IP PORT(S) SELECTOR AGE\r\nkubernetes 10.3.0.1 <none> 443\/TCP <none> 1h\r\nmysql 10.3.0.170 <none> 3306\/TCP name=mysql 5m\r\n<\/code><\/pre>\n\u4e3aWordPress\u6570\u636e\u521b\u5efaEBS\u5377\u3002<\/p>\n
$ aws ec2 create-volume --availability-zone ap-northeast-1a --size 10 --volume-type gp2\r\n<\/code><\/pre>\n\u8bb0\u4e0b\u663e\u793a\u7684VolumeId\u3002<\/p>\n
\u521b\u5efaWordPress Pod<\/p>\n
apiVersion: v1\r\nkind: Pod\r\nmetadata:\r\n name: wordpress\r\n labels:\r\n name: wordpress\r\nspec:\r\n containers:\r\n - image: wordpress\r\n name: wordpress\r\n env:\r\n - name: WORDPRESS_DB_PASSWORD\r\n value: yourpassword\r\n ports:\r\n - containerPort: 80\r\n name: wordpress\r\n volumeMounts:\r\n - name: wordpress-persistent-storage\r\n mountPath: \/var\/www\/html\r\n volumes:\r\n - name: wordpress-persistent-storage\r\n awsElasticBlockStore:\r\n volumeID: aws:\/\/ap-northeast-1a\/\uff5b\u4e0a\u3067\u4f5c\u6210\u3057\u305f VolumeID\uff5d\r\n fsType: ext4\r\n<\/code><\/pre>\n\u521b\u9020 Pod<\/p>\n
$ kubectl --kubeconfig=clusters\/kubernetes\/kubeconfig create -f wordpress.yaml\r\npod \"mysql\" wordpress\r\n<\/code><\/pre>\n$ kubectl --kubeconfig=clusters\/kubernetes\/kubeconfig get pod\r\nNAME READY STATUS RESTARTS AGE\r\nmysql 1\/1 Running 0 8m\r\nwordpress 1\/1 Running 0 5m\r\n<\/code><\/pre>\nWordPress Service \u4f5c\u6210<\/p>\n
apiVersion: v1\r\nkind: Service\r\nmetadata:\r\n labels:\r\n name: wpfrontend\r\n name: wpfrontend\r\nspec:\r\n ports:\r\n - port: 80\r\n selector:\r\n name: wordpress\r\n type: LoadBalancer\r\n<\/code><\/pre>\n\u670d\u52a1\u521b\u5efa<\/p>\n
$ kubectl --kubeconfig=clusters\/kubernetes\/kubeconfig create -f wordpress-service.yaml\r\nservice \"mysql\" created\r\n<\/code><\/pre>\n$ kubectl --kubeconfig=clusters\/kubernetes\/kubeconfig get svc\r\nNAME CLUSTER_IP EXTERNAL_IP PORT(S) SELECTOR AGE\r\nkubernetes 10.3.0.1 <none> 443\/TCP <none> 55m\r\nmysql 10.3.0.170 <none> 3306\/TCP name=mysql 9m\r\nwpfrontend 10.3.0.130 80\/TCP name=wordpress 5m\r\n<\/code><\/pre>\nService \u4f5c\u6210\u306e\u969b\u306b type: LoadBalancer \u3092\u6307\u5b9a\u3059\u308b\u3068\u3001\u81ea\u52d5\u3067 ELB \u304c\u4f5c\u6210\u3055\u308c\u308b\u306e\u3067\u78ba\u8a8d<\/p>\n
$ aws elb describe-load-balancers\r\n{\r\n \"LoadBalancerDescriptions\": [\r\n {\r\n \"Subnets\": [\r\n...snip...\r\n<\/code><\/pre>\n\u901a\u8fc7\u6d4f\u89c8\u5668\u8bbf\u95ee\u6240\u663e\u793a\u7684DNS\u540d\u79f0\u3002<\/p>\n
![\"01.png\"](\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d24ac37434c4406c2fb44\/69-0.png\" "\\"\\"")
<\/div>\n\u7576WordPress\u7684\u8a2d\u7f6e\u756b\u9762\u986f\u793a\u51fa\u4f86\u6642\uff0c\u5c31\u53ef\u4ee5\u4e86\u3002<\/p>\n
\u6253\u6383<\/p>\n
kubernetes \u3067\u4f5c\u6210\u3055\u308c\u305f LoadBalancer(ELB)\u3001ELB \u7528 SecurityGroup \u306f CloudFormation \u7ba1\u7406\u5916\u3068\u306a\u308a\u3001\u524a\u9664\u3055\u308c\u306a\u3044\u306e\u3067\u624b\u52d5\u3067\u5b9f\u884c<\/p>\n
$ aws elb delete-load-balancer --load-balancer-name=\uff5bLoadBalancerName\uff5d\r\n<\/code><\/pre>\n\u5220\u9664\u4e5f\u53ef\u4ee5<\/p>\n
$ aws ec2 delete-volume --volume-id=\uff5bVolumeID\uff5d\r\n<\/code><\/pre>\n\u6467\u6bc1<\/p>\n
$ .\/kube-aws destroy\r\nDestroyed cluster\r\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"\u603b\u7ed3 CloudFormation \u3092 \u4f7f\u7528\u3057\u305f Kubernetes \u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u30c4\u30fc\u30eb kube-aws […]<\/p>\n","protected":false},"author":10,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-35725","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n
\u4f7f\u7528kube-aws\u5728AWS\u4e0a\u5feb\u901f\u642d\u5efaKubernetes\u96c6\u7fa4 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528kube-aws\u5728aws\u4e0a\u5feb\u901f\u642d\u5efakubernetes\u96c6\u7fa4\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f7f\u7528kube-aws\u5728AWS\u4e0a\u5feb\u901f\u642d\u5efaKubernetes\u96c6\u7fa4\" \/>\n<meta property=\"og:description\" content=\"\u603b\u7ed3 CloudFormation \u3092 \u4f7f\u7528\u3057\u305f Kubernetes \u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u30c4\u30fc\u30eb kube-aws […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528kube-aws\u5728aws\u4e0a\u5feb\u901f\u642d\u5efakubernetes\u96c6\u7fa4\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-30T13:49:27+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-29T09:50:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d24ac37434c4406c2fb44\/8-0.png\" \/>\n<meta name=\"author\" content=\"\u5b87, \u534e\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u5b87, \u534e\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kube-aws%e5%9c%a8aws%e4%b8%8a%e5%bf%ab%e9%80%9f%e6%90%ad%e5%bb%bakubernetes%e9%9b%86%e7%be%a4\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kube-aws%e5%9c%a8aws%e4%b8%8a%e5%bf%ab%e9%80%9f%e6%90%ad%e5%bb%bakubernetes%e9%9b%86%e7%be%a4\/\",\"name\":\"\u4f7f\u7528kube-aws\u5728AWS\u4e0a\u5feb\u901f\u642d\u5efaKubernetes\u96c6\u7fa4 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-03-30T13:49:27+00:00\",\"dateModified\":\"2024-04-29T09:50:28+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/513018e4e121d3add1b7c5de8be21458\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kube-aws%e5%9c%a8aws%e4%b8%8a%e5%bf%ab%e9%80%9f%e6%90%ad%e5%bb%bakubernetes%e9%9b%86%e7%be%a4\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kube-aws%e5%9c%a8aws%e4%b8%8a%e5%bf%ab%e9%80%9f%e6%90%ad%e5%bb%bakubernetes%e9%9b%86%e7%be%a4\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kube-aws%e5%9c%a8aws%e4%b8%8a%e5%bf%ab%e9%80%9f%e6%90%ad%e5%bb%bakubernetes%e9%9b%86%e7%be%a4\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f7f\u7528kube-aws\u5728AWS\u4e0a\u5feb\u901f\u642d\u5efaKubernetes\u96c6\u7fa4\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/513018e4e121d3add1b7c5de8be21458\",\"name\":\"\u5b87, \u534e\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63cd45cbc05a35fc4ff7637a163c83c4962ef58d27472726c3a3e0c9c5194f0f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63cd45cbc05a35fc4ff7637a163c83c4962ef58d27472726c3a3e0c9c5194f0f?s=96&d=mm&r=g\",\"caption\":\"\u5b87, \u534e\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/yuhua\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kube-aws%e5%9c%a8aws%e4%b8%8a%e5%bf%ab%e9%80%9f%e6%90%ad%e5%bb%bakubernetes%e9%9b%86%e7%be%a4\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u4f7f\u7528kube-aws\u5728AWS\u4e0a\u5feb\u901f\u642d\u5efaKubernetes\u96c6\u7fa4 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528kube-aws\u5728aws\u4e0a\u5feb\u901f\u642d\u5efakubernetes\u96c6\u7fa4\/","og_locale":"zh_CN","og_type":"article","og_title":"\u4f7f\u7528kube-aws\u5728AWS\u4e0a\u5feb\u901f\u642d\u5efaKubernetes\u96c6\u7fa4","og_description":"\u603b\u7ed3 CloudFormation \u3092 \u4f7f\u7528\u3057\u305f Kubernetes \u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u30c4\u30fc\u30eb kube-aws […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528kube-aws\u5728aws\u4e0a\u5feb\u901f\u642d\u5efakubernetes\u96c6\u7fa4\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-03-30T13:49:27+00:00","article_modified_time":"2024-04-29T09:50:28+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d24ac37434c4406c2fb44\/8-0.png"}],"author":"\u5b87, \u534e","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u5b87, \u534e","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"5 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kube-aws%e5%9c%a8aws%e4%b8%8a%e5%bf%ab%e9%80%9f%e6%90%ad%e5%bb%bakubernetes%e9%9b%86%e7%be%a4\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kube-aws%e5%9c%a8aws%e4%b8%8a%e5%bf%ab%e9%80%9f%e6%90%ad%e5%bb%bakubernetes%e9%9b%86%e7%be%a4\/","name":"\u4f7f\u7528kube-aws\u5728AWS\u4e0a\u5feb\u901f\u642d\u5efaKubernetes\u96c6\u7fa4 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-03-30T13:49:27+00:00","dateModified":"2024-04-29T09:50:28+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/513018e4e121d3add1b7c5de8be21458"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kube-aws%e5%9c%a8aws%e4%b8%8a%e5%bf%ab%e9%80%9f%e6%90%ad%e5%bb%bakubernetes%e9%9b%86%e7%be%a4\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kube-aws%e5%9c%a8aws%e4%b8%8a%e5%bf%ab%e9%80%9f%e6%90%ad%e5%bb%bakubernetes%e9%9b%86%e7%be%a4\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kube-aws%e5%9c%a8aws%e4%b8%8a%e5%bf%ab%e9%80%9f%e6%90%ad%e5%bb%bakubernetes%e9%9b%86%e7%be%a4\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u4f7f\u7528kube-aws\u5728AWS\u4e0a\u5feb\u901f\u642d\u5efaKubernetes\u96c6\u7fa4"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/513018e4e121d3add1b7c5de8be21458","name":"\u5b87, \u534e","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63cd45cbc05a35fc4ff7637a163c83c4962ef58d27472726c3a3e0c9c5194f0f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63cd45cbc05a35fc4ff7637a163c83c4962ef58d27472726c3a3e0c9c5194f0f?s=96&d=mm&r=g","caption":"\u5b87, \u534e"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/yuhua\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8kube-aws%e5%9c%a8aws%e4%b8%8a%e5%bf%ab%e9%80%9f%e6%90%ad%e5%bb%bakubernetes%e9%9b%86%e7%be%a4\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=35725"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35725\/revisions"}],"predecessor-version":[{"id":86736,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35725\/revisions\/86736"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=35725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=35725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=35725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
<\/p>\n
- \n
- \n
<\/p>\n
- Full TLS is set up between Kubernetes components and users interacting with kubectl<\/ul>\n
\u8bf7\u53c2\u8003\u4ee5\u4e0b\u94fe\u63a5\u4e86\u89e3\u5982\u4f55\u5728AWS\u4e0a\u4f7f\u7528Kubernetes\uff1a
\nhttps:\/\/coreos.com\/kubernetes\/docs\/latest\/kubernetes-on-aws.html<\/p>\n\u73af\u5883 (huan jing)<\/h1>\n
2016\/01\/14\u65f6\u70b9\u6240\u6784\u5efa\u7684\u5185\u5bb9\u5982\u4e0b\uff1a<\/p>\n
- \n
- \n
<\/p>\n
- \n