{"id":48774,"date":"2024-01-07T00:34:34","date_gmt":"2024-03-11T23:13:02","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93\/"},"modified":"2024-05-04T17:13:39","modified_gmt":"2024-05-04T09:13:39","slug":"%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93\/","title":{"rendered":"\u5efa\u7acbGKE\u7684\u90e8\u7f72\u7ba1\u9053"},"content":{"rendered":"

\u9996\u5148<\/h1>\n

\u9019\u662f\u6211\u5efa\u7acbGKE\u69cb\u5efa\u6d41\u7a0b\u6642\u7684\u7b46\u8a18\u3002
\n\u7531\u65bc\u9019\u662f\u6211\u7684\u500b\u4eba\u5099\u5fd8\u9304\uff0c\u6240\u4ee5\u8207\u6211\u53c3\u8003\u7684Qiita\u6587\u7ae0\u6709\u5f88\u591a\u91cd\u8907\u7684\u90e8\u5206\u3002
\n\u9019\u6b21\u6211\u4f7f\u7528\u4e86\u300cTerraform\u300d\u4f5c\u70baGKE\u69cb\u5efa\u5de5\u5177\uff0c\u4e26\u4f7f\u7528\u300cGithub Actions\u300d\u4f5c\u70ba\u6d41\u7a0b\u57f7\u884c\u74b0\u5883\u3002<\/p>\n

\u73af\u5883<\/h1>\n

\u5173\u4e8e\u5728\u7ba1\u9053\u4e0a\u4f7f\u7528\u7684\u73af\u5883\uff0c\u7531\u4e8e\u6e90\u4ee3\u7801\u4e2d\u6709\u8bb0\u5f55\uff0c\u53ea\u9700\u5728\u672c\u5730\u64cd\u4f5c\u65f6\u5199\u4e0b\u6240\u9700\u7684\u5185\u5bb9:
\n* macOS Catalina \u7248\u672c 10.15.4
\n* fish (\u4f7f\u7528\u7684 Shell)
\n* Homebrew 2.2.10
\n* Google Cloud SDK 272.0.0
\n* gsutil \u7248\u672c: 4.46
\n* kubectl v1.15.5<\/p>\n

\u4e8b\u5148\u51c6\u5907<\/h1>\n

gcloud\u7684\u5b89\u88c5<\/h2>\n

\u5229\u7528Homebrew\u8fdb\u884c\u5b89\u88c5\u3002<\/p>\n

$ <\/span>brew cask install <\/span>google-cloud-sdk\r\n\r\n# \u5229\u7528\u3059\u308b\u30b7\u30a7\u30eb\u306b\u5fdc\u3058\u305fpath\u306e\u8a2d\u5b9a<\/span>\r\n# fish\u306e\u5834\u5408\u306f\u3001 ~\/.config\/fish\/config.fsh\u306b\u4ee5\u4e0b\u306e\u5185\u5bb9\u3092\u8a18\u8ff0<\/span>\r\nsource<\/span> \/usr\/local\/Caskroom\/google-cloud-sdk\/latest\/google-cloud-sdk\/path.fish.inc\r\n<\/code><\/pre>\n
\u542f\u7528Kubernetes\u5f15\u64ceAPI<\/h2>\n
gcloud services enable <\/span>container.googleapis.com\r\n<\/code><\/pre>\n
Kubernetes Engine API \u6587\u4ef6 (Kubernetes Engine API document)<\/p>\n
\u8c37\u6b4c\u4e91\u5b58\u50a8<\/h1>\n
\u4e3a\u4e86\u4f7f\u7528Terraform\u6765\u6784\u5efaGKE\uff0c\u5c06GCS\u4f5c\u4e3astate\u6587\u4ef6\u7684\u5b58\u50a8\u4f4d\u7f6e\u3002
\n\u5c06\u521b\u5efa\u4e00\u4e2a\u540d\u4e3atf-state-location\u7684\u5b58\u50a8\u6876\u3002<\/p>\n
# \u30d0\u30b1\u30c3\u30c8\u306e\u30bf\u30a4\u30d7\u3068\u540d\u524d\u3092\u74b0\u5883\u5909\u6570\u306b\u8a2d\u5b9a<\/span>\r\n$ <\/span>set <\/span>GCS_CLASS multi_regional\r\n$ <\/span>set <\/span>GCS_BUCKET_NAME tf-state-location\r\n\r\n# \u30bf\u30a4\u30d7\u3068\u540d\u524d\u3092\u5f15\u6570\u306b\u30d0\u30b1\u30c3\u30c8\u3092\u4f5c\u6210  <\/span>\r\n$ <\/span>gsutil mb -p<\/span> $GCP_PROJECT<\/span> -c<\/span> $GCS_CLASS<\/span> -l<\/span> us gs:\/\/$GCS_BUCKET_NAME<\/span>\/\r\n<\/code><\/pre>\n
\u670d\u52a1\u8d26\u6237<\/h1>\n
\u521b\u5efa\u4e00\u4e2a\u670d\u52a1\u8d26\u53f7\u4f5c\u4e3a\u6d41\u6c34\u7ebf\u7684\u6267\u884c\u7528\u6237\u3002<\/p>\n
\u521b\u5efa\u670d\u52a1\u8d26\u53f7<\/h2>\n
\u5c06\u670d\u52a1\u8d26\u6237\u540d\u79f0\u8bbe\u7f6e\u4e3agke-terraform-service-account\u3002<\/p>\n
# GCP\u306b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u540d\u3092\u53d6\u5f97\u3057\u3066\u74b0\u5883\u5909\u6570\u306b\u8a2d\u5b9a<\/span>\r\n$ <\/span>set <\/span>GCP_PROJECT (<\/span>gcloud info --format<\/span>=<\/span>'value(config.project)'<\/span>)<\/span>\r\n\r\n# \u30b5\u30fc\u30d3\u30b9\u30a2\u30ab\u30a6\u30f3\u30c8\u540d\u3092\u74b0\u5883\u5909\u6570\u306b\u8a2d\u5b9a<\/span>\r\n$ <\/span>set <\/span>TERRAFORM_SA gke-terraform-service-account\r\n\r\n# \u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3068\u540d\u524d\u3092\u5f15\u6570\u306b\u30b5\u30fc\u30d3\u30b9\u30a2\u30ab\u30a6\u30f3\u30c8 \u3092\u4f5c\u6210<\/span>\r\n$ <\/span>gcloud iam service-accounts create $TERRAFORM_SA<\/span> --project<\/span>=<\/span>$GCP_PROJECT<\/span> --display-name<\/span> $TERRAFORM_SA<\/span>\r\n\r\n# \u4f5c\u6210\u3057\u305f\u30b5\u30fc\u30d3\u30b9\u30a2\u30ab\u30a6\u30f3\u30c8\u306eID\u60c5\u5831\u3092\u74b0\u5883\u5909\u6570\u306b\u8a2d\u5b9a(\u5f8c\u306e\u7ae0\u5229\u7528\u3059\u308b)<\/span>\r\n$ <\/span>set <\/span>TERRAFORM_SA_EMAIL (<\/span>gcloud iam service-accounts list --project<\/span>=<\/span>$GCP_PROJECT<\/span> --filter<\/span>=<\/span>\"displayName:<\/span>$TERRAFORM_SA<\/span>\"<\/span> --format<\/span>=<\/span>'value(email)'<\/span>)<\/span>\r\n<\/code><\/pre>\n
\u6388\u4e88\u670d\u52a1\u8d26\u53f7\u6743\u9650<\/h2>\n
\u4e3a\u4e86\u8ba9\u670d\u52a1\u8d26\u53f7\u6210\u4e3a\u6267\u884c\u7528\u6237\uff0c\u9700\u8981\u4e3aGCP\u6388\u4e88\u5fc5\u8981\u7684\u6743\u9650\u3002<\/p>\n
\u6388\u4e88\u5173\u4e8eGKE\u521b\u5efa\u7684\u6743\u9650<\/h3>\n
$ <\/span>gcloud projects add-iam-policy-binding $GCP_PROJECT<\/span> \\<\/span>\r\n    --role<\/span> roles\/iam.serviceAccountUser \\<\/span>\r\n    --member<\/span> serviceAccount:$TERRAFORM_SA_EMAIL<\/span>\r\n\r\n$ <\/span>gcloud projects add-iam-policy-binding $GCP_PROJECT<\/span> \\<\/span>\r\n    --role<\/span> roles\/compute.admin \\<\/span>\r\n    --member<\/span> serviceAccount:$TERRAFORM_SA_EMAIL<\/span>\r\n\r\n$ <\/span>gcloud projects add-iam-policy-binding $GCP_PROJECT<\/span> \\<\/span>\r\n    --role<\/span> roles\/storage.admin \\<\/span>\r\n    --member<\/span> serviceAccount:$TERRAFORM_SA_EMAIL<\/span>\r\n\r\n$ <\/span>gcloud projects add-iam-policy-binding $GCP_PROJECT<\/span> \\<\/span>\r\n    --role<\/span> roles\/container.clusterAdmin \\<\/span>\r\n    --member<\/span> serviceAccount:$TERRAFORM_SA_EMAIL<\/span>\r\n\r\n# \u7d50\u679c\u78ba\u8a8d\u7528<\/span>\r\ngcloud projects get-iam-policy $GCP_PROJECT<\/span> \\<\/span>\r\n    --flatten<\/span>=<\/span>\"bindings[].members\"<\/span> \\<\/span>\r\n    --filter<\/span>=<\/span>\"bindings.members:serviceAccount:<\/span>$TERRAFORM_SA_EMAIL<\/span>\"<\/span> \\<\/span>\r\n    --format<\/span>=<\/span>'table(bindings.members,bindings.role)'<\/span>\r\n<\/code><\/pre>\n
\u6388\u4e88\u5bf9GCS\u5b58\u50a8\u7a7a\u95f4\u7684\u6743\u9650\u3002<\/h3>\n
\u4e3a\u4e86\u8bbf\u95ee\u4f5c\u4e3a\u7ba1\u9053\u4e2d\u7684\u72b6\u6001\u6587\u4ef6\u5b58\u50a8\u5e93\u800c\u51c6\u5907\u7684GCS\u5b58\u50a8\u6876\uff0c\u9700\u8981\u6388\u4e88\u670d\u52a1\u5e10\u53f7\u76f8\u5e94\u7684\u6743\u9650\u3002<\/p>\n
# \u30d0\u30b1\u30c3\u30c8\u306b\u5bfe\u3059\u308bAdmin\u6a29\u9650\u3092\u4ed8\u4e0e\u3059\u308b(serviceaccount\u304cstorage.admin\u30ed\u30fc\u30eb\u3092\u6301\u3063\u3066\u3044\u308b\u305f\u3081\u3084\u3089\u306a\u304f\u3066\u3082\u53ef)<\/span>\r\n$ <\/span>gsutil iam ch serviceAccount:$TERRAFORM_SA_EMAIL<\/span>:objectAdmin gs:\/\/$GCS_BUCKET_NAME<\/span>\/\r\n<\/code><\/pre>\n
\u521b\u5efa\u670d\u52a1\u5e10\u6237\u5bc6\u94a5\u6587\u4ef6\uff08JSON\uff09\u3002<\/h3>\n
\u5728\u6267\u884c Terraform \u65f6\u9700\u8981\u521b\u5efa\u670d\u52a1\u5e10\u6237\u7684\u5bc6\u94a5\u3002<\/p>\n
# key\u4f5c\u6210\u5834\u6240\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u60c5\u5831\u3092\u74b0\u5883\u5909\u6570\u306b\u8a2d\u5b9a\u3057\u3066\u3001\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u4f5c\u6210<\/span>\r\n$ <\/span>set <\/span>TERRAFORM_SA_DEST ~\/.gcp\/terraform-service-account.json\r\n$ <\/span>mkdir<\/span> -p<\/span> (<\/span>dirname<\/span> $TERRAFORM_SA_DEST<\/span>)<\/span>\r\n\r\n# \u30b5\u30fc\u30d3\u30b9\u30a2\u30ab\u30a6\u30f3\u30c8\u306ekey\u30d5\u30a1\u30a4\u30eb\u3092\u6307\u5b9a\u3057\u305f\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u4f5c\u6210<\/span>\r\n$ <\/span>gcloud iam service-accounts keys create $TERRAFORM_SA_DEST<\/span> --iam-account<\/span> $TERRAFORM_SA_EMAIL<\/span>\r\n<\/code><\/pre>\n
\u6784\u5efaGKE\u90e8\u7f72\u6d41\u7a0b<\/h1>\n
\u8fd9\u4e00\u7ae0\u4ecb\u7ecd\u7684\u4ee3\u7801\u5df2\u7ecf\u5728\u4ee5\u4e0b\u7684Git\u4ed3\u5e93\u4e0a\u516c\u5f00\u3002
\nreadme\u4e2d\u4e5f\u5305\u542b\u4e86\u53c2\u8003\u7684\u5b98\u65b9\u9875\u9762\u7b49\u4fe1\u606f\u3002
\nhttps:\/\/github.com\/sabure500\/gke-terraform<\/p>\n
\u5730\u7403\u6210\u5f62<\/h2>\n
\u53ef\u4ee5\u6839\u636e\u4ee5\u4e0b\u7684Terraform\u5b98\u65b9\u63d0\u4f9b\u7684GKE\u793a\u4f8b\u4ee3\u7801\u521b\u5efa.tf\u6587\u4ef6\u3002
\ngoogle_container_cluster<\/p>\n
\u73af\u5883\u53d8\u91cf\u7684\u5b9a\u4e49<\/h3>\n
\u5728Terraform\u4e2d\u5b9a\u4e49\u7528\u4e8e\u4f7f\u7528\u7684\u73af\u5883\u53d8\u91cf\u3002<\/p>\n
variable<\/span> \"project\"<\/span> {}<\/span>\r\n\r\nvariable<\/span> \"cluster_name\"<\/span> {<\/span>\r\n  default<\/span> =<\/span> \"my-gke-cluster\"<\/span>\r\n}<\/span>\r\n\r\nvariable<\/span> \"location\"<\/span> {<\/span>\r\n  default<\/span> =<\/span> \"us-west1-a\"<\/span>\r\n}<\/span>\r\n\r\nvariable<\/span> \"machine_type\"<\/span> {<\/span>\r\n  default<\/span> =<\/span> \"f1-micro\"<\/span>\r\n}<\/span>\r\n\r\nvariable<\/span> \"preemptible_machine_type\"<\/span> {<\/span>\r\n  default<\/span> =<\/span> \"e2-small\"<\/span>\r\n}<\/span>\r\n\r\nvariable<\/span> \"network\"<\/span> {<\/span>\r\n  default<\/span> =<\/span> \"default\"<\/span>\r\n}<\/span>\r\n\r\nvariable<\/span> \"min_master_version\"<\/span> {<\/span>\r\n  default<\/span> =<\/span> \"1.15.11-gke.3\"<\/span>\r\n}<\/span>\r\n\r\nvariable<\/span> \"node_version\"<\/span> {<\/span>\r\n  default<\/span> =<\/span> \"1.15.11-gke.3\"<\/span>\r\n}<\/span>\r\n<\/code><\/pre>\n
GCP\u4f9b\u5e94\u5546\u4fe1\u606f\u7684\u5b9a\u4e49<\/h3>\n
provider<\/span> \"google\"<\/span> {<\/span>\r\n  version<\/span> =<\/span> \"3.17.0\"<\/span>\r\n  project<\/span> =<\/span> var<\/span>.<\/span>project<\/span>\r\n  region<\/span>  =<\/span> var<\/span>.<\/span>location<\/span>\r\n}<\/span>\r\n<\/code><\/pre>\n
\u540e\u7aef(tfstate\u6587\u4ef6\u7684\u5b58\u50a8\u4f4d\u7f6e)\u7684\u5b9a\u4e49<\/h3>\n
\u5b9a\u4e49\u4e00\u4e2a\u540e\u7aef\u6765\u7ba1\u7406.tfstate\u6587\u4ef6\u3002
\n\u6307\u5b9a\u5b58\u50a8\u6876\u540d\u79f0\u4e3a\u9884\u5148\u521b\u5efa\u7684GCS\u5b58\u50a8\u6876\u540d\u79f0\u3002<\/p>\n
terraform<\/span> {<\/span>\r\n  backend<\/span> \"gcs\"<\/span> {<\/span>\r\n    bucket<\/span> =<\/span> \"tf-state-location\"<\/span>\r\n    prefix<\/span> =<\/span> \"terraform\/gke\"<\/span>\r\n  }<\/span>\r\n}<\/span>\r\n<\/code><\/pre>\n
GKE\u7684\u5b9a\u4e49<\/h3>\n
\u8bf7\u53c2\u9605Git\u5b58\u50a8\u5e93\u5185\u7684\u81ea\u8ff0\u6587\u4ef6\u4ee5\u83b7\u53d6\u6709\u5173\u63cf\u8ff0\u7684\u8be6\u7ec6\u4fe1\u606f\u3002<\/p>\n
terraform<\/span> {<\/span>\r\n  required_version<\/span> =<\/span> \"0.12.24\"<\/span>\r\n}<\/span>\r\n\r\nresource<\/span> \"google_container_cluster\"<\/span> \"primary\"<\/span> {<\/span>\r\n  name<\/span>     =<\/span> var<\/span>.<\/span>cluster_name<\/span>\r\n  location<\/span> =<\/span> var<\/span>.<\/span>location<\/span>\r\n\r\n  remove_default_node_pool<\/span> =<\/span> true<\/span>\r\n  initial_node_count<\/span>       =<\/span> 1<\/span>\r\n\r\n  network<\/span> =<\/span> var<\/span>.<\/span>network<\/span>\r\n\r\n  min_master_version<\/span> =<\/span> var<\/span>.<\/span>min_master_version<\/span>\r\n  node_version<\/span>       =<\/span> var<\/span>.<\/span>node_version<\/span>\r\n\r\n  monitoring_service<\/span> =<\/span> \"none\"<\/span>\r\n  logging_service<\/span>    =<\/span> \"none\"<\/span>\r\n\r\n  master_auth<\/span> {<\/span>\r\n    username<\/span> =<\/span> \"\"<\/span>\r\n    password<\/span> =<\/span> \"\"<\/span>\r\n\r\n    client_certificate_config<\/span> {<\/span>\r\n      issue_client_certificate<\/span> =<\/span> false<\/span>\r\n    }<\/span>\r\n  }<\/span>\r\n}<\/span>\r\n\r\nresource<\/span> \"google_container_node_pool\"<\/span> \"primary_nodes\"<\/span> {<\/span>\r\n  name<\/span>       =<\/span> \"${var.cluster_name}-node-pool\"<\/span>\r\n  location<\/span>   =<\/span> var<\/span>.<\/span>location<\/span>\r\n  cluster<\/span>    =<\/span> google_container_cluster<\/span>.<\/span>primary<\/span>.<\/span>name<\/span>\r\n  node_count<\/span> =<\/span> 1<\/span>\r\n\r\n  management<\/span> {<\/span>\r\n    auto_repair<\/span> =<\/span> true<\/span>\r\n  }<\/span>\r\n\r\n  node_config<\/span> {<\/span>\r\n    machine_type<\/span> =<\/span> var<\/span>.<\/span>machine_type<\/span>\r\n    oauth_scopes<\/span> =<\/span> [<\/span>\r\n      \"https:\/\/www.googleapis.com\/auth\/devstorage.read_only\"<\/span>,<\/span>\r\n      \"https:\/\/www.googleapis.com\/auth\/logging.write\"<\/span>,<\/span>\r\n      \"https:\/\/www.googleapis.com\/auth\/monitoring\"<\/span>\r\n    ]<\/span>\r\n  }<\/span>\r\n}<\/span>\r\n\r\nresource<\/span> \"google_container_node_pool\"<\/span> \"primary_preemptible_nodes\"<\/span> {<\/span>\r\n  name<\/span>       =<\/span> \"${var.cluster_name}-preemptible-node-pool\"<\/span>\r\n  location<\/span>   =<\/span> var<\/span>.<\/span>location<\/span>\r\n  cluster<\/span>    =<\/span> google_container_cluster<\/span>.<\/span>primary<\/span>.<\/span>name<\/span>\r\n  node_count<\/span> =<\/span> 2<\/span>\r\n\r\n  management<\/span> {<\/span>\r\n    auto_repair<\/span> =<\/span> true<\/span>\r\n  }<\/span>\r\n\r\n  node_config<\/span> {<\/span>\r\n    preemptible<\/span>  =<\/span> true<\/span>\r\n    machine_type<\/span> =<\/span> var<\/span>.<\/span>preemptible_machine_type<\/span>\r\n    oauth_scopes<\/span> =<\/span> [<\/span>\r\n      \"https:\/\/www.googleapis.com\/auth\/devstorage.read_only\"<\/span>,<\/span>\r\n      \"https:\/\/www.googleapis.com\/auth\/logging.write\"<\/span>,<\/span>\r\n      \"https:\/\/www.googleapis.com\/auth\/monitoring\"<\/span>,<\/span>\r\n    ]<\/span>\r\n  }<\/span>\r\n}<\/span>\r\n<\/code><\/pre>\n
Github Actions \u662f\u4e00\u79cd\u4e91\u539f\u751f\u5de5\u4f5c\u6d41\u81ea\u52a8\u6784\u5efa\u548c\u90e8\u7f72\u7684\u7b56\u7565\u3002<\/h2>\n
\u4f7f\u7528 Github Actions \u8fd0\u884c\u5229\u7528\u4e0a\u8ff0.tf\u6587\u4ef6\u521b\u5efa\u7684 Terraform\u3002
\n\u4f7f\u7528 Github Actions \u6267\u884c Terraform \u53c2\u8003\u4ee5\u4e0b\u5b98\u65b9\u793a\u4f8b\u3002
\nTerraform Github Actions \u5165\u95e8\u6307\u5357\u3002<\/p>\n
\u521b\u5efa\u7528\u4e8e\u6d4b\u8bd5\u7684\u5de5\u4f5c<\/h3>\n
\u5728\u9664\u4e86\u4e3b\u5206\u652f\u4ee5\u5916\u7684\u5730\u65b9\uff0c\u521b\u5efa\u4e00\u4e2a\u6267\u884cterraform\u7684init\u3001validate\u548cplan\u7684\u5de5\u4f5c\u3002<\/p>\n
name<\/span>:<\/span> '<\/span>terraform-test'<\/span>\r\non<\/span>:<\/span>\r\n  push<\/span>:<\/span>\r\n    branches-ignore<\/span>:<\/span>\r\n      -<\/span> master<\/span>\r\n\r\nenv<\/span>:<\/span>\r\n  TERRAFORM_VERSION<\/span>:<\/span> 0.12.24<\/span>\r\n  TF_VAR_project<\/span>:<\/span> ${{secrets.PROJECT}}<\/span>\r\n  GOOGLE_CREDENTIALS<\/span>:<\/span> ${{secrets.GOOGLE_CREDENTIALS}}<\/span>\r\n\r\njobs<\/span>:<\/span>\r\n  terraform<\/span>:<\/span>\r\n    name<\/span>:<\/span> '<\/span>terraform-test'<\/span>\r\n    runs-on<\/span>:<\/span> ubuntu-latest<\/span>\r\n    steps<\/span>:<\/span>\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Checkout'<\/span>\r\n        uses<\/span>:<\/span> actions\/checkout@v1<\/span>\r\n\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Terraform<\/span> Format'<\/span>\r\n        uses<\/span>:<\/span> hashicorp\/terraform-github-actions@master<\/span>\r\n        with<\/span>:<\/span>\r\n          tf_actions_version<\/span>:<\/span> 0.12.24<\/span>\r\n          tf_actions_subcommand<\/span>:<\/span> '<\/span>fmt'<\/span>\r\n        env<\/span>:<\/span>\r\n          GITHUB_TOKEN<\/span>:<\/span> ${{ secrets.GITHUB_TOKEN }}<\/span>\r\n\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Terraform<\/span> Init'<\/span>\r\n        uses<\/span>:<\/span> hashicorp\/terraform-github-actions@master<\/span>\r\n        with<\/span>:<\/span>\r\n          tf_actions_version<\/span>:<\/span> 0.12.24<\/span>\r\n          tf_actions_subcommand<\/span>:<\/span> '<\/span>init'<\/span>\r\n        env<\/span>:<\/span>\r\n          GITHUB_TOKEN<\/span>:<\/span> ${{ secrets.GITHUB_TOKEN }}<\/span>\r\n\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Terraform<\/span> Validate'<\/span>\r\n        uses<\/span>:<\/span> hashicorp\/terraform-github-actions@master<\/span>\r\n        with<\/span>:<\/span>\r\n          tf_actions_version<\/span>:<\/span> 0.12.24<\/span>\r\n          tf_actions_subcommand<\/span>:<\/span> '<\/span>validate'<\/span>\r\n        env<\/span>:<\/span>\r\n          GITHUB_TOKEN<\/span>:<\/span> ${{ secrets.GITHUB_TOKEN }}<\/span>\r\n\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Terraform<\/span> Plan'<\/span>\r\n        uses<\/span>:<\/span> hashicorp\/terraform-github-actions@master<\/span>\r\n        with<\/span>:<\/span>\r\n          tf_actions_version<\/span>:<\/span> 0.12.24<\/span>\r\n          tf_actions_subcommand<\/span>:<\/span> '<\/span>plan'<\/span>\r\n        env<\/span>:<\/span>\r\n          GITHUB_TOKEN<\/span>:<\/span> ${{ secrets.GITHUB_TOKEN }}<\/span>\r\n<\/code><\/pre>\n
\u5e94\u8058\u8fd9\u4efd\u5de5\u4f5c<\/h3>\n
\u521b\u5efa\u4e00\u4e2a\u5f53\u63a8\u9001\u5230\u4e3b\u5206\u652f\u65f6\u6267\u884cterraform\u7684init\u548capply\u7684\u4f5c\u4e1a\u3002<\/p>\n
name<\/span>:<\/span> '<\/span>terraform-apply'<\/span>\r\non<\/span>:<\/span>\r\n  push<\/span>:<\/span>\r\n    branches<\/span>:<\/span>\r\n      -<\/span> master<\/span>\r\n  # API\u30a2\u30af\u30bb\u30b9\u3067\u30a4\u30d9\u30f3\u30c8\u767a\u706b\u304c\u3067\u304d\u308b\u6761\u4ef6<\/span>\r\n  repository_dispatch<\/span>:<\/span>\r\n    types<\/span>:<\/span> [<\/span>apply<\/span>]<\/span>\r\n\r\nenv<\/span>:<\/span>\r\n  TERRAFORM_VERSION<\/span>:<\/span> 0.12.24<\/span>\r\n  TF_VAR_project<\/span>:<\/span> ${{secrets.PROJECT}}<\/span>\r\n  GOOGLE_CREDENTIALS<\/span>:<\/span> ${{secrets.GOOGLE_CREDENTIALS}}<\/span>\r\n\r\njobs<\/span>:<\/span>\r\n  terraform<\/span>:<\/span>\r\n    name<\/span>:<\/span> '<\/span>terraform-apply'<\/span>\r\n    runs-on<\/span>:<\/span> ubuntu-latest<\/span>\r\n    steps<\/span>:<\/span>\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Checkout'<\/span>\r\n        uses<\/span>:<\/span> actions\/checkout@v1<\/span>\r\n\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Terraform<\/span> Init'<\/span>\r\n        uses<\/span>:<\/span> hashicorp\/terraform-github-actions@master<\/span>\r\n        with<\/span>:<\/span>\r\n          tf_actions_version<\/span>:<\/span> 0.12.24<\/span>\r\n          tf_actions_subcommand<\/span>:<\/span> '<\/span>init'<\/span>\r\n        env<\/span>:<\/span>\r\n          GITHUB_TOKEN<\/span>:<\/span> ${{ secrets.GITHUB_TOKEN }}<\/span>\r\n\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Terraform<\/span> Plan'<\/span>\r\n        uses<\/span>:<\/span> hashicorp\/terraform-github-actions@master<\/span>\r\n        with<\/span>:<\/span>\r\n          tf_actions_version<\/span>:<\/span> 0.12.24<\/span>\r\n          tf_actions_subcommand<\/span>:<\/span> '<\/span>plan'<\/span>\r\n        env<\/span>:<\/span>\r\n          GITHUB_TOKEN<\/span>:<\/span> ${{ secrets.GITHUB_TOKEN }}<\/span>\r\n\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Terraform<\/span> Apply'<\/span>\r\n        uses<\/span>:<\/span> hashicorp\/terraform-github-actions@master<\/span>\r\n        with<\/span>:<\/span>\r\n          tf_actions_version<\/span>:<\/span> 0.12.24<\/span>\r\n          tf_actions_subcommand<\/span>:<\/span> '<\/span>apply'<\/span>\r\n        env<\/span>:<\/span>\r\n          GITHUB_TOKEN<\/span>:<\/span> ${{ secrets.GITHUB_TOKEN }}<\/span>\r\n<\/code><\/pre>\n
\u7528\u4e8e\u5220\u9664\u96c6\u7fa4\u7684\u4f5c\u4e1a<\/h3>\n
\u4e3a\u4e86\u51c6\u5907\u8fd9\u4e2aGKE\u96c6\u7fa4\u7528\u4e8e\u5b66\u4e60\uff0c\u6211\u4eec\u9700\u8981\u51c6\u5907\u4e00\u4e2a\u4efb\u52a1\uff0c\u4f7f\u5176\u53ef\u4ee5\u8f7b\u677e\u5730\u5220\u9664\u96c6\u7fa4\uff0c\u800c\u4e0d\u9700\u8981\u5c06\u5176\u63a8\u9001\u5230Git\u4e0a\u3002<\/p>\n
name<\/span>:<\/span> '<\/span>terraform-destroy'<\/span>\r\non<\/span>:<\/span>\r\n  # API\u30a2\u30af\u30bb\u30b9\u3067\u30a4\u30d9\u30f3\u30c8\u767a\u706b\u304c\u3067\u304d\u308b\u6761\u4ef6<\/span>\r\n  repository_dispatch<\/span>:<\/span>\r\n    types<\/span>:<\/span> [<\/span>destroy<\/span>]<\/span>\r\n\r\nenv<\/span>:<\/span>\r\n  TERRAFORM_VERSION<\/span>:<\/span> 0.12.24<\/span>\r\n  TF_VAR_project<\/span>:<\/span> ${{secrets.PROJECT}}<\/span>\r\n  GOOGLE_CREDENTIALS<\/span>:<\/span> ${{secrets.GOOGLE_CREDENTIALS}}<\/span>\r\n\r\njobs<\/span>:<\/span>\r\n  terraform<\/span>:<\/span>\r\n    name<\/span>:<\/span> '<\/span>terraform-apply'<\/span>\r\n    runs-on<\/span>:<\/span> ubuntu-latest<\/span>\r\n    steps<\/span>:<\/span>\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Checkout'<\/span>\r\n        uses<\/span>:<\/span> actions\/checkout@v1<\/span>\r\n\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Terraform<\/span> Init'<\/span>\r\n        uses<\/span>:<\/span> hashicorp\/terraform-github-actions@master<\/span>\r\n        with<\/span>:<\/span>\r\n          tf_actions_version<\/span>:<\/span> 0.12.24<\/span>\r\n          tf_actions_subcommand<\/span>:<\/span> '<\/span>init'<\/span>\r\n        env<\/span>:<\/span>\r\n          GITHUB_TOKEN<\/span>:<\/span> ${{ secrets.GITHUB_TOKEN }}<\/span>\r\n\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Terraform<\/span> Plan<\/span> Destroy'<\/span>\r\n        uses<\/span>:<\/span> hashicorp\/terraform-github-actions@master<\/span>\r\n        with<\/span>:<\/span>\r\n          tf_actions_version<\/span>:<\/span> 0.12.24<\/span>\r\n          tf_actions_subcommand<\/span>:<\/span> '<\/span>plan'<\/span>\r\n          args<\/span>:<\/span> '<\/span>-destroy<\/span> -out=.\/destroy-plan'<\/span>\r\n\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Terraform<\/span> Apply<\/span> Destroy'<\/span>\r\n        uses<\/span>:<\/span> hashicorp\/terraform-github-actions@master<\/span>\r\n        with<\/span>:<\/span>\r\n          tf_actions_version<\/span>:<\/span> 0.12.24<\/span>\r\n          tf_actions_subcommand<\/span>:<\/span> '<\/span>apply'<\/span>\r\n          args<\/span>:<\/span> '<\/span>.\/destroy-plan'<\/span>\r\n<\/code><\/pre>\n
\u8fd9\u4efd\u5de5\u4f5c\u4e0d\u4f1a\u5728\u6d41\u6c34\u7ebf\u4e0a\u6267\u884c\uff0c\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u547d\u4ee4\u76f4\u63a5\u8c03\u7528Github\u7684API\u6765\u6267\u884c
\n(\u9700\u8981\u4e8b\u5148\u521b\u5efa\u4e00\u4e2a\u5177\u6709Github\u5b58\u50a8\u5e93\u6743\u9650\u7684\u4e2a\u4eba\u8bbf\u95ee\u4ee4\u724c)<\/p>\n
curl -vv<\/span> \\<\/span>\r\n  -H<\/span> \"Authorization: token <\/span>$PERSONAL_ACCESS_TOKEN<\/span>\"<\/span> \\<\/span>\r\n  -H<\/span> \"Accept: application\/vnd.github.everest-preview+json\"<\/span> \\<\/span>\r\n  \"https:\/\/api.github.com\/repos\/sabure500\/gke-terraform\/dispatches\"<\/span> \\<\/span>\r\n  -d<\/span> '{\"event_type\": \"destroy\", \"client_payload\": {\"target_brunch\": \"master\"}}'<\/span>\r\n<\/code><\/pre>\n
\u6b64\u5916\uff0c\u4e3a\u4e86\u5728\u6267\u884cdestroy\u547d\u4ee4\u65f6\uff0c\u4e5f\u53ef\u4ee5\u901a\u8fc7\u5c06Apply\u7684event_type\u8bbe\u7f6e\u4e3aapply\u6765\u6267\u884c\u3002<\/p>\n
\u5728 Github Actions \u4e2d\u8bbe\u7f6e\u4f7f\u7528\u7684\u73af\u5883\u53d8\u91cf\u3002<\/h3>\n
\u5728\u4e0a\u8ff0\u7684Job\u4e2d\uff0c\u6211\u4eec\u5c06\u4ee5\u4e0b\u4e24\u4e2a\u70b9\u8bbe\u7f6e\u4e3a\u4ece\u5916\u90e8\u63a5\u6536\u7684\u73af\u5883\u53d8\u91cf\u3002<\/p>\n
    \n
  • \n
      PROJECT : GCP\u306e\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u540d<\/ul>\n<\/li>\n<\/ul>\n
       <\/p>\n
        GOOGLE_CREDENTIALS : \u30b5\u30fc\u30d3\u30b9\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u7ae0\u3067\u4f5c\u6210\u3057\u305fservice account\u306eKey<\/ul>\n
        \u8fd9\u4e9b\u662f\u4e3a\u4e86\u51ed\u636e\u4fe1\u606f\uff0c\u4f7f\u7528\u4ee5\u4e0b\u6b65\u9aa4\u5728Github\u4e0a\u6ce8\u518cSecret\u529f\u80fd\u3002<\/p>\n
          \n
        1. \n
            \u5728Github\u7684\u5b58\u50a8\u5e93\u9009\u62e9\u754c\u9762\u4e0a\uff0c\u9009\u62e9”\u8bbe\u7f6e”\u9009\u9879\u5361<\/ol>\n<\/li>\n<\/ol>\n
             <\/p>\n
              \n
            1. \n
                \u5728”\u9009\u9879”\u90e8\u5206\u4e2d\uff0c\u9009\u62e9”\u79d8\u5bc6”\u9009\u9879<\/ol>\n<\/li>\n<\/ol>\n
                 <\/p>\n
                  \u901a\u8fc7”\u6dfb\u52a0\u65b0\u7684\u79d8\u5bc6”\u521b\u5efa\u6240\u9700\u7684\u79d8\u5bc6<\/ol>\n
                  \u8bbe\u5b9a\u5b58\u50a8\u5e93\u64cd\u4f5c\u89c4\u5219<\/h3>\n
                  \u5728\u4e0a\u8ff0\u63d0\u5230\u7684\u5de5\u4f5c\u4e2d\uff0c\u4f7f\u7528\u4e86\u5728\u9664\u4e86\u4e3b\u5206\u652f\u4ee5\u5916\u7684\u5206\u652f\u4e0a\u6267\u884c\u6d4b\u8bd5\u5e76\u5c06\u5176\u63a8\u9001\u5230\u4e3b\u5206\u652f\u540e\u5b9e\u9645\u5e94\u7528\u7684\u6d41\u7a0b\u3002\u56e0\u6b64\uff0c\u5982\u679c\u76f4\u63a5\u5c06\u66f4\u6539\u63a8\u9001\u5230\u4e3b\u5206\u652f\uff0c\u6d4b\u8bd5\u5c06\u4e0d\u4f1a\u88ab\u6267\u884c\u3002\u4e3a\u4e86\u9632\u6b62\u8fd9\u79cd\u60c5\u51b5\u53d1\u751f\uff0c\u9700\u8981\u5236\u5b9a\u89c4\u5219\uff0c\u5373\u7981\u6b62\u76f4\u63a5\u63a8\u9001\u5230\u4e3b\u5206\u652f\uff0c\u5e76\u4e14\u5728\u53d1\u8d77\u62c9\u53d6\u8bf7\u6c42\u65f6\uff0c\u5fc5\u987b\u786e\u4fdd\u6d4b\u8bd5\u5de5\u4f5c\u5df2\u7ecf\u901a\u8fc7\u3002<\/p>\n
                    \n
                  1. \n
                      \u5728Github\u7684\u5b58\u50a8\u5e93\u9009\u62e9\u9875\u9762\u4e0a\uff0c\u9009\u62e9\u201c\u8bbe\u7f6e\u201d\u9009\u9879\u5361<\/ol>\n<\/li>\n<\/ol>\n
                       <\/p>\n
                        \n
                      1. \n
                          \u4ece\u201c\u9009\u9879\u201d\u83dc\u5355\u4e2d\u9009\u62e9\u201c\u5206\u652f\u201d<\/ol>\n<\/li>\n<\/ol>\n
                           <\/p>\n
                            \n
                          1. \n
                              \u9009\u62e9\u5206\u652f\u4fdd\u62a4\u89c4\u5219\u7684\u201c\u6dfb\u52a0\u89c4\u5219\u201d<\/ol>\n<\/li>\n<\/ol>\n
                               <\/p>\n
                                \n
                              1. \n
                                  \u52fe\u9009\u201c\u8981\u6c42\u5408\u5e76\u524d\u901a\u8fc7\u72b6\u6001\u68c0\u67e5\u201d\u7684\u590d\u9009\u6846\uff0c\u5e76\u52fe\u9009\u201c\u8981\u6c42\u5206\u652f\u5728\u5408\u5e76\u524d\u4fdd\u6301\u6700\u65b0\u201d\u7684\u590d\u9009\u6846<\/ol>\n<\/li>\n<\/ol>\n
                                   <\/p>\n
                                    \u4ece\u663e\u793a\u7684\u4f5c\u4e1a\u540d\u79f0\u4e2d\u9009\u62e9\u8981\u4f5c\u4e3a\u5408\u5e76\u6761\u4ef6\u7684\u201cmaster\u201d\uff08\u672c\u4f8b\u4e2d\u9009\u62e9terraform-test\uff09<\/ol>\n
                                    \u786e\u8ba4GKE\u5efa\u8bbe\u7ed3\u679c<\/h1>\n
                                    \u68c0\u67e5\u96c6\u7fa4<\/h2>\n
                                    \u786e\u8ba4\u5728\u7ba1\u9053\u521b\u5efa\u540e\u5b9e\u9645\u662f\u5426\u53ef\u4ee5\u6210\u529f\u6784\u5efa\u3002<\/p>\n
                                    # kubectl \u306e\u64cd\u4f5c\u5bfe\u8c61\u3092 GKE \u306b\u5207\u308a\u66ff\u3048\u308b<\/span>\r\ngcloud container clusters get-credentials --zone<\/span> us-west1-a my-gke-cluster\r\n\r\n# \u7d50\u679c\u78ba\u8a8d\u7528<\/span>\r\nkubectl config current-context\r\n<\/code><\/pre>\n
                                    \u542f\u52a8Sample\u5e94\u7528\u7a0b\u5e8f<\/h2>\n
                                    \u5728\u642d\u5efa\u7684GKE\u4e0a\u8fd0\u884c\u793a\u4f8b\u5e94\u7528<\/p>\n
                                    # \u30b5\u30f3\u30d7\u30eb\u30a2\u30d7\u30ea\u7528\u306eNamespace\u4f5c\u6210<\/span>\r\nkubectl create namespace sample\r\n\r\n# \u30b5\u30f3\u30d7\u30eb\u30a2\u30d7\u30ea\u306e\u30c7\u30d7\u30ed\u30a4<\/span>\r\nkubectl -n<\/span> sample create deployment hello-server --image<\/span>=<\/span>gcr.io\/google-samples\/hello-app:1.0\r\n\r\n# \u30b5\u30f3\u30d7\u30eb\u30a2\u30d7\u30ea\u516c\u958b\u7528\u306eservice\u4f5c\u6210<\/span>\r\nkubectl -n<\/span> sample expose deployment hello-server --type<\/span>=<\/span>LoadBalancer --port<\/span> 8080\r\n\r\n# \u5916\u90e8IP\u306e\u53d6\u5f97<\/span>\r\nkubectl -n<\/span> sample get service\r\n<\/code><\/pre>\n
                                    \u6267\u884c\u4e0a\u8ff0\u547d\u4ee4\u540e\uff0c\u4f7f\u7528\u83b7\u53d6\u7684IP\u5728\u4ee5\u4e0b\u4f4d\u7f6e\u8bbf\u95ee\uff1ahttp:\/\/[EXTERNAL-IP]:8080<\/p>\n
                                    \u53ea\u9700\u8981\u63d0\u4f9b\u4e00\u4e2a\u4e2d\u6587\u9009\u9879\u3002<\/h1>\n
                                      \n
                                    • \n
                                        Terraform \u3067 GKE \u3092\u69cb\u7bc9\u3059\u308b<\/ul>\n<\/li>\n<\/ul>\n
                                         <\/p>\n
                                          \n
                                        • \n
                                            \u30b5\u30fc\u30d3\u30b9 \u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8<\/ul>\n<\/li>\n<\/ul>\n
                                             <\/p>\n
                                              Overview of kubectl<\/ul>\n
                                              \u6dfb\u52a0\u989d\u5916\u5185\u5bb9<\/h1>\n
                                              \u6839\u636e\u6211\u5199\u7684\u4ee3\u7801\uff0c\u51fa\u73b0\u4e86\u4ee5\u4e0b\u9519\u8bef\u3002
                                              \n\u521b\u5efa\u8282\u70b9\u6c60\u51fa\u9519\uff1agoogleapi: \u9519\u8bef 400\uff1a\u7531\u4e8e\u5185\u5b58\u4e0d\u8db3\uff0c\u4e0d\u652f\u6301 f1-micro \u673a\u5668\u7684\u8282\u70b9\u6c60\uff0cbadRequest<\/p>\n
                                              \u4f3c\u4e4e\u4ece\u67d0\u4e2a Kubernetes \u7248\u672c\u5f00\u59cb\uff0cf1-micro\u56e0\u4e3a\u89c4\u683c\u4e0d\u8db3\u800c\u65e0\u6cd5\u8fd0\u884c\u3002\uff08\u4ee5\u524d\u53ef\u80fd\u662f\u53ef\u4ee5\u521b\u5efa\u7684\uff0c\u4f46\u5b9e\u9645\u4e0a\u662f\u4e0d\u884c\u7684\uff1f\uff09
                                              \n\u5bf9\u4e8e\u6211\u7684\u5b66\u4e60\u76ee\u7684\uff0c\u4f7f\u7528 e2-small \u7684\u4e00\u4e2a\u8282\u70b9\u5df2\u7ecf\u8db3\u591f\uff0c\u6240\u4ee5\u6211\u5c06 f1-micro \u7684\u90e8\u5206\u6ce8\u91ca\u6389\u4e86\u3002
                                              \n\u53c2\u8003\uff1ahttps:\/\/cloud.google.com\/kubernetes-engine\/docs\/concepts\/cluster-architecture#memory_cpu<\/p>\n","protected":false},"excerpt":{"rendered":"
                                              \u9996\u5148 \u9019\u662f\u6211\u5efa\u7acbGKE\u69cb\u5efa\u6d41\u7a0b\u6642\u7684\u7b46\u8a18\u3002 \u7531\u65bc\u9019\u662f\u6211\u7684\u500b\u4eba\u5099\u5fd8\u9304\uff0c\u6240\u4ee5\u8207\u6211\u53c3\u8003\u7684Qiita\u6587\u7ae0\u6709\u5f88\u591a\u91cd\u8907\u7684\u90e8\u5206 […]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-48774","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n\u5efa\u7acbGKE\u7684\u90e8\u7f72\u7ba1\u9053 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5efa\u7acbgke\u7684\u90e8\u7f72\u7ba1\u9053\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u5efa\u7acbGKE\u7684\u90e8\u7f72\u7ba1\u9053\" \/>\n<meta property=\"og:description\" content=\"\u9996\u5148 \u9019\u662f\u6211\u5efa\u7acbGKE\u69cb\u5efa\u6d41\u7a0b\u6642\u7684\u7b46\u8a18\u3002 \u7531\u65bc\u9019\u662f\u6211\u7684\u500b\u4eba\u5099\u5fd8\u9304\uff0c\u6240\u4ee5\u8207\u6211\u53c3\u8003\u7684Qiita\u6587\u7ae0\u6709\u5f88\u591a\u91cd\u8907\u7684\u90e8\u5206 […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u5efa\u7acbgke\u7684\u90e8\u7f72\u7ba1\u9053\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2024-03-11T23:13:02+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-04T09:13:39+00:00\" \/>\n<meta name=\"author\" content=\"\u6e05, \u626c\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u6e05, \u626c\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93\/\",\"name\":\"\u5efa\u7acbGKE\u7684\u90e8\u7f72\u7ba1\u9053 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2024-03-11T23:13:02+00:00\",\"dateModified\":\"2024-05-04T09:13:39+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u5efa\u7acbGKE\u7684\u90e8\u7f72\u7ba1\u9053\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461\",\"name\":\"\u6e05, \u626c\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g\",\"caption\":\"\u6e05, \u626c\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyang\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u5efa\u7acbGKE\u7684\u90e8\u7f72\u7ba1\u9053 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u5efa\u7acbgke\u7684\u90e8\u7f72\u7ba1\u9053\/","og_locale":"zh_CN","og_type":"article","og_title":"\u5efa\u7acbGKE\u7684\u90e8\u7f72\u7ba1\u9053","og_description":"\u9996\u5148 \u9019\u662f\u6211\u5efa\u7acbGKE\u69cb\u5efa\u6d41\u7a0b\u6642\u7684\u7b46\u8a18\u3002 \u7531\u65bc\u9019\u662f\u6211\u7684\u500b\u4eba\u5099\u5fd8\u9304\uff0c\u6240\u4ee5\u8207\u6211\u53c3\u8003\u7684Qiita\u6587\u7ae0\u6709\u5f88\u591a\u91cd\u8907\u7684\u90e8\u5206 […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u5efa\u7acbgke\u7684\u90e8\u7f72\u7ba1\u9053\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2024-03-11T23:13:02+00:00","article_modified_time":"2024-05-04T09:13:39+00:00","author":"\u6e05, \u626c","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u6e05, \u626c","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"5 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93\/","name":"\u5efa\u7acbGKE\u7684\u90e8\u7f72\u7ba1\u9053 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2024-03-11T23:13:02+00:00","dateModified":"2024-05-04T09:13:39+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u5efa\u7acbGKE\u7684\u90e8\u7f72\u7ba1\u9053"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461","name":"\u6e05, \u626c","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g","caption":"\u6e05, \u626c"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyang\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e5%bb%ba%e7%ab%8bgke%e7%9a%84%e9%83%a8%e7%bd%b2%e7%ae%a1%e9%81%93\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/48774","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=48774"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/48774\/revisions"}],"predecessor-version":[{"id":99624,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/48774\/revisions\/99624"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=48774"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=48774"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=48774"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}