k8s基于storageclass的動(dòng)態(tài)存儲(chǔ)

IT那活兒發(fā)布于2023-01-11 13:20 / 2551人閱讀

使用說(shuō)明：一般在k8s中創(chuàng)建有狀態(tài)服務(wù)時(shí)會(huì)需要?jiǎng)?chuàng)建pv+pvc靜態(tài)存儲(chǔ)來(lái)實(shí)現(xiàn)存儲(chǔ)，基于sc的動(dòng)態(tài)存儲(chǔ)減少了用戶對(duì)于底層存儲(chǔ)資源各方面細(xì)節(jié)的關(guān)注，只需要關(guān)注自己創(chuàng)建的pvc資源，引用存儲(chǔ)類(lèi)的對(duì)應(yīng)sc資源即可，簡(jiǎn)單來(lái)說(shuō)就是無(wú)需創(chuàng)建pv，只需創(chuàng)建pvc后k8s系統(tǒng)會(huì)自動(dòng)創(chuàng)建合適的pv，并將pv和pvc綁定好實(shí)現(xiàn)動(dòng)態(tài)存儲(chǔ)。

一. 創(chuàng)建rbac授權(quán)

（集群中開(kāi)啟了rbac）

cat nfs-rbac.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
  name: nfs-client-provisioner

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: nfs-client-provisioner-clusterrole
rules:
  - apiGroups: [""]
    resources: ["persistentvolumes"]
    verbs: ["get", "list", "watch", "create", "delete"]
  - apiGroups: [""]
    resources: ["persistentvolumeclaims"]
    verbs: ["get", "list", "watch", "update"]
  - apiGroups: ["storage.k8s.io"]
    resources: ["storageclasses"]
    verbs: ["get", "list", "watch"]
  - apiGroups: [""]
    resources: ["events"]
    verbs: ["list", "watch", "create", "update", "patch"]
  - apiGroups: [""]
    resources: ["endpoints"]
    verbs: ["create", "delete", "get", "list", "watch", "patch", "update"]

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: nfs-client-provisioner-clusterrolebinding
subjects:
- kind: ServiceAccount
  name: nfs-client-provisioner
  namespace: default
roleRef:
  kind: ClusterRole
  name: nfs-client-provisioner-clusterrole
  apiGroup: rbac.authorization.k8s.io

Kubectl apply -f nfs-rbac.yaml

二. 創(chuàng)建provisioner

NFS Provisioner 是一個(gè)自動(dòng)配置卷程序，它使用現(xiàn)有的和已配置的 NFS 服務(wù)器來(lái)支持通過(guò)持久卷聲明動(dòng)態(tài)配置 Kubernetes 持久卷

cat nfs-deployment.yaml

```
apiVersion: apps/v1
kind: Deployment
metadata:
  name: nfs-client-prosioner
spec:
  selector:
    matchLabels:
      app: nfs-client-prosioner
  replicas: 1
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: nfs-client-prosioner
    spec:
      serviceAccountName: nfs-client-provisioner
      containers:
      - name: nfs-client-prosioner
        image: registry.cn-hangzhou.aliyuncs.com/rookieops/nfs-client-provisioner:v0.1
        imagePullPolicy: IfNotPresent
        volumeMounts:
        - name: nfs-client-root
         mountPath: /data/pv
        env:
        - name: PROVISIONER_NAME
         value: rookieops/nfs
        - name: NFS_SERVER
         value: 192.168.16.1     
        - name: NFS_PATH
         value: /home/nfs #nfs的共享目錄
      volumes:
      - name: nfs-client-root
       nfs:
         server: 192.168.16.1
         path: /home/nfs

注意：ip 192.168.16.1為nfs的服務(wù)器地址 /home/nfs 為nfs的共享目錄

注意：動(dòng)態(tài)存儲(chǔ)創(chuàng)建是基于集群中已經(jīng)安裝并能使用nfs的基礎(chǔ)上來(lái)創(chuàng)建的

三. 創(chuàng)建storageclass

cat storageclass-naf.yaml

```
apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
name: nfs-client-storageclass
provisioner: rookieops/nfs

```

注意：provisioner 的參數(shù)rookieops/nfs 需要和上面創(chuàng)建的provisioner中的PROVISIONER_NAME對(duì)應(yīng)

通過(guò)kubectl get sc 查看創(chuàng)建的sc 資源

四. 創(chuàng)建pvc

cat pvc.yaml

```
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: test-nfs-pvc2
  annotations:
    volume.beta.kubernetes.io/storage-class: "nfs-client-storageclass"
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 300Gi
```