学习 Kubernetes 基础知识
Tasks
Install Tools
Install and Set Up kubectl (EN)
Install Minikube (EN)
Setup an extension API server
Configure Pods and Containers
Configure Pods and Containers
Assign Memory Resources to Containers and Pods (EN)
Assign CPU Resources to Containers and Pods (EN)
Configure GMSA for Windows pods and containers (EN)
Configure RunAsUserName for Windows pods and containers (EN)
Configure Quality of Service for Pods (EN)
Assign Extended Resources to a Container (EN)
Configure a Pod to Use a Volume for Storage (EN)
Configure a Pod to Use a PersistentVolume for Storage (EN)
Configure a Pod to Use a Projected Volume for Storage (EN)
Configure a Security Context for a Pod or Container (EN)
Configure Service Accounts for Pods (EN)
Pull an Image from a Private Registry (EN)
Configure Liveness and Readiness Probes (EN)
将 Pod 分配给节点
Configure Pod Initialization (EN)
为容器的生命周期事件设置处理函数
Configure a Pod to Use a ConfigMap (EN)
Share Process Namespace between Containers in a Pod (EN)
Create static Pods (EN)
Translate a Docker Compose File to Kubernetes Resources (EN)
给容器分配非透明整型资源
Administer a Cluster
Administration with kubeadm
Certificate Management with kubeadm (EN)
Upgrading kubeadm clusters (EN)
Manage Memory, CPU, and API Resources
Configure Default Memory Requests and Limits for a Namespace (EN)
Configure Default CPU Requests and Limits for a Namespace (EN)
Configure Minimum and Maximum Memory Constraints for a Namespace (EN)
Configure Minimum and Maximum CPU Constraints for a Namespace (EN)
Configure Memory and CPU Quotas for a Namespace (EN)
Configure a Pod Quota for a Namespace (EN)
Install a Network Policy Provider
Use Calico for NetworkPolicy (EN)
Use Cilium for NetworkPolicy (EN)
Use Kube-router for NetworkPolicy (EN)
Romana for NetworkPolicy (EN)
Weave Net for NetworkPolicy (EN)
Access Clusters Using the Kubernetes API (EN)
Access Services Running on Clusters (EN)
Advertise Extended Resources for a Node (EN)
Autoscale the DNS Service in a Cluster (EN)
Change the Reclaim Policy of a PersistentVolume (EN)
Change the default StorageClass (EN)
Cluster Management (EN)
Configure Multiple Schedulers (EN)
Configure Out Of Resource Handling (EN)
Configure Quotas for API Objects (EN)
Control CPU Management Policies on the Node (EN)
Control Topology Management Policies on a node (EN)
Customizing DNS Service (EN)
Debugging DNS Resolution (EN)
Declare Network Policy (EN)
Developing Cloud Controller Manager (EN)
Enabling Endpoint Slices (EN)
Encrypting Secret Data at Rest (EN)
Guaranteed Scheduling For Critical Add-On Pods (EN)
IP Masquerade Agent User Guide (EN)
Kubernetes Cloud Controller Manager (EN)
Limit Storage Consumption (EN)
Namespaces Walkthrough (EN)
Operating etcd clusters for Kubernetes (EN)
Reconfigure a Node's Kubelet in a Live Cluster (EN)
Reserve Compute Resources for System Daemons (EN)
Safely Drain a Node while Respecting the PodDisruptionBudget (EN)
Securing a Cluster (EN)
Set Kubelet parameters via a config file (EN)
Set up High-Availability Kubernetes Masters (EN)
Share a Cluster with Namespaces (EN)
Using CoreDNS for Service Discovery (EN)
Using NodeLocal DNSCache in Kubernetes clusters (EN)
Using a KMS provider for data encryption (EN)
Using sysctls in a Kubernetes Cluster (EN)
Accessing Clusters
Manage Kubernetes Objects
Declarative Management of Kubernetes Objects Using Configuration Files (EN)
Declarative Management of Kubernetes Objects Using Kustomize (EN)
Managing Kubernetes Objects Using Imperative Commands (EN)
Imperative Management of Kubernetes Objects Using Configuration Files (EN)
Inject Data Into Applications
Inject Data Into Applications
为容器设置启动时要执行的命令及其入参
为容器设置环境变量
使用 PodPreset 将信息注入 Pods
使用 Secret 安全地分发凭证
通过文件将Pod信息呈现给容器
通过环境变量将Pod信息呈现给容器
Run Applications
Run a Stateless Application Using a Deployment (EN)
Run a Single-Instance Stateful Application (EN)
Run a Replicated Stateful Application (EN)
Update API Objects in Place Using kubectl patch (EN)
Scale a StatefulSet (EN)
Delete a StatefulSet (EN)
Force Delete StatefulSet Pods (EN)
Perform Rolling Update Using a Replication Controller (EN)
Horizontal Pod Autoscaler (EN)
Horizontal Pod Autoscaler Walkthrough (EN)
Specifying a Disruption Budget for your Application (EN)
Use Port Forwarding to Access Applications in a Cluster
Run Jobs
Run Jobs
Running Automated Tasks with a CronJob
Parallel Processing using Expansions (EN)
Coarse Parallel Processing Using a Work Queue (EN)
使用工作队列进行精细的并行处理
Provide Load-Balanced Access to an Application in a Cluster
Access Applications in a Cluster
Web UI (Dashboard) (EN)
Accessing Clusters (EN)
Configure Access to Multiple Clusters (EN)
Use Port Forwarding to Access Applications in a Cluster (EN)
Use a Service to Access an Application in a Cluster (EN)
Connect a Front End to a Back End Using a Service (EN)
Create an External Load Balancer (EN)
Configure Your Cloud Provider's Firewalls (EN)
List All Container Images Running in a Cluster (EN)
Set up Ingress on Minikube with the NGINX Ingress Controller (EN)
Communicate Between Containers in the Same Pod Using a Shared Volume (EN)
Configure DNS for a Cluster (EN)
Use a Service to Access an Application in a Cluster
删除 StatefulSet
Monitor, Log, and Debug
Monitor, Log, and Debug
Application Introspection and Debugging (EN)
Auditing
Auditing with Falco (EN)
Debug Init Containers (EN)
Debug Services (EN)
Debugging Kubernetes nodes with crictl (EN)
Determine the Reason for Pod Failure (EN)
Developing and debugging services locally (EN)
Events in Stackdriver (EN)
Get a Shell to a Running Container (EN)
Logging Using Elasticsearch and Kibana (EN)
Logging Using Stackdriver (EN)
Monitor Node Health (EN)
Resource metrics pipeline (EN)
Tools for Monitoring Resources (EN)
Troubleshooting (EN)
应用故障排查
调试Pods和Replication Controllers
调试StatefulSet
集群故障排查
Create an External Load Balancer
Extend Kubernetes
Use Custom Resources
Extend the Kubernetes API with CustomResourceDefinitions (EN)
Versions in CustomResourceDefinitions (EN)
Configure the Aggregation Layer (EN)
Setup an Extension API Server (EN)
Use an HTTP Proxy to Access the Kubernetes API (EN)
配置你的云平台防火墙
TLS
Certificate Rotation (EN)
Manage TLS Certificates in a Cluster (EN)
List All Container Images Running in a Cluster
Federation - Run an App on Multiple Clusters
Federation - Run an App on Multiple Clusters
Set up Cluster Federation with Kubefed (EN)
Set up CoreDNS as DNS provider for Cluster Federation (EN)
Set up placement policies in Federation (EN)
Cross-cluster Service Discovery using Federated Services (EN)
Administer Federation Control Plane
Federated Cluster (EN)
Federated ConfigMap (EN)
Federated DaemonSet (EN)
Federated Deployment (EN)
Federated Events (EN)
Federated Horizontal Pod Autoscalers (HPA) (EN)
Federated Ingress (EN)
Federated Jobs (EN)
Federated Namespaces (EN)
Federated ReplicaSets (EN)
Federated Secrets (EN)
Configure DNS for a Cluster
Manage Cluster Daemons
Perform a Rolling Update on a DaemonSet (EN)
Perform a Rollback on a DaemonSet (EN)
Install Service Catalog
Install Service Catalog using Helm (EN)
Install Service Catalog using SC (EN)
Network
Validate IPv4/IPv6 dual-stack (EN)
Federation - Run an App on Multiple Clusters
Federation - Run an App on Multiple Clusters
Administer-clusters
Administration with kubeadm
Certificate Management with kubeadm (EN)
Upgrading kubeadm clusters (EN)
Manage Memory, CPU, and API Resources
Manage Memory, CPU, and API Resources
Configure Default Memory Requests and Limits for a Namespace
Configure Default CPU Requests and Limits for a Namespace
Configure Minimum and Maximum Memory Constraints for a Namespace
Configure Minimum and Maximum CPU Constraints for a Namespace
Configure Memory and CPU Quotas for a Namespace
Configure a Pod Quota for a Namespace (EN)
Install a Network Policy Provider
Install a Network Policy Provider
使用 Calico 作为 NetworkPolicy
使用 Cilium 作为 NetworkPolicy
使用 Kube-router 作为 NetworkPolicy
使用 Romana 作为 NetworkPolicy
使用 Weave Net 作为 NetworkPolicy
Access Clusters Using the Kubernetes API (EN)
Advertise Extended Resources for a Node (EN)
Autoscale the DNS Service in a Cluster (EN)
Configure Multiple Schedulers (EN)
Configure Out Of Resource Handling (EN)
Configure Quotas for API Objects (EN)
Control Topology Management Policies on a node (EN)
Debugging DNS Resolution (EN)
Developing Cloud Controller Manager (EN)
Enabling Endpoint Slices (EN)
Encrypting Secret Data at Rest
IP Masquerade Agent User Guide (EN)
Kubernetes Cloud Controller Manager (EN)
Limit Storage Consumption (EN)
Namespaces Walkthrough (EN)
Operating etcd clusters for Kubernetes (EN)
Reconfigure a Node's Kubelet in a Live Cluster (EN)
Reserve Compute Resources for System Daemons (EN)
Safely Drain a Node while Respecting the PodDisruptionBudget (EN)
Securing a Cluster (EN)
Set up High-Availability Kubernetes Masters (EN)
Share a Cluster with Namespaces (EN)
Using CoreDNS for Service Discovery (EN)
Using NodeLocal DNSCache in Kubernetes clusters (EN)
Using a KMS provider for data encryption (EN)
使用 Calico 来提供 NetworkPolicy
使用 Romana 来提供 NetworkPolicy
使用 Weave 网络来提供 NetworkPolicy
关键插件 Pod 的调度保证
在 Kubernetes 中配置私有 DNS 和上游域名服务器
在 Kubernetes 集群中使用 sysctl
声明网络策略
将 kubeadm 集群在 v1.8 版本到 v1.9 版本之间升级/降级
应用资源配额和限额
控制节点上的CPU管理策略
改变默认 StorageClass
更改 PersistentVolume 的回收策略
设置 Pod CPU 和内存限制
访问集群上运行的服务
通过配置文件设置 Kubelet 参数
配置命名空间下pod总数
集群管理
静态Pods
Extend kubectl with plugins (EN)
使用 Service 把前端连接到后端
使用Deployment运行一个无状态应用
同 Pod 内的容器使用共享卷通信
基于Replication Controller执行滚动升级
对 DaemonSet 执行回滚
弹缩StatefulSet
管理巨页（HugePages）
证书轮换
调度 GPU
运行一个单实例有状态应用
配置对多集群的访问

Edit This Page

使用 Calico 作为 NetworkPolicy

本页展示了两种在 Kubernetes 上快速创建 Calico 集群的方法。

准备开始

决定您想部署一个云 还是 本地 集群。

在 Google Kubernetes Engine (GKE) 上创建一个 Calico 集群

先决条件: gcloud

  1. 启动一个带有 Calico 的 GKE 集群，只需加上flag --enable-network-policy。

    语法

    gcloud container clusters create [CLUSTER_NAME] --enable-network-policy

    示例

    gcloud container clusters create my-calico-cluster --enable-network-policy

  2. 使用如下命令验证部署是否正确。

    kubectl get pods --namespace=kube-system

    Calico 的 pods 名以 calico 打头，检查确认每个 pods 状态为 Running。 <!–

    Creating a local Calico cluster with kubeadm

To get a local single-host Calico cluster in fifteen minutes using kubeadm, refer to the Calico Quickstart. –>

使用 kubeadm 创建一个本地 Calico 集群

在15分钟内使用 kubeadm 得到一个本地单主机 Calico 集群，请参考 Calico 快速入门。

接下来

集群运行后，您可以按照 声明 Network Policy 去尝试使用 Kubernetes NetworkPolicy。

反馈