KUBERNETES-1-17-Canal网络策略

最新推荐文章于 2024-04-15 08:56:57 发布

ligan1115

最新推荐文章于 2024-04-15 08:56:57 发布

阅读量655

点赞数

分类专栏： KUBERNETES 文章标签： kubernetes networkpolicy canal calico flannel

本文链接：https://blog.csdn.net/ligan1115/article/details/85087949

版权

本文档详细介绍了在Kubernetes集群中使用Canal进行网络策略配置的步骤，包括下载和应用RBAC权限文件，安装Canal组件，创建网络策略以控制Pod间通信，并演示了网络策略如何限制和放行不同端口的进出站流量。

摘要由CSDN通过智能技术生成

1.wget https://docs.projectcalico.org/v3.1/getting-started/kubernetes/installation/hosted/canal/rbac.yaml下载角色认证文件。kubectl apply -f rbac.yaml声明资源。

[root@master flannel]# wget https://docs.projectcalico.org/v3.1/getting-started/kubernetes/installation/hosted/canal/rbac.yaml
--2018-12-18 21:15:05-- https://docs.projectcalico.org/v3.1/getting-started/kubernetes/installation/hosted/canal/rbac.yaml
Resolving docs.projectcalico.org (docs.projectcalico.org)... 178.128.123.58, 2400:6180:0:d1::6e:5001
Connecting to docs.projectcalico.org (docs.projectcalico.org)|178.128.123.58|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2423 (2.4K) [application/x-yaml]
Saving to: ‘rbac.yaml’

100%[=============================================================================================>] 2,423 1.70KB/s in 1.4s

2018-12-18 21:15:13 (1.70 KB/s) - ‘rbac.yaml’ saved [2423/2423]

[root@master flannel]# kubectl apply -f rbac.yaml
clusterrole.rbac.authorization.k8s.io/calico created
clusterrole.rbac.authorization.k8s.io/flannel configured
clusterrolebinding.rbac.authorization.k8s.io/canal-flannel created
clusterrolebinding.rbac.authorization.k8s.io/canal-calico created

2.wget https://docs.projectcalico.org/v3.1/getting-started/kubernetes/installation/hosted/canal/canal.yaml下载网络策略文件。cat canal.yaml | grep -i image查看这个文件中使用的镜像。kubectl apply -f canal.yaml声明资源。

[root@master flannel]# wget https://docs.projectcalico.org/v3.1/getting-started/kubernetes/installation/hosted/canal/canal.yaml
--2018-12-18 21:22:59-- https://docs.projectcalico.org/v3.1/getting-started/kubernetes/installation/hosted/canal/canal.yaml
Resolving docs.projectcalico.org (docs.projectcalico.org)... 206.189.89.118, 2400:6180:0:d1::6e:5001
Connecting to docs.projectcalico.org (docs.projectcalico.org)|206.189.89.118|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 10344 (10K) [application/x-yaml]
Saving to: ‘canal.yaml’

100%[===================================