一个自动配置卷的程序,它使用现有的和已配置的nfs服务器支持通过持久卷动态配置kubernetes持久卷
持久卷被配置为:namespace-{namespace}-namespace-{pvcName}-${pvName}
注意使用这个组件必须要提前配置好nfs服务器
配置nfs-server
我选择在master节点上创建nfs服务端
yum install -y rpcbind nfs-utils
配置nfs
vi /etc/export
/home/nfs *(rw,sync,no_all_squash,no_root_squash)
systemctl start rpcbind
systemctl start nfs
systemctl enable rpcbind
systemctl enable nfs
exportfs -r
showmount -e 192.168.200.11
创建NFS Provisioner RBAC鉴权
vi /root/nfs-provisioner-rbac.yaml
#创建sa
apiVersion: v1
kind: ServiceAccount
metadata:
name: nfs-client-provisioner
namespace: kube-system
---
#简单一点直接给sa绑定kube-system 的clusterrole
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: nfs
namespace: kube-system
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: nfs-client-provisioner
namespace: kube-system
配置nfs-provisioner服务
apiVersion: apps/v1
kind: Deployment
metadata:
name: nfs-provisioner
namespace: kube-system
labels:
app: nfs
spec:
replicas: 1
selector:
matchLabels:
app: nfs
template:
metadata:
labels:
app: nfs
spec:
serviceAccountName: nfs-client-provisioner
containers:
- name: nfs
image: 192.168.200.11/library/nfs-client-provisioner
imagePullPolicy: IfNotPresent
volumeMounts: #数据持久化,可以不用写
- name: nfs-client-path
mountPath: /persistentvolumes
env:
- name: PROVISIONER_NAME #配置容器内的环境变量,知道nfs
value: nfs-client #这个名字后面的storageclass是用到的
- name: NFS_SERVER
value: 192.168.200.11
- name: NFS_PATH
value: /home/nfs
volumes: #挂载到本地
- name: nfs-client-path
nfs:
server: 192.168.200.11
path: /home/nfs
#启动nfs-provisioner
kubectl apply -f nfs-provisioner-deployment.yaml
创建storageclass
apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
name: nfs-storage #这个名字后面的pvc是用到的
provisioner: nfs-client
#启动
kubectl apply -f nfs-storageclass.yaml
创建pvc
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: test-pvc
spec:
accessModes:
- ReadWriteOnce
storageClassName: nfs-storage
resources:
requests:
storage: 1Mi
#启动
kubectl apply -f nfs-pvc.yaml
测试
[root@master ~]# kubectl get pvc
NAME STATUS VOLUME CAPACITY ACCESS MODES STORAGECLASS AGE
test-pvc Bound pvc-1e18c20a-52be-4a5c-9ede-cefb7f8b4f16 1Mi RWO nfs-storage 54m
#状态为bound即为正确