k8s相关配置随笔记录

k8s资源预留配置

• 在 kubelet yaml 文件中 追加以下内容，然后重启 kubelet

enforceNodeAllocatable:  # 配置资源预留
- pods
kubeReserved:  # 配置 kube 资源预留
  cpu: 1000m
  memory: 1Gi
  ephemeral-storage: 8Gi
systemReserved:  # 配置系统资源预留
  memory: 1Gi
evictionHard:  # 配置硬驱逐阈值
  memory.available: "5%"
  nodefs.available: "10%"

systemctl restart kubelet

• 删除状态为Evicted的pod

for ns in `kubectl get ns | awk 'NR>1{print $1}'`
do
      kubectl get pods -n ${ns} | grep Evicted | awk '{print $1}' | xargs kubectl delete pod -n ${ns}
done

service之nodepod暴露端口限制配置

在/etc/kubernetes/manifests/kube-apiserver.yaml中新加配置

vim /etc/kubernetes/manifests/kube-apiserver.yaml
- --service-node-port-range=1-65535
systemctl restart kubelet