terraform管理k8s创建pod

愿你想念我

已于 2022-11-10 13:04:29 修改

阅读量785

点赞数

分类专栏： k8s 文章标签： kubernetes terraform 容器

于 2022-11-08 14:52:49 首次发布

本文链接：https://blog.csdn.net/zcf9024/article/details/127750786

版权

k8s 专栏收录该内容

3 篇文章 0 订阅

订阅专栏

terraform管理本地的k8s创建pod

provider "kubernetes" {
  config_path   = "/etc/kubernetes/admin.conf"
}
resource "kubernetes_namespace" "test" {
  metadata {
    name = "mynginx1"
  }
}
resource "kubernetes_deployment" "test" {
  metadata {
    name      = "nginx"
    namespace = kubernetes_namespace.test.metadata.name
  }
  spec {
    replicas = 2
    selector {
      match_labels = {
        app = "MyTestApp"
      }
    }
    template {
      metadata {
        labels = {
          app = "MyTestApp"
        }
      }
      spec {
        container {
          image = "nginx"
          name  = "nginx-container"
          port {
            container_port = 80
          }
        }
      }
    }
  }
}
resource "kubernetes_service" "test" {
  metadata {
    name      = "nginx"
    namespace = kubernetes_namespace.test.metadata.name
  }
  spec {
    selector = {
      app = kubernetes_deployment.test.spec.template.metadata.labels.app
    }
    type = "NodePort"
    port {
      node_port   = 30201
      port        = 80
      target_port = 80
    }
  }
}

import os

if __name__ == '__main__':
    print("this is terrform test")
    userName = "cf"
    namespase = "mynginx1"
    image = "nginx"
    name = "Mytest"
    os.system("mkdir " + userName)
    os.system("cd " + userName)
    os.system("cp copy/copyk8sPyTest.tf " + userName + "/" + userName + ".tf")

    os.system("sed -i 's/myNameSpace/" + namespase + "/' " + userName + "/" + userName + ".tf")
    os.system("sed -i 's/myimage/" + image + "/' " + userName + "/" + userName + ".tf")
    os.system("sed -i 's/MyMyMytest/" + name + "/' " + userName + "/" + userName + ".tf")
    os.system("terraform -chdir=./" + userName + " init")
    os.system("terraform -chdir=./" + userName + " plan")

terraform通过IP远程管理k8s创建pod

provider "kubernetes" {
  host = "https://192.168.100.4:6443"
  client_certificate     = base64decode("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")
  client_key             = base64decode("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")
  cluster_ca_certificate = base64decode("LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUMvakNDQWVhZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREFWTVJNd0VRWURWUVFERXdwcmRXSmwKY201bGRHVnpNQjRYRFRJeU1Ea3lPREEzTWpVeE4xb1hEVE15TURreU5UQTNNalV4TjFvd0ZURVRNQkVHQTFVRQpBeE1LYTNWaVpYSnVaWFJsY3pDQ0FTSXdEUVlKS29aSWh2Y05BUUVCQlFBRGdnRVBBRENDQVFvQ2dnRUJBTDQ5CmVrbnI4WjZRb2NoTElRUzU1VzUwc0tTeTBhZG1sYkppalJOQ2VrQTU5NEFRdzlIemw5YncwTTlXZGsvRGtHaGEKS3F6Ym1VNzd6RFozR2F0MlEwRU5zN2tDLzVqYmx2QnNqRGlLUnpSWGdZU3RtVU5aSjZZZXlwSGoreVp1UUZiYgp1OUpEditxNkc0MnF5QjRaVHdiTGRjVERIbFlrNm55ZU8yemkzQlpoQ3Uram5SZEU0SnVOSHhmL2dDWUtPNktBCnlRWGdDK0VTTjNWYUxzdTBHbmhJQ3pQZkJqVW5KYUxWNHA5aDhRUEQ2bm0veEFCMHFOZTlPaUJsbTF4QVNGbW8KaHJDQ1dOclpXNFZtYi8rSGpjUmU2bjRxVU5ZcGl6a0ZUNFZSbk1WTE9BWVkxSDl1K3VLUkdibStsNDdJbDRWQwpBOWV0WWcyOGxaWEpkU3pVamhFQ0F3RUFBYU5aTUZjd0RnWURWUjBQQVFIL0JBUURBZ0trTUE4R0ExVWRFd0VCCi93UUZNQU1CQWY4d0hRWURWUjBPQkJZRUZLRU9wVnBkVkpJYytaSEhqTkZrdytTK05mWmZNQlVHQTFVZEVRUU8KTUF5Q0NtdDFZbVZ5Ym1WMFpYTXdEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBS05FNUNieDUrUWpXOUpzeWJHSQpoS1RKOEFSUUlEeC9CektHQkt5ZGx1TDRHQUpMYmFpYjBpREZQOXhxTXdTcVZJR1EyenA4TmdXZmtZT0pEQlZpCmNXT29oRU14bis4VlB2Y2R6eFA4My95S0VSendPNzN4K01YWE05VDhhYXBWRjFkL0hBSDM3QTE4dytPUERORHoKOXRPVFVwc2Vtc1J5M3dudU5UdDN0anlRaHExSDQ0SC9UblhXN1BwN2JnMkNZZEpqWnJueTlBY09QTTlHSGUyMgo3Nk9LSVhNbDI0OUpFUkdKZ3hqOENWNE5hRSt4SmFjWXd1NzVhODBuK09Wa01lWm5heW5KY2daZThOYllYd25kCjkrcWtIMHBBR3hqcmhjL2JsdUdwSW53cnZScHlCckE3UVJpZHhBMHVtYXNSM3N3cWs1bldibE1VK0Q0dXQ5MEkKQ3JZPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==")
}
resource "kubernetes_namespace" "Mytest" {
  metadata {
    name = "mynginx"
  }
}
resource "kubernetes_deployment" "Mytest" {
  metadata {
    name      = "nginx"
    namespace = kubernetes_namespace.Mytest.metadata.name
  }
  spec {
    replicas = 2
    selector {
      match_labels = {
        app = "MyTestApp"
      }
    }
    template {
      metadata {
        labels = {
          app = "MyTestApp"
        }
      }
      spec {
        container {
          image = "nginx"
          name  = "nginx-container"
          port {
            container_port = 80
          }
        }
      }
    }
  }
}
resource "kubernetes_service" "Mytest" {
  metadata {
    name      = "nginx"
    namespace = kubernetes_namespace.Mytest.metadata.name
  }
  spec {
    selector = {
      app = kubernetes_deployment.Mytest.spec.template.metadata.labels.app
    }
    type = "NodePort"
    port {
      node_port   = 30201
      port        = 80
      target_port = 80
    }
  }
}

使用命令kubectl config view获取host

在vim /etc/kubernetes/admin.conf文件里

client_certificate corresponds with users.user.client-certificate
client_key corresponds with users.user.client-key
cluster_ca_certificate corresponds with clusters.cluster.certificate-authority-data