{"id":7602,"date":"2026-08-07T01:44:49","date_gmt":"2026-08-06T17:44:49","guid":{"rendered":"https:\/\/i007.cc\/wordpress\/?p=7602"},"modified":"2026-08-07T01:44:49","modified_gmt":"2026-08-06T17:44:49","slug":"%e8%ae%b2%e8%ae%b2k8s%e7%9a%84%e4%b8%80%e4%ba%9b%e9%ab%98%e7%ba%a7%e7%94%a8%e6%b3%95","status":"publish","type":"post","link":"https:\/\/i007.cc\/wordpress\/archives\/7602","title":{"rendered":"\u8bb2\u8bb2k8s\u7684\u4e00\u4e9b\u9ad8\u7ea7\u7528\u6cd5"},"content":{"rendered":"<div data-rs-index=\"28\" data-index=\"28\">\n<div tabindex=\"0\" role=\"article\" aria-setsize=\"30\" aria-posinset=\"29\" aria-label=\"Message 29 of 30\">\n<div data-test-render-count=\"2\">\n<div class=\"mb-1 mt-[var(--msg-gap,1.5rem)] group group\/message-row\">\n<div class=\"flex flex-col items-end gap-1\">\n<div class=\"group relative inline-flex gap-2 bg-neutral-30 dark:[[data-darker-default]_&amp;]:bg-surface-3 rounded-xl pl-2.5 py-[var(--msg-bubble-py,0.625rem)] break-words text-primary transition-all max-w-[75ch] flex-col !px-[var(--msg-bubble-px,1rem)] max-w-[85%]\" data-user-message-bubble=\"true\">\n<div class=\"flex flex-row gap-2 relative\">\n<div class=\"flex-1\">\n<div class=\"font-large !font-user-message py-0.5 grid grid-cols-1 gap-2 relative [&amp;_ul]:!space-y-0 [&amp;_ol]:!space-y-0 [&amp;_ul]:pl-8 [&amp;_ol]:pl-8\" data-testid=\"user-message\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div data-rs-index=\"29\" data-index=\"29\" data-last-message=\"true\">\n<div tabindex=\"-1\" role=\"article\" aria-setsize=\"30\" aria-posinset=\"30\" aria-label=\"Message 30 of 30\">\n<div data-test-render-count=\"1\">\n<div class=\"group group\/message-row\">\n<div class=\"group relative relative pb-[var(--msg-assistant-pb,0.75rem)]\" data-is-streaming=\"false\">\n<div class=\"font-claude-response relative leading-[1.65rem] [&amp;_pre&gt;div]:bg-bg-000\/50 [&amp;_pre&gt;div]:border-0.5 [&amp;_pre&gt;div]:border-border-400 [&amp;_.ignore-pre-bg&gt;div]:bg-transparent [&amp;_.standard-markdown_:is(p,blockquote,h1,h2,h3,h4,h5,h6)]:pl-2 [&amp;_.standard-markdown_:is(p,blockquote,ul,ol,h1,h2,h3,h4,h5,h6)]:pr-8 [&amp;_.progressive-markdown_:is(p,blockquote,h1,h2,h3,h4,h5,h6)]:pl-2 [&amp;_.progressive-markdown_:is(p,blockquote,ul,ol,h1,h2,h3,h4,h5,h6)]:pr-8\">\n<div>\n<div class=\"standard-markdown grid-cols-1 grid [&amp;_&gt;_*]:min-w-0 gap-3 [&amp;_&gt;_*:last-child]:mb-0 print:block print:[&amp;_&gt;_*_+_*]:mt-3 standard-markdown\">\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\">\u5ef6\u7eed\u6211\u4eec\u524d\u9762\u804a\u7684\u5185\u5bb9,\u8fd9\u6b21\u8bb2\u4e00\u4e9b\u66f4\u8fdb\u9636\u7684 Kubernetes \u7528\u6cd5,\u5927\u4f53\u4e0a\u53ef\u4ee5\u5206\u6210\u51e0\u7c7b:\u66f4\u590d\u6742\u7684\u5de5\u4f5c\u8d1f\u8f7d\u7c7b\u578b\u3001\u7cbe\u7ec6\u5316\u7684\u8c03\u5ea6\u63a7\u5236\u3001\u81ea\u52a8\u5316\u6269\u5c55\u80fd\u529b\u3001\u6d41\u91cf\u6cbb\u7406\u3001\u4ee5\u53ca\u56f4\u7ed5 Kubernetes \u751f\u6001\u53d1\u5c55\u51fa\u6765\u7684\u4e00\u6574\u5957\u81ea\u52a8\u5316\u8fd0\u7ef4\u4f53\u7cfb\u3002<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\"><strong>\u66f4\u590d\u6742\u7684\u5de5\u4f5c\u8d1f\u8f7d\u7c7b\u578b<\/strong><\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\">\u524d\u9762\u4e3e\u7684\u4f8b\u5b50\u4e00\u76f4\u662f Deployment,\u5b83\u5047\u8bbe Pod \u4e4b\u95f4\u662f\u65e0\u72b6\u6001\u3001\u53ef\u4ee5\u968f\u610f\u66ff\u6362\u3001\u987a\u5e8f\u4e0d\u91cd\u8981\u7684,\u4f46\u73b0\u5b9e\u91cc\u5f88\u591a\u573a\u666f\u4e0d\u6ee1\u8db3\u8fd9\u4e2a\u5047\u8bbe\u3002StatefulSet \u5c31\u662f\u4e3a\u6709\u72b6\u6001\u5e94\u7528\u8bbe\u8ba1\u7684,\u6bd4\u5982\u6570\u636e\u5e93\u96c6\u7fa4(MySQL \u4e3b\u4ece\u3001Elasticsearch\u3001Kafka \u8fd9\u7c7b)\u3002\u5b83\u548c Deployment \u6700\u5927\u7684\u533a\u522b\u662f:\u6bcf\u4e2a\u00a0Pod \u4f1a\u62ff\u5230\u4e00\u4e2a\u7a33\u5b9a\u4e0d\u53d8\u7684\u7f16\u53f7\u548c\u7f51\u7edc\u6807\u8bc6(\u6bd4\u5982\u00a0<code class=\"bg-text-200\/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]\">mysql-0<\/code>\u3001<code class=\"bg-text-200\/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]\">mysql-1<\/code>\u3001<code class=\"bg-text-200\/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]\">mysql-2<\/code>),\u5373\u4f7f Pod \u88ab\u5220\u9664\u91cd\u5efa,\u65b0 Pod \u8fd8\u662f\u53eb\u8fd9\u4e2a\u540d\u5b57\u3001\u8fd8\u662f\u6302\u8f7d\u539f\u6765\u90a3\u5757\u5b58\u50a8\u5377,\u4e0d\u4f1a\u50cf Deployment \u90a3\u6837\u968f\u673a\u5206\u914d\u4e00\u4e2a\u65b0\u540d\u5b57\u3001\u4e22\u5931\u539f\u6765\u7ed1\u5b9a\u7684\u5b58\u50a8;\u800c\u4e14 StatefulSet \u521b\u5efa\u548c\u5220\u9664 Pod \u662f\u4e25\u683c\u6309\u987a\u5e8f\u6765\u7684(\u5148 0 \u540e 1 \u518d 2),\u8fd9\u5bf9\u5f88\u591a\u9700\u8981\u6309\u987a\u5e8f\u521d\u59cb\u5316\u7684\u96c6\u7fa4\u5316\u8f6f\u4ef6\u662f\u5fc5\u9700\u7684\u3002<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\">DaemonSet \u89e3\u51b3\u7684\u662f\u53e6\u4e00\u7c7b\u95ee\u9898:\u67d0\u4e9b\u7a0b\u5e8f\u9700\u8981\u5728\u96c6\u7fa4\u91cc\u6bcf\u4e00\u53f0\u8282\u70b9\u4e0a\u90fd\u8dd1\u4e00\u4efd,\u800c\u4e0d\u662f\u8dd1\u51e0\u4e2a\u526f\u672c\u968f\u4fbf\u5206\u5e03\u5230\u54ea\u3002\u5178\u578b\u573a\u666f\u662f\u65e5\u5fd7\u91c7\u96c6agent(\u6bd4\u5982 Fluentd)\u3001\u76d1\u63a7 agent(\u6bd4\u5982 node-exporter)\u3001\u7f51\u7edc\u63d2\u4ef6\u672c\u8eab,\u8fd9\u4e9b\u90fd\u5f97\u5728\u6bcf\u53f0\u673a\u5668\u4e0a\u90fd\u6709\u4e00\u4e2a\u5b9e\u4f8b\u624d\u80fd\u91c7\u96c6\u5230\u5b8c\u6574\u6570\u636e,DaemonSet \u4f1a\u81ea\u52a8\u786e\u4fdd\u96c6\u7fa4\u91cc\u6bcf\u52a0\u5165\u4e00\u4e2a\u65b0\u8282\u70b9,\u5c31\u81ea\u52a8\u5728\u4e0a\u9762\u8c03\u5ea6\u4e00\u4efd\u5bf9\u5e94\u7684 Pod,\u8282\u70b9\u88ab\u79fb\u9664\u65f6\u4e5f\u81ea\u52a8\u6e05\u7406\u6389\u3002<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\">Job \u548c CronJob \u5904\u7406\u7684\u662f&#8221;\u8dd1\u5b8c\u5c31\u7ed3\u675f&#8221;\u7684\u4e00\u6b21\u6027\u6216\u5468\u671f\u6027\u4efb\u52a1,\u548c\u524d\u9762\u51e0\u79cd&#8221;\u8981\u4e00\u76f4\u8fd0\u884c\u3001\u7ef4\u6301\u526f\u672c\u6570&#8221;\u7684\u8d1f\u8f7d\u903b\u8f91\u4e0d\u540c\u3002Job \u4fdd\u8bc1\u67d0\u4e2a\u4efb\u52a1\u8fd0\u884c\u5230\u6210\u529f\u5b8c\u6210\u4e3a\u6b62(\u53ef\u4ee5\u914d\u7f6e\u5931\u8d25\u91cd\u8bd5\u6b21\u6570),\u9002\u5408\u6279\u5904\u7406\u3001\u6570\u636e\u8fc1\u79fb\u8fd9\u7c7b\u4e00\u6b21\u6027\u4efb\u52a1;CronJob \u5219\u662f\u5728 Job \u57fa\u7840\u4e0a\u52a0\u4e86\u5b9a\u65f6\u8c03\u5ea6\u80fd\u529b,\u5199\u6cd5\u548c Linux \u7684 crontab \u8868\u8fbe\u5f0f\u4e00\u6837,\u9002\u5408\u5b9a\u671f\u5907\u4efd\u3001\u5b9a\u671f\u6e05\u7406\u8fd9\u7c7b\u5468\u671f\u6027\u5de5\u4f5c\u3002<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\"><strong>\u8c03\u5ea6\u63a7\u5236:\u8ba9\u00a0Pod \u843d\u5230\u4f60\u60f3\u8981\u7684\u4f4d\u7f6e<\/strong><\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\">\u524d\u9762\u00a0<code class=\"bg-text-200\/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]\">kubectl describe pod<\/code>\u00a0\u7684\u8f93\u51fa\u91cc\u5176\u5b9e\u5df2\u7ecf\u57cb\u4e86\u4e24\u4e2a\u7ebf\u7d22\u2014\u2014Tolerations(\u5bb9\u5fcd\u5ea6)\u548c Node-Selectors,\u8fd9\u4e24\u4e2a\u90fd\u5c5e\u4e8e\u8c03\u5ea6\u63a7\u5236\u7684\u8303\u7574,\u8fdb\u9636\u7528\u6cd5\u6bd4\u90a3\u6b21\u770b\u5230\u7684\u9ed8\u8ba4\u914d\u7f6e\u8981\u4e30\u5bcc\u5f97\u591a\u3002\u4eb2\u548c\u6027(Affinity)\u5206\u8282\u70b9\u4eb2\u548c\u6027(Node Affinity)\u548c Pod \u4eb2\u548c\u6027\/\u53cd\u4eb2\u548c\u6027(Pod Affinity\/Anti-Affinity)\u4e24\u7c7b:\u8282\u70b9\u4eb2\u548c\u6027\u662f&#8221;\u6211\u8981\u6c42 Pod \u53ea\u80fd\u8c03\u5ea6\u5230\u5e26\u6709\u67d0\u4e9b\u6807\u7b7e\u7684\u8282\u70b9\u4e0a&#8221;,\u6bd4\u5982\u53ea\u8c03\u5ea6\u5230 GPU \u8282\u70b9;Pod \u53cd\u4eb2\u548c\u6027\u662f&#8221;\u6211\u8981\u6c42\u8fd9\u4e2a Pod \u4e0d\u8981\u548c\u53e6\u4e00\u6279\u7279\u5b9a\u7684 Pod \u6324\u5728\u540c\u4e00\u4e2a\u8282\u70b9\u4e0a&#8221;,\u6700\u5e38\u89c1\u7684\u7528\u6cd5\u662f\u8ba9\u540c\u4e00\u4e2a\u5e94\u7528\u7684\u591a\u4e2a\u526f\u672c\u5f3a\u5236\u5206\u6563\u5230\u4e0d\u540c\u8282\u70b9\u751a\u81f3\u4e0d\u540c\u53ef\u7528\u533a,\u8fd9\u6837\u4e00\u53f0\u673a\u5668\u5b95\u673a\u4e0d\u4f1a\u628a\u8fd9\u4e2a\u5e94\u7528\u7684\u6240\u6709\u526f\u672c\u4e00\u9505\u7aef\u3002\u6c61\u70b9(Taint)\u548c\u5bb9\u5fcd\u5ea6(Toleration)\u662f\u53cd\u8fc7\u6765\u7684\u601d\u8def:\u6c61\u70b9\u662f\u6253\u5728\u8282\u70b9\u4e0a\u7684\u6392\u65a5\u6807\u8bb0,\u610f\u601d\u662f&#8221;\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u4e0d\u5141\u8bb8 Pod \u8c03\u5ea6\u5230\u6211\u8fd9\u91cc&#8221;,\u5bb9\u5fcd\u5ea6\u662f\u6253\u5728 Pod \u4e0a\u7684&#8221;\u6211\u80fd\u63a5\u53d7\u8fd9\u4e2a\u6c61\u70b9&#8221;,\u4e24\u8005\u914d\u5408\u53ef\u4ee5\u5b9e\u73b0\u4e13\u7528\u8282\u70b9\u6c60(\u6bd4\u5982\u7ed9\u67d0\u7c7b\u6c61\u70b9\u6807\u8bb0\u7684\u8282\u70b9\u53ea\u7ed9\u7279\u5b9a\u56e2\u961f\u7528)\u3001\u6216\u8005\u50cf\u6211\u4eec\u4e4b\u524d\u770b\u5230\u7684\u9ed8\u8ba4\u5bb9\u5fcd\u90a3\u6837,\u5141\u8bb8 Pod \u5728\u8282\u70b9\u77ed\u6682\u5931\u8054\u65f6\u5148\u4e0d\u7740\u6025\u88ab\u9a71\u9010\u3002\u66f4\u6781\u7aef\u7684\u60c5\u51b5\u4e0b,\u5982\u679c\u5185\u7f6e\u8c03\u5ea6\u5668\u7684\u8c03\u5ea6\u903b\u8f91\u6ee1\u8db3\u4e0d\u4e86\u9700\u6c42,\u8fd8\u53ef\u4ee5\u5199\u81ea\u5b9a\u4e49\u8c03\u5ea6\u5668(Custom Scheduler),\u66ff\u6362\u6389\u9ed8\u8ba4\u7684\u8c03\u5ea6\u51b3\u7b56\u903b\u8f91,\u5927\u89c4\u6a21\u4e92\u8054\u7f51\u516c\u53f8\u5728\u8d85\u5927\u89c4\u6a21\u96c6\u7fa4\u3001\u6709\u590d\u6742\u8d44\u6e90\u753b\u50cf\u7684\u573a\u666f\u4e0b\u4f1a\u8fd9\u4e48\u505a\u3002<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\"><strong>\u81ea\u52a8\u5316\u6269\u5c55\u80fd\u529b<\/strong><\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\">\u524d\u9762\u6df1\u5165\u804a\u8fc7 HPA(\u6309 CPU\/\u5185\u5b58\u7b49\u6307\u6807\u6a2a\u5411\u6269\u7f29 Pod \u6570\u91cf)\u548c Cluster Autoscaler(\u6309\u8282\u70b9\u8d44\u6e90\u538b\u529b\u589e\u51cf VM),\u8fd9\u91cc\u518d\u8865\u4e00\u4e2a VPA(Vertical Pod Autoscaler,\u5782\u76f4\u6269\u7f29\u5bb9),\u5b83\u89e3\u51b3\u7684\u662f\u53e6\u4e00\u4e2a\u95ee\u9898:HPA\u00a0\u8c03\u6574\u7684\u662f\u526f\u672c\u6570\u91cf,VPA \u8c03\u6574\u7684\u662f\u5355\u4e2a Pod \u8be5\u5206\u914d\u591a\u5c11 CPU \u548c\u5185\u5b58\u8fd9\u4e2a\u00a0<code class=\"bg-text-200\/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]\">requests\/limits<\/code>\u00a0\u7684\u5177\u4f53\u6570\u503c\u3002VPA \u4f1a\u6301\u7eed\u89c2\u5bdf\u5bb9\u5668\u5b9e\u9645\u7684\u8d44\u6e90\u4f7f\u7528\u60c5\u51b5,\u53d1\u73b0\u4f60\u4e00\u5f00\u59cb\u914d\u7f6e\u7684\u00a0<code class=\"bg-text-200\/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]\">requests: cpu: 100m<\/code>\u00a0\u660e\u663e\u4e0d\u591f\u7528,\u5c31\u81ea\u52a8\u5e2e\u4f60\u628a\u8fd9\u4e2a\u6570\u503c\u8c03\u9ad8(\u9700\u8981\u91cd\u5efa Pod \u624d\u80fd\u751f\u6548),\u907f\u514d\u4e86\u4eba\u5de5\u51ed\u7ecf\u9a8c\u731c\u8d44\u6e90\u914d\u7f6e\u3001\u731c\u5c11\u4e86\u5bfc\u81f4\u88ab\u9650\u6d41\u3001\u731c\u591a\u4e86\u5bfc\u81f4\u6d6a\u8d39\u7684\u95ee\u9898\u3002HPA \u548c VPA \u901a\u5e38\u4e0d\u5efa\u8bae\u5bf9\u540c\u4e00\u4e2a\u6307\u6807\u540c\u65f6\u751f\u6548(\u6bd4\u5982\u90fd\u7528 CPU \u505a\u5224\u65ad\u4f9d\u636e),\u5bb9\u6613\u4e92\u76f8\u6253\u67b6,\u5b9e\u8df5\u4e2d\u8981\u89c4\u5212\u597d\u8c01\u7ba1\u54ea\u4e2a\u7ef4\u5ea6\u3002<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\"><strong>\u6d41\u91cf\u6cbb\u7406:\u670d\u52a1\u7f51\u683c<\/strong><\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\">Service \u53ea\u89e3\u51b3\u4e86&#8221;\u600e\u4e48\u627e\u5230\u540e\u7aef Pod&#8221;\u8fd9\u4e2a\u57fa\u7840\u95ee\u9898,\u4f46\u66f4\u590d\u6742\u7684\u6d41\u91cf\u573a\u666f,\u6bd4\u5982\u6309\u6bd4\u4f8b\u7070\u5ea6\u53d1\u5e03(1% \u6d41\u91cf\u5148\u5207\u65b0\u7248\u672c)\u3001\u670d\u52a1\u95f4\u8c03\u7528\u7684\u81ea\u52a8\u91cd\u8bd5\u548c\u7194\u65ad\u3001\u53cc\u5411 TLS \u52a0\u5bc6\u3001\u8c03\u7528\u94fe\u8def\u8ffd\u8e2a,\u9760 Service \u672c\u8eab\u662f\u505a\u4e0d\u5230\u7684\u3002\u670d\u52a1\u7f51\u683c(Service Mesh,\u6700\u5e38\u89c1\u7684\u5b9e\u73b0\u662f Istio\u3001Linkerd)\u7684\u505a\u6cd5\u662f\u7ed9\u6bcf\u4e2a Pod \u81ea\u52a8\u6ce8\u5165\u4e00\u4e2a\u53eb Sidecar \u7684\u989d\u5916\u5bb9\u5668(\u901a\u5e38\u662f\u4e2a\u8f7b\u91cf\u4ee3\u7406,\u6bd4\u5982 Envoy),\u6240\u6709\u8fdb\u51fa\u8fd9\u4e2a Pod \u7684\u6d41\u91cf\u90fd\u5148\u7ecf\u8fc7\u8fd9\u4e2a Sidecar,\u5e94\u7528\u4ee3\u7801\u672c\u8eab\u5b8c\u5168\u65e0\u611f\u77e5\u3002\u56e0\u4e3a\u6240\u6709\u6d41\u91cf\u90fd\u88ab\u8fd9\u5c42\u4ee3\u7406\u62e6\u622a\u4e86,\u5c31\u53ef\u4ee5\u5728\u8fd9\u4e00\u5c42\u7edf\u4e00\u5b9e\u73b0\u6d41\u91cf\u5207\u5206\u3001\u5931\u8d25\u91cd\u8bd5\u3001\u8d85\u65f6\u63a7\u5236\u3001\u52a0\u5bc6\u3001\u76d1\u63a7,\u800c\u4e0d\u9700\u8981\u6bcf\u4e2a\u4e1a\u52a1\u56e2\u961f\u81ea\u5df1\u5728\u4ee3\u7801\u91cc\u9020\u8f6e\u5b50\u3002\u8fd9\u4e5f\u662f&#8221;Sidecar \u6a21\u5f0f&#8221;\u8fd9\u4e2a\u8bcd\u7684\u7531\u6765,\u524d\u9762\u804a EA \u6570\u636e\u5e73\u53f0\u7528 Airflow \u65f6\u63d0\u5230\u7684 Sidecar \u540c\u6b65 DAG \u6587\u4ef6,\u672c\u8d28\u4e0a\u662f\u540c\u4e00\u79cd\u8bbe\u8ba1\u6a21\u5f0f\u7684\u4e0d\u540c\u5e94\u7528\u573a\u666f\u3002<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\"><strong>Operator \u548c CRD:\u628a\u8fd0\u7ef4\u77e5\u8bc6\u5199\u6210\u4ee3\u7801<\/strong><\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\">\u524d\u9762\u804a EA \u7684 KubeCon \u6f14\u8bb2\u65f6\u63d0\u8fc7\u8fd9\u4e2a\u6982\u5ff5,\u8fd9\u91cc\u8865\u5145\u5c55\u5f00\u3002CRD \u8ba9\u4f60\u53ef\u4ee5\u5f80 Kubernetes \u91cc\u6ce8\u518c\u5168\u65b0\u7684\u8d44\u6e90\u7c7b\u578b,Operator \u5219\u662f\u76d1\u542c\u8fd9\u4e9b\u81ea\u5b9a\u4e49\u8d44\u6e90\u3001\u5e76\u636e\u6b64\u81ea\u52a8\u6267\u884c\u4e00\u6574\u5957\u8fd0\u7ef4\u52a8\u4f5c\u7684\u63a7\u5236\u5668\u3002\u8fd9\u5957\u6a21\u5f0f\u6700\u521d\u662f\u793e\u533a\u4e3a\u4e86\u89e3\u51b3&#8221;\u600e\u4e48\u7528 Kubernetes \u4f18\u96c5\u5730\u7ba1\u7406\u6570\u636e\u5e93\u8fd9\u7c7b\u6709\u72b6\u6001\u3001\u6709\u590d\u6742\u8fd0\u7ef4\u6d41\u7a0b\u7684\u8f6f\u4ef6&#8221;\u800c\u53d1\u5c55\u51fa\u6765\u7684:\u6bd4\u5982\u88c5\u4e00\u4e2a\u00a0Postgres Operator \u540e,\u4f60\u53ea\u9700\u8981\u63d0\u4ea4\u4e00\u4e2a\u00a0<code class=\"bg-text-200\/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]\">apiVersion: postgres.io\/v1, kind: PostgresCluster<\/code>\u00a0\u7684\u81ea\u5b9a\u4e49\u8d44\u6e90,\u58f0\u660e&#8221;\u6211\u8981\u4e00\u4e2a 3 \u8282\u70b9\u7684 Postgres \u96c6\u7fa4\u3001\u5e26\u81ea\u52a8\u5907\u4efd&#8221;,Operator \u5c31\u4f1a\u81ea\u52a8\u5b8c\u6210\u5efa StatefulSet\u3001\u914d\u7f6e\u4e3b\u4ece\u590d\u5236\u3001\u8bbe\u7f6e\u5b9a\u65f6\u5907\u4efd\u4efb\u52a1\u8fd9\u4e9b\u539f\u672c\u9700\u8981 DBA \u624b\u52a8\u64cd\u4f5c\u7684\u590d\u6742\u6d41\u7a0b\u3002\u53ef\u4ee5\u7406\u89e3\u6210 Operator \u662f\u628a\u67d0\u4e2a\u9886\u57df\u4e13\u5bb6\u7684\u8fd0\u7ef4\u7ecf\u9a8c(\u600e\u4e48\u505a\u6545\u969c\u8f6c\u79fb\u3001\u600e\u4e48\u505a\u5907\u4efd\u6062\u590d)\u5199\u6210\u4e86\u81ea\u52a8\u5316\u4ee3\u7801,\u8fd9\u4e5f\u662f\u4e3a\u4ec0\u4e48\u73b0\u5728\u51e0\u4e4e\u6240\u6709\u590d\u6742\u4e2d\u95f4\u4ef6(Kafka\u3001Redis\u3001Elasticsearch\u3001\u5404\u7c7b\u6570\u636e\u5e93)\u90fd\u6709\u5bf9\u5e94\u7684 Operator\u3002<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\"><strong>GitOps:\u7528\u00a0Git \u9a71\u52a8\u96c6\u7fa4\u72b6\u6001<\/strong><\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\">\u524d\u9762\u63d0\u5230 EA \u7684\u6846\u67b6\u91cc\u7528\u4e86 GitOps,\u8fd9\u91cc\u7a0d\u5fae\u5c55\u5f00\u3002\u6838\u5fc3\u7406\u5ff5\u662f\u628a\u96c6\u7fa4\u8be5\u6709\u7684\u72b6\u6001(\u7528\u54ea\u4e2a\u955c\u50cf\u7248\u672c\u3001\u591a\u5c11\u526f\u672c\u3001\u4ec0\u4e48\u914d\u7f6e)\u5168\u90e8\u5199\u6210 YAML \u5b58\u5728 Git \u4ed3\u5e93\u91cc,Git \u4ed3\u5e93\u53d8\u6210&#8221;\u552f\u4e00\u771f\u76f8\u6765\u6e90&#8221;\u3002\u96c6\u7fa4\u91cc\u8dd1\u7740\u4e00\u4e2a\u4e13\u95e8\u7684\u63a7\u5236\u5668(\u5e38\u89c1\u7684\u662f ArgoCD \u6216\u8005 Flux),\u6301\u7eed\u5bf9\u6bd4 Git \u4ed3\u5e93\u91cc\u58f0\u660e\u7684\u72b6\u6001\u548c\u96c6\u7fa4\u5b9e\u9645\u72b6\u6001\u662f\u5426\u4e00\u81f4,\u4e00\u65e6\u6709\u4eba\u5f80 Git \u63d0\u4ea4\u4e86\u65b0\u7684\u955c\u50cf\u7248\u672c\u53f7,\u8fd9\u4e2a\u63a7\u5236\u5668\u4f1a\u81ea\u52a8\u68c0\u6d4b\u5230\u5dee\u5f02,\u628a\u53d8\u66f4\u540c\u6b65\u5e94\u7528\u5230\u96c6\u7fa4\u4e0a,\u4e0d\u9700\u8981\u4eba\u767b\u8fdb\u96c6\u7fa4\u624b\u52a8\u6267\u884c\u00a0<code class=\"bg-text-200\/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]\">kubectl apply<\/code>\u3002\u597d\u5904\u662f\u6bcf\u4e00\u6b21\u53d8\u66f4\u90fd\u6709 Git \u7684\u63d0\u4ea4\u8bb0\u5f55,\u5929\u7136\u53ef\u5ba1\u8ba1\u3001\u53ef\u8ffd\u6eaf\u3001\u51fa\u95ee\u9898\u4e86\u53ef\u4ee5\u76f4\u63a5\u00a0<code class=\"bg-text-200\/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]\">git revert<\/code>\u00a0\u56de\u6eda;\u800c\u4e14\u56e0\u4e3a\u552f\u4e00\u7684\u53d8\u66f4\u5165\u53e3\u662f Git,\u675c\u7edd\u4e86\u6709\u4eba\u624b\u52a8\u767b\u5f55\u96c6\u7fa4&#8221;\u4e34\u65f6\u6539\u4e00\u4e0b&#8221;\u7ed3\u679c\u6ca1\u4eba\u77e5\u9053\u6539\u4e86\u4ec0\u4e48\u8fd9\u79cd\u6f02\u79fb\u95ee\u9898\u3002<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\"><strong>\u7070\u5ea6\u53d1\u5e03:\u6bd4\u6eda\u52a8\u66f4\u65b0\u66f4\u7cbe\u7ec6\u7684\u53d1\u5e03\u7b56\u7565<\/strong><\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\">\u539f\u751f\u7684\u6eda\u52a8\u66f4\u65b0(RollingUpdate)\u53ea\u80fd\u505a\u5230&#8221;\u9010\u6b65\u66ff\u6362,\u65b0\u65e7\u7248\u672c\u6df7\u8dd1\u4e00\u6bb5\u65f6\u95f4&#8221;,\u4f46\u6ca1\u6cd5\u505a&#8221;\u5148\u653e 5% \u6d41\u91cf\u5230\u65b0\u7248\u672c\u89c2\u5bdf\u534a\u5c0f\u65f6,\u6ca1\u95ee\u9898\u518d\u9010\u6b65\u52a0\u5230 100%&#8221;\u8fd9\u79cd\u66f4\u7cbe\u7ec6\u7684\u7070\u5ea6\u7b56\u7565,\u4e5f\u6ca1\u6cd5\u5728\u53d1\u73b0\u95ee\u9898\u65f6\u6309\u6d41\u91cf\u6bd4\u4f8b\u81ea\u52a8\u56de\u6eda\u3002\u793e\u533a\u5728\u8fd9\u4e2a\u57fa\u7840\u4e0a\u53d1\u5c55\u51fa\u4e86 Argo Rollouts\u3001Flagger \u8fd9\u7c7b\u5de5\u5177,\u901a\u5e38\u8981\u914d\u5408\u670d\u52a1\u7f51\u683c\u6216\u8005 Ingress \u63a7\u5236\u5668\u4e00\u8d77\u7528,\u53ef\u4ee5\u5b9a\u4e49&#8221;\u91d1\u4e1d\u96c0\u53d1\u5e03&#8221;(Canary,\u5c0f\u6bd4\u4f8b\u5bfc\u6d41\u89c2\u5bdf\u6307\u6807,\u9010\u6b65\u653e\u91cf)\u6216\u8005&#8221;\u84dd\u7eff\u53d1\u5e03&#8221;(Blue-Green,\u65b0\u65e7\u4e24\u4e2a\u73af\u5883\u5b8c\u5168\u5e76\u5b58,\u9a8c\u8bc1\u901a\u8fc7\u540e\u4e00\u6b21\u6027\u5207\u6d41\u91cf\u3001\u65e7\u73af\u5883\u4fdd\u7559\u4e00\u6bb5\u65f6\u95f4\u65b9\u4fbf\u5feb\u901f\u56de\u9000)\u8fd9\u7c7b\u66f4\u8d34\u8fd1\u5927\u516c\u53f8\u5b9e\u9645\u53d1\u5e03\u6d41\u7a0b\u7684\u7b56\u7565,\u8fd8\u80fd\u63a5\u5165 Prometheus \u8fd9\u7c7b\u76d1\u63a7\u7cfb\u7edf,\u8ba9&#8221;\u65b0\u7248\u672c\u9519\u8bef\u7387\u8d85\u8fc7\u9608\u503c\u5c31\u81ea\u52a8\u56de\u6eda&#8221;\u53d8\u6210\u5b8c\u5168\u81ea\u52a8\u5316\u7684\u52a8\u4f5c,\u4e0d\u9700\u8981\u4eba\u5de5\u76ef\u7740\u4eea\u8868\u76d8\u505a\u51b3\u7b56\u3002<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\"><strong>\u51c6\u5165\u63a7\u5236:\u5728\u8d44\u6e90\u521b\u5efa\u4e4b\u524d\u5c31\u62e6\u4e0b\u4e0d\u5408\u89c4\u7684\u914d\u7f6e<\/strong><\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\">\u524d\u9762\u804a\u7684 RBAC \u89e3\u51b3\u7684\u662f&#8221;\u8c01\u80fd\u505a\u4ec0\u4e48\u64cd\u4f5c&#8221;\u7684\u95ee\u9898,\u4f46\u6ca1\u89e3\u51b3&#8221;\u5373\u4f7f\u4f60\u6709\u6743\u9650\u63d0\u4ea4,\u8fd9\u4e2a\u914d\u7f6e\u672c\u8eab\u662f\u4e0d\u662f\u7b26\u5408\u89c4\u8303&#8221;\u7684\u95ee\u9898,\u6bd4\u5982\u516c\u53f8\u89c4\u5b9a\u6240\u6709\u5bb9\u5668\u4e0d\u80fd\u7528\u00a0<code class=\"bg-text-200\/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]\">latest<\/code>\u00a0\u8fd9\u79cd\u4e0d\u786e\u5b9a\u7684\u955c\u50cf\u6807\u7b7e\u3001\u4e0d\u80fd\u4ee5 root \u7528\u6237\u8fd0\u884c,\u8fd9\u7c7b\u89c4\u5219\u6ca1\u6cd5\u7528 RBAC \u8868\u8fbe\u3002\u51c6\u5165\u63a7\u5236\u5668(Admission Webhook)\u63d0\u4f9b\u4e86\u4e00\u4e2a\u94a9\u5b50,\u5728\u8d44\u6e90\u771f\u6b63\u88ab\u5199\u5165 etcd \u4e4b\u524d,\u5148\u628a\u8fd9\u4e2a\u8bf7\u6c42\u8f6c\u53d1\u7ed9\u4e00\u4e2a\u81ea\u5b9a\u4e49\u7684\u6821\u9a8c\u670d\u52a1,\u7531\u8fd9\u4e2a\u670d\u52a1\u51b3\u5b9a&#8221;\u653e\u884c&#8221;\u8fd8\u662f&#8221;\u62d2\u7edd\u5e76\u62a5\u9519&#8221;\u3002OPA Gatekeeper \u662f\u8fd9\u4e2a\u9886\u57df\u6700\u5e38\u7528\u7684\u5f00\u6e90\u5de5\u5177\u4e4b\u4e00,\u5141\u8bb8\u7528\u4e00\u79cd\u53eb Rego \u7684\u7b56\u7565\u8bed\u8a00\u5199\u5404\u79cd\u6821\u9a8c\u89c4\u5219,\u7edf\u4e00\u62e6\u622a\u6240\u6709\u4e0d\u5408\u89c4\u7684\u63d0\u4ea4,\u662f\u5927\u516c\u53f8\u505a\u5b89\u5168\u5408\u89c4\u3001\u6210\u672c\u6cbb\u7406(\u6bd4\u5982\u5f3a\u5236\u8981\u6c42\u6240\u6709 Pod \u5fc5\u987b\u5199\u660e\u8d44\u6e90 requests)\u7684\u5e38\u89c1\u624b\u6bb5\u3002<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" dir=\"ltr\">\u8fd9\u4e9b\u8fdb\u9636\u80fd\u529b\u4e0d\u662f\u6bcf\u4e2a\u56e2\u961f\u90fd\u9700\u8981\u4e00\u6b21\u6027\u5168\u4e0a,\u901a\u5e38\u662f\u968f\u7740\u96c6\u7fa4\u89c4\u6a21\u53d8\u5927\u3001\u56e2\u961f\u53d8\u591a\u4e4b\u540e,\u9047\u5230\u5177\u4f53\u75db\u70b9(\u72b6\u6001\u7ba1\u7406\u3001\u6d41\u91cf\u7cbe\u7ec6\u63a7\u5236\u3001\u53d1\u5e03\u98ce\u9669\u3001\u5408\u89c4\u5ba1\u8ba1)\u624d\u9010\u4e00\u5f15\u5165\u7684\u3002\u5982\u679c\u4f60\u5bf9\u67d0\u4e00\u5757\u7279\u522b\u611f\u5174\u8da3,\u6bd4\u5982\u60f3\u6df1\u5165\u67d0\u4e2a\u5177\u4f53\u5de5\u5177(Istio\u3001ArgoCD\u3001Operator \u600e\u4e48\u5199),\u6211\u53ef\u4ee5\u9488\u5bf9\u6027\u5c55\u5f00\u3002<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\u5ef6\u7eed\u6211\u4eec\u524d\u9762\u804a\u7684\u5185\u5bb9,\u8fd9\u6b21\u8bb2\u4e00\u4e9b\u66f4\u8fdb\u9636\u7684<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[24],"tags":[],"class_list":["post-7602","post","type-post","status-publish","format-standard","hentry","category-value_docs"],"_links":{"self":[{"href":"https:\/\/i007.cc\/wordpress\/wp-json\/wp\/v2\/posts\/7602","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i007.cc\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i007.cc\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i007.cc\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/i007.cc\/wordpress\/wp-json\/wp\/v2\/comments?post=7602"}],"version-history":[{"count":0,"href":"https:\/\/i007.cc\/wordpress\/wp-json\/wp\/v2\/posts\/7602\/revisions"}],"wp:attachment":[{"href":"https:\/\/i007.cc\/wordpress\/wp-json\/wp\/v2\/media?parent=7602"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i007.cc\/wordpress\/wp-json\/wp\/v2\/categories?post=7602"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i007.cc\/wordpress\/wp-json\/wp\/v2\/tags?post=7602"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}