Helm部署k8s应用 - IT评测·应用市场-qidao123.com

tar -zxvf helm-v3.15.2-linux-amd64.tar

复制代码

mv linux-amd64/helm /usr/local/bin/helm

复制代码

helm version

复制代码

--set name=value
等价于
name: value

复制代码

--set a=b,c=d
等价于
a: b
c: d

复制代码

--set outer.inner=value
等价于
outer:
inner: value

复制代码

--set name={a, b, c}
等价于
name:
- a
- b
- c

复制代码

--set name=[],a=null
由
name:
- a
- b
- c
a: b
变为了
name: []
a: null

复制代码

--set servers[0].port=80
等价于
servers:
- port: 80

复制代码

--set servers[0].port=80,servers[0].host=example
等价于
servers:
- port: 80
host: example

复制代码

--set name=value1\,value2
等价于
name: "value1,value2"

复制代码

--set nodeSelector."kubernetes\.io/role"=master
等价于
nodeSelector:
kubernetes.io/role: master

复制代码

helm create wordpress

复制代码

cd wordpress
tree

复制代码

apiVersion: chart API 版本（必需） #必须有
name: chart名称（必需） # 必须有
version: 语义化2 版本（必需） # 必须有
kubeVersion: 兼容Kubernetes版本的语义化版本（可选）
description: 一句话对这个项目的描述（可选）
type: chart类型（可选）
keywords:
- 关于项目的一组关键字（可选）
home: 项目home页面的URL （可选）
sources:
- 项目源码的URL列表（可选）
dependencies: # chart 必要条件列表（可选）
- name: chart名称 (nginx)
version: chart版本 ("1.2.3")
repository: （可选）仓库URL ("https://example.com/charts") 或别名 ("@repo-name")
condition: （可选）解析为布尔值的yaml路径，用于启用/禁用chart (e.g. subchart1.enabled )
tags: # （可选）
- 用于一次启用/禁用一组chart的tag
import-values: # （可选）
- ImportValue 保存源值到导入父键的映射。每项可以是字符串或者一对子/父列表项
alias: （可选） chart中使用的别名。当你要多次添加相同的chart时会很有用
maintainers: # （可选） # 可能用到
- name: 维护者名字（每个维护者都需要）
email: 维护者邮箱（每个维护者可选）
url: 维护者URL （每个维护者可选）
icon: 用做icon的SVG或PNG图片URL （可选）
appVersion: 包含的应用版本（可选）。不需要是语义化，建议使用引号
deprecated: 不被推荐的chart （可选，布尔值）
annotations:
example: 按名称输入的批注列表（可选）

复制代码

name: nginx-helm
apiVersion: v1
version: 1.0.0

复制代码

helm install --generate-name --values=myvals.yaml wordpress

复制代码

# Default values for wordpress.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
replicaCount: 1 #控制部署的Pod副本数量，默认为1。这适用于StatefulSet或Deployment类型的Kubernetes资源。
image: #用于配置容器镜像的相关信息
repository: nginx #镜像仓库地址。
pullPolicy: IfNotPresent #拉取镜像的策略，可以是Always, IfNotPresent, 或 Never。
# Overrides the image tag whose default is the chart appVersion.
tag: "" #镜像的标签，如果没有指定，则默认使用Chart的版本。
imagePullSecrets: [] #列出拉取私有镜像所需的密钥名称。
nameOverride: ""
fullnameOverride: "" #用于覆盖生成的资源名称的部分或全部。
serviceAccount: #配置服务账户的选项。
# Specifies whether a service account should be created
create: true #是否自动创建服务账户。
# Automatically mount a ServiceAccount's API credentials?
automount: true #是否自动挂载服务账户的API凭证。
# Annotations to add to the service account
annotations: {} #附加到服务账户的注解。
# The name of the service account to use.
# If not set and create is true, a name is generated using the fullname template
name: "" #使用的服务账户名称。
podAnnotations: {} #附加到Pod的注解。
podLabels: {} #附加到Pod的标签。
podSecurityContext: {}
# fsGroup: 2000
securityContext: {} #定义Pod和容器的安全上下文。
# capabilities:
# drop:
# - ALL
# readOnlyRootFilesystem: true
# runAsNonRoot: true
# runAsUser: 1000
service: #配置Service资源
type: ClusterIP #Service的类型，例如ClusterIP, NodePort, LoadBalancer等。
port: 80 #Service监听的端口。
ingress: #Ingress资源的配置。
enabled: false #是否启用Ingress。
className: "" #Ingress控制器的类名。
annotations: {} #附加到Ingress的注解。
# kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true"
hosts: #定义Ingress的主机名和路径。
- host: chart-example.local
paths:
- path: /
pathType: ImplementationSpecific
tls: [] # TLS配置。
# - secretName: chart-example-tls
# hosts:
# - chart-example.local
resources: {} #Pod的资源限制和请求。
# We usually recommend not to specify default resources and to leave this as a conscious
# choice for the user. This also increases chances charts run on environments with little
# resources, such as Minikube. If you do want to specify resources, uncomment the following
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi
livenessProbe:
httpGet:
path: /
port: http
readinessProbe: #定义容器的存活探针和就绪探针，用于健康检查。
httpGet:
path: /
port: http
autoscaling: #水平自动扩缩容的配置。
enabled: false
minReplicas: 1
maxReplicas: 100
targetCPUUtilizationPercentage: 80
# targetMemoryUtilizationPercentage: 80
# Additional volumes on the output Deployment definition.
volumes: []
# - name: foo
# secret:
# secretName: mysecret
# optional: false
# Additional volumeMounts on the output Deployment definition.
volumeMounts: [] #Pod的卷和卷挂载配置。
# - name: foo
# mountPath: "/etc/foo"
# readOnly: true
nodeSelector: {} #选择运行Pod的节点的标签。
tolerations: [] #允许Pod容忍节点的污点。
affinity: {} #节点亲和性和反亲和性配置，用于控制Pod在哪些节点上运行。

复制代码

image:
repository: nginx
tag: latest

复制代码

apiVersion: apps/v1
kind: Deployment
metadata:
name: nginx-helm-{{ .Values.image.repository }}
spec:
replicas: 1
selector:
matchLabels:
app: nginx-helm
template:
metadata:
labels:
app: nginx-helm
spec:
containers:
- name: nginx-helm
image: {{ .Values.image.repository }}:{{ .Values.image.tag }}
ports:
- containerPort: 80
protocol: TCP

复制代码

helm package wordpress/

复制代码

helm repo add myrepo https://example.com/charts
helm push nginx-helm-1.0.0.tgz myrepo

复制代码

helm install my-nginx ./nginx-helm-1.0.0.tgz

复制代码

helm list

复制代码

helm ls

复制代码

helm upgrade [RELEASE] [CHART] [flags]

复制代码

helm upgrade -f myvalues.yaml -f override.yaml redis ./redis

复制代码

helm upgrade --set foo=bar --set foo=newbar redis ./redis

复制代码

helm upgrade my-nginx nginx-helm-1.0.0.tgz --set image.tag=1.27.0

复制代码

kubectl get pods
kubectl get pods nginx-helm-nginx-5b97c9f87d-ggbgw -o yaml | grep image

复制代码

helm history my-nginx

复制代码

helm rollback my-nginx 1

复制代码

kubectl get pods
kubectl get pods nginx-helm-nginx-868dbb969-p9k5t -o yaml | grep image

复制代码

helm uninstall my-nginx

复制代码

helm --help

复制代码

The Kubernetes package manager
Common actions for Helm:
- helm search: search for charts
- helm pull: download a chart to your local directory to view
- helm install: upload the chart to Kubernetes
- helm list: list releases of charts
Environment variables:
| Name | Description |
|------------------------------------|------------------------------------------------------------------------------------------------------------|
| $HELM_CACHE_HOME | set an alternative location for storing cached files. |
| $HELM_CONFIG_HOME | set an alternative location for storing Helm configuration. |
| $HELM_DATA_HOME | set an alternative location for storing Helm data. |
| $HELM_DEBUG | indicate whether or not Helm is running in Debug mode |
| $HELM_DRIVER | set the backend storage driver. Values are: configmap, secret, memory, sql. |
| $HELM_DRIVER_SQL_CONNECTION_STRING | set the connection string the SQL storage driver should use. |
| $HELM_MAX_HISTORY | set the maximum number of helm release history. |
| $HELM_NAMESPACE | set the namespace used for the helm operations. |
| $HELM_NO_PLUGINS | disable plugins. Set HELM_NO_PLUGINS=1 to disable plugins. |
| $HELM_PLUGINS | set the path to the plugins directory |
| $HELM_REGISTRY_CONFIG | set the path to the registry config file. |
| $HELM_REPOSITORY_CACHE | set the path to the repository cache directory |
| $HELM_REPOSITORY_CONFIG | set the path to the repositories file. |
| $KUBECONFIG | set an alternative Kubernetes configuration file (default "~/.kube/config") |
| $HELM_KUBEAPISERVER | set the Kubernetes API Server Endpoint for authentication |
| $HELM_KUBECAFILE | set the Kubernetes certificate authority file. |
| $HELM_KUBEASGROUPS | set the Groups to use for impersonation using a comma-separated list. |
| $HELM_KUBEASUSER | set the Username to impersonate for the operation. |
| $HELM_KUBECONTEXT | set the name of the kubeconfig context. |
| $HELM_KUBETOKEN | set the Bearer KubeToken used for authentication. |
| $HELM_KUBEINSECURE_SKIP_TLS_VERIFY | indicate if the Kubernetes API server's certificate validation should be skipped (insecure) |
| $HELM_KUBETLS_SERVER_NAME | set the server name used to validate the Kubernetes API server certificate |
| $HELM_BURST_LIMIT | set the default burst limit in the case the server contains many CRDs (default 100, -1 to disable) |
| $HELM_QPS | set the Queries Per Second in cases where a high number of calls exceed the option for higher burst values |
Helm stores cache, configuration, and data based on the following configuration order:
- If a HELM_*_HOME environment variable is set, it will be used
- Otherwise, on systems supporting the XDG base directory specification, the XDG variables will be used
- When no other location is set a default location will be used based on the operating system
By default, the default directories depend on the Operating System. The defaults are listed below:
| Operating System | Cache Path | Configuration Path | Data Path |
|------------------|---------------------------|--------------------------------|-------------------------|
| Linux | $HOME/.cache/helm \| $HOME/.config/helm | $HOME/.local/share/helm |
| macOS | $HOME/Library/Caches/helm \| $HOME/Library/Preferences/helm | $HOME/Library/helm |
| Windows | %TEMP%\helm | %APPDATA%\helm | %APPDATA%\helm |
Usage:
helm [command]
Available Commands:
completion generate autocompletion scripts for the specified shell
create create a new chart with the given name
dependency manage a chart's dependencies
env helm client environment information
get download extended information of a named release
help Help about any command
history fetch release history
install install a chart
lint examine a chart for possible issues
list list releases
package package a chart directory into a chart archive
plugin install, list, or uninstall Helm plugins
pull download a chart from a repository and (optionally) unpack it in local directory
push push a chart to remote
registry login to or logout from a registry
repo add, list, remove, update, and index chart repositories
rollback roll back a release to a previous revision
search search for a keyword in charts
show show information of a chart
status display the status of the named release
template locally render templates
test run tests for a release
uninstall uninstall a release
upgrade upgrade a release
verify verify that a chart at the given path has been signed and is valid
version print the client version information
Flags:
--burst-limit int client-side default throttling limit (default 100)
--debug enable verbose output
-h, --help help for helm
--kube-apiserver string the address and the port for the Kubernetes API server
--kube-as-group stringArray group to impersonate for the operation, this flag can be repeated to specify multiple groups.
--kube-as-user string username to impersonate for the operation
--kube-ca-file string the certificate authority file for the Kubernetes API server connection
--kube-context string name of the kubeconfig context to use
--kube-insecure-skip-tls-verify if true, the Kubernetes API server's certificate will not be checked for validity. This will make your HTTPS connections insecure
--kube-tls-server-name string server name to use for Kubernetes API server certificate validation. If it is not provided, the hostname used to contact the server is used
--kube-token string bearer token used for authentication
--kubeconfig string path to the kubeconfig file
-n, --namespace string namespace scope for this request
--qps float32 queries per second used when communicating with the Kubernetes API, not including bursting
--registry-config string path to the registry config file (default "/root/.config/helm/registry/config.json")
--repository-cache string path to the file containing cached repository indexes (default "/root/.cache/helm/repository")
--repository-config string path to the file containing repository names and URLs (default "/root/.config/helm/repositories.yaml")
Use "helm [command] --help" for more information about a command.

复制代码