zoukankan      html  css  js  c++  java
  • calico 指定pod 网段

    分配4个C的子网,比如 172.22.132.0/22

    其中大数据应用连接 mq, iptable做了限制,只允许指定IP访问, 所以需要从 172.22.132.0/22 切出子网

    规划如下:

    大数据网络: 172.22.135.0/25     使用IP126个

    其他pod网络: 172.22.132.0/23  使用pod 512个

    calicoctl create -f -<<EOF
    apiVersion: projectcalico.org/v3
    kind: IPPool
    metadata:
      name: bgdata-receiver-ipv4pool
    spec:
      blockSize: 26
      cidr: 172.22.135.0/25
      ipipMode: Never
      nodeSelector: all()
      vxlanMode: Never
      natOutgoing: false
    EOF
    
    
    
    calicoctl create -f -<<EOF
    apiVersion: projectcalico.org/v3
    kind: IPPool
    metadata:
      name: default-ipv4-ippool
    spec:
      blockSize: 26
      cidr: 172.22.132.0/23
      ipipMode: Never
      nodeSelector: all()
      vxlanMode: Never
      natOutgoing: false
    EOF

    主要利用calico组件的两个kubernetes注解:

    cni.projectcalico.org/ipAddrs

        metadata:
          labels:
            app: testnginx
          annotations:
            "cni.projectcalico.org/ipAddrs": "["172.22.135.1"]"

    cni.projectcalico.org/ipv4pools

    对于deployment

    [root@master1 ~]# cat nginx.yaml 
    apiVersion: apps/v1
    kind: Deployment
    metadata:
      name: testnginx
    spec:
      replicas: 1
      selector:
        matchLabels:
          app: testnginx
      template:
        metadata:
          labels:
            app: testnginx
          annotations:
            "cni.projectcalico.org/ipv4pools": "["bgdata-receiver-ipv4pool"]"
        spec:
          containers:
          - image: 172.22.1.1/source/nginx:latest
            imagePullPolicy: Always
            name: testnginx
            ports:
            - containerPort: 80
              name: testnginx
              protocol: TCP
  • 相关阅读:
    循环结构
    位运算符
    Switch 选择结构
    if结构和逻辑运算符
    变量和运算符
    [luogu1090 SCOI2003] 字符串折叠(区间DP+hash)
    [luogu2329 SCOI2005] 栅栏(二分+搜索)
    [luogu 4886] 快递员
    [luogu4290 HAOI2008]玩具取名(DP)
    [luogu2624 HNOI2008]明明的烦恼 (prufer+高精)
  • 原文地址:https://www.cnblogs.com/fengjian2016/p/14954357.html
Copyright © 2011-2022 走看看